This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json) Hash identifier: JCoKitW7UvLbEQmjxIlzKE3q68C7eX7GfyFNHBNxSYs= Subject key identifier: 5A:16:57:22:AE:F0:93:97:9F:1B:22:5E:74:4A:2B:48:B5:14:62:B3 Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019B5185721E13214E77517CB672B0A05CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft Manifest number: 0FE3 Signing time: Wed 24 Dec 2025 18:00:58 +0000 Manifest this update: Wed 24 Dec 2025 18:00:58 +0000 Manifest next update: Thu 25 Dec 2025 18:00:58 +0000 Files and hashes: 1: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=) 2: _RG38RYDV8XCGP63JRH0IruOPOQ.roa (hash: sUnqtqAeRsj4aEysWIOSTKFJQIMojCeLnix7ODtsEOY=) 3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: M9OF+fuBvm8UVg2SIEwD9DHf8q1YLyIiOtZTUBioCVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:72:1e:13:21:4e:77:51:7c:b6:72:b0:a0:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Dec 24 18:00:58 2025 GMT Not After : Dec 25 18:00:58 2025 GMT Subject: CN=5a165722aef093979f1b225e744a2b48b51462b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:56:a9:88:dd:07:cc:93:39:6a:d0:0f:81: 01:78:14:b5:e2:6e:05:13:1c:41:97:2a:1f:46:93: b9:37:fd:b9:5a:69:f0:79:36:e1:83:a3:f5:b9:11: ef:53:97:5b:df:68:af:02:9a:85:ca:05:c7:76:a2: 94:cb:9b:d3:30:1b:2f:a8:9c:53:3a:df:21:b2:e2: 8b:28:9e:bb:fc:9e:fa:d4:dc:d0:74:38:19:4f:1d: 5b:86:fa:b1:1c:49:a6:b2:c7:fd:ad:03:6e:58:cb: 12:21:16:55:6f:20:c6:84:c7:49:11:a8:c4:86:fe: 95:95:97:61:95:7f:1a:2b:c8:c3:ea:2e:79:a1:5b: 27:6b:dd:e3:0d:ce:f0:c9:e2:69:a2:37:4a:29:0e: 66:fb:32:e7:8f:c7:f0:eb:02:67:4f:44:4a:9e:15: a9:50:75:fd:a1:f0:0a:2c:04:0a:35:8e:ef:b8:cb: b5:a0:33:c1:88:49:2a:cd:9c:f7:0b:ec:a5:ed:62: 3c:28:6d:08:6a:da:c2:fc:76:02:ce:e5:e0:11:00: 4f:63:58:39:a0:88:54:f6:9d:fb:8e:9b:9d:72:c2: 3f:31:54:8a:de:5c:0f:ba:e0:44:11:69:4e:0f:ba: d0:6b:a8:d5:55:49:f8:c9:14:28:e1:17:7b:34:a2: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:57:22:AE:F0:93:97:9F:1B:22:5E:74:4A:2B:48:B5:14:62:B3 X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0f:50:04:8f:29:33:d6:23:83:ec:7e:d2:d4:f1:ba:01:51: 5c:ce:5b:c8:a0:59:b7:4b:13:16:c4:be:dd:d4:c1:23:b8:97: 8d:b1:7c:2f:2b:c9:79:b8:9c:9c:bc:13:26:a5:df:05:a5:12: bf:a1:a7:44:12:29:be:7d:3c:49:b1:d8:1a:b8:64:46:c7:d6: f8:8d:db:64:7e:89:a2:7f:d9:af:65:41:27:e4:44:d3:71:1b: 5a:e0:58:82:2c:bf:56:50:03:ff:ae:b1:53:66:2a:e9:85:16: 76:ab:c6:bf:86:d1:1e:a8:68:9b:4b:68:f6:b2:da:bb:97:d2: d0:0e:d4:bd:e6:26:c6:44:7a:cd:ff:f0:3a:d1:3a:30:7c:ba: 71:22:5b:fe:18:40:69:e2:55:af:f3:a1:50:a4:ea:af:54:94: 7f:ce:4e:f0:69:c7:63:f6:f4:2c:e2:99:0b:9a:ce:dc:3f:a3: 51:23:eb:9a:9c:ad:49:8c:65:d4:72:d3:5f:0d:4b:d5:da:0f: 16:cd:76:25:4e:78:18:73:92:31:c5:fe:15:f7:00:d5:62:8d: 6e:e1:0b:8d:cf:4a:75:4f:ac:ab:a8:b2:67:79:84:1b:ca:14: a8:b5:fe:bf:4f:a2:4f:eb:0e:5b:d3:3e:7e:4f:16:de:d7:8e: 4a:fa:e7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhXIeEyFOd1F8tnKwoFzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjUxMjI0MTgwMDU4WhcNMjUxMjI1MTgwMDU4WjAzMTEwLwYDVQQD Eyg1YTE2NTcyMmFlZjA5Mzk3OWYxYjIyNWU3NDRhMmI0OGI1MTQ2MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ZWqYjdB8yTOWrQD4EBeBS14m4F ExxBlyofRpO5N/25WmnweTbhg6P1uRHvU5db32ivApqFygXHdqKUy5vTMBsvqJxT Ot8hsuKLKJ67/J761NzQdDgZTx1bhvqxHEmmssf9rQNuWMsSIRZVbyDGhMdJEajE hv6VlZdhlX8aK8jD6i55oVsna93jDc7wyeJpojdKKQ5m+zLnj8fw6wJnT0RKnhWp UHX9ofAKLAQKNY7vuMu1oDPBiEkqzZz3C+yl7WI8KG0IatrC/HYCzuXgEQBPY1g5 oIhU9p37jpudcsI/MVSK3lwPuuBEEWlOD7rQa6jVVUn4yRQo4Rd7NKIX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoWVyKu8JOXnxsiXnRKK0i1FGKzMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA9QBI8p M9Yjg+x+0tTxugFRXM5byKBZt0sTFsS+3dTBI7iXjbF8LyvJebicnLwTJqXfBaUS v6GnRBIpvn08SbHYGrhkRsfW+I3bZH6Jon/Zr2VBJ+RE03EbWuBYgiy/VlAD/66x U2Yq6YUWdqvGv4bRHqhom0to9rLau5fS0A7UveYmxkR6zf/wOtE6MHy6cSJb/hhA aeJVr/OhUKTqr1SUf85O8GnHY/b0LOKZC5rO3D+jUSPrmpytSYxl1HLTXw1L1doP Fs12JU54GHOSMcX+FfcA1WKNbuELjc9KdU+sq6iyZ3mEG8oUqLX+v0+iT+sOW9M+ fk8W3teOSvrnAg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:11 2025 by rpki-client