This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json) Hash identifier: zcSgxLm/pY4iTYSCip+vcWEyhxRnKf8c2EOVdanM0g8= Subject key identifier: E5:B4:33:88:19:4A:D3:5B:91:16:2E:14:88:35:05:0E:7D:33:DB:31 Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Certificate serial: 019B3AC6EF83787F57AD8B6D7707D59ECBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=) 2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: XEjYsSOQnrIKR8m9FZNpQvG8EVpRlSOZP0DbJl0cwj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ef:83:78:7f:57:ad:8b:6d:77:07:d5:9e:cb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=e5b43388194ad35b91162e148835050e7d33db31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:b0:4a:96:6f:86:64:55:74:5f:9a:6b:db: ad:af:5d:24:d4:cd:3a:b3:60:41:d4:eb:0a:da:d3: eb:d3:6c:4d:3d:42:80:05:c4:49:f9:e6:6c:4b:39: 36:f8:15:1b:66:ad:30:b2:3a:b6:ee:7d:7b:c0:ea: b9:a6:ba:51:eb:5a:b4:ad:d6:80:c7:b7:02:ad:d0: 0a:5d:cb:18:8b:74:5e:d7:28:d0:1f:26:28:52:85: d1:39:02:00:84:1b:07:9b:ee:b0:f3:43:4e:2d:21: 5c:73:14:a6:89:ce:65:cd:80:8d:4e:16:db:56:b6: 1e:17:53:2d:3e:e7:d5:a4:2e:76:bc:cd:08:6c:2b: 61:15:ec:42:77:46:2a:97:6f:c6:a8:82:ca:d7:fb: 7d:78:46:2d:55:60:c7:c1:48:7d:1b:cb:9a:6a:00: 61:e1:eb:78:82:51:fb:15:22:c4:a9:ff:fa:6c:fb: 58:e1:3b:1f:9d:9a:01:14:6e:2d:ff:ff:c3:65:0c: 89:cd:5a:05:2d:d3:4a:ed:9a:f2:01:a3:a0:b4:25: 62:cf:0d:d4:66:73:5e:20:73:5e:72:2b:e8:d2:df: f6:eb:2b:d9:7e:d9:80:1b:d7:2b:0b:1d:4d:39:ba: 8d:b0:94:fc:0d:2c:fb:0c:3a:07:8b:cf:b3:ed:19: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:33:88:19:4A:D3:5B:91:16:2E:14:88:35:05:0E:7D:33:DB:31 X509v3 Authority Key Identifier: keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:92:43:52:9a:d3:02:35:94:0b:26:97:df:68:c8:53:d9:94: 00:36:42:9a:85:2e:a2:e3:be:33:80:e3:b7:eb:36:aa:90:42: c2:f4:04:1c:d8:06:35:a9:5d:9b:92:da:30:75:62:5e:bb:80: 72:73:f7:e1:5e:51:e4:17:21:5f:a0:88:33:60:b8:4f:67:b6: e8:00:98:59:74:b3:35:7d:12:76:ed:c9:1e:42:e9:db:f6:ec: 11:fb:b1:b3:7e:b0:b7:60:9d:81:b5:9e:85:ae:8e:e1:0b:e1: 9d:7b:d7:85:59:ba:a3:d8:7f:e2:2a:93:09:e9:ff:7b:99:7f: 0e:da:4d:ed:ce:69:9e:d8:9f:1e:1d:ab:d8:78:ea:7d:92:77: d3:de:f3:c1:4c:d7:ba:94:d5:34:a4:4e:30:76:32:b9:f5:46: 26:b0:16:8d:6e:87:21:47:c0:5a:90:2c:be:7f:20:10:34:f8: e7:a0:e4:f6:7e:53:52:e8:2d:fa:65:14:20:34:ce:5f:09:ee: 85:d3:0b:39:64:3a:f3:09:0a:22:c2:ae:54:10:c7:da:ed:34: c2:86:e5:1c:a1:5d:a3:88:84:7e:cb:0f:6b:10:57:d1:f8:57: 58:f3:a2:62:9d:7d:3a:60:ef:0f:d0:25:a3:eb:51:c5:e6:fb: a3:94:76:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xu+DeH9XrYttdwfVnsvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2 ZjA4YzIwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EyhlNWI0MzM4ODE5NGFkMzViOTExNjJlMTQ4ODM1MDUwZTdkMzNkYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BuwSpZvhmRVdF+aa9utr10k1M06 s2BB1OsK2tPr02xNPUKABcRJ+eZsSzk2+BUbZq0wsjq27n17wOq5prpR61q0rdaA x7cCrdAKXcsYi3Re1yjQHyYoUoXROQIAhBsHm+6w80NOLSFccxSmic5lzYCNThbb VrYeF1MtPufVpC52vM0IbCthFexCd0Yql2/GqILK1/t9eEYtVWDHwUh9G8uaagBh 4et4glH7FSLEqf/6bPtY4TsfnZoBFG4t///DZQyJzVoFLdNK7ZryAaOgtCVizw3U ZnNeIHNecivo0t/26yvZftmAG9crCx1NObqNsJT8DSz7DDoHi8+z7Rm5ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW0M4gZStNbkRYuFIg1BQ59M9sxMB8GA1UdIwQY MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3 LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5JDUprT AjWUCyaX32jIU9mUADZCmoUuouO+M4Djt+s2qpBCwvQEHNgGNaldm5LaMHViXruA cnP34V5R5BchX6CIM2C4T2e26ACYWXSzNX0Sdu3JHkLp2/bsEfuxs36wt2CdgbWe ha6O4QvhnXvXhVm6o9h/4iqTCen/e5l/DtpN7c5pntifHh2r2HjqfZJ3097zwUzX upTVNKROMHYyufVGJrAWjW6HIUfAWpAsvn8gEDT456Dk9n5TUugt+mUUIDTOXwnu hdMLOWQ68wkKIsKuVBDH2u00woblHKFdo4iEfssPaxBX0fhXWPOiYp19OmDvD9Al o+tRxeb7o5R2fg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:21 2025 by rpki-client