This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json) Hash identifier: dFX786S10COGTCHCXqZ9NpqwEPNtJwmHmPJiiSei9Hg= Subject key identifier: 10:1C:2C:13:47:4C:66:BC:A8:3F:4A:F4:40:82:81:92:01:2E:A8:D6 Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Certificate serial: 019B405B888086C5453905FB8A98631DCF53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft Manifest number: 0EEB Signing time: Sun 21 Dec 2025 10:01:39 +0000 Manifest this update: Sun 21 Dec 2025 10:01:39 +0000 Manifest next update: Mon 22 Dec 2025 10:01:39 +0000 Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=) 2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: bzOeBLDFTvo9bktbke1nI8MDLsBpW2J/OxNbITdYpkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:88:80:86:c5:45:39:05:fb:8a:98:63:1d:cf:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Validity Not Before: Dec 21 10:01:39 2025 GMT Not After : Dec 22 10:01:39 2025 GMT Subject: CN=101c2c13474c66bca83f4af440828192012ea8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:65:fb:82:d5:3b:57:be:a4:0e:b6:0d:9e: 16:68:e3:0c:3d:20:b8:f8:ce:92:9c:69:89:5c:36: 2b:44:86:60:a0:da:c8:39:15:41:7a:c6:fd:96:dd: d6:dd:4e:9c:41:21:a3:f1:a4:18:df:85:bd:cc:6c: ee:bb:30:6d:ef:f7:d7:98:2e:88:d4:78:be:60:65: 48:05:cd:98:2f:f7:47:2d:9d:8f:e4:51:81:4b:4d: d8:b7:04:20:75:a3:24:7c:8a:29:0c:d2:33:c3:dd: b8:07:6b:84:f2:2d:63:5a:a1:57:5e:81:cc:ae:20: 8f:b6:c8:3a:59:3d:26:30:e2:fc:cf:68:b5:cc:2a: 3b:a8:fb:4f:3c:f8:4e:26:d9:b7:17:a3:5b:8f:73: 0f:ea:7d:a8:81:f3:01:38:8a:2e:45:93:5b:6d:31: 02:e5:6f:e9:c2:87:05:c9:d4:8c:73:02:25:21:be: 7a:d2:16:54:33:69:a5:99:fb:65:c5:d7:3b:fe:99: 23:1e:8e:d5:f8:60:8d:c1:e4:fc:60:19:a0:eb:32: a6:b1:6c:6a:5d:2d:06:99:22:b3:eb:c4:7b:60:0c: 25:92:3e:c1:65:e1:36:b8:97:d3:65:97:d3:f2:2d: ec:a5:8d:28:30:f9:5c:af:e0:0c:15:2c:09:e2:9f: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:2C:13:47:4C:66:BC:A8:3F:4A:F4:40:82:81:92:01:2E:A8:D6 X509v3 Authority Key Identifier: keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bd:fb:58:af:4d:d6:bb:11:c1:bb:b1:54:99:b7:08:42:22: 86:55:9f:cb:c4:1a:f2:44:39:6d:c4:c9:51:e2:a6:31:78:2b: 93:0b:5f:6f:97:cd:dd:b5:93:35:fe:30:a4:9c:e6:e2:7e:e5: 5e:d2:7b:07:4a:05:3b:d7:7d:fd:b6:77:1e:81:f2:c4:44:61: 10:2b:87:e6:e2:c4:8f:7d:9d:d8:0e:a1:c7:10:9e:b5:ba:1f: cf:64:32:a4:2a:b4:a9:d9:07:3b:1c:8d:29:f0:6e:1a:12:49: 94:10:84:41:b6:4c:96:7c:46:36:9f:e8:18:1b:91:82:62:15: 3e:0e:71:b0:c1:0f:56:32:62:0a:e4:85:2e:02:cf:16:fa:7d: b8:5a:8d:82:04:fd:46:aa:e5:8b:22:29:dd:2c:37:21:c2:78: 35:1d:aa:f2:27:7e:64:1a:bb:9b:5d:da:dd:eb:d8:42:70:1a: ed:61:5e:48:c0:66:00:00:f3:5c:b1:64:d3:b1:ed:36:24:3c: 73:98:17:18:85:56:bf:f3:90:f9:38:68:47:37:d1:db:c1:1c: 2a:2a:b7:95:d3:a8:79:71:5c:99:70:7d:4b:37:62:cf:6c:f0: 96:b5:f0:5b:de:7d:89:ef:37:c0:dc:66:2c:fc:9f:e8:d3:03: de:5f:44:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW4iAhsVFOQX7iphjHc9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll ZTI0NDQwHhcNMjUxMjIxMTAwMTM5WhcNMjUxMjIyMTAwMTM5WjAzMTEwLwYDVQQD EygxMDFjMmMxMzQ3NGM2NmJjYTgzZjRhZjQ0MDgyODE5MjAxMmVhOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstxl+4LVO1e+pA62DZ4WaOMMPSC4 +M6SnGmJXDYrRIZgoNrIORVBesb9lt3W3U6cQSGj8aQY34W9zGzuuzBt7/fXmC6I 1Hi+YGVIBc2YL/dHLZ2P5FGBS03YtwQgdaMkfIopDNIzw924B2uE8i1jWqFXXoHM riCPtsg6WT0mMOL8z2i1zCo7qPtPPPhOJtm3F6Nbj3MP6n2ogfMBOIouRZNbbTEC 5W/pwocFydSMcwIlIb560hZUM2mlmftlxdc7/pkjHo7V+GCNweT8YBmg6zKmsWxq XS0GmSKz68R7YAwlkj7BZeE2uJfTZZfT8i3spY0oMPlcr+AMFSwJ4p+CzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAcLBNHTGa8qD9K9ECCgZIBLqjWMB8GA1UdIwQY MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt ZDA4YTljZGVjOTg2LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2 LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa737WK9N 1rsRwbuxVJm3CEIihlWfy8Qa8kQ5bcTJUeKmMXgrkwtfb5fN3bWTNf4wpJzm4n7l XtJ7B0oFO9d9/bZ3HoHyxERhECuH5uLEj32d2A6hxxCetbofz2QypCq0qdkHOxyN KfBuGhJJlBCEQbZMlnxGNp/oGBuRgmIVPg5xsMEPVjJiCuSFLgLPFvp9uFqNggT9 RqrliyIp3Sw3IcJ4NR2q8id+ZBq7m13a3evYQnAa7WFeSMBmAADzXLFk07HtNiQ8 c5gXGIVWv/OQ+ThoRzfR28EcKiq3ldOoeXFcmXB9Szdiz2zwlrXwW959ie83wNxm LPyf6NMD3l9EJw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:23:28 2025 by rpki-client