This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json) Hash identifier: XERRjU+zpS1W7ZQfdiI3RLRpqCedC1HEfPCd1YZLPvE= Subject key identifier: 77:A9:43:70:94:92:DA:4C:6D:38:52:5F:73:87:4B:23:87:7A:60:43 Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02 Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02 Certificate serial: 019B3F48B05C4F0410CC63745539E2D31BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=) 2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: WPFp3pXMJzvpDXSKo1kW4ZaCp/QFsIHmwUM3K5SiuHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b0:5c:4f:04:10:cc:63:74:55:39:e2:d3:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02 Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=77a943709492da4c6d38525f73874b23877a6043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:93:e2:85:40:a2:1c:35:b0:14:d5:79:a2: 7d:d0:35:5c:34:fc:89:58:ce:2c:90:62:8f:e6:4f: a4:a4:21:d8:83:a2:4b:cb:f8:19:14:2c:15:d5:7e: 7e:25:58:6e:ca:00:21:a6:0c:35:89:1e:c3:ae:98: 18:31:49:24:f8:7f:f3:a7:00:0e:c7:ec:6a:5b:6e: fe:0c:61:91:72:99:60:fd:05:a9:52:a0:ec:2e:bd: 84:b7:2e:47:5f:36:52:9b:6c:12:37:85:58:0c:82: a8:a4:6a:9c:b6:ad:10:2f:59:07:e6:30:bd:09:5e: 2d:59:ad:96:6f:0b:93:1a:6b:e7:fc:30:84:6e:49: 6a:d7:20:95:be:8a:99:2b:fd:a1:f6:29:82:a2:99: 8a:a1:09:e2:7a:30:0e:7d:b5:3d:2d:92:bf:56:7b: 16:70:8c:b3:4d:d4:25:af:26:e9:fd:e9:91:d7:51: 61:64:71:46:a3:52:82:5a:89:e6:56:f6:ca:67:20: 62:b3:54:90:68:4c:4f:61:f0:36:ce:0b:62:40:bb: 69:a4:66:2d:5d:16:6e:15:21:d9:d2:90:2f:50:8b: ec:ff:98:26:bf:d4:81:df:c0:3f:03:f5:41:36:0b: 43:a0:20:2c:77:cc:c9:e1:63:3d:3e:19:c4:c0:fe: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:43:70:94:92:DA:4C:6D:38:52:5F:73:87:4B:23:87:7A:60:43 X509v3 Authority Key Identifier: keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:30:a5:75:0c:47:38:31:d7:c0:5f:65:cb:98:4d:64:ea:16: 89:c7:e3:2f:8e:1a:de:4d:45:f6:fa:9e:43:7b:7f:8c:b0:8f: bc:f6:0b:c1:e8:40:0e:96:ae:f4:27:37:0c:f3:f7:4b:65:10: 3b:03:cd:37:c8:53:60:5b:e2:12:2f:eb:85:01:e1:16:9c:5e: 8d:dd:03:10:ca:33:ad:a9:fe:9b:0f:fe:66:fb:ee:93:12:09: 2d:e2:00:e6:b3:24:6d:f7:8f:b9:4e:2a:39:ba:0e:eb:79:ec: 2c:88:a5:9f:c8:dc:21:f4:e3:d5:e4:14:1f:cb:ff:f9:f0:98: a8:30:6a:25:b3:95:17:3c:b2:16:81:27:77:c0:9e:b4:c7:71: 92:89:5f:d7:18:bf:7b:ba:29:ec:53:32:54:a4:b3:14:d3:7a: 1e:23:45:21:4d:70:14:41:f1:3b:0f:b4:11:bc:cb:7f:1b:42: 72:4b:fd:67:6f:e6:22:82:8a:b8:78:64:1b:ae:ac:95:79:68: fd:98:3a:21:30:ed:33:74:ac:37:53:6f:4b:94:d5:f5:92:64: 3e:88:7c:2a:c0:f9:91:7d:ae:bf:63:73:12:8d:68:62:bd:65: 34:e9:2e:b2:d8:c7:55:92:b7:9f:98:5b:84:0c:0a:78:3c:6d: 8c:40:b3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLBcTwQQzGN0VTni0xv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGEzNDE0MTM3MTI5ZmEzOGE2YzYxYzQ5NmFiOGI2MTQw OWNlMDIwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD Eyg3N2E5NDM3MDk0OTJkYTRjNmQzODUyNWY3Mzg3NGIyMzg3N2E2MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvaT4oVAohw1sBTVeaJ90DVcNPyJ WM4skGKP5k+kpCHYg6JLy/gZFCwV1X5+JVhuygAhpgw1iR7DrpgYMUkk+H/zpwAO x+xqW27+DGGRcplg/QWpUqDsLr2Ety5HXzZSm2wSN4VYDIKopGqctq0QL1kH5jC9 CV4tWa2WbwuTGmvn/DCEbklq1yCVvoqZK/2h9imCopmKoQniejAOfbU9LZK/VnsW cIyzTdQlrybp/emR11FhZHFGo1KCWonmVvbKZyBis1SQaExPYfA2zgtiQLtppGYt XRZuFSHZ0pAvUIvs/5gmv9SB38A/A/VBNgtDoCAsd8zJ4WM9PhnEwP4TLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHepQ3CUktpMbThSX3OHSyOHemBDMB8GA1UdIwQY MBaAFJvaNBQTcSn6OKbGHElquLYUCc4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUt MTZkM2NkMzUyZjJlLzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUtMTZkM2NkMzUyZjJl LzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDCldQxH ODHXwF9ly5hNZOoWicfjL44a3k1F9vqeQ3t/jLCPvPYLwehADpau9Cc3DPP3S2UQ OwPNN8hTYFviEi/rhQHhFpxejd0DEMozran+mw/+ZvvukxIJLeIA5rMkbfePuU4q OboO63nsLIiln8jcIfTj1eQUH8v/+fCYqDBqJbOVFzyyFoEnd8CetMdxkolf1xi/ e7op7FMyVKSzFNN6HiNFIU1wFEHxOw+0EbzLfxtCckv9Z2/mIoKKuHhkG66slXlo /Zg6ITDtM3SsN1NvS5TV9ZJkPoh8KsD5kX2uv2NzEo1oYr1lNOkustjHVZK3n5hb hAwKeDxtjECzvg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:35 2025 by rpki-client