This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft File: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json) Hash identifier: WjL5InqxlCK5B37U+7ip+HoKg/OocpfdCb4+9jwHfHM= Subject key identifier: 9C:68:50:98:19:7D:C6:ED:B4:FA:82:9E:47:22:C4:8C:C9:B4:03:1B Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Certificate serial: 019B3DC7730D121005F4694F8EBDB2E3C789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 22:00:39 +0000 Manifest this update: Sat 20 Dec 2025 22:00:39 +0000 Manifest next update: Sun 21 Dec 2025 22:00:39 +0000 Files and hashes: 1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: 8rfRTjHSTd65n4n4sxlrigMWwcS5wmelOmVybp4Kdis=) 2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:73:0d:12:10:05:f4:69:4f:8e:bd:b2:e3:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Validity Not Before: Dec 20 22:00:39 2025 GMT Not After : Dec 21 22:00:39 2025 GMT Subject: CN=9c685098197dc6edb4fa829e4722c48cc9b4031b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:6c:1d:0a:40:43:0a:0b:a6:15:41:da:b3: c2:a7:ac:e4:6f:8c:65:c2:b0:a1:01:72:ca:27:05: 41:47:37:41:f2:37:0e:c1:c6:0c:ca:24:e7:03:2c: ab:9e:86:df:38:3f:cb:bc:0b:3e:37:d0:22:29:aa: f6:23:9f:d9:84:55:35:c9:1d:ed:77:6c:6f:88:a6: 1f:c3:3a:bc:ad:d3:6f:d9:3a:5f:a9:02:00:cb:86: 69:36:63:e9:2a:33:cf:c6:ad:e6:c4:6d:a9:2c:a3: d7:e7:56:44:21:fa:41:ca:14:b8:b7:8c:5c:4f:73: 75:23:2b:36:c8:4b:1b:c1:d8:fe:a1:c1:59:72:9b: 90:a6:52:53:ea:28:ac:01:ad:59:6d:44:e6:fa:7c: 49:0c:9f:dc:32:2f:8c:6a:42:67:00:77:6f:a9:4e: 23:4a:8d:e5:73:a4:a8:ca:6b:76:2f:54:8b:98:b1: 26:6b:6b:b3:68:fa:02:d4:d9:98:1f:55:2a:e3:97: ee:59:cd:d1:8a:dc:00:36:77:6a:c2:40:aa:56:88: 9e:42:b7:ee:e4:18:73:ab:e1:83:3d:19:bd:f4:11: 27:9c:03:ad:d9:11:07:1e:f5:a7:3e:7f:2b:9a:2d: a0:8d:ca:ad:c6:5e:b5:ff:df:83:9b:93:fb:6a:32: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:50:98:19:7D:C6:ED:B4:FA:82:9E:47:22:C4:8C:C9:B4:03:1B X509v3 Authority Key Identifier: keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e8:16:13:5e:b2:84:f4:4d:a4:7a:77:4f:39:a2:ef:5d:f4: 4c:6c:04:93:40:78:16:b0:21:a0:30:04:3e:ad:48:86:78:3d: 6a:89:bb:6e:c2:e8:6b:ed:31:d0:c1:4a:8d:1e:5b:2c:4b:92: 2d:30:c0:f2:76:99:a6:fa:62:56:5d:a2:27:10:58:d8:ab:8c: 87:7e:0d:8b:52:d8:3f:ed:07:f9:32:5a:6f:3a:2e:33:76:66: 96:d8:92:a1:04:0c:7f:a0:5f:84:e3:0e:53:a1:8b:d3:dd:b2: 5c:44:f0:bd:2f:6c:23:c1:e9:9a:c4:d8:71:38:a1:cf:76:1d: 17:d2:61:79:5f:1b:7b:0a:e0:f1:d3:a3:2a:68:23:ca:ed:c5: 3a:13:86:70:c1:43:f0:b6:e3:e1:c4:0a:17:05:47:26:00:0a: e1:aa:97:11:21:8e:ac:30:5c:27:98:3d:49:6b:e0:92:09:76: db:e7:39:81:fe:0c:73:bb:87:44:ef:5a:05:9c:3d:3e:41:c1: 92:e0:5c:1f:12:39:2a:a5:2f:5a:39:59:d6:79:b1:65:27:56: 8f:a1:a6:3d:dd:99:6d:b8:5a:ef:ad:b8:52:94:db:5a:f0:34: de:72:59:12:1b:c0:ba:6d:17:06:04:f2:e4:b8:ba:bf:9b:fc: b6:db:88:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3MNEhAF9GlPjr2y48eJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmQ0Yzc1Y2ViZTg5NjE0Y2YyZTdlMmU2MTRjMDM2ZjZm NTNlZTIwHhcNMjUxMjIwMjIwMDM5WhcNMjUxMjIxMjIwMDM5WjAzMTEwLwYDVQQD Eyg5YzY4NTA5ODE5N2RjNmVkYjRmYTgyOWU0NzIyYzQ4Y2M5YjQwMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDtsHQpAQwoLphVB2rPCp6zkb4xl wrChAXLKJwVBRzdB8jcOwcYMyiTnAyyrnobfOD/LvAs+N9AiKar2I5/ZhFU1yR3t d2xviKYfwzq8rdNv2TpfqQIAy4ZpNmPpKjPPxq3mxG2pLKPX51ZEIfpByhS4t4xc T3N1Iys2yEsbwdj+ocFZcpuQplJT6iisAa1ZbUTm+nxJDJ/cMi+MakJnAHdvqU4j So3lc6Soymt2L1SLmLEma2uzaPoC1NmYH1Uq45fuWc3RitwANndqwkCqVoieQrfu 5Bhzq+GDPRm99BEnnAOt2REHHvWnPn8rmi2gjcqtxl61/9+Dm5P7ajIQHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxoUJgZfcbttPqCnkcixIzJtAMbMB8GA1UdIwQY MBaAFNJtTHXOvolhTPLn4uYUwDb29T7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUt ODg5MzhiZDUzYzE2LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUtODg5MzhiZDUzYzE2 LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOgWE16y hPRNpHp3Tzmi7130TGwEk0B4FrAhoDAEPq1Ihng9aom7bsLoa+0x0MFKjR5bLEuS LTDA8naZpvpiVl2iJxBY2KuMh34Ni1LYP+0H+TJabzouM3ZmltiSoQQMf6BfhOMO U6GL092yXETwvS9sI8HpmsTYcTihz3YdF9JheV8bewrg8dOjKmgjyu3FOhOGcMFD 8Lbj4cQKFwVHJgAK4aqXESGOrDBcJ5g9SWvgkgl22+c5gf4Mc7uHRO9aBZw9PkHB kuBcHxI5KqUvWjlZ1nmxZSdWj6GmPd2Zbbha7624UpTbWvA03nJZEhvAum0XBgTy 5Li6v5v8ttuILg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:26:52 2025 by rpki-client