This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft File: m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json) Hash identifier: uIJogTiRFxD3ojvYNCNpTq0v+JcJtWJfPaxs4Ik/9LQ= Subject key identifier: 24:AE:11:66:5F:98:F7:E5:77:72:5E:6C:75:7E:C7:49:F4:F2:8F:12 Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B46276FCFFEBE38FFA368CDFC4835A9CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft Manifest number: 0D71 Signing time: Mon 22 Dec 2025 13:02:28 +0000 Manifest this update: Mon 22 Dec 2025 13:02:28 +0000 Manifest next update: Tue 23 Dec 2025 13:02:28 +0000 Files and hashes: 1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=) 2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=) 3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=) 4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: kJU/r1KHE+qPd/5WLUZarbCaZBYNbjl9dWPVz8Yq+DU=) 5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=) 6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:6f:cf:fe:be:38:ff:a3:68:cd:fc:48:35:a9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Dec 22 13:02:28 2025 GMT Not After : Dec 23 13:02:28 2025 GMT Subject: CN=24ae11665f98f7e577725e6c757ec749f4f28f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:27:ef:9b:71:49:42:8a:89:11:24:f5:a4: a9:bf:25:f6:e1:c0:b5:6a:9f:1e:62:41:3b:90:d6: 55:d6:b1:e9:12:a0:ae:7e:5a:42:bd:22:a0:a2:91: 6b:bb:55:76:c8:96:8c:fc:40:b2:d6:31:b9:be:8b: 4a:2d:43:77:ce:4c:07:5f:aa:42:da:9f:b7:f6:ac: 88:06:59:19:88:c8:46:64:e1:48:24:5f:95:a6:3b: ed:a7:0b:9a:bd:0a:47:08:0e:9a:c5:0e:d7:df:f3: ab:b0:d8:af:63:d4:b3:9e:24:c4:81:a0:51:ac:07: d8:6b:c4:a6:30:f1:0f:b3:b7:2c:7a:f1:7d:3b:8b: 4a:71:39:36:b3:e6:d3:d5:c5:b0:b5:ae:e0:04:f6: 91:34:ef:23:08:33:e8:bf:47:30:30:1b:1c:ad:97: 75:31:11:d4:47:09:83:d0:42:b2:37:52:ea:69:13: e4:c6:e6:33:f3:3f:fe:00:45:a6:23:e3:6a:44:4d: 77:89:09:0f:4a:b7:2d:ea:6d:13:9a:ee:10:f2:83: 6c:fc:94:7c:05:94:2c:32:d6:4d:56:ef:e8:43:3b: e6:8e:0d:77:73:38:df:48:cf:f0:c6:dd:2c:7d:21: 96:fa:63:42:19:13:d5:32:3b:ea:60:5e:bc:a2:e4: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AE:11:66:5F:98:F7:E5:77:72:5E:6C:75:7E:C7:49:F4:F2:8F:12 X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:8e:a0:5d:b1:9f:7e:67:63:cf:e4:69:ee:b3:33:74:53:a1: 31:52:c1:59:d4:4e:3a:9a:a9:00:92:3f:9e:c8:a2:cb:99:96: 04:f9:2a:2d:09:dd:ae:03:84:bf:e3:6a:71:a4:b1:e5:5a:c7: 1d:cf:70:0b:9a:8c:16:21:b8:ae:a7:c1:42:d6:2f:21:bc:f9: 03:5d:0b:d1:f0:be:e4:6d:76:24:01:50:db:23:e1:91:b7:5a: 90:96:00:05:e9:91:ec:b9:81:7e:27:9e:15:57:c4:aa:17:8c: 85:4e:8d:3d:31:d3:e1:2a:6c:15:7f:c5:9d:bd:8b:a9:23:d2: 82:7b:34:b9:24:f9:bd:d7:43:56:25:28:59:09:2e:e1:c9:79: 1c:57:64:ef:b2:14:fa:c7:75:99:c5:19:09:e3:da:ba:20:3a: 26:21:2a:a2:8d:eb:c1:58:9c:6d:0b:40:c9:ac:61:b8:fa:28: fc:45:9c:bb:77:d8:6c:13:cb:85:c2:15:9d:f8:b5:fa:d5:b2: 75:8e:cc:9c:1d:a0:ab:88:d4:1f:e2:84:c6:30:43:43:0b:3c: 84:fa:9d:fa:2d:f3:2e:f1:aa:b7:e6:51:06:5d:62:7d:57:9d: 27:cf:1d:0b:70:b7:b0:b7:b8:f1:0d:95:f5:f0:fd:38:fd:cf: 99:0f:c1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ2/P/r44/6NozfxINanNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjUxMjIyMTMwMjI4WhcNMjUxMjIzMTMwMjI4WjAzMTEwLwYDVQQD EygyNGFlMTE2NjVmOThmN2U1Nzc3MjVlNmM3NTdlYzc0OWY0ZjI4ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWUn75txSUKKiREk9aSpvyX24cC1 ap8eYkE7kNZV1rHpEqCuflpCvSKgopFru1V2yJaM/ECy1jG5votKLUN3zkwHX6pC 2p+39qyIBlkZiMhGZOFIJF+VpjvtpwuavQpHCA6axQ7X3/OrsNivY9SzniTEgaBR rAfYa8SmMPEPs7csevF9O4tKcTk2s+bT1cWwta7gBPaRNO8jCDPov0cwMBscrZd1 MRHURwmD0EKyN1LqaRPkxuYz8z/+AEWmI+NqRE13iQkPSrct6m0Tmu4Q8oNs/JR8 BZQsMtZNVu/oQzvmjg13czjfSM/wxt0sfSGW+mNCGRPVMjvqYF68ouQg0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSuEWZfmPfld3JebHV+x0n08o8SMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwo6gXbGf fmdjz+Rp7rMzdFOhMVLBWdROOpqpAJI/nsiiy5mWBPkqLQndrgOEv+NqcaSx5VrH Hc9wC5qMFiG4rqfBQtYvIbz5A10L0fC+5G12JAFQ2yPhkbdakJYABemR7LmBfiee FVfEqheMhU6NPTHT4SpsFX/Fnb2LqSPSgns0uST5vddDViUoWQku4cl5HFdk77IU +sd1mcUZCePauiA6JiEqoo3rwVicbQtAyaxhuPoo/EWcu3fYbBPLhcIVnfi1+tWy dY7MnB2gq4jUH+KExjBDQws8hPqd+i3zLvGqt+ZRBl1ifVedJ88dC3C3sLe48Q2V 9fD9OP3PmQ/BfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:15 2025 by rpki-client