This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json) Hash identifier: WCaDLjEaesZme9iIX5gcwZXw0qm/y4luyopBalj+GS4= Subject key identifier: 64:28:8A:7B:CB:82:27:F7:EE:80:DB:9F:44:D0:8D:37:08:B2:91:4F Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Certificate serial: 019B3D59978430A0A1BA6F2E2EC0EC50C102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft Manifest number: 131F Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=) 2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: vUaYSnR4ovi0psCM3zsotOwBMzInnCznbUS5hbhfibU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:97:84:30:a0:a1:ba:6f:2e:2e:c0:ec:50:c1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=64288a7bcb8227f7ee80db9f44d08d3708b2914f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:16:ae:ff:3e:19:76:a2:58:8b:2a:5c:52: 10:0c:ed:dc:11:7e:fe:1e:a0:a9:85:bb:fa:26:31: da:5f:19:43:b7:2e:27:3d:19:ad:3d:5e:21:e1:4d: bb:04:3b:18:4e:ce:55:0a:d9:08:5f:25:66:5c:f4: 3b:3e:6a:da:66:fa:36:f8:3e:ff:39:8c:ba:80:5f: 03:83:a8:7f:a9:7c:a5:60:f9:50:c4:88:c0:04:4d: f8:e5:09:03:bf:99:bf:3a:8b:90:67:d0:3c:fb:85: 2a:36:ae:ea:db:56:03:ca:7e:b8:f2:c7:ab:bd:03: cb:f6:15:08:d7:95:a3:08:bf:b0:e1:9e:1e:be:03: cb:8f:47:86:a3:97:11:93:3d:7b:0b:a0:b7:fe:a4: 30:3f:92:97:14:42:6c:32:d2:86:6d:42:82:c1:ab: d1:17:ef:9b:50:92:3e:60:78:14:2b:3f:11:fe:94: d8:36:72:bb:dc:9b:8f:bb:51:88:89:ab:07:5c:66: 05:ba:ac:e0:46:39:f4:47:94:54:6b:87:7f:34:2a: 2e:b2:f3:0b:f6:25:d4:77:a2:41:04:f3:1d:13:32: 0d:9b:08:7e:8d:47:65:7c:db:db:ba:73:37:5f:8b: 4e:65:f0:42:64:93:72:2f:ae:a5:98:2a:6a:7d:78: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:8A:7B:CB:82:27:F7:EE:80:DB:9F:44:D0:8D:37:08:B2:91:4F X509v3 Authority Key Identifier: keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:06:16:45:04:a1:71:67:d0:0f:94:d2:05:de:77:65:1d:d2: 52:05:15:82:09:4e:38:36:9e:70:7f:98:f9:58:e6:59:72:54: 74:be:3c:16:b3:bc:71:19:2e:61:d9:bb:d8:81:41:e0:da:90: 0f:22:4b:a8:5b:bd:5b:5b:a5:9d:18:bd:c8:84:3f:f5:be:a3: 71:7e:2c:cd:dd:61:2d:2f:b8:d9:e0:b7:a4:70:60:ec:f9:ac: 3c:79:85:b4:0b:94:60:fb:34:98:63:53:58:26:be:50:0c:7c: ce:dc:13:4c:4a:64:cb:bb:f0:19:65:bc:3b:ff:64:b9:5d:1b: 84:90:a3:ad:66:b6:60:b3:9c:5e:fc:03:93:7d:13:6d:1f:b3: 5f:bb:16:be:73:2c:de:c7:22:0d:d2:af:8d:e4:e0:f5:02:09: f8:9a:d7:f3:37:4e:73:a4:27:b7:59:ff:73:13:5a:85:92:6d: fe:a3:76:c8:17:87:44:2c:4c:31:58:b5:e8:fe:2d:ca:2d:7f: 99:cb:46:95:d7:28:77:5d:75:99:f7:00:52:38:b8:bf:e9:8b: 73:cc:da:43:7e:d8:bb:20:78:8a:c0:9d:bb:f9:eb:38:57:af: 04:32:06:21:1f:19:03:24:f1:be:cb:49:6e:54:33:6f:1e:da: 53:db:2f:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZeEMKChum8uLsDsUMECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm MWRiNWQwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD Eyg2NDI4OGE3YmNiODIyN2Y3ZWU4MGRiOWY0NGQwOGQzNzA4YjI5MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs20Wrv8+GXaiWIsqXFIQDO3cEX7+ HqCphbv6JjHaXxlDty4nPRmtPV4h4U27BDsYTs5VCtkIXyVmXPQ7PmraZvo2+D7/ OYy6gF8Dg6h/qXylYPlQxIjABE345QkDv5m/OouQZ9A8+4UqNq7q21YDyn648ser vQPL9hUI15WjCL+w4Z4evgPLj0eGo5cRkz17C6C3/qQwP5KXFEJsMtKGbUKCwavR F++bUJI+YHgUKz8R/pTYNnK73JuPu1GIiasHXGYFuqzgRjn0R5RUa4d/NCousvML 9iXUd6JBBPMdEzINmwh+jUdlfNvbunM3X4tOZfBCZJNyL66lmCpqfXgdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQoinvLgif37oDbn0TQjTcIspFPMB8GA1UdIwQY MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt YTIxOWNiNGQ0YTNiLzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAYWRQSh cWfQD5TSBd53ZR3SUgUVgglOODaecH+Y+VjmWXJUdL48FrO8cRkuYdm72IFB4NqQ DyJLqFu9W1ulnRi9yIQ/9b6jcX4szd1hLS+42eC3pHBg7PmsPHmFtAuUYPs0mGNT WCa+UAx8ztwTTEpky7vwGWW8O/9kuV0bhJCjrWa2YLOcXvwDk30TbR+zX7sWvnMs 3sciDdKvjeTg9QIJ+JrX8zdOc6Qnt1n/cxNahZJt/qN2yBeHRCxMMVi16P4tyi1/ mctGldcod111mfcAUji4v+mLc8zaQ37YuyB4isCdu/nrOFevBDIGIR8ZAyTxvstJ blQzbx7aU9svUQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:42 2025 by rpki-client