This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json) Hash identifier: +g/QkaJuwub6kR7ti7Ug37THmAsu8SYbCotVq8DRp84= Subject key identifier: 64:FF:66:58:7F:04:47:2E:C1:B0:EF:90:7C:02:33:DE:22:C2:E9:87 Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Certificate serial: 019B4438874A3D7BC856775D898E2366B6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:01:53 +0000 Manifest this update: Mon 22 Dec 2025 04:01:53 +0000 Manifest next update: Tue 23 Dec 2025 04:01:53 +0000 Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=) 2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=) 3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: zhXYCGnOUYiCI/1XVOv3EI7iKmhXU7783J3M452azpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:87:4a:3d:7b:c8:56:77:5d:89:8e:23:66:b6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Validity Not Before: Dec 22 04:01:53 2025 GMT Not After : Dec 23 04:01:53 2025 GMT Subject: CN=64ff66587f04472ec1b0ef907c0233de22c2e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:70:8b:95:ef:60:e7:61:bf:57:b6:be:36: 45:06:25:3c:24:0c:89:d7:a9:0b:71:34:b4:a1:8a: 10:38:e9:2b:e7:a3:10:af:bb:ba:af:bd:4e:7b:48: c9:69:25:4c:31:87:78:b3:8b:66:e9:23:2d:f3:41: 9c:60:47:57:3e:e8:06:38:e1:c5:ea:37:1e:31:bf: b9:d9:8e:29:77:c8:5e:65:81:68:a1:b1:d7:be:8b: f8:ef:99:21:12:4b:8f:fd:b2:2c:36:3d:6d:e8:aa: c3:36:90:f3:b3:0f:0c:d3:50:96:3a:53:67:f0:2b: 83:3a:72:e5:d8:41:5a:de:2e:7d:e1:34:b3:fb:81: 57:c5:55:26:1f:ac:6e:fb:2f:a8:47:0e:80:93:6c: 35:a1:72:f4:59:36:b2:d0:33:3f:e1:47:5f:ab:b4: 7e:b0:f2:7a:14:8c:dc:70:68:d2:37:52:41:34:bd: 81:cc:eb:eb:9f:4e:2c:25:57:c3:30:8e:f7:ca:23: 71:d0:6a:0e:0f:f7:ca:82:6a:58:e5:c4:01:8f:4d: da:8a:99:16:0d:99:a7:87:1b:06:99:15:c7:7b:fd: 1c:f4:5f:13:18:c4:4f:82:ca:9f:c5:57:fc:b7:0f: 82:e3:b7:97:2a:04:1f:79:7d:f2:64:f3:d6:5b:86: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:66:58:7F:04:47:2E:C1:B0:EF:90:7C:02:33:DE:22:C2:E9:87 X509v3 Authority Key Identifier: keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1e:5b:9e:1c:e2:90:ce:1e:5b:ed:3e:4e:2e:d2:4d:7f:ed: 72:99:dc:33:9b:dd:ce:f6:92:42:ba:14:45:dc:1d:9c:78:35: aa:ec:a7:5b:9b:a0:57:6d:25:00:9f:1d:51:ac:a9:20:35:e1: cb:a5:f1:3d:13:21:e9:ac:73:a0:11:aa:32:82:fc:0c:83:7d: 17:f4:fb:da:3d:59:8a:9a:2c:d9:a5:4f:38:2c:b4:93:8f:5c: 56:95:eb:38:58:e2:f9:77:1f:0a:27:c2:1d:2e:68:5d:92:7d: 9e:b3:d2:2a:43:72:73:ce:bf:5b:50:ca:2e:26:1c:20:ad:19: d3:6b:44:c0:bd:d8:11:1d:0d:19:b0:fc:5f:7e:ea:98:b2:18: 02:6a:ea:ca:17:e4:dc:47:fb:84:4b:95:ee:d3:8a:6b:cd:ce: 5f:55:f0:a5:09:57:d7:a4:3c:13:84:db:e2:5e:1b:a9:75:8b: b6:a9:b3:8e:06:d3:32:b7:2c:0c:f0:33:5b:f6:26:27:06:6b: 40:d8:cb:f2:23:41:9b:c0:12:9f:1b:ab:e8:dd:cf:ba:90:18: 69:62:42:78:f4:d1:bd:1f:e4:9b:99:62:a1:41:45:7c:94:0a: 3e:73:32:cd:f5:89:49:e7:96:32:37:4b:90:1d:a2:17:99:0f: a8:33:4f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOIdKPXvIVnddiY4jZra3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk ZWU2MjUwHhcNMjUxMjIyMDQwMTUzWhcNMjUxMjIzMDQwMTUzWjAzMTEwLwYDVQQD Eyg2NGZmNjY1ODdmMDQ0NzJlYzFiMGVmOTA3YzAyMzNkZTIyYzJlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7hwi5XvYOdhv1e2vjZFBiU8JAyJ 16kLcTS0oYoQOOkr56MQr7u6r71Oe0jJaSVMMYd4s4tm6SMt80GcYEdXPugGOOHF 6jceMb+52Y4pd8heZYFoobHXvov475khEkuP/bIsNj1t6KrDNpDzsw8M01CWOlNn 8CuDOnLl2EFa3i594TSz+4FXxVUmH6xu+y+oRw6Ak2w1oXL0WTay0DM/4Udfq7R+ sPJ6FIzccGjSN1JBNL2BzOvrn04sJVfDMI73yiNx0GoOD/fKgmpY5cQBj03aipkW DZmnhxsGmRXHe/0c9F8TGMRPgsqfxVf8tw+C47eXKgQfeX3yZPPWW4Zj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT/Zlh/BEcuwbDvkHwCM94iwumHMB8GA1UdIwQY MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2 LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR5bnhzi kM4eW+0+Ti7STX/tcpncM5vdzvaSQroURdwdnHg1quynW5ugV20lAJ8dUaypIDXh y6XxPRMh6axzoBGqMoL8DIN9F/T72j1Zipos2aVPOCy0k49cVpXrOFji+XcfCifC HS5oXZJ9nrPSKkNyc86/W1DKLiYcIK0Z02tEwL3YER0NGbD8X37qmLIYAmrqyhfk 3Ef7hEuV7tOKa83OX1XwpQlX16Q8E4Tb4l4bqXWLtqmzjgbTMrcsDPAzW/YmJwZr QNjL8iNBm8ASnxur6N3PupAYaWJCePTRvR/km5lioUFFfJQKPnMyzfWJSeeWMjdL kB2iF5kPqDNP+g== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:22 2025 by rpki-client