This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json) Hash identifier: FDigzVqzLvQw0rK6FNyQw87Yw3spuVeWC1b05m2PQDg= Subject key identifier: D1:B1:7C:D2:D0:3D:22:32:06:85:2E:D5:81:94:E6:61:63:1D:0B:5D Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb Certificate serial: 019B3C7E79AF09922D6AC5A90AA79290963D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 16:01:20 +0000 Manifest this update: Sat 20 Dec 2025 16:01:20 +0000 Manifest next update: Sun 21 Dec 2025 16:01:20 +0000 Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=) 2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: mD6VsNn+frYqJmyqjzPgraVdwg8GFXGlofJdZFKmwSo=) 3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:79:af:09:92:2d:6a:c5:a9:0a:a7:92:90:96:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb Validity Not Before: Dec 20 16:01:20 2025 GMT Not After : Dec 21 16:01:20 2025 GMT Subject: CN=d1b17cd2d03d223206852ed58194e661631d0b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:00:98:ef:4c:33:e5:a4:f9:17:5c:11:79: 3c:30:dc:f7:60:73:71:fe:93:32:0b:4f:10:0a:c1: 81:83:65:91:6e:13:84:91:7e:31:d1:ef:55:1f:5b: 12:04:b0:58:f5:4f:bd:cf:1f:ba:09:bf:2a:58:19: 66:9c:83:74:56:74:ff:6a:59:e9:65:3c:f7:61:a2: dc:59:fd:b1:8f:4a:36:35:4a:b4:61:24:c4:c2:04: 77:d3:25:47:38:b8:2b:0a:f2:04:4b:4b:f0:e5:c1: 49:ad:8a:00:4a:a4:a5:63:3c:60:90:90:f1:11:79: fb:86:fb:78:1b:1c:0e:79:40:a6:cd:25:42:c6:6c: 86:a0:de:5d:7d:f0:b1:0e:0c:59:33:42:f1:34:bc: f7:12:08:d4:43:b8:92:db:7f:83:12:a4:dc:8d:ab: 54:c9:b6:f7:9d:48:77:d8:f7:55:08:d8:94:f7:e3: 9c:74:64:96:10:32:2b:9b:5e:ea:a5:0a:cf:79:94: 72:7b:a7:74:d9:04:8d:bd:31:fd:31:1d:18:96:3e: f9:1e:3d:fd:f4:46:70:29:b2:18:eb:45:6e:47:27: 4b:d7:29:3e:70:fa:79:bb:5c:06:ab:2c:02:37:1e: ff:d4:f3:00:bc:f3:85:8b:dd:c3:73:18:c0:89:ca: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:7C:D2:D0:3D:22:32:06:85:2E:D5:81:94:E6:61:63:1D:0B:5D X509v3 Authority Key Identifier: keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bb:2f:98:be:f5:44:64:4a:18:d5:37:2a:ed:fa:06:06:34: 2f:51:8e:89:2b:4f:b3:38:22:61:93:fd:6e:09:3d:a2:0a:69: 36:2c:93:96:41:64:ff:d8:3e:87:49:41:4d:60:e5:e0:9c:fa: 02:c6:05:72:24:34:9c:1f:d1:fc:17:52:c9:f7:0b:38:a1:d3: 5f:26:99:0c:dc:af:f4:4b:01:12:85:a2:2a:fd:5e:be:a5:a2: 4c:a0:14:35:41:7a:8a:fc:f3:7a:20:06:ca:fa:6e:25:d9:9f: c9:90:2d:b3:24:ec:22:eb:09:c8:5f:46:3e:d1:0d:4e:db:fe: 27:33:e4:bc:da:2b:a9:c4:15:a3:83:d6:ae:36:b5:d3:84:86: 1e:b4:19:1c:e6:ca:ca:d6:e1:2a:1e:ee:33:63:55:24:5b:c5: 24:28:7f:75:dc:d6:97:52:ea:e2:d4:86:48:54:e0:2f:2a:75: cd:8b:70:c7:0d:a6:28:b1:50:43:8e:d1:4e:4c:a7:85:bf:d2: c8:bc:d9:ee:2b:81:aa:86:b9:dc:ab:9d:28:45:20:47:e2:a4: 7f:f8:94:67:d1:dd:a0:e4:19:4e:37:56:09:1c:1b:6c:32:00: 8b:5a:fe:29:5c:ad:4b:bf:ce:b2:11:02:ce:07:49:28:b1:bd: f8:a1:6c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnmvCZItasWpCqeSkJY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk MmE5Y2IwHhcNMjUxMjIwMTYwMTIwWhcNMjUxMjIxMTYwMTIwWjAzMTEwLwYDVQQD EyhkMWIxN2NkMmQwM2QyMjMyMDY4NTJlZDU4MTk0ZTY2MTYzMWQwYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGUAmO9MM+Wk+RdcEXk8MNz3YHNx /pMyC08QCsGBg2WRbhOEkX4x0e9VH1sSBLBY9U+9zx+6Cb8qWBlmnIN0VnT/alnp ZTz3YaLcWf2xj0o2NUq0YSTEwgR30yVHOLgrCvIES0vw5cFJrYoASqSlYzxgkJDx EXn7hvt4GxwOeUCmzSVCxmyGoN5dffCxDgxZM0LxNLz3EgjUQ7iS23+DEqTcjatU ybb3nUh32PdVCNiU9+OcdGSWEDIrm17qpQrPeZRye6d02QSNvTH9MR0Ylj75Hj39 9EZwKbIY60VuRydL1yk+cPp5u1wGqywCNx7/1PMAvPOFi93DcxjAico6hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGxfNLQPSIyBoUu1YGU5mFjHQtdMB8GA1UdIwQY MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt MmVmNzE2NWIyMWI1LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1 LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLsvmL71 RGRKGNU3Ku36BgY0L1GOiStPszgiYZP9bgk9ogppNiyTlkFk/9g+h0lBTWDl4Jz6 AsYFciQ0nB/R/BdSyfcLOKHTXyaZDNyv9EsBEoWiKv1evqWiTKAUNUF6ivzzeiAG yvpuJdmfyZAtsyTsIusJyF9GPtENTtv+JzPkvNorqcQVo4PWrja104SGHrQZHObK ytbhKh7uM2NVJFvFJCh/ddzWl1Lq4tSGSFTgLyp1zYtwxw2mKLFQQ47RTkynhb/S yLzZ7iuBqoa53KudKEUgR+Kkf/iUZ9HdoOQZTjdWCRwbbDIAi1r+KVytS7/OshEC zgdJKLG9+KFsVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:35 2025 by rpki-client