This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json) Hash identifier: niaimPmn4ZF077XhFL/7PtpAFtd0hpQ7tmF9f+ruPqQ= Subject key identifier: 0F:2B:B7:E3:CD:5D:61:B6:59:00:DA:40:F5:26:4C:CB:E3:14:C0:8F Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Certificate serial: 019B0E5BAFAA959AB4B024624012D516F555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 17:00:48 +0000 Manifest this update: Thu 11 Dec 2025 17:00:48 +0000 Manifest next update: Fri 12 Dec 2025 17:00:48 +0000 Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=) 2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: IKsDJu2xc70POVMMY+DdcZUTumF8k2p6h2KZh+Ok9Lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:af:aa:95:9a:b4:b0:24:62:40:12:d5:16:f5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Validity Not Before: Dec 11 17:00:48 2025 GMT Not After : Dec 12 17:00:48 2025 GMT Subject: CN=0f2bb7e3cd5d61b65900da40f5264ccbe314c08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:b7:c4:4c:2b:db:15:50:16:a8:91:95:80: de:e6:29:bf:71:27:21:f1:86:09:bd:01:3a:59:4c: 2e:ba:63:0a:a6:8d:53:25:bd:52:c4:08:b1:f0:c6: 24:a4:7f:67:80:63:24:73:b6:4c:46:c0:08:e0:44: ac:95:f2:05:3b:6d:11:28:6c:a3:4a:44:00:0a:7e: 2a:e9:34:33:11:d9:23:c5:ee:e1:f8:04:79:cd:e9: 6b:ed:12:67:14:c2:4d:28:46:ce:ac:c7:ea:a0:11: f5:b6:34:4c:35:96:cd:18:c4:d7:b7:95:be:be:ae: 18:99:92:e5:8d:37:fc:ca:3f:0d:e7:34:f8:d6:a3: c3:6b:ef:be:e7:56:a9:6f:e8:1c:a7:df:d7:25:94: 93:55:d7:84:67:42:56:c4:6f:5b:67:e6:a5:64:bc: e5:b1:e8:ab:66:9c:e1:28:85:83:10:2e:1d:33:b7: 38:66:70:7f:9d:aa:6c:e5:32:16:fa:24:38:bd:40: e2:e2:fc:9e:dd:b6:f2:ba:d6:45:8e:10:68:67:14: b0:ad:52:31:b1:21:c5:5d:d6:e2:91:be:00:5b:14: 32:aa:fb:36:5b:3e:25:d6:cd:ad:d3:e6:cc:6c:ce: 54:d2:d0:75:fa:aa:dc:bc:6f:1e:d1:a3:b8:7a:31: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2B:B7:E3:CD:5D:61:B6:59:00:DA:40:F5:26:4C:CB:E3:14:C0:8F X509v3 Authority Key Identifier: keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ee:6e:31:b8:25:e3:0a:e0:57:b5:c8:22:25:67:6f:e1:28: cf:06:6d:d3:c2:84:a5:39:8b:0b:0f:2a:6c:cb:fb:c5:d8:6c: dd:73:4f:49:1a:42:bc:6d:bd:47:32:30:c6:a0:bf:b1:8f:aa: f3:4f:23:98:48:ec:17:44:22:51:f6:55:10:cb:ec:aa:ec:60: 26:8f:44:44:89:83:0e:d2:15:95:89:4c:eb:28:1e:f0:db:3c: 07:e8:31:54:de:f5:53:0b:27:d0:de:68:c1:43:7e:d5:38:4c: 1f:c3:82:18:e5:b8:01:bf:17:21:0e:ce:00:c2:9e:3f:1f:41: 04:48:be:33:28:f6:e2:2c:0c:04:84:58:f1:c9:b1:15:dd:56: 5b:24:92:1f:11:fd:30:ec:7f:f5:6f:f0:ff:bd:fd:14:a2:85: 86:b4:df:d5:44:fa:bc:10:56:3c:c6:ab:4f:b3:04:e9:34:18: 08:2e:3f:89:4f:e9:fa:40:63:8e:ec:9a:f6:dc:52:03:68:a1: 1f:6c:7c:74:28:d7:18:ed:b3:de:b2:e5:e5:c7:60:97:87:77: a6:43:2a:ad:c8:a5:96:05:36:f9:c1:9c:3b:92:73:e8:39:80: 95:4d:0e:22:b0:bc:a2:98:36:31:52:df:f0:40:a7:38:85:86: d8:26:86:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW6+qlZq0sCRiQBLVFvVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3 MWFhYjgwHhcNMjUxMjExMTcwMDQ4WhcNMjUxMjEyMTcwMDQ4WjAzMTEwLwYDVQQD EygwZjJiYjdlM2NkNWQ2MWI2NTkwMGRhNDBmNTI2NGNjYmUzMTRjMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPq3xEwr2xVQFqiRlYDe5im/cSch 8YYJvQE6WUwuumMKpo1TJb1SxAix8MYkpH9ngGMkc7ZMRsAI4ESslfIFO20RKGyj SkQACn4q6TQzEdkjxe7h+AR5zelr7RJnFMJNKEbOrMfqoBH1tjRMNZbNGMTXt5W+ vq4YmZLljTf8yj8N5zT41qPDa+++51apb+gcp9/XJZSTVdeEZ0JWxG9bZ+alZLzl seirZpzhKIWDEC4dM7c4ZnB/naps5TIW+iQ4vUDi4vye3bbyutZFjhBoZxSwrVIx sSHFXdbikb4AWxQyqvs2Wz4l1s2t0+bMbM5U0tB1+qrcvG8e0aO4ejGC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8rt+PNXWG2WQDaQPUmTMvjFMCPMB8GA1UdIwQY MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4 LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu5uMbgl 4wrgV7XIIiVnb+EozwZt08KEpTmLCw8qbMv7xdhs3XNPSRpCvG29RzIwxqC/sY+q 808jmEjsF0QiUfZVEMvsquxgJo9ERImDDtIVlYlM6yge8Ns8B+gxVN71Uwsn0N5o wUN+1ThMH8OCGOW4Ab8XIQ7OAMKePx9BBEi+Myj24iwMBIRY8cmxFd1WWySSHxH9 MOx/9W/w/739FKKFhrTf1UT6vBBWPMarT7ME6TQYCC4/iU/p+kBjjuya9txSA2ih H2x8dCjXGO2z3rLl5cdgl4d3pkMqrcillgU2+cGcO5Jz6DmAlU0OIrC8opg2MVLf 8ECnOIWG2CaG6A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:21:41 2025 by rpki-client