This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json) Hash identifier: N5pTCFj/RgYpeEkGnTZHTIr2esDlWN5nTzbcCGZtPkA= Subject key identifier: 7D:D3:27:CC:14:8A:3C:9F:4A:59:F4:DE:9B:4B:BC:3E:C0:AA:60:A5 Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6 Certificate serial: 019B53ABF7B559FE2C91F64AE3CAB3BBB9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft Manifest number: 1493 Signing time: Thu 25 Dec 2025 04:02:17 +0000 Manifest this update: Thu 25 Dec 2025 04:02:17 +0000 Manifest next update: Fri 26 Dec 2025 04:02:17 +0000 Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=) 2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: ajwf8oil2q5CoUTH03U46ra0eQ0WyPUKEfPZnFI71TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:f7:b5:59:fe:2c:91:f6:4a:e3:ca:b3:bb:b9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6 Validity Not Before: Dec 25 04:02:17 2025 GMT Not After : Dec 26 04:02:17 2025 GMT Subject: CN=7dd327cc148a3c9f4a59f4de9b4bbc3ec0aa60a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:fe:47:ef:0d:d6:bc:89:48:e1:ca:90:e0: 0e:ba:ad:0f:4d:cb:33:67:ba:af:a6:98:b2:f6:f3: 39:26:4d:50:fe:f9:eb:bc:2d:f0:47:e0:1f:20:5a: b0:39:10:07:d0:44:d9:dc:06:ff:14:1c:ea:35:29: 47:51:6d:42:53:ba:cf:82:16:42:ca:ca:7d:e0:6c: c5:08:5a:63:b0:2e:98:1e:db:e0:9a:5f:2a:78:b1: 53:73:f6:13:80:a7:eb:88:ea:8b:40:20:7a:8c:3e: 38:31:32:07:f7:6a:14:fc:bf:13:e8:45:6f:b5:2d: 17:69:d3:c0:5e:9d:64:67:c0:70:97:83:8c:67:85: fe:b2:0a:db:73:95:f3:70:d6:4a:7a:ee:1b:a7:e3: 5d:54:83:92:8c:e1:08:f1:36:91:5c:39:f7:1c:b6: 7e:72:45:2e:fc:cf:22:e2:88:49:a7:d3:91:3f:01: e4:86:c3:d1:59:b3:65:78:88:20:b7:45:9f:4c:f1: 71:8f:4d:44:3f:a0:ca:68:70:45:3e:6e:70:67:f9: 9b:a5:f5:96:0f:c8:18:a5:d7:93:c4:e0:20:cd:7f: ef:31:db:ef:71:8b:bf:8d:57:8a:f7:0d:d9:93:29: 64:e3:c3:88:10:b0:47:1c:5c:76:e9:2a:55:fa:42: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D3:27:CC:14:8A:3C:9F:4A:59:F4:DE:9B:4B:BC:3E:C0:AA:60:A5 X509v3 Authority Key Identifier: keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e4:ee:20:68:0b:89:b3:05:88:f9:b7:f3:5b:ce:c8:8e:99: e4:2d:c0:00:69:8d:d0:6c:f0:7b:63:56:5a:96:8d:d5:f1:69: c2:78:26:a3:71:39:dd:4d:b0:30:09:46:5c:ca:a5:d2:35:26: f1:ae:26:b1:73:ef:14:dd:3e:5e:a3:66:11:a1:2d:7b:3f:93: 12:39:47:18:1d:1d:d9:f9:fc:99:0f:fb:df:46:85:d7:e4:d2: cb:66:37:9b:59:9e:55:eb:12:a6:cd:0f:86:f0:14:14:6e:81: 42:6c:f7:f7:78:90:a0:30:c0:8d:86:2b:a7:4c:e0:da:16:fb: e0:a1:32:ee:79:d2:4c:a6:a2:b5:a6:e6:14:4c:61:13:db:66: 23:ad:8a:15:52:bc:e4:23:14:5c:1e:1d:c2:16:89:50:cb:de: 79:6d:e6:0c:9e:9e:30:d9:71:a9:7b:09:19:f4:b5:16:64:f1: 1d:57:b6:ce:39:ed:b4:5a:5c:f9:07:18:2e:a9:28:d6:33:e8: 45:3a:3a:6d:13:4e:8d:d7:78:b0:76:25:89:d0:b5:50:b2:62: f3:b7:d2:c7:a8:2f:bf:b9:b4:46:68:0a:18:69:a1:39:18:2c: 7c:87:76:9c:30:17:e4:e3:42:a1:7a:30:2c:95:62:82:82:c5: 80:08:d3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq/e1Wf4skfZK48qzu7nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx MDc4YjYwHhcNMjUxMjI1MDQwMjE3WhcNMjUxMjI2MDQwMjE3WjAzMTEwLwYDVQQD Eyg3ZGQzMjdjYzE0OGEzYzlmNGE1OWY0ZGU5YjRiYmMzZWMwYWE2MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67T+R+8N1ryJSOHKkOAOuq0PTcsz Z7qvppiy9vM5Jk1Q/vnrvC3wR+AfIFqwORAH0ETZ3Ab/FBzqNSlHUW1CU7rPghZC ysp94GzFCFpjsC6YHtvgml8qeLFTc/YTgKfriOqLQCB6jD44MTIH92oU/L8T6EVv tS0XadPAXp1kZ8Bwl4OMZ4X+sgrbc5XzcNZKeu4bp+NdVIOSjOEI8TaRXDn3HLZ+ ckUu/M8i4ohJp9ORPwHkhsPRWbNleIggt0WfTPFxj01EP6DKaHBFPm5wZ/mbpfWW D8gYpdeTxOAgzX/vMdvvcYu/jVeK9w3Zkylk48OIELBHHFx26SpV+kJZEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3TJ8wUijyfSln03ptLvD7AqmClMB8GA1UdIwQY MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0 LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxeTuIGgL ibMFiPm381vOyI6Z5C3AAGmN0Gzwe2NWWpaN1fFpwngmo3E53U2wMAlGXMql0jUm 8a4msXPvFN0+XqNmEaEtez+TEjlHGB0d2fn8mQ/730aF1+TSy2Y3m1meVesSps0P hvAUFG6BQmz393iQoDDAjYYrp0zg2hb74KEy7nnSTKaitabmFExhE9tmI62KFVK8 5CMUXB4dwhaJUMveeW3mDJ6eMNlxqXsJGfS1FmTxHVe2zjnttFpc+QcYLqko1jPo RTo6bRNOjdd4sHYlidC1ULJi87fSx6gvv7m0RmgKGGmhORgsfId2nDAX5ONCoXow LJVigoLFgAjT0Q== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:25 2025 by rpki-client