This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json) Hash identifier: QZ8G+gAJfrrrfXUm+yjnTZP0yykV+vYXtRPhhnqjFYo= Subject key identifier: B5:F8:48:FA:BB:E2:D9:DD:50:B2:F0:79:FC:49:C4:0F:60:1F:DE:DC Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019B3E35708FABCEACC1F36C0CD753325E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft Manifest number: 0FD9 Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=) 2: _RG38RYDV8XCGP63JRH0IruOPOQ.roa (hash: sUnqtqAeRsj4aEysWIOSTKFJQIMojCeLnix7ODtsEOY=) 3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: kK2IYU8Dhj0erQR1PckfbMv41365XjvF/DsmyBaP8qU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:70:8f:ab:ce:ac:c1:f3:6c:0c:d7:53:32:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=b5f848fabbe2d9dd50b2f079fc49c40f601fdedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:04:3a:75:12:04:46:bc:6e:2a:2d:a3:8d: 8a:77:49:0b:51:aa:c3:b7:50:f4:85:b1:06:32:63: f3:4b:e8:e7:40:b4:5b:4c:ea:0a:64:5e:c4:b3:b1: 19:34:58:0f:4c:9d:c5:27:af:77:c6:bb:29:28:5d: 03:a8:a7:1f:fa:14:79:7c:99:ff:5b:86:d1:84:76: 04:74:4f:31:55:7a:f2:d0:79:0f:ca:f8:67:85:e5: e0:92:1a:d2:83:77:4a:0e:0d:b2:66:2e:b5:10:3e: e8:7c:a4:37:db:53:00:a6:0b:cf:3b:23:75:be:0d: 2e:d4:03:00:d2:5c:6f:3b:9f:3c:98:3c:8a:1d:a8: db:5b:f6:ce:59:cf:9f:e7:e6:70:bc:5d:84:ea:9c: 56:6f:c0:6b:f4:ff:cb:ec:da:5c:b0:d9:ce:29:3f: da:21:1a:31:11:79:7b:5e:bb:6b:f6:62:ba:f2:d6: 81:52:69:58:1d:0e:1e:15:27:ba:da:ac:e0:14:1e: 06:c8:e1:e4:8a:c2:3c:1e:d7:23:59:35:c0:71:42: 97:4e:78:02:fa:e4:c6:32:0a:3c:45:86:06:eb:f9: fa:84:88:f9:fc:35:30:f3:00:07:3e:28:91:d0:8e: 69:4a:f4:bc:00:63:a9:75:dc:bc:dd:f1:8c:8e:51: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F8:48:FA:BB:E2:D9:DD:50:B2:F0:79:FC:49:C4:0F:60:1F:DE:DC X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:68:11:06:00:7f:b0:63:eb:af:5c:4e:04:f8:82:7c:a2:16: 68:df:a5:47:43:b4:05:0b:6f:7e:a3:8a:4f:12:4c:bc:e8:ea: 79:02:96:43:9f:ce:49:66:4a:5f:3c:af:38:04:80:15:7e:8d: a7:39:42:ba:4d:1e:a9:ca:35:48:e5:48:bb:fc:ae:30:a3:6c: de:d1:a2:e4:2b:3c:bc:0a:08:6e:2c:e1:c9:46:c1:b9:73:ea: b8:66:78:56:3f:95:fa:42:a8:68:09:9d:7b:af:99:bd:d9:62: dd:d1:6d:19:6a:88:e8:52:16:5a:c4:e2:8c:1e:07:2d:09:ae: b3:63:83:69:c0:bc:f5:fd:69:f5:2c:e4:40:6a:c1:59:0d:dc: c3:1e:5d:e6:b1:8f:77:3a:40:ba:46:e6:18:0f:d3:b7:25:ea: ac:2e:d2:91:9f:8a:f2:22:14:e2:8b:0b:3b:e3:14:e3:c4:2d: 4f:f6:4e:17:cd:93:e1:e0:1d:be:dd:42:d9:96:58:97:6a:6c: e5:8c:79:c1:f2:24:39:45:cc:15:3d:8e:de:c9:a1:21:cb:a9: df:36:37:3a:79:34:2b:bf:8b:15:33:34:f2:92:1f:bb:da:83: e9:fd:cd:df:98:12:89:37:ec:6a:18:31:2f:70:69:23:04:0d: 67:61:49:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXCPq86swfNsDNdTMl4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD EyhiNWY4NDhmYWJiZTJkOWRkNTBiMmYwNzlmYzQ5YzQwZjYwMWZkZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2EEOnUSBEa8bioto42Kd0kLUarD t1D0hbEGMmPzS+jnQLRbTOoKZF7Es7EZNFgPTJ3FJ693xrspKF0DqKcf+hR5fJn/ W4bRhHYEdE8xVXry0HkPyvhnheXgkhrSg3dKDg2yZi61ED7ofKQ321MApgvPOyN1 vg0u1AMA0lxvO588mDyKHajbW/bOWc+f5+ZwvF2E6pxWb8Br9P/L7NpcsNnOKT/a IRoxEXl7Xrtr9mK68taBUmlYHQ4eFSe62qzgFB4GyOHkisI8HtcjWTXAcUKXTngC +uTGMgo8RYYG6/n6hIj5/DUw8wAHPiiR0I5pSvS8AGOpddy83fGMjlGuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX4SPq74tndULLwefxJxA9gH97cMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2gRBgB/ sGPrr1xOBPiCfKIWaN+lR0O0BQtvfqOKTxJMvOjqeQKWQ5/OSWZKXzyvOASAFX6N pzlCuk0eqco1SOVIu/yuMKNs3tGi5Cs8vAoIbizhyUbBuXPquGZ4Vj+V+kKoaAmd e6+Zvdli3dFtGWqI6FIWWsTijB4HLQmus2ODacC89f1p9SzkQGrBWQ3cwx5d5rGP dzpAukbmGA/TtyXqrC7SkZ+K8iIU4osLO+MU48QtT/ZOF82T4eAdvt1C2ZZYl2ps 5Yx5wfIkOUXMFT2O3smhIcup3zY3Onk0K7+LFTM08pIfu9qD6f3N35gSiTfsahgx L3BpIwQNZ2FJkA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:41 2025 by rpki-client