This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json) Hash identifier: UIlsRyJ57zXYXcVl0lznzUIkQBj/ckVg+edHcs/rEmE= Subject key identifier: FA:10:1E:D2:C5:20:50:87:7C:BE:1D:F8:BF:25:BE:53:0D:23:65:17 Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Certificate serial: 019B51BE294F03612DC28B2D59FBFEBA4B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft Manifest number: 0D94 Signing time: Wed 24 Dec 2025 19:02:55 +0000 Manifest this update: Wed 24 Dec 2025 19:02:55 +0000 Manifest next update: Thu 25 Dec 2025 19:02:55 +0000 Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=) 2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: 0WNIC6vZunCNxA7Xpn45cPJVuzwdGkjIR+5+Ufa2SRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:29:4f:03:61:2d:c2:8b:2d:59:fb:fe:ba:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Validity Not Before: Dec 24 19:02:55 2025 GMT Not After : Dec 25 19:02:55 2025 GMT Subject: CN=fa101ed2c52050877cbe1df8bf25be530d236517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:6b:e2:4c:b7:f3:f9:91:62:49:35:79:0d: 9c:8e:8a:6d:38:91:70:93:52:42:2f:66:08:0b:70: 10:6c:4a:f8:44:0d:2b:27:7e:68:24:80:52:dc:08: 75:a5:1c:45:8b:3a:27:86:b0:5b:19:68:b6:4e:23: 67:f0:7a:ce:c0:f4:5a:83:1f:ff:63:25:9f:5f:d2: 4b:85:77:08:68:05:f3:29:29:cf:02:f8:ec:8e:de: 5d:1b:72:58:0a:12:74:12:b9:4a:ad:75:ff:fc:93: a8:9a:11:35:5c:a5:f8:f6:8c:97:5a:d5:65:41:54: 6b:b6:92:73:14:f8:1b:46:e2:5d:d5:66:1c:b0:28: fb:5c:b0:b3:0b:87:37:18:4c:a7:d5:33:40:98:9e: 87:ce:a4:64:c3:f5:dc:85:ce:61:0e:dd:c3:2a:e2: 29:c3:4b:fb:06:ef:4a:8d:60:92:73:80:ec:bd:71: f7:cf:f0:f1:ea:3e:13:cb:13:14:dd:fc:75:e4:36: 4e:6a:45:e9:f8:93:e9:92:07:92:8f:f7:b7:07:dd: 69:2b:0d:a4:c4:17:fa:7c:d1:e2:a5:bb:e9:f5:24: 1f:b9:fc:33:59:07:83:44:4d:8b:74:2c:d1:58:e7: 51:a5:5d:be:e7:3d:30:6d:bb:77:63:77:4f:48:72: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:10:1E:D2:C5:20:50:87:7C:BE:1D:F8:BF:25:BE:53:0D:23:65:17 X509v3 Authority Key Identifier: keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:b4:61:d2:0a:ba:e2:18:54:ad:42:19:b4:73:38:df:32: 17:4d:6d:59:e8:92:e4:eb:e4:61:aa:90:43:b0:16:4d:53:81: 55:c1:e9:50:6e:bc:fd:9a:d6:12:e1:58:3d:52:c4:dd:ce:a3: 44:be:ff:1a:89:a5:43:2b:9f:72:fa:8e:68:6a:2e:9b:7d:69: a6:74:82:57:a5:d8:ad:fa:62:1f:06:22:a9:8c:66:47:5b:8a: ca:fd:e2:db:76:04:aa:59:25:13:53:73:db:2b:1f:2b:c5:64: d9:fc:09:a2:88:3f:84:44:dc:59:d1:a2:c5:71:a4:0e:fe:31: 79:9a:f5:94:75:f8:9a:e1:88:b1:4b:92:35:1d:aa:82:8c:3e: 28:be:ee:85:58:76:3d:40:b9:b7:d5:2a:e2:80:49:db:a0:ba: 22:e7:c5:22:ae:e4:29:fb:ea:c8:f5:a4:29:31:49:97:d7:bd: d4:76:ef:f9:ba:ee:27:c6:32:90:23:e1:e8:1c:21:41:61:02: dd:1d:54:ec:ed:76:8f:0c:31:6e:fc:d0:6b:d5:6b:45:a6:c4: 11:76:45:f1:45:dd:2e:f6:8d:5c:f1:1b:e2:ea:26:9f:3f:4f: 48:46:e0:d7:0a:e7:0a:61:1c:4f:f3:a4:bf:ce:1b:66:8b:f3: 1b:32:8b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvilPA2EtwostWfv+ukuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0 NTUwNzIwHhcNMjUxMjI0MTkwMjU1WhcNMjUxMjI1MTkwMjU1WjAzMTEwLwYDVQQD EyhmYTEwMWVkMmM1MjA1MDg3N2NiZTFkZjhiZjI1YmU1MzBkMjM2NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVr4ky38/mRYkk1eQ2cjoptOJFw k1JCL2YIC3AQbEr4RA0rJ35oJIBS3Ah1pRxFizonhrBbGWi2TiNn8HrOwPRagx// YyWfX9JLhXcIaAXzKSnPAvjsjt5dG3JYChJ0ErlKrXX//JOomhE1XKX49oyXWtVl QVRrtpJzFPgbRuJd1WYcsCj7XLCzC4c3GEyn1TNAmJ6HzqRkw/Xchc5hDt3DKuIp w0v7Bu9KjWCSc4DsvXH3z/Dx6j4TyxMU3fx15DZOakXp+JPpkgeSj/e3B91pKw2k xBf6fNHipbvp9SQfufwzWQeDRE2LdCzRWOdRpV2+5z0wbbt3Y3dPSHIUAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoQHtLFIFCHfL4d+L8lvlMNI2UXMB8GA1UdIwQY MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzS0YdIK uuIYVK1CGbRzON8yF01tWeiS5OvkYaqQQ7AWTVOBVcHpUG68/ZrWEuFYPVLE3c6j RL7/GomlQyufcvqOaGoum31ppnSCV6XYrfpiHwYiqYxmR1uKyv3i23YEqlklE1Nz 2ysfK8Vk2fwJoog/hETcWdGixXGkDv4xeZr1lHX4muGIsUuSNR2qgow+KL7uhVh2 PUC5t9Uq4oBJ26C6IufFIq7kKfvqyPWkKTFJl9e91Hbv+bruJ8YykCPh6BwhQWEC 3R1U7O12jwwxbvzQa9VrRabEEXZF8UXdLvaNXPEb4uomnz9PSEbg1wrnCmEcT/Ok v84bZovzGzKLQg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:02:10 2025 by rpki-client