This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json) Hash identifier: 1g3wutOWmp/kshAh8ACC9Ik5qCu2fWVd13LqeIY1w+0= Subject key identifier: 31:13:47:FA:59:09:C1:B0:57:F4:FE:9E:69:88:84:A2:4A:25:13:D5 Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Certificate serial: 019B3C7FD66911A7D299F413D44D52F00C9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft Manifest number: 1433 Signing time: Sat 20 Dec 2025 16:02:49 +0000 Manifest this update: Sat 20 Dec 2025 16:02:49 +0000 Manifest next update: Sun 21 Dec 2025 16:02:49 +0000 Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=) 2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: maSKBy9glwWyD3WFEK6h3lwdSsSEZhOgBMNPNhW2Rfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d6:69:11:a7:d2:99:f4:13:d4:4d:52:f0:0c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Validity Not Before: Dec 20 16:02:49 2025 GMT Not After : Dec 21 16:02:49 2025 GMT Subject: CN=311347fa5909c1b057f4fe9e698884a24a2513d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:91:65:2c:78:97:7b:f4:1e:1e:ab:a9:b1: ed:a3:f9:af:ad:3d:0b:51:39:13:3b:45:8a:52:be: ed:90:a6:e9:70:31:3c:f0:be:0b:f7:63:f0:fe:d0: 02:90:93:8e:53:bd:5d:18:f8:c6:64:ef:9a:4b:9e: 24:b9:cc:2a:16:13:61:2d:e1:57:c4:45:29:87:12: de:9b:1a:b4:8b:bb:4b:36:e8:81:d6:63:d5:aa:e2: db:42:68:0a:7c:07:1b:56:7a:ee:93:9b:fd:aa:57: e4:ba:1f:d9:01:51:31:58:ce:28:74:a9:84:e9:e7: 48:a2:46:ea:93:7f:24:89:08:c6:d2:d3:7e:6c:82: 9c:98:eb:8a:e4:a1:54:bb:7a:23:f6:cd:8e:3d:9b: 5e:17:e4:40:be:86:cb:81:e8:98:d9:9c:82:66:34: 51:56:be:75:16:c1:75:30:1f:74:59:33:13:49:05: 45:7f:53:e8:1f:48:8b:f8:b6:bc:df:bc:2b:84:05: 49:36:2b:61:34:18:18:94:5f:b1:78:91:0a:0f:33: 08:f5:88:8f:16:03:47:d4:7e:0a:c0:09:6c:81:b5: 7e:26:ae:94:13:49:a4:e8:65:17:a0:e0:6c:2c:82: 50:37:15:49:39:40:5f:8c:35:fe:fd:0e:fa:20:06: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:13:47:FA:59:09:C1:B0:57:F4:FE:9E:69:88:84:A2:4A:25:13:D5 X509v3 Authority Key Identifier: keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8e:e7:20:25:c3:df:99:2a:1f:fa:df:15:6d:26:66:6f:f3: e1:d3:1d:dc:63:02:71:55:3c:2d:be:02:3c:47:84:36:f9:5a: d4:7e:de:ec:32:16:a3:2b:d8:48:31:4a:3b:a1:3e:80:50:af: ae:40:ba:11:8c:b4:39:61:c0:2f:6b:48:2b:63:ae:9b:c5:ac: a1:c3:48:c3:9b:1e:c9:31:c6:88:ed:26:49:98:2c:89:ca:40: 26:f4:81:1f:77:02:aa:19:10:a1:18:31:e9:df:cc:bb:77:4a: 3c:04:54:ea:e9:67:8d:88:69:91:0c:1b:3a:1c:15:cd:57:d9: 08:0f:2a:bd:33:c7:c4:fa:2d:11:08:5c:e1:b2:d7:f0:f4:42: e2:4a:87:a3:5b:41:16:23:62:c8:ab:04:9f:f0:21:26:7b:29: bd:dc:a3:4b:c8:52:ae:98:f3:5f:3e:1f:a2:70:db:ba:b1:a1: f7:f4:6d:f8:14:84:bf:1e:fd:6c:45:e4:7a:0d:81:06:87:c3: 1b:d5:d6:aa:da:24:13:56:0f:fe:53:20:75:a7:1b:c2:d1:bc: e6:ec:cc:50:79:b2:1d:fd:47:e7:36:f0:c1:c4:36:92:99:2a: d4:f6:15:3c:d5:ef:b5:7d:ca:ea:22:15:f5:33:19:90:d3:01: d2:ab:7d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9ZpEafSmfQT1E1S8AyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0 MjA4YjcwHhcNMjUxMjIwMTYwMjQ5WhcNMjUxMjIxMTYwMjQ5WjAzMTEwLwYDVQQD EygzMTEzNDdmYTU5MDljMWIwNTdmNGZlOWU2OTg4ODRhMjRhMjUxM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDiRZSx4l3v0Hh6rqbHto/mvrT0L UTkTO0WKUr7tkKbpcDE88L4L92Pw/tACkJOOU71dGPjGZO+aS54kucwqFhNhLeFX xEUphxLemxq0i7tLNuiB1mPVquLbQmgKfAcbVnruk5v9qlfkuh/ZAVExWM4odKmE 6edIokbqk38kiQjG0tN+bIKcmOuK5KFUu3oj9s2OPZteF+RAvobLgeiY2ZyCZjRR Vr51FsF1MB90WTMTSQVFf1PoH0iL+La837wrhAVJNithNBgYlF+xeJEKDzMI9YiP FgNH1H4KwAlsgbV+Jq6UE0mk6GUXoOBsLIJQNxVJOUBfjDX+/Q76IAbbiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDETR/pZCcGwV/T+nmmIhKJKJRPVMB8GA1UdIwQY MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt YmVhY2IwOTRmODBjLzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI7nICXD 35kqH/rfFW0mZm/z4dMd3GMCcVU8Lb4CPEeENvla1H7e7DIWoyvYSDFKO6E+gFCv rkC6EYy0OWHAL2tIK2Oum8WsocNIw5seyTHGiO0mSZgsicpAJvSBH3cCqhkQoRgx 6d/Mu3dKPARU6ulnjYhpkQwbOhwVzVfZCA8qvTPHxPotEQhc4bLX8PRC4kqHo1tB FiNiyKsEn/AhJnspvdyjS8hSrpjzXz4fonDburGh9/Rt+BSEvx79bEXkeg2BBofD G9XWqtokE1YP/lMgdacbwtG85uzMUHmyHf1H5zbwwcQ2kpkq1PYVPNXvtX3K6iIV 9TMZkNMB0qt9VQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:44:32 2025 by rpki-client