This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json) Hash identifier: cCnW0+fCgE+ZZeCgrWjKygwLWTnx6ohsj+XSxW1wktY= Subject key identifier: A9:9A:D5:4A:37:83:77:AF:50:01:D6:8B:0E:2A:89:7A:70:67:68:24 Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Certificate serial: 019B51F3358D4EB7FA3F5BD8903D6ECEFEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft Manifest number: 0A57 Signing time: Wed 24 Dec 2025 20:00:51 +0000 Manifest this update: Wed 24 Dec 2025 20:00:51 +0000 Manifest next update: Thu 25 Dec 2025 20:00:51 +0000 Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: iAJhZNIGQB3zI18qGcGwcDbj72b6YjWvSrZY5/BTKYw=) 2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:35:8d:4e:b7:fa:3f:5b:d8:90:3d:6e:ce:fe:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Validity Not Before: Dec 24 20:00:51 2025 GMT Not After : Dec 25 20:00:51 2025 GMT Subject: CN=a99ad54a378377af5001d68b0e2a897a70676824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:b6:78:52:b1:66:6a:39:24:d3:79:ad:58: 17:c0:d3:60:40:29:dc:b0:cb:dc:44:66:03:2f:ee: dc:21:fb:8b:2b:96:aa:51:98:b6:c4:cb:12:78:b3: 8b:7b:ec:46:0d:ec:ac:d1:47:68:d6:64:bc:97:f7: d3:8f:f4:01:bb:9c:eb:83:b4:e6:6d:f7:39:9b:3f: dd:b7:1f:63:9e:b2:38:e1:6a:80:91:95:72:ab:c6: 8d:e8:66:5f:0a:c2:39:aa:f9:77:91:70:90:82:67: 21:ee:45:5b:26:71:e5:f5:2d:53:76:c1:1f:a4:bc: be:96:bd:90:5d:42:d9:58:9e:23:a2:c4:3a:47:ea: 1f:58:ba:4d:0f:f1:9d:c3:13:55:56:bb:72:b8:d8: 35:13:a9:2d:46:9d:52:23:d9:a8:7d:20:c5:4d:d1: c7:5b:bf:ba:62:7e:f3:90:de:86:1a:3e:c2:60:e1: f3:31:5f:27:97:5a:75:3d:72:7f:95:a5:e0:35:cc: f5:10:46:7c:0b:ce:a8:f2:83:15:16:3d:eb:7d:f8: b8:fb:4f:ed:46:d6:82:09:92:b1:10:a0:da:8e:b1: 8f:91:ce:0e:00:81:e6:d4:68:16:91:73:67:47:58: 89:57:70:c5:f2:33:d0:9d:2c:ab:db:39:18:21:08: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9A:D5:4A:37:83:77:AF:50:01:D6:8B:0E:2A:89:7A:70:67:68:24 X509v3 Authority Key Identifier: keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5b:cc:18:f6:79:b2:f8:82:e6:80:e7:d4:48:7e:ba:76:31: f8:38:42:06:46:ca:a3:05:23:07:2c:95:80:2d:12:78:49:7a: b7:82:5f:09:45:2b:19:fb:ef:fc:48:65:a0:15:3d:96:b7:ed: f8:50:82:67:8d:56:59:b4:57:9c:45:f6:49:34:85:1b:38:06: f3:51:ee:7c:22:d2:3e:07:ba:7d:0f:f5:ef:44:d7:6d:b8:4c: 13:c5:f4:cb:1a:37:f3:ab:1f:31:35:26:a0:1a:b8:da:25:47: 6c:c8:59:37:db:da:b0:8a:71:f6:f4:29:41:8a:5a:de:67:86: 54:79:6b:9d:42:a4:fd:61:f4:38:f9:b8:2a:bf:7c:d3:b2:5d: 54:95:3d:0c:70:75:8f:0f:81:11:e3:b9:b7:ef:d5:e4:38:8b: 43:b4:e4:85:3a:65:6c:ff:e5:32:49:0f:e3:60:62:ad:ee:27: 50:38:e7:11:71:f6:8d:15:9a:7a:94:33:0d:3b:b7:a7:31:3a: e4:f0:be:55:0a:f7:0a:97:44:3b:cf:25:67:53:42:a3:e1:73: 3a:4d:bb:a0:61:9d:32:65:29:74:28:f6:9f:a8:13:1e:9c:97: 17:6d:be:03:2d:be:ba:19:54:22:1d:4e:a8:3c:ad:af:d4:5c: e3:87:06:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8zWNTrf6P1vYkD1uzv7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj ZjFlNjAwHhcNMjUxMjI0MjAwMDUxWhcNMjUxMjI1MjAwMDUxWjAzMTEwLwYDVQQD EyhhOTlhZDU0YTM3ODM3N2FmNTAwMWQ2OGIwZTJhODk3YTcwNjc2ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUG2eFKxZmo5JNN5rVgXwNNgQCnc sMvcRGYDL+7cIfuLK5aqUZi2xMsSeLOLe+xGDeys0Udo1mS8l/fTj/QBu5zrg7Tm bfc5mz/dtx9jnrI44WqAkZVyq8aN6GZfCsI5qvl3kXCQgmch7kVbJnHl9S1TdsEf pLy+lr2QXULZWJ4josQ6R+ofWLpND/GdwxNVVrtyuNg1E6ktRp1SI9mofSDFTdHH W7+6Yn7zkN6GGj7CYOHzMV8nl1p1PXJ/laXgNcz1EEZ8C86o8oMVFj3rffi4+0/t RtaCCZKxEKDajrGPkc4OAIHm1GgWkXNnR1iJV3DF8jPQnSyr2zkYIQiq1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKma1Uo3g3evUAHWiw4qiXpwZ2gkMB8GA1UdIwQY MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt ZWRjYzUyZTE3YTk0LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0 LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVvMGPZ5 sviC5oDn1Eh+unYx+DhCBkbKowUjByyVgC0SeEl6t4JfCUUrGfvv/EhloBU9lrft +FCCZ41WWbRXnEX2STSFGzgG81HufCLSPge6fQ/170TXbbhME8X0yxo386sfMTUm oBq42iVHbMhZN9vasIpx9vQpQYpa3meGVHlrnUKk/WH0OPm4Kr9807JdVJU9DHB1 jw+BEeO5t+/V5DiLQ7TkhTplbP/lMkkP42Bire4nUDjnEXH2jRWaepQzDTu3pzE6 5PC+VQr3CpdEO88lZ1NCo+FzOk27oGGdMmUpdCj2n6gTHpyXF22+Ay2+uhlUIh1O qDytr9Rc44cGxg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:39 2025 by rpki-client