This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft File: m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json) Hash identifier: JLOMs5QT7kF9Xv1Gnn7zu0R10vxu9jdZ6bQmjMiKmBg= Subject key identifier: E4:35:8E:03:F9:5A:04:5B:99:10:90:88:7F:79:9E:1B:B9:04:1C:A8 Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B4816205C67ED7267C62CE8DF759CCEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft Manifest number: 0D72 Signing time: Mon 22 Dec 2025 22:02:48 +0000 Manifest this update: Mon 22 Dec 2025 22:02:48 +0000 Manifest next update: Tue 23 Dec 2025 22:02:48 +0000 Files and hashes: 1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=) 2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=) 3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=) 4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: dwA69bSCgTfhq8gh76+Kbu9RhJmZvVjaf7L4/6nfCwc=) 5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=) 6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:20:5c:67:ed:72:67:c6:2c:e8:df:75:9c:ce:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Dec 22 22:02:48 2025 GMT Not After : Dec 23 22:02:48 2025 GMT Subject: CN=e4358e03f95a045b991090887f799e1bb9041ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:03:ce:25:d1:df:f4:b5:f5:1e:45:74:78: 6b:51:89:ca:28:e2:34:90:b7:86:25:d7:18:9b:71: f1:dc:d9:f4:81:d3:69:39:ec:5c:d4:e4:8f:e0:ed: 43:b7:9d:a0:76:45:f0:db:38:80:77:a9:d2:a5:f9: 5c:01:51:73:52:55:da:ee:53:66:e6:32:a2:79:ab: b3:fa:a6:d1:d8:9b:19:5a:5f:5a:bf:fb:a4:38:27: af:91:e4:fd:b7:cb:53:7a:71:28:cd:ac:4c:b7:c3: 7e:69:c9:1f:e9:48:e9:2c:c4:80:fa:cb:e7:c1:d9: 7e:54:56:7e:34:c7:eb:25:3a:0c:65:21:72:96:40: 2e:e6:4e:54:29:4c:77:51:83:24:1f:49:5b:13:20: dc:f3:ac:49:a7:db:fa:2d:cb:bc:bc:04:77:d2:7f: 2e:0f:1a:ec:b1:3a:f2:9d:f1:b8:cb:f0:02:36:04: 16:86:63:58:ae:95:ae:21:cf:d1:9c:b0:c1:53:b5: 72:f7:af:aa:b8:14:58:2f:04:8c:51:df:eb:6f:a8: 6f:a1:78:dd:1c:20:15:8f:91:c6:f8:e2:ad:18:3b: 7e:f0:a4:2a:09:e8:5e:c8:b1:6c:84:77:10:c7:32: 34:ea:80:a7:3b:e1:5f:c2:14:be:7a:ad:9c:37:8f: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:35:8E:03:F9:5A:04:5B:99:10:90:88:7F:79:9E:1B:B9:04:1C:A8 X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1f:e6:10:d3:42:cc:8c:fe:67:dc:40:4d:fb:63:f0:6d:57: 97:df:8a:ac:4a:4e:7e:96:df:2e:34:0a:d6:f2:3f:73:d4:3a: 5a:f8:64:a5:22:87:28:0d:c8:87:87:9a:e2:7d:ac:1b:ad:12: 20:67:96:d1:21:e3:d0:0d:d4:c5:4f:e1:b5:5b:0d:ac:ff:ab: da:ca:68:36:f6:22:ba:9f:0f:29:72:5e:e2:d2:83:93:75:b7: 14:71:ed:01:18:e5:0d:2f:04:b8:25:07:06:3d:bb:28:d2:74: 2c:89:a5:82:2c:10:e2:17:a7:c7:84:26:45:b7:f2:a0:07:ed: 41:e0:b0:71:9a:23:3f:d2:9b:e8:70:15:de:68:a2:0c:be:66: d0:d4:37:fd:d0:0f:aa:ca:22:e1:65:f6:f9:b3:70:1a:2a:d5: 03:3e:7f:f0:0c:6b:32:64:1d:e4:f3:32:ec:b4:76:c8:f9:27: 1f:c6:78:86:22:12:be:a4:0a:a4:f3:7e:49:c7:76:c9:f9:6d: 8b:c1:d3:8b:93:b0:11:19:38:f9:4a:f9:98:79:8d:70:b9:a2: 7e:3a:c4:93:44:84:d3:cd:07:8f:53:af:c9:96:60:d4:4c:cc: 42:1c:46:c7:0e:de:86:48:0c:5f:54:41:fd:69:d0:1a:e8:cb: 01:f4:65:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFiBcZ+1yZ8Ys6N91nM79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjUxMjIyMjIwMjQ4WhcNMjUxMjIzMjIwMjQ4WjAzMTEwLwYDVQQD EyhlNDM1OGUwM2Y5NWEwNDViOTkxMDkwODg3Zjc5OWUxYmI5MDQxY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjIDziXR3/S19R5FdHhrUYnKKOI0 kLeGJdcYm3Hx3Nn0gdNpOexc1OSP4O1Dt52gdkXw2ziAd6nSpflcAVFzUlXa7lNm 5jKieauz+qbR2JsZWl9av/ukOCevkeT9t8tTenEozaxMt8N+ackf6UjpLMSA+svn wdl+VFZ+NMfrJToMZSFylkAu5k5UKUx3UYMkH0lbEyDc86xJp9v6Lcu8vAR30n8u DxrssTrynfG4y/ACNgQWhmNYrpWuIc/RnLDBU7Vy96+quBRYLwSMUd/rb6hvoXjd HCAVj5HG+OKtGDt+8KQqCeheyLFshHcQxzI06oCnO+FfwhS+eq2cN48hlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ1jgP5WgRbmRCQiH95nhu5BByoMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR/mENNC zIz+Z9xATftj8G1Xl9+KrEpOfpbfLjQK1vI/c9Q6WvhkpSKHKA3Ih4ea4n2sG60S IGeW0SHj0A3UxU/htVsNrP+r2spoNvYiup8PKXJe4tKDk3W3FHHtARjlDS8EuCUH Bj27KNJ0LImlgiwQ4henx4QmRbfyoAftQeCwcZojP9Kb6HAV3miiDL5m0NQ3/dAP qsoi4WX2+bNwGirVAz5/8AxrMmQd5PMy7LR2yPknH8Z4hiISvqQKpPN+Scd2yflt i8HTi5OwERk4+Ur5mHmNcLmifjrEk0SE080Hj1OvyZZg1EzMQhxGxw7ehkgMX1RB /WnQGujLAfRl9Q== -----END CERTIFICATE-----Generated at Tue Dec 23 05:04:56 2025 by rpki-client