This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json) Hash identifier: eVbPaK8uy5t+EM35NKknC4Sd0b8ksE38Ft3x7hqwmD4= Subject key identifier: 95:F6:B5:7A:01:AF:7D:EB:3E:CC:7F:DE:65:2F:98:3C:79:54:AF:F3 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B0A4957C33C81D9632E2D7475E020E1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft Manifest number: 049A Signing time: Wed 10 Dec 2025 22:02:17 +0000 Manifest this update: Wed 10 Dec 2025 22:02:17 +0000 Manifest next update: Thu 11 Dec 2025 22:02:17 +0000 Files and hashes: 1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=) 2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=) 3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: wkEFvjAhfx89RZfSKqIgPBFoeXq7IiEH/hcTglnYuvc=) 4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=) 5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=) 6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:49:57:c3:3c:81:d9:63:2e:2d:74:75:e0:20:e1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Dec 10 22:02:17 2025 GMT Not After : Dec 11 22:02:17 2025 GMT Subject: CN=95f6b57a01af7deb3ecc7fde652f983c7954aff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:2c:ca:e7:aa:77:54:cf:23:84:c9:07:ae: 4d:08:7e:34:98:7f:4c:04:51:49:9d:92:2e:9d:39: 66:03:66:8a:d4:9e:41:eb:b0:61:a6:be:83:1b:2c: 3a:e3:7d:86:e3:7f:61:80:5a:cf:20:07:fe:85:3e: 0f:ff:8a:3d:ca:4f:46:a4:23:43:05:3e:51:9f:70: a6:a0:38:6b:01:75:03:d7:0e:53:2d:8b:6f:3c:db: 6e:84:d0:58:9e:79:1f:3c:4f:35:da:0e:aa:96:65: a2:57:a8:5e:80:76:5e:bf:2b:d7:4e:7f:36:f8:51: 98:11:f4:71:c3:4d:7e:7d:c7:e7:14:9f:17:df:af: a7:0a:a0:8d:7a:ab:a3:66:e2:d0:80:20:9a:49:2b: b1:06:f4:40:f7:61:f5:5f:09:91:8d:4c:6a:e2:1b: d9:8f:a9:1d:bd:0f:f1:f9:19:31:a1:e1:6e:0b:a9: ab:a4:80:a6:b0:54:46:1c:87:fb:fe:1d:ed:74:9b: 2a:97:ad:4d:60:8f:1b:04:dd:21:db:19:44:a8:8e: 37:2e:d2:e5:d4:bc:c3:83:32:a0:c9:fe:1e:a1:9a: 29:72:80:d8:f7:be:17:db:a6:24:c7:86:16:66:f3: 31:66:9c:e1:5e:b0:63:68:a4:75:60:d5:dd:1d:63: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:B5:7A:01:AF:7D:EB:3E:CC:7F:DE:65:2F:98:3C:79:54:AF:F3 X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:07:9a:79:3e:3d:08:07:7b:fd:10:32:e1:b7:37:15:e9:ca: 41:6e:81:e4:77:8b:b4:f0:79:41:47:84:ef:49:9e:5f:2f:d8: 89:6e:52:df:93:f9:83:fa:cb:de:98:35:97:a2:ec:c5:96:45: 2c:da:e1:cd:5a:7d:b0:e1:b5:f7:45:52:13:5c:86:b6:bf:a7: 41:e4:d5:ca:0a:46:26:fa:8b:d7:04:3c:ca:9b:62:6b:67:bb: 2d:e8:e9:3e:f5:45:35:0c:dc:55:68:2f:67:37:42:2d:f4:d7: 8e:e2:24:8f:32:81:8e:51:d0:43:38:b9:f1:24:4a:7b:4d:0a: c8:01:fc:32:5d:b7:52:ab:85:db:81:55:7d:ea:ef:c3:5b:a3: cc:ef:91:c1:a6:dd:24:e7:a1:fa:33:b2:57:97:cb:1b:99:97: 3a:60:12:f3:92:04:b4:94:fa:50:d1:52:3a:6c:ec:6a:c0:ae: 09:91:b5:ce:ac:2d:e3:64:9d:a7:5d:58:26:2f:00:99:d2:10: 53:ee:a9:3d:ae:6d:a3:38:1f:5d:73:85:f0:cb:f9:3f:2b:28: c4:a5:61:30:44:96:d0:ca:55:c4:f3:04:6e:50:58:ba:0e:43: 3f:12:43:d8:cd:14:1f:d9:c2:67:47:cc:fd:55:d4:68:7a:07: c8:93:57:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSVfDPIHZYy4tdHXgIOH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjUxMjEwMjIwMjE3WhcNMjUxMjExMjIwMjE3WjAzMTEwLwYDVQQD Eyg5NWY2YjU3YTAxYWY3ZGViM2VjYzdmZGU2NTJmOTgzYzc5NTRhZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x0syueqd1TPI4TJB65NCH40mH9M BFFJnZIunTlmA2aK1J5B67Bhpr6DGyw6432G439hgFrPIAf+hT4P/4o9yk9GpCND BT5Rn3CmoDhrAXUD1w5TLYtvPNtuhNBYnnkfPE812g6qlmWiV6hegHZevyvXTn82 +FGYEfRxw01+fcfnFJ8X36+nCqCNequjZuLQgCCaSSuxBvRA92H1XwmRjUxq4hvZ j6kdvQ/x+RkxoeFuC6mrpICmsFRGHIf7/h3tdJsql61NYI8bBN0h2xlEqI43LtLl 1LzDgzKgyf4eoZopcoDY974X26Ykx4YWZvMxZpzhXrBjaKR1YNXdHWOrpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX2tXoBr33rPsx/3mUvmDx5VK/zMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAeaeT49 CAd7/RAy4bc3FenKQW6B5HeLtPB5QUeE70meXy/YiW5S35P5g/rL3pg1l6LsxZZF LNrhzVp9sOG190VSE1yGtr+nQeTVygpGJvqL1wQ8yptia2e7LejpPvVFNQzcVWgv ZzdCLfTXjuIkjzKBjlHQQzi58SRKe00KyAH8Ml23UquF24FVfervw1ujzO+Rwabd JOeh+jOyV5fLG5mXOmAS85IEtJT6UNFSOmzsasCuCZG1zqwt42Sdp11YJi8AmdIQ U+6pPa5tozgfXXOF8Mv5PysoxKVhMESW0MpVxPMEblBYug5DPxJD2M0UH9nCZ0fM /VXUaHoHyJNXdg== -----END CERTIFICATE-----Generated at Thu Dec 11 04:32:59 2025 by rpki-client