This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json) Hash identifier: UAI0WqIaxZiuW1eJ4lQHJfShnYikQHEcSeLmyEoQ8Qo= Subject key identifier: 63:46:B5:87:5A:56:90:48:68:9D:4D:43:DC:64:12:21:10:8D:E4:5A Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2 Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2 Certificate serial: 019B548698C826647C7A946690D1C95EA26B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 08:01:05 +0000 Manifest this update: Thu 25 Dec 2025 08:01:05 +0000 Manifest next update: Fri 26 Dec 2025 08:01:05 +0000 Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=) 2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: lkxct1gRuLQrWTICsusTOi54sJHjWGAFatWD+qTXFxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:98:c8:26:64:7c:7a:94:66:90:d1:c9:5e:a2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2 Validity Not Before: Dec 25 08:01:05 2025 GMT Not After : Dec 26 08:01:05 2025 GMT Subject: CN=6346b5875a569048689d4d43dc641221108de45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:bd:bd:98:8e:80:7d:e9:82:10:e1:dc:a8: 2e:06:7c:09:9a:a0:fc:e4:16:55:25:84:ae:39:79: f4:44:b5:48:d4:60:de:75:b4:52:40:38:dc:ae:fc: cf:24:b0:dd:e7:96:82:d9:90:bf:eb:26:ab:2f:09: 9c:fe:85:67:74:95:11:62:50:0e:9a:12:41:45:17: dc:bc:52:18:f4:c3:50:87:36:b5:40:ad:4b:24:09: 8f:cf:0e:81:d2:07:86:d9:00:50:ee:a7:5e:d7:8d: ab:1a:25:88:f1:77:3a:13:a8:da:32:c4:8c:a0:c7: 7c:b6:7b:fa:d3:a2:bb:3f:7c:4c:17:02:cf:65:5e: 8d:11:a5:bf:1f:71:f5:e7:df:08:a4:fe:e3:db:f7: a3:4d:8c:44:25:8d:8a:d4:97:8d:b5:04:a3:cc:1e: e7:89:6d:b0:89:fb:c1:41:8b:7f:1f:87:fc:6d:fd: a8:83:b5:5b:48:bb:81:c2:3e:73:99:b3:ab:39:0b: e4:42:91:20:8a:35:5a:74:87:6f:5e:7c:9d:6b:83: 55:2f:a0:3c:57:b6:49:b2:aa:d9:01:21:5f:b2:df: ca:4c:a5:8d:a8:10:8e:9f:3b:8d:32:0a:ce:2b:97: 1a:57:73:93:1e:5c:82:5f:f2:de:e2:45:7e:ae:b3: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:B5:87:5A:56:90:48:68:9D:4D:43:DC:64:12:21:10:8D:E4:5A X509v3 Authority Key Identifier: keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:38:f1:fe:96:0f:ca:60:bf:2d:82:ad:94:0e:a3:7a:47:ee: ea:22:97:e9:f7:b9:56:d7:e3:a5:76:66:ba:56:62:e7:8f:52: 01:41:07:0c:a1:77:fe:f8:6a:a8:55:88:2d:a6:90:7f:c2:aa: c9:5a:35:82:15:e1:24:78:4f:b0:da:b4:42:a0:bc:ee:74:79: 87:6e:ae:d8:2f:1a:e2:f4:f1:17:f1:04:da:72:1f:ea:a6:b4: 57:c8:78:66:89:1b:cb:a5:7d:62:df:bb:93:b1:37:f6:9d:a2: 41:99:9c:83:f8:50:91:b2:01:e0:01:cb:ea:72:6e:8d:19:f4: be:f6:19:d2:dd:2a:72:9b:3c:6a:d6:d8:b9:81:08:2e:45:17: 09:c7:a7:8e:71:fe:03:c4:c4:17:9b:2d:f2:fe:1f:47:86:d2: 8a:e8:9d:10:f2:e4:ed:f7:93:36:b1:f0:02:98:8b:89:81:56: e2:12:29:0e:ea:89:7d:35:8b:30:06:5b:1b:98:01:78:82:b3: fe:66:aa:56:18:cd:bf:53:84:1e:d1:64:09:a9:70:ac:17:59: 39:b9:7a:d9:f7:7d:10:d5:34:26:cc:0b:12:d0:b6:0e:df:11: 09:71:e1:c3:01:fd:38:53:b2:49:3c:02:b0:a9:01:eb:38:6c: 03:31:d5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhpjIJmR8epRmkNHJXqJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2Y1ZTY5N2M2MDk0YWRiNmJjOTcxNTZiMzVlMDA1ZmQ0 Y2YyZTIwHhcNMjUxMjI1MDgwMTA1WhcNMjUxMjI2MDgwMTA1WjAzMTEwLwYDVQQD Eyg2MzQ2YjU4NzVhNTY5MDQ4Njg5ZDRkNDNkYzY0MTIyMTEwOGRlNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfm9vZiOgH3pghDh3KguBnwJmqD8 5BZVJYSuOXn0RLVI1GDedbRSQDjcrvzPJLDd55aC2ZC/6yarLwmc/oVndJURYlAO mhJBRRfcvFIY9MNQhza1QK1LJAmPzw6B0geG2QBQ7qde142rGiWI8Xc6E6jaMsSM oMd8tnv606K7P3xMFwLPZV6NEaW/H3H1598IpP7j2/ejTYxEJY2K1JeNtQSjzB7n iW2wifvBQYt/H4f8bf2og7VbSLuBwj5zmbOrOQvkQpEgijVadIdvXnyda4NVL6A8 V7ZJsqrZASFfst/KTKWNqBCOnzuNMgrOK5caV3OTHlyCX/Le4kV+rrMo9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNGtYdaVpBIaJ1NQ9xkEiEQjeRaMB8GA1UdIwQY MBaAFHDPXml8YJSttryXFWs14AX9TPLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY005ZWFYeGdsSzIydkpjVmF6WGdCZjFNOHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80ZDUyOTUtZjhmMi00ZTA1LWFkZDAt NTE5Nzk1YTIyNTAyLzEvY005ZWFYeGdsSzIydkpjVmF6WGdCZjFNOHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80ZDUyOTUtZjhmMi00ZTA1LWFkZDAtNTE5Nzk1YTIyNTAy LzEvY005ZWFYeGdsSzIydkpjVmF6WGdCZjFNOHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezjx/pYP ymC/LYKtlA6jekfu6iKX6fe5VtfjpXZmulZi549SAUEHDKF3/vhqqFWILaaQf8Kq yVo1ghXhJHhPsNq0QqC87nR5h26u2C8a4vTxF/EE2nIf6qa0V8h4Zokby6V9Yt+7 k7E39p2iQZmcg/hQkbIB4AHL6nJujRn0vvYZ0t0qcps8atbYuYEILkUXCcenjnH+ A8TEF5st8v4fR4bSiuidEPLk7feTNrHwApiLiYFW4hIpDuqJfTWLMAZbG5gBeIKz /maqVhjNv1OEHtFkCalwrBdZObl62fd9ENU0JswLEtC2Dt8RCXHhwwH9OFOySTwC sKkB6zhsAzHVSA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:15:14 2025 by rpki-client