This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json) Hash identifier: 250uUDlM6fZVKTiJVBv9Pckfdo+WUFlCvpHl7M/4990= Subject key identifier: A0:F2:19:36:6E:DF:BF:F1:38:F6:AF:48:86:3E:29:75:64:85:7E:A3 Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Certificate serial: 019B3E6DE6455C4F7854516948481BC4C429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft Manifest number: 0D8A Signing time: Sun 21 Dec 2025 01:02:28 +0000 Manifest this update: Sun 21 Dec 2025 01:02:28 +0000 Manifest next update: Mon 22 Dec 2025 01:02:28 +0000 Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=) 2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: sxVqnnLZuWWQ/U2Y2DakID5liZM43UcCHdOhCd59gN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e6:45:5c:4f:78:54:51:69:48:48:1b:c4:c4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Validity Not Before: Dec 21 01:02:28 2025 GMT Not After : Dec 22 01:02:28 2025 GMT Subject: CN=a0f219366edfbff138f6af48863e297564857ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:a7:9f:52:b7:75:bb:21:0a:06:60:6a:d0: 34:7b:bb:95:e5:42:02:58:0d:ad:25:7c:ea:28:44: cb:81:50:b7:32:25:dd:2e:72:be:02:fd:87:a0:29: a5:37:30:d4:ea:8e:0a:20:d5:9d:4c:d5:4a:fc:c7: 5b:2f:f3:98:6a:0d:a3:ba:12:cf:c0:03:78:ee:f8: 24:b0:75:56:6e:8c:3f:91:ee:49:e0:be:bb:0e:f7: ea:78:9b:02:b8:b4:8b:ab:7a:b6:03:79:0c:56:af: c6:bd:84:34:6f:ed:c9:f2:d8:91:5e:1b:f1:59:7e: cc:8b:05:87:b5:ea:dd:99:9a:1a:2f:a7:bb:a9:ab: 8c:02:fe:e6:51:84:88:2f:06:5e:92:dd:d2:0a:f3: de:46:08:d1:42:db:62:f8:23:21:6b:2f:07:d2:bc: c2:c4:41:6b:9a:d9:f5:69:fd:32:7e:57:3d:75:22: 7e:f7:11:45:3c:cf:fd:bf:e0:62:a6:0a:f6:be:d6: b9:cb:27:01:79:89:c7:ae:63:2b:36:18:c9:de:b0: 42:3b:eb:45:8c:e1:5d:13:d5:7e:d8:64:29:1c:a8: a5:c3:53:94:e7:a2:af:1c:49:c2:07:03:10:5e:fe: 71:75:ba:98:6e:c8:15:0e:12:90:95:9d:bd:f1:78: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:19:36:6E:DF:BF:F1:38:F6:AF:48:86:3E:29:75:64:85:7E:A3 X509v3 Authority Key Identifier: keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6d:b3:0b:fd:57:51:93:cb:c1:02:55:1a:ce:50:fa:51:29: 75:39:8b:5e:78:c2:80:07:66:a5:36:0f:57:b3:a7:ad:ca:a7: ed:7f:b9:5d:a8:3a:f4:2c:8a:7b:32:9b:15:4b:e2:0f:58:05: 5a:ae:ca:1c:47:d9:91:90:ec:d3:f0:65:38:92:df:58:06:9a: 48:c5:95:fa:61:1c:7e:e4:6e:76:a6:74:10:a1:bd:0e:7c:4c: 3e:c5:b9:a3:14:52:eb:a9:88:e5:02:2b:e5:4b:49:47:ea:ed: f6:8a:40:7e:d7:e2:44:d2:75:fa:b4:7c:1d:80:33:d8:64:cf: fa:e6:be:44:ce:f3:ac:c0:5b:35:1f:e4:b7:16:8b:fe:ff:f9: 41:ca:d3:a4:88:09:d8:97:df:01:b0:d4:c7:a6:c2:f8:9b:43: b3:b2:fc:46:94:cd:63:65:ad:58:ac:fc:2d:b3:bd:cd:8b:b7: c2:9c:d1:ea:c9:5c:8a:19:c5:86:cc:6d:58:b6:9a:3f:e8:73: d9:45:cb:75:81:a5:37:72:21:bf:80:55:f4:88:77:20:34:81: 60:67:05:82:aa:f8:cd:11:9f:f7:b6:f1:dc:1d:a3:e4:9b:c8: 93:8d:1b:30:73:ca:c6:9b:0d:6f:c1:ad:35:da:65:1a:6f:ad: 61:fe:b6:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beZFXE94VFFpSEgbxMQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0 NTUwNzIwHhcNMjUxMjIxMDEwMjI4WhcNMjUxMjIyMDEwMjI4WjAzMTEwLwYDVQQD EyhhMGYyMTkzNjZlZGZiZmYxMzhmNmFmNDg4NjNlMjk3NTY0ODU3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGynn1K3dbshCgZgatA0e7uV5UIC WA2tJXzqKETLgVC3MiXdLnK+Av2HoCmlNzDU6o4KINWdTNVK/MdbL/OYag2juhLP wAN47vgksHVWbow/ke5J4L67DvfqeJsCuLSLq3q2A3kMVq/GvYQ0b+3J8tiRXhvx WX7MiwWHterdmZoaL6e7qauMAv7mUYSILwZekt3SCvPeRgjRQtti+CMhay8H0rzC xEFrmtn1af0yflc9dSJ+9xFFPM/9v+Bipgr2vta5yycBeYnHrmMrNhjJ3rBCO+tF jOFdE9V+2GQpHKilw1OU56KvHEnCBwMQXv5xdbqYbsgVDhKQlZ298Xgn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDyGTZu37/xOPavSIY+KXVkhX6jMB8GA1UdIwQY MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW2zC/1X UZPLwQJVGs5Q+lEpdTmLXnjCgAdmpTYPV7Onrcqn7X+5Xag69CyKezKbFUviD1gF Wq7KHEfZkZDs0/BlOJLfWAaaSMWV+mEcfuRudqZ0EKG9DnxMPsW5oxRS66mI5QIr 5UtJR+rt9opAftfiRNJ1+rR8HYAz2GTP+ua+RM7zrMBbNR/ktxaL/v/5QcrTpIgJ 2JffAbDUx6bC+JtDs7L8RpTNY2WtWKz8LbO9zYu3wpzR6slcihnFhsxtWLaaP+hz 2UXLdYGlN3Ihv4BV9Ih3IDSBYGcFgqr4zRGf97bx3B2j5JvIk40bMHPKxpsNb8Gt NdplGm+tYf62yg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:22 2025 by rpki-client