This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json) Hash identifier: L2Hoe4hK4L6zIkn/CXkyYPEyv9lFWfmCROXTQ+zVzHc= Subject key identifier: 4D:8F:9E:10:8B:A6:14:B2:AE:37:1D:10:AC:F4:D8:5F:62:E0:C1:00 Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97 Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197 Certificate serial: 019B3343D9EC81D9E129654B17B569EE6554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 21:00:43 +0000 Manifest this update: Thu 18 Dec 2025 21:00:43 +0000 Manifest next update: Fri 19 Dec 2025 21:00:43 +0000 Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: jliHji13KxUE9FRymCARLuBfygGBYVwh7L657HGsl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:d9:ec:81:d9:e1:29:65:4b:17:b5:69:ee:65:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197 Validity Not Before: Dec 18 21:00:43 2025 GMT Not After : Dec 19 21:00:43 2025 GMT Subject: CN=4d8f9e108ba614b2ae371d10acf4d85f62e0c100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:a9:82:da:23:5e:fa:f8:e1:e0:e7:da:64: 68:0c:fc:56:6e:e1:b8:28:a3:a2:43:34:e1:a6:d7: 48:1a:f3:a0:92:65:ed:0c:5c:66:86:97:94:70:ca: c9:4e:2f:1c:23:3d:7e:58:39:22:c1:f1:15:6f:e2: f4:22:ac:bd:6e:2b:aa:6e:bc:59:41:fa:b0:cd:c1: 34:2e:97:bb:bd:8b:72:ff:ae:ad:b3:bd:61:15:89: f7:f0:24:bb:f7:67:c7:dc:cd:07:ef:2f:42:93:ab: 9e:38:32:7d:84:4d:87:87:88:28:4e:8e:e3:ed:33: ec:c7:2d:06:cf:0c:0c:9e:ed:cd:3c:26:9a:9b:0f: 5f:a5:b6:ec:66:c1:18:14:f6:86:34:ec:21:49:8c: 2c:de:e1:a9:ac:37:08:9e:b5:2a:b3:79:50:50:da: cc:84:19:85:a0:3f:6b:c4:87:d1:a7:8e:1f:53:08: e9:3f:01:a2:eb:8b:ff:71:51:cf:a6:1c:4d:bd:14: d2:a7:40:e2:34:fa:19:0e:3e:0d:59:03:bb:c7:fd: e2:92:14:12:b4:b6:5c:9b:78:92:5b:92:de:12:62: f3:c4:9f:56:be:45:ff:e3:2a:85:88:75:e1:2b:26: e9:11:64:21:6e:38:c4:42:6a:b6:4b:69:91:de:bd: c6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:9E:10:8B:A6:14:B2:AE:37:1D:10:AC:F4:D8:5F:62:E0:C1:00 X509v3 Authority Key Identifier: keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c4:9b:1a:e9:de:62:2b:11:e0:6e:41:7b:56:48:2c:9f:b4: 32:4a:78:3b:ae:89:a4:a8:da:cf:c7:49:5a:0c:7a:77:aa:2e: 58:f2:d2:f4:ac:3c:e4:24:50:cb:7a:34:56:4a:2a:46:94:8b: ad:0e:a8:29:85:99:aa:01:42:d1:ca:4f:13:69:19:ac:f9:b7: aa:9f:e4:75:28:02:6e:12:8b:ef:66:10:36:fa:02:b6:bc:10: f4:c6:65:87:fa:48:39:31:93:95:ff:25:c5:73:c3:13:f0:c5: de:1a:b5:9d:b7:65:4c:e3:43:04:0b:ff:e1:54:e2:d6:f4:e9: df:b5:6b:6e:dd:3b:7a:a0:fb:b0:45:23:4b:3d:8c:1a:d0:4c: 73:a3:8f:7e:e2:bd:4e:30:ef:6f:a8:18:65:4a:5a:60:a1:bb: ec:b0:40:33:69:76:97:6c:d1:17:45:e0:c0:40:c5:19:83:d5: 4d:6e:f7:a4:01:13:2b:6f:07:f0:ee:7a:a3:11:45:f6:48:27: 51:98:72:54:22:bd:d5:7b:50:4a:cc:4f:6b:26:5a:74:b0:0f: 4f:fb:a5:90:f1:29:ca:03:d3:ab:45:80:94:74:05:49:fd:fc: 65:99:7c:31:d9:a3:bb:6c:21:d6:66:91:57:52:8e:08:0c:84: 26:11:9f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9nsgdnhKWVLF7Vp7mVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2VlNjJiNzk0NzJkY2FlNTFlYWQ0ZDhlYTA2OTIzODcw ZjUxOTcwHhcNMjUxMjE4MjEwMDQzWhcNMjUxMjE5MjEwMDQzWjAzMTEwLwYDVQQD Eyg0ZDhmOWUxMDhiYTYxNGIyYWUzNzFkMTBhY2Y0ZDg1ZjYyZTBjMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3OpgtojXvr44eDn2mRoDPxWbuG4 KKOiQzThptdIGvOgkmXtDFxmhpeUcMrJTi8cIz1+WDkiwfEVb+L0Iqy9biuqbrxZ QfqwzcE0Lpe7vYty/66ts71hFYn38CS792fH3M0H7y9Ck6ueODJ9hE2Hh4goTo7j 7TPsxy0GzwwMnu3NPCaamw9fpbbsZsEYFPaGNOwhSYws3uGprDcInrUqs3lQUNrM hBmFoD9rxIfRp44fUwjpPwGi64v/cVHPphxNvRTSp0DiNPoZDj4NWQO7x/3ikhQS tLZcm3iSW5LeEmLzxJ9WvkX/4yqFiHXhKybpEWQhbjjEQmq2S2mR3r3GdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2PnhCLphSyrjcdEKz02F9i4MEAMB8GA1UdIwQY MBaAFHDO5it5Ry3K5R6tTY6gaSOHD1GXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYTgxYjYtMTI4Mi00NTVmLThjNTkt ZDBlMjRmMDE3MDg4LzEvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iYTgxYjYtMTI4Mi00NTVmLThjNTktZDBlMjRmMDE3MDg4 LzEvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcSbGune YisR4G5Be1ZILJ+0Mkp4O66JpKjaz8dJWgx6d6ouWPLS9Kw85CRQy3o0VkoqRpSL rQ6oKYWZqgFC0cpPE2kZrPm3qp/kdSgCbhKL72YQNvoCtrwQ9MZlh/pIOTGTlf8l xXPDE/DF3hq1nbdlTONDBAv/4VTi1vTp37Vrbt07eqD7sEUjSz2MGtBMc6OPfuK9 TjDvb6gYZUpaYKG77LBAM2l2l2zRF0XgwEDFGYPVTW73pAETK28H8O56oxFF9kgn UZhyVCK91XtQSsxPayZadLAPT/ulkPEpygPTq0WAlHQFSf38ZZl8Mdmju2wh1maR V1KOCAyEJhGflA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:33 2025 by rpki-client