This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json) Hash identifier: wfgGIkdBDsYFu1eNZlLyhJOpjNBO/fON3WW5NrNelfk= Subject key identifier: 89:FF:3C:BD:3D:85:8A:0E:1F:9D:0B:5C:4B:80:55:44:96:54:72:00 Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf Certificate serial: 019B48B9A05B4FEAA3A23D29199C36F9108C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft Manifest number: 140A Signing time: Tue 23 Dec 2025 01:01:23 +0000 Manifest this update: Tue 23 Dec 2025 01:01:23 +0000 Manifest next update: Wed 24 Dec 2025 01:01:23 +0000 Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: FYOdOY1Ac0fkTF0YRKm8wjyNDfktJZJDW/ZTHHEH0mg=) 2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:a0:5b:4f:ea:a3:a2:3d:29:19:9c:36:f9:10:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf Validity Not Before: Dec 23 01:01:23 2025 GMT Not After : Dec 24 01:01:23 2025 GMT Subject: CN=89ff3cbd3d858a0e1f9d0b5c4b80554496547200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:a7:c1:7b:16:26:4c:d7:6c:12:2c:d5:14: 7c:bc:68:f3:1b:28:e3:96:89:2b:ca:d8:56:82:f5: de:88:fc:e8:34:f4:00:34:ed:ab:8c:bb:59:80:2b: 93:77:cf:b4:b4:2d:25:9b:17:f2:2d:c8:85:a4:b8: 73:0e:de:18:a0:af:b0:55:60:60:a3:8b:2e:03:ae: 27:1f:08:50:27:62:d4:62:e2:a4:5b:84:c8:02:29: b6:6d:fc:5e:43:89:b7:8d:07:e0:74:ac:30:2d:f4: 72:65:31:89:0f:5a:a0:35:b7:19:57:5f:b0:d8:5f: bf:48:58:1d:f1:c8:d8:3c:e4:80:77:40:40:c9:5b: 2a:50:67:a2:35:bc:72:69:f7:20:dd:d7:a9:8f:0a: 8c:fb:0d:6d:70:29:60:d6:af:31:d6:59:55:1a:bb: 04:4c:8f:08:2c:d7:81:7c:3a:66:af:b6:78:34:28: 0b:30:47:35:0b:df:bb:93:40:28:cc:75:89:d0:85: eb:58:16:df:12:c9:f6:be:3c:da:77:c9:ca:38:bf: 3b:3f:93:0d:2e:6b:80:98:0b:48:80:3f:6c:4d:74: 37:b1:f0:36:36:d4:ed:70:2f:98:2d:b1:57:49:9a: 3e:01:62:4c:c0:33:46:3e:92:00:b7:ca:d2:9d:f3: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:3C:BD:3D:85:8A:0E:1F:9D:0B:5C:4B:80:55:44:96:54:72:00 X509v3 Authority Key Identifier: keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e7:fa:66:83:68:22:cd:2d:50:8d:54:df:39:97:ab:8e:4d: 6e:e6:6d:65:b8:52:12:cb:94:21:6a:83:47:38:15:6b:68:d9: 27:96:8e:25:dc:3e:7e:94:28:b3:3c:2c:f2:cb:3a:35:8d:eb: ab:56:a6:0e:a7:c5:6d:58:d8:c8:ae:9f:ff:09:52:43:d0:79: 21:d6:b7:a0:50:98:f5:1c:74:98:5c:aa:9a:1c:22:e0:d7:dd: 9b:17:81:b6:ee:25:61:08:72:fa:6e:b3:68:64:e8:f4:ea:56: 1d:38:9e:4b:87:fb:aa:2c:e3:7f:c0:85:6d:b3:a8:ca:7f:f1: 5b:16:16:b6:15:c4:72:ec:8a:71:4d:c5:2e:76:da:03:5c:41: 43:47:9f:a6:a2:6e:37:c8:c8:6a:23:32:70:57:32:3a:7a:e6: 17:fc:37:08:6c:0e:98:25:de:98:ad:a9:61:94:57:c1:4d:7d: 57:bc:18:16:ed:16:e9:45:09:b9:92:54:7f:1c:cf:7c:a4:4b: ef:d8:a8:8c:31:af:dc:c8:64:77:a4:37:83:d8:c4:8c:79:aa: 2c:8c:9e:ef:9a:76:92:49:d2:54:2f:d7:24:c2:92:c2:44:bb: 49:04:84:fa:20:a6:15:1a:e3:67:92:af:aa:96:e9:51:fa:54: 7a:a9:e0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuaBbT+qjoj0pGZw2+RCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz ZGY4YmYwHhcNMjUxMjIzMDEwMTIzWhcNMjUxMjI0MDEwMTIzWjAzMTEwLwYDVQQD Eyg4OWZmM2NiZDNkODU4YTBlMWY5ZDBiNWM0YjgwNTU0NDk2NTQ3MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcinwXsWJkzXbBIs1RR8vGjzGyjj lokrythWgvXeiPzoNPQANO2rjLtZgCuTd8+0tC0lmxfyLciFpLhzDt4YoK+wVWBg o4suA64nHwhQJ2LUYuKkW4TIAim2bfxeQ4m3jQfgdKwwLfRyZTGJD1qgNbcZV1+w 2F+/SFgd8cjYPOSAd0BAyVsqUGeiNbxyafcg3depjwqM+w1tcClg1q8x1llVGrsE TI8ILNeBfDpmr7Z4NCgLMEc1C9+7k0AozHWJ0IXrWBbfEsn2vjzad8nKOL87P5MN LmuAmAtIgD9sTXQ3sfA2NtTtcC+YLbFXSZo+AWJMwDNGPpIAt8rSnfPS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn/PL09hYoOH50LXEuAVUSWVHIAMB8GA1UdIwQY MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3 LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+f6ZoNo Is0tUI1U3zmXq45NbuZtZbhSEsuUIWqDRzgVa2jZJ5aOJdw+fpQoszws8ss6NY3r q1amDqfFbVjYyK6f/wlSQ9B5Ida3oFCY9Rx0mFyqmhwi4NfdmxeBtu4lYQhy+m6z aGTo9OpWHTieS4f7qizjf8CFbbOoyn/xWxYWthXEcuyKcU3FLnbaA1xBQ0efpqJu N8jIaiMycFcyOnrmF/w3CGwOmCXemK2pYZRXwU19V7wYFu0W6UUJuZJUfxzPfKRL 79iojDGv3Mhkd6Q3g9jEjHmqLIye75p2kknSVC/XJMKSwkS7SQSE+iCmFRrjZ5Kv qpbpUfpUeqngSw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:27 2025 by rpki-client