This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json) Hash identifier: XR/K2oeIC1xbWB/RUeYtzBIj6ntsjJFLiqyIgzqdTM8= Subject key identifier: 4E:01:27:30:23:04:B2:BE:D7:C0:63:1E:32:F9:EF:A2:FF:00:AE:0D Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6 Certificate serial: 019B38A2D7C22FA2C77A350C32123917AD5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft Manifest number: 1485 Signing time: Fri 19 Dec 2025 22:02:34 +0000 Manifest this update: Fri 19 Dec 2025 22:02:34 +0000 Manifest next update: Sat 20 Dec 2025 22:02:34 +0000 Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=) 2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: EsmTy0ZtbpitAeTnSQboL7KpLqH4/WLdMbcL3Tbatys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:d7:c2:2f:a2:c7:7a:35:0c:32:12:39:17:ad:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6 Validity Not Before: Dec 19 22:02:34 2025 GMT Not After : Dec 20 22:02:34 2025 GMT Subject: CN=4e0127302304b2bed7c0631e32f9efa2ff00ae0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:cd:68:2b:6c:21:74:e3:40:91:14:c9:c9: 5b:bf:b0:5d:e3:d8:70:52:5a:64:42:6f:40:9e:7f: 04:3a:f7:1e:ba:98:13:bf:dd:fd:42:af:4b:9c:e3: 46:e2:5b:7f:2c:24:b3:78:c7:d7:91:16:b2:36:c5: 09:9d:53:fa:f1:9b:b1:5a:8d:d6:e0:d3:f6:25:c9: 8d:6f:81:d2:e0:66:fb:c1:95:4a:54:eb:f1:69:e7: 8d:24:04:a4:26:1e:d9:ae:64:e2:70:3d:09:cb:69: c4:d8:eb:7c:f8:1e:44:58:18:aa:95:ca:43:1a:54: 86:df:12:66:79:f8:ba:1a:11:52:07:2a:93:38:ca: d5:f3:52:4c:6b:68:6b:4b:e8:fe:96:5a:f8:0a:da: 98:98:50:f7:42:bf:9e:c0:3b:b3:fd:b4:93:33:c2: 05:5b:d1:62:52:71:e0:4f:bf:eb:e8:8a:ae:19:2e: 50:6e:a7:4e:2b:bf:e8:fc:5a:fa:ff:20:89:8f:69: 9a:a7:22:5e:95:01:82:e1:58:d6:21:cd:9b:e0:4c: 8f:56:d7:eb:30:f9:8b:9c:3c:d4:a4:34:12:4e:e4: 16:1d:89:c1:12:9c:74:23:7d:aa:0d:2d:3a:1b:9a: ad:2d:b8:59:72:04:1f:a3:31:fc:cb:1c:a0:43:4b: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:27:30:23:04:B2:BE:D7:C0:63:1E:32:F9:EF:A2:FF:00:AE:0D X509v3 Authority Key Identifier: keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ad:37:5c:e8:b0:c5:cb:a1:0b:22:54:cc:7f:8f:7d:8d:08: 95:22:6f:e9:1a:49:dc:1a:65:19:7f:e9:ac:43:53:9a:f1:5c: a0:f7:41:13:a4:3d:7e:a9:38:14:aa:38:17:5a:42:a7:91:cb: 84:d7:84:e3:c1:aa:f2:9c:bb:24:25:6e:ed:31:0e:0a:21:a8: 1b:0d:bc:61:4c:e9:37:bb:3b:7a:17:14:f1:66:fd:de:46:03: f7:01:23:69:6c:05:1f:42:7c:a2:26:16:80:01:06:ca:57:2c: 62:48:b3:fa:74:dc:8d:ac:72:32:ee:07:a6:b3:7f:7e:f6:61: b9:02:9f:07:35:7b:d9:fe:87:b2:b8:40:7d:45:76:7b:9e:8e: d8:f4:8e:b3:32:b5:54:28:0f:68:d4:e7:da:c4:8d:ec:cf:2f: bd:7f:bb:05:8b:23:70:a9:9f:17:d1:5d:d5:04:42:32:82:e0: 97:63:2c:9b:83:59:34:ba:e3:a4:2f:0b:8d:79:8a:5d:6a:c6: 70:ea:c1:66:87:bc:f5:a2:72:bb:71:04:72:f7:03:f7:fe:c2: e4:1a:3c:ce:f5:67:83:64:09:8b:1d:e3:14:a8:1b:3d:8d:53: 1d:6d:ad:52:82:e6:44:2a:1a:c2:b7:d8:39:da:53:2a:cd:14: c6:db:40:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4otfCL6LHejUMMhI5F61eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx MDc4YjYwHhcNMjUxMjE5MjIwMjM0WhcNMjUxMjIwMjIwMjM0WjAzMTEwLwYDVQQD Eyg0ZTAxMjczMDIzMDRiMmJlZDdjMDYzMWUzMmY5ZWZhMmZmMDBhZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmrNaCtsIXTjQJEUyclbv7Bd49hw UlpkQm9Ann8EOvceupgTv939Qq9LnONG4lt/LCSzeMfXkRayNsUJnVP68ZuxWo3W 4NP2JcmNb4HS4Gb7wZVKVOvxaeeNJASkJh7ZrmTicD0Jy2nE2Ot8+B5EWBiqlcpD GlSG3xJmefi6GhFSByqTOMrV81JMa2hrS+j+llr4CtqYmFD3Qr+ewDuz/bSTM8IF W9FiUnHgT7/r6IquGS5QbqdOK7/o/Fr6/yCJj2mapyJelQGC4VjWIc2b4EyPVtfr MPmLnDzUpDQSTuQWHYnBEpx0I32qDS06G5qtLbhZcgQfozH8yxygQ0s6NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4BJzAjBLK+18BjHjL576L/AK4NMB8GA1UdIwQY MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0 LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAia03XOiw xcuhCyJUzH+PfY0IlSJv6RpJ3BplGX/prENTmvFcoPdBE6Q9fqk4FKo4F1pCp5HL hNeE48Gq8py7JCVu7TEOCiGoGw28YUzpN7s7ehcU8Wb93kYD9wEjaWwFH0J8oiYW gAEGylcsYkiz+nTcjaxyMu4HprN/fvZhuQKfBzV72f6HsrhAfUV2e56O2PSOszK1 VCgPaNTn2sSN7M8vvX+7BYsjcKmfF9Fd1QRCMoLgl2Msm4NZNLrjpC8LjXmKXWrG cOrBZoe89aJyu3EEcvcD9/7C5Bo8zvVng2QJix3jFKgbPY1THW2tUoLmRCoawrfY OdpTKs0UxttAlw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:41 2025 by rpki-client