This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json) Hash identifier: e895FM+R++pzZ9XftgcyPW41fwdcnCwrkljx7T5ukiA= Subject key identifier: CA:48:9D:EE:4C:FC:37:6F:0A:BC:5C:1D:CF:42:E9:55:0A:CD:DB:27 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B38A27F51D47916375FEC54037775428A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft Manifest number: 04B2 Signing time: Fri 19 Dec 2025 22:02:12 +0000 Manifest this update: Fri 19 Dec 2025 22:02:12 +0000 Manifest next update: Sat 20 Dec 2025 22:02:12 +0000 Files and hashes: 1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=) 2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=) 3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: IuF3c9QVbcxAsMv4+0/bLf+qJ8ORJcYYxHAq1NRGKkc=) 4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=) 5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=) 6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:7f:51:d4:79:16:37:5f:ec:54:03:77:75:42:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Dec 19 22:02:12 2025 GMT Not After : Dec 20 22:02:12 2025 GMT Subject: CN=ca489dee4cfc376f0abc5c1dcf42e9550acddb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:3f:da:dd:9a:9b:c6:f0:00:a6:89:f3:7f: 63:7c:2e:1e:d9:42:f6:10:3a:2f:16:17:95:f2:62: 6f:9b:43:af:c1:f1:53:e9:b5:6f:fd:fc:22:48:9a: 66:94:10:97:a4:45:6e:4e:16:f0:88:72:66:6d:91: 57:07:1d:7c:1e:27:85:8d:f8:56:d9:ef:44:1b:cf: 4b:93:ee:ce:8c:a7:f8:f8:ea:93:6f:bd:1d:ce:d5: 18:8c:1b:8f:f8:c8:31:09:b2:99:65:df:93:22:ea: b4:89:6f:63:d2:00:f4:27:48:a3:a9:52:d3:bb:f5: b1:c4:46:ea:1a:75:ff:c2:46:25:9f:d6:42:dc:0b: 27:4a:49:9e:90:86:4a:e4:de:90:0f:7d:67:e2:09: 3c:69:9f:a7:86:c1:4f:8c:8c:c8:5d:a2:96:73:df: f0:99:29:93:54:d8:5e:35:f7:0a:fc:aa:f0:4f:b7: f5:90:6f:c4:43:41:51:e3:28:94:b0:42:b2:1b:d6: 6e:e4:a2:ab:bd:e2:35:b3:9b:c7:25:fb:75:f9:cf: cc:56:51:ce:3f:5d:43:88:25:90:99:e2:86:23:d8: 66:5c:f8:98:aa:66:8f:c1:6b:40:cf:d0:1c:05:65: fc:48:46:a0:d1:99:05:04:2f:6a:c1:c6:ce:00:45: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:9D:EE:4C:FC:37:6F:0A:BC:5C:1D:CF:42:E9:55:0A:CD:DB:27 X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:85:22:23:bc:02:b0:db:04:0e:e1:e2:4e:8a:c2:26:c5:f5: 67:4c:2d:9e:df:db:a3:be:d8:0a:4b:70:be:7e:1e:10:e2:4f: e2:91:c6:8d:50:29:d2:18:91:95:6b:c0:1a:8e:17:c9:a9:bc: 0f:a3:ec:5e:9c:d4:dc:16:ae:41:90:59:fd:9c:5c:05:bb:85: 52:69:d1:d5:5d:52:f2:2f:b9:f2:14:d8:95:0f:01:88:e8:96: b7:a5:fa:95:ab:b8:e1:6c:27:f3:1a:d4:5e:e7:ea:cc:b6:60: 5a:ac:c5:6d:11:2f:c9:a7:47:0b:f7:4a:7c:6d:b7:86:5c:aa: f6:10:48:64:a2:77:e0:33:9d:a9:ee:88:c3:7e:d1:f8:11:33: 3b:27:f2:ba:29:77:d8:95:e8:51:80:98:d9:48:15:e9:48:c2: f6:dd:ba:32:84:19:40:b0:44:1c:e0:c9:1d:f2:68:de:78:10: 37:f2:a6:85:59:43:fc:0b:b1:94:6d:5e:79:69:f7:7d:d8:6d: 98:d4:83:22:f0:d6:90:74:91:ba:b1:e6:77:0c:2d:39:b8:7e: 12:a5:26:a8:50:d8:ce:f0:30:a3:74:d6:2d:fa:15:c0:6f:1c: 56:ae:85:25:d6:83:28:91:be:31:25:5a:fa:66:ec:1a:90:bb: b2:f3:20:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4on9R1HkWN1/sVAN3dUKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjUxMjE5MjIwMjEyWhcNMjUxMjIwMjIwMjEyWjAzMTEwLwYDVQQD EyhjYTQ4OWRlZTRjZmMzNzZmMGFiYzVjMWRjZjQyZTk1NTBhY2RkYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1E/2t2am8bwAKaJ839jfC4e2UL2 EDovFheV8mJvm0OvwfFT6bVv/fwiSJpmlBCXpEVuThbwiHJmbZFXBx18HieFjfhW 2e9EG89Lk+7OjKf4+OqTb70dztUYjBuP+MgxCbKZZd+TIuq0iW9j0gD0J0ijqVLT u/WxxEbqGnX/wkYln9ZC3AsnSkmekIZK5N6QD31n4gk8aZ+nhsFPjIzIXaKWc9/w mSmTVNheNfcK/KrwT7f1kG/EQ0FR4yiUsEKyG9Zu5KKrveI1s5vHJft1+c/MVlHO P11DiCWQmeKGI9hmXPiYqmaPwWtAz9AcBWX8SEag0ZkFBC9qwcbOAEXqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpIne5M/DdvCrxcHc9C6VUKzdsnMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoUiI7wC sNsEDuHiTorCJsX1Z0wtnt/bo77YCktwvn4eEOJP4pHGjVAp0hiRlWvAGo4Xyam8 D6PsXpzU3BauQZBZ/ZxcBbuFUmnR1V1S8i+58hTYlQ8BiOiWt6X6lau44Wwn8xrU XufqzLZgWqzFbREvyadHC/dKfG23hlyq9hBIZKJ34DOdqe6Iw37R+BEzOyfyuil3 2JXoUYCY2UgV6UjC9t26MoQZQLBEHODJHfJo3ngQN/KmhVlD/AuxlG1eeWn3fdht mNSDIvDWkHSRurHmdwwtObh+EqUmqFDYzvAwo3TWLfoVwG8cVq6FJdaDKJG+MSVa +mbsGpC7svMgeA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:38:14 2025 by rpki-client