This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft File: miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json) Hash identifier: mV/DFzLeURY6+6Nswj61Wb71xtRkGpeJijZ0mjZep/M= Subject key identifier: 7A:7C:A0:21:EC:60:F9:95:15:DE:01:F9:D6:D1:C7:D0:30:03:20:87 Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Certificate serial: 019B405AED5C23A1329FA64E3F09BA3D0E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft Manifest number: 0680 Signing time: Sun 21 Dec 2025 10:00:59 +0000 Manifest this update: Sun 21 Dec 2025 10:00:59 +0000 Manifest next update: Mon 22 Dec 2025 10:00:59 +0000 Files and hashes: 1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=) 2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=) 3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=) 4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=) 5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: pFxq06afizT6mC45B+BISQkczIMLyqUjfsiah9fvT/U=) 6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:ed:5c:23:a1:32:9f:a6:4e:3f:09:ba:3d:0e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Validity Not Before: Dec 21 10:00:59 2025 GMT Not After : Dec 22 10:00:59 2025 GMT Subject: CN=7a7ca021ec60f99515de01f9d6d1c7d030032087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:55:61:48:24:c5:76:5f:a9:73:f0:13:a8: ff:16:1c:11:a6:71:05:97:df:32:8f:3d:0f:22:b4: 6f:a9:67:22:9f:c5:7f:c7:ed:90:3c:99:80:e0:ff: 0f:76:b8:21:ad:2b:bb:f6:5e:33:fb:96:10:73:fe: 85:5b:7d:cf:31:14:ed:c1:52:19:ce:f5:f9:78:85: 51:42:31:07:25:04:42:07:e6:8c:30:bb:63:ab:d3: 7c:11:f4:94:81:8b:4c:b1:2e:84:70:e3:0d:dd:0e: 1e:f6:da:46:18:10:0f:3f:d9:c8:fe:3d:2b:15:e2: 77:c9:42:02:a4:b7:97:7a:c3:ea:e6:11:d6:97:0e: db:5a:83:bd:f3:df:6b:ad:ea:05:78:9a:4c:37:b6: 4b:f3:7a:d5:98:a6:33:a3:9f:69:a1:c6:1a:33:02: 82:c1:f9:f5:2d:c8:da:2d:b1:65:f9:a0:72:14:16: 49:86:dc:ea:52:b5:6c:90:35:40:b6:32:7b:b0:75: e4:cc:52:a6:70:b3:a1:10:71:9a:3b:08:8e:8e:70: 79:00:e5:b8:fa:f2:75:35:fa:ad:a6:b5:30:52:b6: 7b:1a:c8:42:32:5c:c5:05:87:7e:10:72:f7:d0:c0: db:aa:e3:ca:ac:36:3a:49:c4:47:73:62:53:60:0c: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:A0:21:EC:60:F9:95:15:DE:01:F9:D6:D1:C7:D0:30:03:20:87 X509v3 Authority Key Identifier: keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:03:43:19:cf:c6:f0:03:f8:e9:a5:80:dd:44:c5:26:5c:f6: 8d:ed:8b:59:85:5d:f1:72:b8:31:4b:e5:89:1e:ab:ac:0e:db: 37:92:3d:10:8e:d7:39:c7:dc:39:ec:53:0c:24:b4:21:5b:03: 2b:60:5a:e3:1e:cf:5c:9f:32:57:a9:70:8b:68:01:4b:32:be: 6f:4f:66:4c:03:a4:96:42:96:e7:fa:e9:64:33:79:3a:50:93: 51:91:fe:3e:36:a6:a3:50:a5:b3:85:8e:40:4a:4b:35:bd:d1: 19:29:44:f0:99:b0:b9:23:43:97:a5:73:84:18:33:f6:25:a0: d3:94:79:a5:0b:55:cf:fa:28:ba:5a:29:74:95:7a:1b:0a:e4: d4:09:92:00:1b:89:e1:e5:ce:bc:06:6f:9a:d3:bb:5b:ca:31: e3:b4:4f:09:99:42:f8:92:26:7a:ca:ab:6e:5b:d7:96:93:c8: 81:5d:14:c2:9c:a7:c1:8c:07:38:16:65:d6:89:a4:5f:ec:a9: 2c:43:b2:3c:ff:4c:63:22:82:1b:a9:88:cd:70:98:c5:71:b7: e8:28:09:61:43:c8:8d:45:b8:9c:b4:3f:ca:7b:a1:fc:b3:31: 95:ed:8b:23:94:fa:b6:3e:16:26:9b:ae:2a:37:cb:ee:9e:70: ce:c0:00:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWu1cI6Eyn6ZOPwm6PQ56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk ZmI5ZmMwHhcNMjUxMjIxMTAwMDU5WhcNMjUxMjIyMTAwMDU5WjAzMTEwLwYDVQQD Eyg3YTdjYTAyMWVjNjBmOTk1MTVkZTAxZjlkNmQxYzdkMDMwMDMyMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatVYUgkxXZfqXPwE6j/FhwRpnEF l98yjz0PIrRvqWcin8V/x+2QPJmA4P8PdrghrSu79l4z+5YQc/6FW33PMRTtwVIZ zvX5eIVRQjEHJQRCB+aMMLtjq9N8EfSUgYtMsS6EcOMN3Q4e9tpGGBAPP9nI/j0r FeJ3yUICpLeXesPq5hHWlw7bWoO9899rreoFeJpMN7ZL83rVmKYzo59pocYaMwKC wfn1LcjaLbFl+aByFBZJhtzqUrVskDVAtjJ7sHXkzFKmcLOhEHGaOwiOjnB5AOW4 +vJ1NfqtprUwUrZ7GshCMlzFBYd+EHL30MDbquPKrDY6ScRHc2JTYAzMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp8oCHsYPmVFd4B+dbRx9AwAyCHMB8GA1UdIwQY MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt Mzg3OWJkNzAzOTQ2LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2 LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQNDGc/G 8AP46aWA3UTFJlz2je2LWYVd8XK4MUvliR6rrA7bN5I9EI7XOcfcOexTDCS0IVsD K2Ba4x7PXJ8yV6lwi2gBSzK+b09mTAOklkKW5/rpZDN5OlCTUZH+Pjamo1Cls4WO QEpLNb3RGSlE8JmwuSNDl6VzhBgz9iWg05R5pQtVz/ooulopdJV6Gwrk1AmSABuJ 4eXOvAZvmtO7W8ox47RPCZlC+JImesqrblvXlpPIgV0UwpynwYwHOBZl1omkX+yp LEOyPP9MYyKCG6mIzXCYxXG36CgJYUPIjUW4nLQ/ynuh/LMxle2LI5T6tj4WJpuu KjfL7p5wzsAA0g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:07 2025 by rpki-client