This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: f4mBX1dHDXpPHN/pGdYxlgwKINBtM9YJM4kRFQGWuRo= Subject key identifier: 9E:47:79:3F:B2:8C:B8:45:9B:2C:E0:98:7C:53:CD:C6:CA:77:C1:43 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019B3A21940737DE45DF37A346299CA689A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 17AE Signing time: Sat 20 Dec 2025 05:00:37 +0000 Manifest this update: Sat 20 Dec 2025 05:00:37 +0000 Manifest next update: Sun 21 Dec 2025 05:00:37 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: 0dwE986YT8TY/WC5M14vi96VExOMUkCoQhURZ+Uskng=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) 12: tORFCAGU_ExqN7Mewd4Qy6LCTnI.roa (hash: uPuXkPZSEOXMpoFnzdu2ibc0loihcwKdhAnVhzFJMng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:94:07:37:de:45:df:37:a3:46:29:9c:a6:89:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Dec 20 05:00:37 2025 GMT Not After : Dec 21 05:00:37 2025 GMT Subject: CN=9e47793fb28cb8459b2ce0987c53cdc6ca77c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:09:b0:05:ce:53:f6:06:78:99:82:1d:80: 52:bd:11:16:06:55:8b:93:37:4e:d2:80:6a:6e:76: 02:6d:d6:36:ac:65:d1:e3:64:66:80:12:9a:fb:08: 0b:b9:16:e4:98:03:75:03:23:1c:cb:db:22:d0:e3: 01:ed:f1:69:f6:02:e8:67:b3:79:c6:e8:c8:9e:b0: 6b:46:9b:d1:fe:38:f0:25:4f:26:bf:49:ff:cd:34: fe:f4:f9:29:64:2c:2b:bb:7c:da:89:bf:85:6a:55: a7:a2:9e:3c:5e:66:29:d2:f3:eb:d3:c1:98:10:0a: 88:d3:b8:b5:2e:b6:4f:51:4c:e5:18:0b:2b:99:2d: 42:14:6d:e9:af:01:de:6a:36:85:57:ff:d0:89:44: bb:df:84:3f:3f:da:45:7f:93:4b:1e:af:38:c8:99: c1:4e:c4:cb:3a:f8:eb:a8:9c:0b:6a:de:3c:6c:91: d7:fb:03:ca:c6:f2:5c:1c:f2:17:9b:fd:53:ca:61: 31:6b:30:ee:e0:fa:bf:43:c0:0f:6a:7b:81:7c:9a: 9c:2c:c8:f8:db:b8:47:3c:92:e1:8d:3e:10:cb:75: 18:bd:eb:58:b5:14:06:38:89:2c:2b:f4:bd:0a:35: 0c:84:32:ce:55:f6:82:ff:4f:2a:30:31:02:ca:c8: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:79:3F:B2:8C:B8:45:9B:2C:E0:98:7C:53:CD:C6:CA:77:C1:43 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c3:ab:69:1e:9d:8c:e5:2a:cd:cf:d1:40:bd:51:5b:a7:45: 2c:50:6c:ed:0d:4e:a8:b5:5a:69:47:6b:5e:14:ec:cd:21:05: 47:42:b3:5f:e8:41:b8:09:93:08:3f:0a:ec:23:7a:5b:82:6f: f3:fb:a9:8d:1d:87:35:14:c3:a0:84:fc:f0:e7:27:69:a3:36: 57:cd:1f:6e:85:57:81:b0:15:81:b4:44:b5:9f:e8:52:cc:59: 2a:0e:60:d0:09:a5:c5:6f:be:d3:bf:8d:15:5a:1a:b7:75:af: dc:f3:73:95:24:1b:73:3c:71:6f:af:cc:73:c8:62:cf:84:48: 12:42:e2:f4:56:54:70:73:ac:a9:be:8f:f9:23:47:7f:38:36: bf:ba:ea:3b:7c:06:3e:00:ba:51:37:ea:6d:39:9c:2e:57:57: ec:f5:e3:66:8d:fa:29:d1:03:cf:71:ab:b8:29:0e:30:3c:77: f0:16:fb:40:80:87:c3:50:65:8e:66:8c:01:db:76:47:9f:ac: 45:45:75:9a:a6:c2:32:5e:7d:2c:c7:7e:fe:4f:03:35:21:9b: 7b:77:90:13:f2:79:05:60:be:c2:6c:27:ea:2d:38:7a:ff:31: d2:c7:03:0a:ea:42:b4:5a:e7:44:94:03:ce:b7:72:86:ba:17: 17:75:9c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZQHN95F3zejRimcpommMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMjIwMDUwMDM3WhcNMjUxMjIxMDUwMDM3WjAzMTEwLwYDVQQD Eyg5ZTQ3NzkzZmIyOGNiODQ1OWIyY2UwOTg3YzUzY2RjNmNhNzdjMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhkJsAXOU/YGeJmCHYBSvREWBlWL kzdO0oBqbnYCbdY2rGXR42RmgBKa+wgLuRbkmAN1AyMcy9si0OMB7fFp9gLoZ7N5 xujInrBrRpvR/jjwJU8mv0n/zTT+9PkpZCwru3zaib+FalWnop48XmYp0vPr08GY EAqI07i1LrZPUUzlGAsrmS1CFG3prwHeajaFV//QiUS734Q/P9pFf5NLHq84yJnB TsTLOvjrqJwLat48bJHX+wPKxvJcHPIXm/1TymExazDu4Pq/Q8APanuBfJqcLMj4 27hHPJLhjT4Qy3UYvetYtRQGOIksK/S9CjUMhDLOVfaC/08qMDECysjXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5HeT+yjLhFmyzgmHxTzcbKd8FDMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcOraR6d jOUqzc/RQL1RW6dFLFBs7Q1OqLVaaUdrXhTszSEFR0KzX+hBuAmTCD8K7CN6W4Jv 8/upjR2HNRTDoIT88OcnaaM2V80fboVXgbAVgbREtZ/oUsxZKg5g0AmlxW++07+N FVoat3Wv3PNzlSQbczxxb6/Mc8hiz4RIEkLi9FZUcHOsqb6P+SNHfzg2v7rqO3wG PgC6UTfqbTmcLldX7PXjZo36KdEDz3GruCkOMDx38Bb7QICHw1BljmaMAdt2R5+s RUV1mqbCMl59LMd+/k8DNSGbe3eQE/J5BWC+wmwn6i04ev8x0scDCupCtFrnRJQD zrdyhroXF3Wc8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 15:14:39 2025 by rpki-client