This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft File: m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json) Hash identifier: fcJU1+We2slzXAvbZbJeLVIHx5nLXRaRoXD4WsEX3kY= Subject key identifier: 3E:40:80:4A:02:FB:DA:4A:4F:71:DE:AD:79:98:13:0A:B7:BB:76:7B Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Certificate serial: 019B2D78F3BF913539F956D3CC995F3FA10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft Manifest number: 16B5 Signing time: Wed 17 Dec 2025 18:00:59 +0000 Manifest this update: Wed 17 Dec 2025 18:00:59 +0000 Manifest next update: Thu 18 Dec 2025 18:00:59 +0000 Files and hashes: 1: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (hash: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=) 2: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (hash: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=) 3: SO2r7hsXMD0rXtOemxDNawKSwK8.roa (hash: 3SE/M/3jMxmStavB2oSEQ1ZOQCjp7NcclCdpHKXNutg=) 4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: qxveicbnmHl4Z9TrPPtxZfN8E2aBSZlj9DKRJEuuAt4=) 5: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (hash: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:f3:bf:91:35:39:f9:56:d3:cc:99:5f:3f:a1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Validity Not Before: Dec 17 18:00:59 2025 GMT Not After : Dec 18 18:00:59 2025 GMT Subject: CN=3e40804a02fbda4a4f71dead7998130ab7bb767b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:ba:31:0b:59:f3:6e:fd:9b:68:74:2e:7e: 6c:80:d3:0d:3a:7a:ba:d1:05:0b:f0:85:b8:e2:ba: f5:5d:bf:c5:14:de:62:77:7d:b2:79:07:1b:8e:6f: 9d:a6:7e:3b:e8:49:98:de:4f:dd:98:38:22:25:93: 88:e0:45:53:d6:53:7f:27:dc:38:38:e9:2c:41:ae: 44:61:fc:b5:75:5e:5b:c5:d4:ee:c1:be:76:20:73: 2d:e3:d8:f3:56:4b:8a:9f:c4:64:c2:aa:b4:ff:8c: 03:14:84:78:f3:6a:07:f3:96:1e:a9:e1:d6:b9:3c: 23:5c:32:26:97:70:f0:77:92:0c:77:b0:61:6c:bb: 47:3a:a5:7b:98:2f:fa:72:f9:6f:07:79:31:9f:d8: d1:f4:14:1d:47:c0:cb:7c:f0:3f:e7:f2:9d:1d:d6: 61:71:d3:6f:6a:3b:64:85:7a:78:26:dc:0a:48:9f: ce:22:a8:d2:46:a6:a4:2c:87:84:00:98:84:54:57: 62:4d:d2:ba:30:d7:1c:e9:83:38:ec:5f:a0:13:dd: 14:ab:16:ca:af:89:e5:1a:23:46:46:6e:51:ca:12: b4:00:60:ec:db:a4:00:b3:5b:37:54:a5:79:70:0a: 81:89:cd:12:47:cf:ee:12:47:44:92:83:b6:c0:1f: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:40:80:4A:02:FB:DA:4A:4F:71:DE:AD:79:98:13:0A:B7:BB:76:7B X509v3 Authority Key Identifier: keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:33:e4:43:70:dd:bb:8a:e5:19:95:e2:e5:f7:4f:8a:7b:3e: d0:6c:b4:e3:c5:c2:e3:18:9d:82:77:d0:56:8b:38:12:51:ac: d1:8c:d2:57:10:d9:b3:07:b4:13:3b:09:56:ff:06:1d:f3:b7: 66:89:d7:d1:4e:06:a8:84:c5:34:48:c9:6c:95:15:24:0e:ad: f3:12:ce:d2:c4:f4:7d:f3:74:ef:eb:b2:89:d0:96:d2:43:8e: 40:fa:06:b6:29:9d:c4:06:42:1b:bd:69:c6:e8:3f:f7:37:b2: 4f:a8:e0:8b:dd:10:f0:4f:be:c8:1e:53:de:35:84:e1:4a:da: 5c:37:d0:88:fe:45:62:d5:8e:af:42:41:8f:f8:b0:28:24:2c: 6f:fa:3b:b6:4e:4d:c0:cf:d8:5d:65:cd:17:c5:c8:c9:42:b6: d3:df:9f:ab:19:19:1b:cf:e3:73:05:fd:c4:63:7a:77:97:90: 7c:17:1b:a4:77:ba:f8:0f:7f:f2:29:7b:53:1a:83:1e:e9:16: 28:1e:e0:d9:59:21:93:06:ce:15:30:43:21:84:6b:44:03:74: 40:98:ac:82:67:b4:f9:ec:a5:ed:03:d9:7d:19:ff:43:2c:64: 03:53:36:5b:47:ef:44:6c:87:4f:e5:82:1f:3e:29:f4:1e:12: 63:e1:7e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstePO/kTU5+VbTzJlfP6EPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5 NTgwYmIwHhcNMjUxMjE3MTgwMDU5WhcNMjUxMjE4MTgwMDU5WjAzMTEwLwYDVQQD EygzZTQwODA0YTAyZmJkYTRhNGY3MWRlYWQ3OTk4MTMwYWI3YmI3NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzC6MQtZ8279m2h0Ln5sgNMNOnq6 0QUL8IW44rr1Xb/FFN5id32yeQcbjm+dpn476EmY3k/dmDgiJZOI4EVT1lN/J9w4 OOksQa5EYfy1dV5bxdTuwb52IHMt49jzVkuKn8Rkwqq0/4wDFIR482oH85YeqeHW uTwjXDIml3Dwd5IMd7BhbLtHOqV7mC/6cvlvB3kxn9jR9BQdR8DLfPA/5/KdHdZh cdNvajtkhXp4JtwKSJ/OIqjSRqakLIeEAJiEVFdiTdK6MNcc6YM47F+gE90UqxbK r4nlGiNGRm5RyhK0AGDs26QAs1s3VKV5cAqBic0SR8/uEkdEkoO2wB8GvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5AgEoC+9pKT3HerXmYEwq3u3Z7MB8GA1UdIwQY MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt ZThjOWFkNWYwNTFhLzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTPkQ3Dd u4rlGZXi5fdPins+0Gy048XC4xidgnfQVos4ElGs0YzSVxDZswe0EzsJVv8GHfO3 ZonX0U4GqITFNEjJbJUVJA6t8xLO0sT0ffN07+uyidCW0kOOQPoGtimdxAZCG71p xug/9zeyT6jgi90Q8E++yB5T3jWE4UraXDfQiP5FYtWOr0JBj/iwKCQsb/o7tk5N wM/YXWXNF8XIyUK209+fqxkZG8/jcwX9xGN6d5eQfBcbpHe6+A9/8il7UxqDHukW KB7g2VkhkwbOFTBDIYRrRAN0QJisgme0+eyl7QPZfRn/QyxkA1M2W0fvRGyHT+WC Hz4p9B4SY+F+Ww== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:53 2025 by rpki-client