This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json) Hash identifier: Qyr8Zxejh5h03HP9vtmkTIlrQDTpW3Tnaqtk4GUrXdg= Subject key identifier: 34:AD:77:B3:DF:62:2E:34:DC:F9:B4:DA:ED:A0:73:F7:12:0A:32:DA Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497 Certificate serial: 019B4E168ED32F5549B2E64E566CEAFAA3C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft Manifest number: 0B9E Signing time: Wed 24 Dec 2025 02:00:59 +0000 Manifest this update: Wed 24 Dec 2025 02:00:59 +0000 Manifest next update: Thu 25 Dec 2025 02:00:59 +0000 Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=) 2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: mTkTxBI2z0SxlKdew+Sz9bxWRnhzVBC/NFOvkLmmR24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:8e:d3:2f:55:49:b2:e6:4e:56:6c:ea:fa:a3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5193d843af193e24875686673c95896eae3497 Validity Not Before: Dec 24 02:00:59 2025 GMT Not After : Dec 25 02:00:59 2025 GMT Subject: CN=34ad77b3df622e34dcf9b4daeda073f7120a32da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:97:a5:4d:f9:35:12:b3:54:cd:4b:33:d2: c3:00:83:ec:04:c7:2c:5f:86:c5:57:64:7d:39:a8: 03:e4:f5:55:f1:20:76:aa:09:e0:f2:85:ba:4c:25: da:2d:f6:c2:6c:9b:14:a8:fe:57:63:d5:65:c3:ce: 63:8f:36:b7:7d:af:f6:c0:27:8e:b3:c1:9a:3a:7c: a8:9f:71:62:55:3c:30:5d:17:5a:75:b6:e0:4a:f7: 5e:dd:29:a3:85:ff:24:11:d9:af:45:37:2d:2f:e6: d8:bf:82:ea:2a:06:6e:ca:69:58:f5:fe:e0:3c:d8: 6c:1f:5a:6f:74:6f:cd:02:dd:95:e6:83:90:b2:62: 0f:5f:56:65:e7:ad:f6:79:61:a4:88:a1:8f:4b:38: 81:0d:65:7f:28:00:e6:08:7c:66:00:89:ab:e6:c3: ce:aa:da:69:05:71:a4:8d:e3:03:6b:1e:96:f5:05: a3:64:87:62:57:f0:01:98:31:2a:6f:42:fd:4d:a7: 89:a2:34:18:3c:80:c4:b1:94:00:af:a9:a5:2a:57: 77:54:98:9e:e8:9c:ad:bb:3d:0c:92:ff:9e:c5:41: a7:95:05:23:77:e9:fd:a9:62:2e:02:9e:5c:a3:35: 6e:22:48:37:1e:06:b4:b6:7b:b3:7f:8a:d0:19:d7: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:77:B3:DF:62:2E:34:DC:F9:B4:DA:ED:A0:73:F7:12:0A:32:DA X509v3 Authority Key Identifier: keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2d:21:48:70:f1:13:4c:7d:2f:36:f8:18:28:76:8a:04:b3: 7d:42:dd:d6:72:b9:1b:6b:be:f6:44:61:73:1e:86:a3:2f:00: e5:4c:a2:f2:32:19:24:bd:40:64:51:21:e5:ec:c2:c2:0c:e9: fd:ad:de:0d:09:44:ea:56:01:6d:8d:4a:0d:0d:85:47:c3:f4: 39:29:fc:d1:50:e9:09:89:59:a5:6e:65:b2:c4:e8:c8:09:8f: 72:42:f2:f6:29:32:d8:e6:6b:a0:60:d5:f7:d1:e2:e4:df:41: 80:0a:c1:69:f0:24:cd:c1:0b:41:45:86:02:70:51:55:41:a3: d5:b0:98:7e:55:c2:44:8b:61:39:2d:48:30:06:0d:ac:78:3a: 57:93:fc:45:aa:a8:27:7d:b2:9a:fa:65:79:46:d6:84:e6:0c: c2:ef:57:f2:4f:c8:c0:3c:ec:67:1b:d6:ff:95:7e:b8:be:1c: 5a:37:47:70:29:74:92:31:26:69:74:22:24:a0:22:29:84:b6: fa:96:0c:48:26:2c:9a:31:49:56:5f:12:01:83:05:43:9a:08: 08:38:ac:3c:e8:5d:46:1f:97:87:8b:71:02:67:24:45:d5:1f: 14:37:20:e3:36:e4:7f:af:93:a1:e0:b4:b2:e9:53:0b:51:50: c5:6a:09:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFo7TL1VJsuZOVmzq+qPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh ZTM0OTcwHhcNMjUxMjI0MDIwMDU5WhcNMjUxMjI1MDIwMDU5WjAzMTEwLwYDVQQD EygzNGFkNzdiM2RmNjIyZTM0ZGNmOWI0ZGFlZGEwNzNmNzEyMGEzMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16SXpU35NRKzVM1LM9LDAIPsBMcs X4bFV2R9OagD5PVV8SB2qgng8oW6TCXaLfbCbJsUqP5XY9Vlw85jjza3fa/2wCeO s8GaOnyon3FiVTwwXRdadbbgSvde3Smjhf8kEdmvRTctL+bYv4LqKgZuymlY9f7g PNhsH1pvdG/NAt2V5oOQsmIPX1Zl5632eWGkiKGPSziBDWV/KADmCHxmAImr5sPO qtppBXGkjeMDax6W9QWjZIdiV/ABmDEqb0L9TaeJojQYPIDEsZQAr6mlKld3VJie 6Jytuz0Mkv+exUGnlQUjd+n9qWIuAp5cozVuIkg3Hga0tnuzf4rQGdcDdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDStd7PfYi403Pm02u2gc/cSCjLaMB8GA1UdIwQY MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt MDAwZWFkMzk3NjVhLzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy0hSHDx E0x9Lzb4GCh2igSzfULd1nK5G2u+9kRhcx6Goy8A5Uyi8jIZJL1AZFEh5ezCwgzp /a3eDQlE6lYBbY1KDQ2FR8P0OSn80VDpCYlZpW5lssToyAmPckLy9iky2OZroGDV 99Hi5N9BgArBafAkzcELQUWGAnBRVUGj1bCYflXCRIthOS1IMAYNrHg6V5P8Raqo J32ymvpleUbWhOYMwu9X8k/IwDzsZxvW/5V+uL4cWjdHcCl0kjEmaXQiJKAiKYS2 +pYMSCYsmjFJVl8SAYMFQ5oICDisPOhdRh+Xh4txAmckRdUfFDcg4zbkf6+ToeC0 sulTC1FQxWoJxQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:04 2025 by rpki-client