This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json) Hash identifier: LOkMnP2gHNR0MShQk6Y/XtxMlUA/gw3RaHSmFd+6Gxg= Subject key identifier: 3C:2E:79:49:28:F5:90:26:DA:5A:0F:A6:E6:D2:6F:8F:3C:DE:62:A4 Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Certificate serial: 019B45B898BEC8094B29E4FB6A0E9D69E109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft Manifest number: 0C76 Signing time: Mon 22 Dec 2025 11:01:24 +0000 Manifest this update: Mon 22 Dec 2025 11:01:24 +0000 Manifest next update: Tue 23 Dec 2025 11:01:24 +0000 Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=) 2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=) 3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: OieaVDT8cBII1Rz19XP14IvGxH3ca2iH0+Inp8j8PTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:98:be:c8:09:4b:29:e4:fb:6a:0e:9d:69:e1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Validity Not Before: Dec 22 11:01:24 2025 GMT Not After : Dec 23 11:01:24 2025 GMT Subject: CN=3c2e794928f59026da5a0fa6e6d26f8f3cde62a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:19:9a:89:e7:14:b6:2d:56:2d:ba:34:87: 33:4f:49:1f:fb:55:2c:b8:99:ad:5c:a2:38:4f:c1: 2e:b6:66:25:55:69:a4:e5:cf:37:b5:97:0a:10:26: 73:3b:42:a0:73:09:e4:19:97:3a:35:b7:7b:ef:26: 5d:a2:9f:6f:55:3d:37:ca:c3:94:3f:bd:62:f7:7d: 32:71:b0:57:af:db:c7:a0:b4:74:e8:1b:ac:db:e6: 90:a8:21:ca:88:b6:41:e8:d8:3d:03:c7:2e:98:3b: b0:2d:3f:12:fe:72:b6:7c:06:08:1c:a0:76:3d:5f: f4:e8:ea:7a:40:d4:3a:47:87:0f:52:cd:dc:d6:d3: c6:84:d3:f7:1a:25:7a:ed:a3:f3:a8:f6:c0:69:73: 74:ea:b5:cd:33:08:a4:9e:7e:e5:ab:54:ef:53:6d: 5b:d5:2c:7a:df:cb:fc:18:86:16:05:98:0a:31:4e: 95:96:65:11:fd:cb:60:88:88:d3:5f:32:f6:cb:56: 42:17:42:a2:af:e0:17:a0:a3:8c:bd:db:53:6b:51: d7:aa:31:0b:0b:81:c7:4a:2f:96:30:02:b9:70:43: 35:fd:ef:74:17:2f:0c:06:a3:fb:88:3b:b4:60:78: df:8e:10:75:94:cf:ee:b4:10:a1:4d:6c:7a:83:a1: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:79:49:28:F5:90:26:DA:5A:0F:A6:E6:D2:6F:8F:3C:DE:62:A4 X509v3 Authority Key Identifier: keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:13:28:ae:cf:f1:ee:97:92:d5:34:3a:cb:f9:6a:b9:52:a7: e2:fe:ee:aa:b1:cb:6b:7c:69:27:53:f1:bf:6f:3e:f1:54:bd: 46:a0:d7:e1:bc:40:b9:c0:f0:0e:9b:b5:95:b1:0a:05:24:ce: ae:3e:87:23:f3:76:53:73:e4:b1:ec:2a:fd:16:78:fc:78:f9: 14:cd:20:73:f9:42:ad:df:35:fd:af:f1:01:b8:e6:bc:b1:39: 67:06:9f:f3:73:b2:a0:80:89:d6:6e:12:55:c6:4c:52:50:86: b2:ca:2e:16:18:b5:21:70:58:86:f8:e3:85:cc:01:3e:90:10: af:10:11:40:25:9a:0b:6e:b4:4e:34:59:06:55:d7:9b:5c:6b: 8d:07:0d:22:17:bb:05:ea:59:4c:11:98:ec:87:d2:1d:73:92: 00:6a:94:14:0a:24:53:3a:03:da:a2:9f:b0:b6:78:fa:cc:4b: 5a:66:6c:10:fd:37:ce:c4:2e:00:2d:32:3b:ed:e3:a5:ba:f1: 4c:2d:74:13:91:11:be:86:d0:c4:60:4f:5a:9b:f3:02:7e:e1: 96:40:50:91:7a:13:bb:fc:27:2e:e0:d2:15:9e:2d:95:14:7f: b5:69:b9:11:c7:e3:86:9c:d2:f2:17:26:78:b6:8d:ac:34:fd: bc:ea:4b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuJi+yAlLKeT7ag6daeEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2 NTZhMjAwHhcNMjUxMjIyMTEwMTI0WhcNMjUxMjIzMTEwMTI0WjAzMTEwLwYDVQQD EygzYzJlNzk0OTI4ZjU5MDI2ZGE1YTBmYTZlNmQyNmY4ZjNjZGU2MmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTwZmonnFLYtVi26NIczT0kf+1Us uJmtXKI4T8EutmYlVWmk5c83tZcKECZzO0KgcwnkGZc6Nbd77yZdop9vVT03ysOU P71i930ycbBXr9vHoLR06Bus2+aQqCHKiLZB6Ng9A8cumDuwLT8S/nK2fAYIHKB2 PV/06Op6QNQ6R4cPUs3c1tPGhNP3GiV67aPzqPbAaXN06rXNMwiknn7lq1TvU21b 1Sx638v8GIYWBZgKMU6VlmUR/ctgiIjTXzL2y1ZCF0Kir+AXoKOMvdtTa1HXqjEL C4HHSi+WMAK5cEM1/e90Fy8MBqP7iDu0YHjfjhB1lM/utBChTWx6g6H49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwueUko9ZAm2loPpubSb4883mKkMB8GA1UdIwQY MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxMors/x 7peS1TQ6y/lquVKn4v7uqrHLa3xpJ1Pxv28+8VS9RqDX4bxAucDwDpu1lbEKBSTO rj6HI/N2U3Pksewq/RZ4/Hj5FM0gc/lCrd81/a/xAbjmvLE5Zwaf83OyoICJ1m4S VcZMUlCGssouFhi1IXBYhvjjhcwBPpAQrxARQCWaC260TjRZBlXXm1xrjQcNIhe7 BepZTBGY7IfSHXOSAGqUFAokUzoD2qKfsLZ4+sxLWmZsEP03zsQuAC0yO+3jpbrx TC10E5ERvobQxGBPWpvzAn7hlkBQkXoTu/wnLuDSFZ4tlRR/tWm5EcfjhpzS8hcm eLaNrDT9vOpL2g== -----END CERTIFICATE-----Generated at Mon Dec 22 20:42:53 2025 by rpki-client