This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json) Hash identifier: 1HeughjtX048+KZaPaLdM8nZLlQkplsKrEJjTXjmHf0= Subject key identifier: 9B:F8:CA:08:68:CD:62:47:5F:43:A4:D7:01:3C:3C:27:B9:CE:12:02 Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Certificate serial: 019B262D6E97B44C70013F1B02023FEA0DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft Manifest number: 0DFD Signing time: Tue 16 Dec 2025 08:01:10 +0000 Manifest this update: Tue 16 Dec 2025 08:01:10 +0000 Manifest next update: Wed 17 Dec 2025 08:01:10 +0000 Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=) 2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: mEUWBShBu/M8MJXT7cjIVBAgp+AHiGA6e23+ng6US4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:6e:97:b4:4c:70:01:3f:1b:02:02:3f:ea:0d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Validity Not Before: Dec 16 08:01:10 2025 GMT Not After : Dec 17 08:01:10 2025 GMT Subject: CN=9bf8ca0868cd62475f43a4d7013c3c27b9ce1202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:28:10:34:d7:7b:96:71:e5:9c:08:2c:27: a7:74:fa:ee:00:fe:ca:14:a9:1a:21:06:a4:c2:92: 58:17:32:21:7d:f0:e7:9c:13:a4:48:f5:68:90:14: 59:e3:a3:6d:11:f8:48:a3:ec:07:f6:ab:43:0c:72: 4a:63:07:11:b3:08:ac:6e:df:34:d4:90:74:15:a9: 42:62:85:20:91:91:2c:fb:6c:fa:ec:ae:07:a5:6e: 3a:9f:3a:18:01:34:72:d2:33:14:f4:06:ea:c2:1f: 3f:42:8e:c5:74:9d:c2:e9:05:aa:fb:3f:5f:47:4a: 1e:22:47:97:e1:87:81:d3:5e:2a:be:a2:08:84:fc: 6a:83:42:5c:1c:05:3c:38:59:6e:28:5f:bf:98:4f: ce:d3:ae:70:82:74:ba:4c:19:50:67:dc:84:69:4c: aa:19:92:2c:6e:2d:b7:04:2b:4e:66:a8:c8:2c:44: 84:1f:76:9f:e2:e8:c9:0b:f3:d4:67:5b:b5:e0:0e: 8f:40:47:1d:14:ae:2c:ed:fa:00:01:fa:6a:42:e9: 73:19:6a:1b:f8:68:e0:17:a9:ec:ba:96:e5:c3:c8: 37:1c:57:68:68:e6:e8:2f:bc:04:c7:95:84:a3:9e: 37:9c:08:0e:52:f0:0d:59:3f:a2:8b:d8:56:84:24: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F8:CA:08:68:CD:62:47:5F:43:A4:D7:01:3C:3C:27:B9:CE:12:02 X509v3 Authority Key Identifier: keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:e0:43:ae:85:f3:bd:c9:2b:01:4e:9e:e4:f7:e3:c8:b2: 46:58:fb:1f:bc:08:16:37:64:97:88:d5:19:80:b0:42:63:53: 07:d8:99:af:9b:e9:98:2a:8f:47:e7:19:cd:85:1a:de:e2:55: ac:2a:02:d7:ff:17:31:4d:d1:55:4e:f2:d0:c6:c5:65:be:7f: 94:4f:50:18:de:96:e2:cd:ad:6f:d4:f0:e6:5d:2a:5f:6c:db: ee:fa:75:d2:69:70:4a:88:fe:d1:b9:0a:f2:80:46:5b:b9:80: 49:7c:2c:da:32:72:c1:dc:ea:1c:a8:8a:a1:35:1e:4f:80:3d: c3:dd:1c:c5:70:01:ca:89:f2:e3:b2:ac:55:e0:00:1f:aa:15: ef:34:ea:23:64:e7:f3:00:04:a5:e6:19:3a:6f:34:db:cc:d9: d8:52:33:66:30:b7:e8:35:05:96:42:bd:79:fd:b2:1c:10:22: 90:36:ba:f9:4e:10:fe:e0:25:b8:53:f3:4b:55:d2:c7:21:c5: 42:6f:f6:54:51:dc:d3:87:45:e3:8c:7a:51:da:e9:88:0e:2d: 1b:62:a1:fd:83:bd:54:ab:25:44:48:e9:63:f0:3a:96:92:d9: 64:36:20:45:c9:19:1e:f6:b5:90:95:8f:3f:8c:70:53:5d:eb: e9:eb:c7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLW6XtExwAT8bAgI/6g2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl NzUyZjMwHhcNMjUxMjE2MDgwMTEwWhcNMjUxMjE3MDgwMTEwWjAzMTEwLwYDVQQD Eyg5YmY4Y2EwODY4Y2Q2MjQ3NWY0M2E0ZDcwMTNjM2MyN2I5Y2UxMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/coEDTXe5Zx5ZwILCendPruAP7K FKkaIQakwpJYFzIhffDnnBOkSPVokBRZ46NtEfhIo+wH9qtDDHJKYwcRswisbt80 1JB0FalCYoUgkZEs+2z67K4HpW46nzoYATRy0jMU9Abqwh8/Qo7FdJ3C6QWq+z9f R0oeIkeX4YeB014qvqIIhPxqg0JcHAU8OFluKF+/mE/O065wgnS6TBlQZ9yEaUyq GZIsbi23BCtOZqjILESEH3af4ujJC/PUZ1u14A6PQEcdFK4s7foAAfpqQulzGWob +GjgF6nsupblw8g3HFdoaOboL7wEx5WEo543nAgOUvANWT+ii9hWhCTpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv4yghozWJHX0Ok1wE8PCe5zhICMB8GA1UdIwQY MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt OWMxZjY5YTI0MmJhLzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX7gQ66F 873JKwFOnuT348iyRlj7H7wIFjdkl4jVGYCwQmNTB9iZr5vpmCqPR+cZzYUa3uJV rCoC1/8XMU3RVU7y0MbFZb5/lE9QGN6W4s2tb9Tw5l0qX2zb7vp10mlwSoj+0bkK 8oBGW7mASXws2jJywdzqHKiKoTUeT4A9w90cxXAByony47KsVeAAH6oV7zTqI2Tn 8wAEpeYZOm8028zZ2FIzZjC36DUFlkK9ef2yHBAikDa6+U4Q/uAluFPzS1XSxyHF Qm/2VFHc04dF44x6UdrpiA4tG2Kh/YO9VKslREjpY/A6lpLZZDYgRckZHva1kJWP P4xwU13r6evHCw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:48:28 2025 by rpki-client