This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 5RQRBWaIVoz/yIs1iZrvJuTMEETyuu4dVhwVoQecX2I= Subject key identifier: 82:5E:E8:7C:6D:B9:44:0F:0E:88:E4:A8:D3:EF:65:43:B3:44:47:07 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B397D6412B9E9F5C64FEC267D732B6700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17CC Signing time: Sat 20 Dec 2025 02:01:17 +0000 Manifest this update: Sat 20 Dec 2025 02:01:17 +0000 Manifest next update: Sun 21 Dec 2025 02:01:17 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: E8XlKZJFVzEYYA5wlcTOXB2BP7s7sjU4PTbWxSDi1So=) 5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:64:12:b9:e9:f5:c6:4f:ec:26:7d:73:2b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 20 02:01:17 2025 GMT Not After : Dec 21 02:01:17 2025 GMT Subject: CN=825ee87c6db9440f0e88e4a8d3ef6543b3444707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:f7:73:5f:8b:2c:4c:92:62:2d:ae:0f:ca: ab:ee:b0:8a:cb:70:5d:71:91:bf:3a:1e:29:0d:2b: 39:47:2a:a5:5c:6d:56:65:64:e6:9f:ce:22:dd:d4: c6:43:0a:fb:55:a9:f7:ac:19:4f:46:29:64:d8:76: 6d:c7:05:3d:7e:e7:f8:cd:53:3d:68:2b:6f:ab:ed: 09:25:65:a5:6d:80:73:6a:78:8d:0f:0c:e5:5a:bf: d6:3c:e4:29:f6:89:a4:b7:80:06:54:25:67:50:8f: 98:34:ae:62:1b:a6:84:4a:3e:dc:64:9b:a9:bc:34: 7a:de:44:f7:aa:80:11:4e:7a:63:d0:fa:de:f2:9a: 3f:f5:47:a7:ff:d9:40:06:fa:60:0a:4a:6a:02:b8: 1a:3e:c4:6e:08:b6:67:8d:ab:bd:08:31:76:26:8e: 48:76:a5:c2:77:ac:9a:a5:a1:a8:9b:54:f7:01:a4: 91:5c:7b:4a:78:2e:58:8b:d1:d2:64:6f:b4:ab:c7: 26:a6:64:2c:85:f8:70:40:75:e1:2b:2e:15:c3:f4: 33:5f:e2:de:e8:b8:a4:ae:33:8a:07:01:9c:cf:44: 95:ef:e1:7f:34:ee:0a:63:5e:b5:3c:19:0d:e3:20: ad:6c:71:b3:5e:cc:d9:2d:9b:81:61:ab:a5:ee:c2: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5E:E8:7C:6D:B9:44:0F:0E:88:E4:A8:D3:EF:65:43:B3:44:47:07 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1e:7d:e4:0c:a0:22:16:3e:84:93:a0:e2:d6:4c:eb:0d:f4: 3b:3c:19:06:22:f2:db:c7:bf:06:2d:b2:a3:ea:ee:e8:15:75: 93:18:7e:d8:bb:44:62:6c:0e:d0:8a:ec:8f:48:e8:0c:55:41: 15:56:0c:56:f0:fd:b0:5c:2d:d8:a4:20:91:25:37:ee:28:e8: 49:e4:bf:f6:c9:25:26:7b:d9:8f:a0:18:5f:c3:c3:bd:76:0c: ac:a3:93:cc:ea:f8:65:e3:ec:cf:bb:4e:4e:c4:54:ed:80:5b: 61:03:db:16:77:a1:3f:01:08:a5:7b:47:03:23:cd:78:9e:66: 3c:71:1a:b6:8c:a7:90:fd:c5:5f:04:bd:14:bc:0a:cb:85:e4: 6c:81:01:89:60:9f:49:e5:f0:fc:ed:b3:34:d6:48:f1:44:d4: 73:5e:15:b6:ba:c0:0e:6a:00:bb:35:0e:77:1b:27:a7:2c:15: df:5b:0a:20:f5:3c:fb:c0:56:74:5c:7f:73:01:9f:ff:18:8a: 6c:4e:c7:f4:a0:fb:a7:7a:ee:ee:d9:d5:c0:0c:cc:c1:09:f9: 2d:05:d8:48:d1:37:bc:e7:17:44:e6:cb:11:ca:6b:08:f4:6f: b7:28:66:1a:62:e6:8a:18:56:d0:1e:80:ad:5c:7e:c0:00:66: 8a:7c:97:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWQSuen1xk/sJn1zK2cAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjIwMDIwMTE3WhcNMjUxMjIxMDIwMTE3WjAzMTEwLwYDVQQD Eyg4MjVlZTg3YzZkYjk0NDBmMGU4OGU0YThkM2VmNjU0M2IzNDQ0NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7L3c1+LLEySYi2uD8qr7rCKy3Bd cZG/Oh4pDSs5RyqlXG1WZWTmn84i3dTGQwr7Van3rBlPRilk2HZtxwU9fuf4zVM9 aCtvq+0JJWWlbYBzaniNDwzlWr/WPOQp9omkt4AGVCVnUI+YNK5iG6aESj7cZJup vDR63kT3qoARTnpj0Pre8po/9Uen/9lABvpgCkpqArgaPsRuCLZnjau9CDF2Jo5I dqXCd6yapaGom1T3AaSRXHtKeC5Yi9HSZG+0q8cmpmQshfhwQHXhKy4Vw/QzX+Le 6LikrjOKBwGcz0SV7+F/NO4KY161PBkN4yCtbHGzXszZLZuBYaul7sKMIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJe6HxtuUQPDojkqNPvZUOzREcHMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx595Ayg IhY+hJOg4tZM6w30OzwZBiLy28e/Bi2yo+ru6BV1kxh+2LtEYmwO0Irsj0joDFVB FVYMVvD9sFwt2KQgkSU37ijoSeS/9sklJnvZj6AYX8PDvXYMrKOTzOr4ZePsz7tO TsRU7YBbYQPbFnehPwEIpXtHAyPNeJ5mPHEatoynkP3FXwS9FLwKy4XkbIEBiWCf SeXw/O2zNNZI8UTUc14VtrrADmoAuzUOdxsnpywV31sKIPU8+8BWdFx/cwGf/xiK bE7H9KD7p3ru7tnVwAzMwQn5LQXYSNE3vOcXRObLEcprCPRvtyhmGmLmihhW0B6A rVx+wABminyXHw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:40:22 2025 by rpki-client