This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json) Hash identifier: rSeh5AA2eq0kftjMYUXB+qnVUq+/F+IA+T7Z6pd1Sgs= Subject key identifier: 09:BF:03:B0:7C:DD:E3:D6:B0:00:88:3E:C4:F7:E4:CF:0B:A0:EC:29 Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B3D59B89FC8C4320196C9AF16E23D7D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft Manifest number: 0F61 Signing time: Sat 20 Dec 2025 20:00:48 +0000 Manifest this update: Sat 20 Dec 2025 20:00:48 +0000 Manifest next update: Sun 21 Dec 2025 20:00:48 +0000 Files and hashes: 1: 74i8adSuyk3kRHlH4ayLicT7xOo.roa (hash: Nfrv0YEiRjMeyhh89QiKjse1lGFwS8hysdJzu2cW8w4=) 2: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=) 3: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=) 4: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=) 5: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=) 6: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=) 7: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: FG5B7oT4hsOfKoDhinxP9YNlWHwMzKa5LEIF8KmDGWI=) 8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=) 9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b8:9f:c8:c4:32:01:96:c9:af:16:e2:3d:7d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Dec 20 20:00:48 2025 GMT Not After : Dec 21 20:00:48 2025 GMT Subject: CN=09bf03b07cdde3d6b000883ec4f7e4cf0ba0ec29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:c2:bf:49:a6:a9:50:2c:26:37:e4:ff:fb: 34:4b:87:d6:05:dd:a4:f2:52:0b:68:3c:d1:3b:ea: 67:d4:48:f7:d9:20:cc:21:4e:f1:d3:2d:dd:c3:fb: 0d:2a:d4:f8:27:30:da:57:2d:20:fd:ec:3a:11:66: 88:d9:91:63:e6:60:3f:c3:14:fc:d5:37:a8:f5:be: 47:24:7e:bb:45:02:a2:d5:15:50:6a:b7:8c:9b:56: 97:a1:d6:02:cf:7a:e9:9e:b6:d7:8c:d3:95:b7:d5: 4b:6d:cf:8d:0c:d5:45:01:ed:e3:0c:38:6d:51:c1: 95:8a:a8:ef:cf:ff:68:5b:21:52:65:07:11:e9:ae: 9c:b8:7c:af:9e:06:3e:fa:aa:ec:00:70:03:a8:c3: 34:53:37:5b:73:4b:b3:6f:3e:43:91:68:2c:48:4c: dd:3a:cf:d3:bf:4e:32:ba:61:7e:cf:dd:3e:ad:48: 9e:33:8b:a3:66:44:85:ea:bc:b7:28:3b:f3:c8:8b: d3:ef:58:f8:a9:43:6c:1c:9d:cb:bd:8f:ca:6d:25: c9:d7:c9:b4:28:1d:4f:80:79:7d:de:17:28:e1:21: 5b:eb:be:db:ee:ff:fa:6f:55:18:87:3d:c6:09:3a: d3:17:26:33:51:d9:0d:e6:16:38:e9:fd:bd:49:62: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:03:B0:7C:DD:E3:D6:B0:00:88:3E:C4:F7:E4:CF:0B:A0:EC:29 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:68:f8:6b:e1:3e:1e:79:9c:66:00:2f:47:ab:fb:d6:c9: d2:40:d0:65:eb:66:34:4c:b6:9c:32:86:15:42:53:db:69:a2: 04:b3:e4:79:6a:83:19:28:a1:a5:37:ac:f6:3d:1d:e8:04:ce: 7b:63:16:73:b2:45:d9:cd:00:ce:6e:55:4a:70:91:5b:de:3f: 60:e0:ac:59:8b:e7:cf:a2:18:1b:d6:a4:0e:9a:aa:4b:f1:8c: 0f:17:0c:4a:8b:2d:66:fa:6b:3f:f9:c4:d4:1b:06:ed:a9:26: 88:6e:60:01:e8:1b:b3:e7:5b:2f:60:9a:e3:04:ae:41:43:0d: 63:ca:4c:ad:db:0e:7e:4f:b0:43:0e:e1:3e:40:72:e4:9c:f0: 56:72:4f:27:28:e9:3a:c3:52:d9:1a:fc:15:7b:03:a5:fe:65: ec:67:61:76:e6:be:ef:34:d2:18:43:cd:77:71:5f:23:4c:74: 69:c5:2d:35:bb:82:42:7c:c6:2a:22:4d:28:fa:c0:fd:88:89: 1d:d0:6f:97:bc:f1:1c:43:88:16:55:82:9a:3d:5a:00:89:84: 78:1d:9e:60:cb:09:d1:b5:67:13:f5:e9:a7:cb:a5:62:ed:e1: f8:d1:a6:d2:c2:44:ef:0e:bb:21:d9:fa:9c:62:10:7f:a5:14: e5:05:b7:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbifyMQyAZbJrxbiPX2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjUxMjIwMjAwMDQ4WhcNMjUxMjIxMjAwMDQ4WjAzMTEwLwYDVQQD EygwOWJmMDNiMDdjZGRlM2Q2YjAwMDg4M2VjNGY3ZTRjZjBiYTBlYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvTCv0mmqVAsJjfk//s0S4fWBd2k 8lILaDzRO+pn1Ej32SDMIU7x0y3dw/sNKtT4JzDaVy0g/ew6EWaI2ZFj5mA/wxT8 1Teo9b5HJH67RQKi1RVQareMm1aXodYCz3rpnrbXjNOVt9VLbc+NDNVFAe3jDDht UcGViqjvz/9oWyFSZQcR6a6cuHyvngY++qrsAHADqMM0Uzdbc0uzbz5DkWgsSEzd Os/Tv04yumF+z90+rUieM4ujZkSF6ry3KDvzyIvT71j4qUNsHJ3LvY/KbSXJ18m0 KB1PgHl93hco4SFb677b7v/6b1UYhz3GCTrTFyYzUdkN5hY46f29SWKdwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm/A7B83ePWsACIPsT35M8LoOwpMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAij5o+Gvh Ph55nGYAL0er+9bJ0kDQZetmNEy2nDKGFUJT22miBLPkeWqDGSihpTes9j0d6ATO e2MWc7JF2c0Azm5VSnCRW94/YOCsWYvnz6IYG9akDpqqS/GMDxcMSostZvprP/nE 1BsG7akmiG5gAegbs+dbL2Ca4wSuQUMNY8pMrdsOfk+wQw7hPkBy5JzwVnJPJyjp OsNS2Rr8FXsDpf5l7Gdhdua+7zTSGEPNd3FfI0x0acUtNbuCQnzGKiJNKPrA/YiJ HdBvl7zxHEOIFlWCmj1aAImEeB2eYMsJ0bVnE/Xpp8ulYu3h+NGm0sJE7w67Idn6 nGIQf6UU5QW3Ig== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:15 2025 by rpki-client