This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json) Hash identifier: 5r41uWwN9uZndcQy0XKsTUoBC7CYPJhm2op/4WkxGkk= Subject key identifier: 92:DC:90:65:C8:49:51:CC:DB:D0:F7:C7:01:3D:E8:2E:DD:21:47:46 Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07 Certificate serial: 019B5A5195BEB59392EB1EC22BC2F3CB291D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft Manifest number: 1319 Signing time: Fri 26 Dec 2025 11:00:54 +0000 Manifest this update: Fri 26 Dec 2025 11:00:54 +0000 Manifest next update: Sat 27 Dec 2025 11:00:54 +0000 Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=) 2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: Mn19yMRV+1nVWQOMeFvttkrcaR8Sqkey7Q1JikRcjm4=) 3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:95:be:b5:93:92:eb:1e:c2:2b:c2:f3:cb:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07 Validity Not Before: Dec 26 11:00:54 2025 GMT Not After : Dec 27 11:00:54 2025 GMT Subject: CN=92dc9065c84951ccdbd0f7c7013de82edd214746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:b0:7f:34:12:e0:fa:85:2c:70:07:f3:65: fa:33:df:f3:de:02:18:61:37:de:40:a0:49:c8:27: 26:aa:eb:e4:e5:b4:66:a4:ce:cf:40:ac:f7:f1:3d: cd:79:2e:d8:12:48:47:cb:4f:d8:a3:fb:fe:e4:fc: 43:09:ab:7d:81:28:13:a4:4d:e9:95:41:cf:75:7e: 27:05:38:36:3f:b5:01:30:2e:9f:55:a2:6a:5b:37: ee:5a:5e:94:af:65:de:76:cc:53:f0:b5:92:ff:fb: 38:c5:9c:e4:87:e6:4d:1f:66:9b:43:9c:7b:8a:f8: 23:ab:36:fe:b6:8d:68:90:05:bb:a4:d1:11:34:39: c2:14:4a:0f:e5:7a:68:49:1d:7d:2e:be:09:b9:68: c5:39:55:d9:92:94:9f:8c:41:56:13:e2:46:99:44: 28:a7:2e:a8:85:db:d1:5c:6a:d6:20:59:5d:be:66: c5:aa:ec:bd:ed:5c:63:40:78:e1:b6:c4:bb:8d:7e: 2a:75:38:3f:f9:53:3a:bc:60:e0:6f:f0:d1:fd:36: e9:3e:b7:5e:a2:f6:c2:43:2d:4b:56:fe:8a:12:e1: e3:c0:03:78:8d:e8:4c:8d:c2:bf:13:9e:53:ab:31: 5b:96:22:34:25:e6:79:16:77:79:58:ac:06:e4:14: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DC:90:65:C8:49:51:CC:DB:D0:F7:C7:01:3D:E8:2E:DD:21:47:46 X509v3 Authority Key Identifier: keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:68:b7:69:1b:59:99:15:b1:39:8a:5a:45:24:38:9d:9c:a2: 8a:08:2d:b4:1d:58:d6:24:11:fe:55:14:ca:66:45:fb:d0:37: 55:8c:4c:86:bc:4d:ed:60:7b:fc:c8:db:74:62:c8:24:32:92: ba:58:25:c7:31:f9:87:c9:bd:e7:3d:d0:74:0f:51:de:fc:a5: d2:d8:22:d9:8e:a2:51:0c:b0:8f:68:4e:b2:67:ab:2d:d3:3c: 4b:77:f3:bf:c5:de:2a:09:30:69:6f:dc:09:22:77:23:a1:74: 26:59:b3:96:aa:d0:e0:25:50:b3:e6:f9:c3:bb:4e:63:7e:83: 79:8c:96:39:db:7a:ec:4b:e3:cb:8d:b9:13:d6:8d:84:79:e6: e4:5a:61:e9:8b:cc:26:ad:83:57:9b:ce:a3:28:f2:ec:cf:8f: 6b:91:c6:9b:cf:32:1b:b8:7a:ed:e7:9f:b8:93:bd:96:28:10: f1:a1:e2:02:0c:9a:6c:66:0a:2a:d7:e0:e7:fb:8d:fc:93:be: b9:d3:b5:dc:64:ed:4c:aa:07:88:85:65:73:b7:bd:2a:04:cd: 75:cc:72:ec:11:80:02:42:9d:2d:35:25:48:e1:27:ad:70:a6: 91:94:e0:58:22:3e:93:81:c3:17:d3:6c:24:63:7b:b5:b1:e0: 61:ee:20:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZW+tZOS6x7CK8LzyykdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmUxNDc0NDgyODk2MzRiOTg2ODhlZTVhNWFmNDQ3ZDQy Y2JiMDcwHhcNMjUxMjI2MTEwMDU0WhcNMjUxMjI3MTEwMDU0WjAzMTEwLwYDVQQD Eyg5MmRjOTA2NWM4NDk1MWNjZGJkMGY3YzcwMTNkZTgyZWRkMjE0NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKewfzQS4PqFLHAH82X6M9/z3gIY YTfeQKBJyCcmquvk5bRmpM7PQKz38T3NeS7YEkhHy0/Yo/v+5PxDCat9gSgTpE3p lUHPdX4nBTg2P7UBMC6fVaJqWzfuWl6Ur2XedsxT8LWS//s4xZzkh+ZNH2abQ5x7 ivgjqzb+to1okAW7pNERNDnCFEoP5XpoSR19Lr4JuWjFOVXZkpSfjEFWE+JGmUQo py6ohdvRXGrWIFldvmbFquy97VxjQHjhtsS7jX4qdTg/+VM6vGDgb/DR/TbpPrde ovbCQy1LVv6KEuHjwAN4jehMjcK/E55TqzFbliI0JeZ5Fnd5WKwG5BT5JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLckGXISVHM29D3xwE96C7dIUdGMB8GA1UdIwQY MBaAFJpuFHRIKJY0uYaI7lpa9EfULLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgt MmJiZDAxZjllNTAwLzEvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgtMmJiZDAxZjllNTAw LzEvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGi3aRtZ mRWxOYpaRSQ4nZyiiggttB1Y1iQR/lUUymZF+9A3VYxMhrxN7WB7/MjbdGLIJDKS ulglxzH5h8m95z3QdA9R3vyl0tgi2Y6iUQywj2hOsmerLdM8S3fzv8XeKgkwaW/c CSJ3I6F0JlmzlqrQ4CVQs+b5w7tOY36DeYyWOdt67Evjy425E9aNhHnm5Fph6YvM Jq2DV5vOoyjy7M+Pa5HGm88yG7h67eefuJO9ligQ8aHiAgyabGYKKtfg5/uN/JO+ udO13GTtTKoHiIVlc7e9KgTNdcxy7BGAAkKdLTUlSOEnrXCmkZTgWCI+k4HDF9Ns JGN7tbHgYe4gOg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client