This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json) Hash identifier: oyhnLT9Vk/JYndB3ynpiAGQmcDARCdQk4NzlIQOXzDE= Subject key identifier: 07:AD:BB:5A:0A:30:1B:E1:64:70:07:DD:54:99:1A:20:82:BB:F6:5F Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B631EBEFFC48774D2B9BBE9858170F4D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft Manifest number: 04C8 Signing time: Sun 28 Dec 2025 04:01:57 +0000 Manifest this update: Sun 28 Dec 2025 04:01:57 +0000 Manifest next update: Mon 29 Dec 2025 04:01:57 +0000 Files and hashes: 1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=) 2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=) 3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: O2c/kk0D5d8Ng5CIYxQv9viokcx66KU1rdStm89k0RA=) 4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=) 5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=) 6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:be:ff:c4:87:74:d2:b9:bb:e9:85:81:70:f4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Dec 28 04:01:57 2025 GMT Not After : Dec 29 04:01:57 2025 GMT Subject: CN=07adbb5a0a301be1647007dd54991a2082bbf65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:11:14:fb:5f:12:f0:b2:35:41:31:40:a2: 35:58:7a:27:04:6f:0f:9d:ab:70:54:84:8c:20:07: 72:81:8c:c8:a2:8d:69:0d:4b:91:54:71:fe:c0:25: 75:58:6d:25:af:1f:fa:23:ea:d4:58:34:c0:bb:e0: b7:20:bb:6b:bf:4e:01:bb:3d:f4:18:5d:96:1f:5f: 1d:08:82:91:f2:78:14:dd:25:3a:2c:ba:41:72:c4: 24:32:ef:69:c9:31:2f:7d:d8:15:a4:a0:72:45:79: 87:9b:da:9f:ee:e4:2d:5e:fa:7e:4d:3c:46:ba:c6: a9:d5:c9:0c:ac:00:b2:5b:28:12:d8:08:30:c3:26: 97:f2:a8:86:bc:20:8a:80:a3:c5:3c:5a:a9:e8:39: cd:b6:55:83:11:0f:5f:c5:ed:5b:43:b8:35:f8:8b: 8d:b6:78:11:ad:e4:cc:70:66:79:a4:ad:6f:b8:26: 58:7a:02:89:18:74:55:b8:7e:15:3e:59:2d:04:95: c6:5b:fd:3a:7f:a0:03:e2:88:a8:e1:51:4d:59:d6: 97:55:0b:6d:f8:18:f3:8a:db:56:37:96:b3:f5:70: 89:11:d7:cd:9e:e7:0d:f3:6b:ee:f8:6b:ce:f2:8b: 17:b9:78:7a:a8:cd:af:76:55:5e:24:8e:c7:e6:67: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:BB:5A:0A:30:1B:E1:64:70:07:DD:54:99:1A:20:82:BB:F6:5F X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1f:cb:a7:0c:2d:92:6f:ec:e4:9c:43:48:a4:05:3e:17:91: ef:b7:8b:21:d0:85:4f:bf:16:5c:f2:c5:84:93:12:31:1a:8f: 66:a4:c6:26:13:04:73:7f:84:17:ed:30:49:fe:0a:86:17:0e: e7:26:36:0b:c6:19:7b:56:89:39:0e:7f:3c:0e:4c:ad:89:4e: 86:87:54:fc:6e:c9:5f:f0:9b:1d:99:c9:2c:4d:2d:3d:44:5f: 15:a7:48:ea:05:36:24:45:62:05:5a:61:a3:d4:dc:0d:60:43: b3:92:14:ab:60:30:3f:cb:7a:c3:02:b0:03:77:6c:5c:6f:c9: 1e:24:78:b9:ee:35:b1:8d:b7:0b:31:64:56:d8:e4:43:18:e2: 0f:02:64:04:df:6f:a6:c2:23:6b:16:69:7f:d4:0e:3f:a0:bd: f5:ba:b5:ae:1d:fd:40:16:21:b9:05:2c:e3:90:bf:1f:06:b1: 86:0c:6d:51:56:1d:98:50:f8:36:f2:67:22:8d:33:fb:bc:a9: 09:26:31:ea:d2:dd:f0:86:55:cb:07:a5:d1:eb:0e:8d:a0:de: 53:1b:f9:b2:c4:21:e2:fe:30:77:88:89:66:23:6a:e5:fe:59: 1a:e4:dc:0e:d4:f9:b8:c7:99:29:25:30:c3:ae:c2:5c:45:76: f3:1a:9a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHr7/xId00rm76YWBcPTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjUxMjI4MDQwMTU3WhcNMjUxMjI5MDQwMTU3WjAzMTEwLwYDVQQD EygwN2FkYmI1YTBhMzAxYmUxNjQ3MDA3ZGQ1NDk5MWEyMDgyYmJmNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7YRFPtfEvCyNUExQKI1WHonBG8P natwVISMIAdygYzIoo1pDUuRVHH+wCV1WG0lrx/6I+rUWDTAu+C3ILtrv04Buz30 GF2WH18dCIKR8ngU3SU6LLpBcsQkMu9pyTEvfdgVpKByRXmHm9qf7uQtXvp+TTxG usap1ckMrACyWygS2AgwwyaX8qiGvCCKgKPFPFqp6DnNtlWDEQ9fxe1bQ7g1+IuN tngRreTMcGZ5pK1vuCZYegKJGHRVuH4VPlktBJXGW/06f6AD4oio4VFNWdaXVQtt +BjzittWN5az9XCJEdfNnucN82vu+GvO8osXuXh6qM2vdlVeJI7H5mdsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAetu1oKMBvhZHAH3VSZGiCCu/ZfMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB/Lpwwt km/s5JxDSKQFPheR77eLIdCFT78WXPLFhJMSMRqPZqTGJhMEc3+EF+0wSf4KhhcO 5yY2C8YZe1aJOQ5/PA5MrYlOhodU/G7JX/CbHZnJLE0tPURfFadI6gU2JEViBVph o9TcDWBDs5IUq2AwP8t6wwKwA3dsXG/JHiR4ue41sY23CzFkVtjkQxjiDwJkBN9v psIjaxZpf9QOP6C99bq1rh39QBYhuQUs45C/HwaxhgxtUVYdmFD4NvJnIo0z+7yp CSYx6tLd8IZVywel0esOjaDeUxv5ssQh4v4wd4iJZiNq5f5ZGuTcDtT5uMeZKSUw w67CXEV28xqaOQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:53 2025 by rpki-client