This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json) Hash identifier: EueIkU51KEqGW0DrI8951xEDQrbn8I1vtQ4eYjpxvlA= Subject key identifier: 7C:91:45:95:83:A1:A5:35:22:FD:D1:BA:C6:4A:02:C1:BF:D1:52:EA Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Certificate serial: 019B397D013A015C8C6CDAEE159F4A5A3D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft Manifest number: 131D Signing time: Sat 20 Dec 2025 02:00:52 +0000 Manifest this update: Sat 20 Dec 2025 02:00:52 +0000 Manifest next update: Sun 21 Dec 2025 02:00:52 +0000 Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=) 2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: NjhPYWgwO0qRma4pkH7EHS7ADRPBAKAAdr/Fxd36RBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:01:3a:01:5c:8c:6c:da:ee:15:9f:4a:5a:3d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d Validity Not Before: Dec 20 02:00:52 2025 GMT Not After : Dec 21 02:00:52 2025 GMT Subject: CN=7c91459583a1a53522fdd1bac64a02c1bfd152ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:51:d2:42:38:8c:56:cc:88:91:ec:ed:4e: de:49:0f:71:94:d2:e2:8b:75:86:44:b4:b1:f5:b0: cb:e9:1c:d5:ba:fe:75:66:74:56:dc:1f:c1:1e:44: 40:b1:bf:ba:ce:e0:9d:e7:88:ef:cf:1c:b3:d1:43: 10:a5:07:78:20:68:6d:32:48:0d:aa:d2:31:94:92: 26:da:72:3d:72:c2:2d:01:70:f2:c4:81:46:a7:e2: 8d:77:32:c3:b1:dd:13:0e:f6:3f:8f:e8:b8:a5:ad: e6:9a:65:22:c5:f4:f3:23:43:4b:61:6e:ad:95:8d: 0b:71:45:24:25:28:9f:98:e3:e5:de:53:e0:11:8c: 84:55:b3:6b:45:f4:4a:24:02:d1:94:ff:82:fe:2a: 27:5d:c9:c8:f7:f9:70:4e:e7:2e:dd:d8:9e:84:d1: 6a:10:36:62:62:32:2b:20:9c:c5:ee:74:cd:7d:37: 1b:15:95:83:11:95:4e:84:e7:61:ca:e2:77:f2:4b: 22:6b:0b:e6:f4:9e:6f:46:aa:0e:b1:21:e4:df:92: b9:48:e4:ca:ec:3d:e3:90:e8:22:e6:8e:6d:e1:80: bf:d6:be:95:1c:f3:f7:92:4f:b4:76:29:5f:7a:f3: 6f:47:ba:3f:16:e5:1c:c7:5b:fb:c0:bc:c9:10:88: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:45:95:83:A1:A5:35:22:FD:D1:BA:C6:4A:02:C1:BF:D1:52:EA X509v3 Authority Key Identifier: keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:be:46:9b:3d:bd:0b:e8:45:9c:01:f1:f7:5b:aa:e7:07: 9e:5c:d7:54:50:d0:28:11:3d:5c:f4:44:36:33:4c:20:ee:9f: 63:0a:e6:20:da:e4:5d:bb:c2:66:e2:db:9d:69:be:92:03:cb: a4:c0:0c:3c:4e:98:a1:63:15:10:79:95:ef:76:0a:b5:7b:ee: 57:78:f2:f1:78:18:d2:f9:01:28:f0:54:f9:df:fc:3f:71:e5: 12:a0:f6:03:3b:50:68:d3:fd:4b:ef:68:d0:46:d4:e4:4c:ec: 86:7a:58:c7:20:98:9e:58:ba:f3:91:07:97:02:4c:68:14:63: 1e:d6:09:a1:09:ba:61:c2:e7:e7:e9:b8:81:27:ec:d2:98:3e: b7:97:02:ba:b1:e3:4e:23:4c:e9:fb:d7:99:76:b8:e9:cd:02: 09:fd:ac:9c:fe:2a:1d:fe:10:93:c4:64:9d:79:f4:fd:1e:aa: 0e:b9:9e:5c:85:ee:30:dc:bb:33:36:7c:ba:34:0d:1d:73:ac: a6:e8:1e:f4:04:58:e9:75:7e:7d:6c:54:0d:0f:b4:c2:96:d4: d6:f8:9e:7f:16:3a:30:5d:ca:21:b8:cf:47:dd:cc:09:5a:24: d9:c4:30:82:c3:b1:fc:ac:d2:9c:7c:9d:fb:e2:26:05:e2:3c: 60:d1:7c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQE6AVyMbNruFZ9KWj2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm MWRiNWQwHhcNMjUxMjIwMDIwMDUyWhcNMjUxMjIxMDIwMDUyWjAzMTEwLwYDVQQD Eyg3YzkxNDU5NTgzYTFhNTM1MjJmZGQxYmFjNjRhMDJjMWJmZDE1MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPBR0kI4jFbMiJHs7U7eSQ9xlNLi i3WGRLSx9bDL6RzVuv51ZnRW3B/BHkRAsb+6zuCd54jvzxyz0UMQpQd4IGhtMkgN qtIxlJIm2nI9csItAXDyxIFGp+KNdzLDsd0TDvY/j+i4pa3mmmUixfTzI0NLYW6t lY0LcUUkJSifmOPl3lPgEYyEVbNrRfRKJALRlP+C/ionXcnI9/lwTucu3diehNFq EDZiYjIrIJzF7nTNfTcbFZWDEZVOhOdhyuJ38ksiawvm9J5vRqoOsSHk35K5SOTK 7D3jkOgi5o5t4YC/1r6VHPP3kk+0dilfevNvR7o/FuUcx1v7wLzJEIjhSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyRRZWDoaU1Iv3RusZKAsG/0VLqMB8GA1UdIwQY MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt YTIxOWNiNGQ0YTNiLzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao2+Rps9 vQvoRZwB8fdbqucHnlzXVFDQKBE9XPRENjNMIO6fYwrmINrkXbvCZuLbnWm+kgPL pMAMPE6YoWMVEHmV73YKtXvuV3jy8XgY0vkBKPBU+d/8P3HlEqD2AztQaNP9S+9o 0EbU5EzshnpYxyCYnli685EHlwJMaBRjHtYJoQm6YcLn5+m4gSfs0pg+t5cCurHj TiNM6fvXmXa46c0CCf2snP4qHf4Qk8RknXn0/R6qDrmeXIXuMNy7MzZ8ujQNHXOs puge9ARY6XV+fWxUDQ+0wpbU1viefxY6MF3KIbjPR93MCVok2cQwgsOx/KzSnHyd ++ImBeI8YNF8Cw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:25:43 2025 by rpki-client