This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft File: MmHv5idxJgTzW5rZzL8DaGlfUBM.mft (raw, json) Hash identifier: fnrKmedTElMYmMe9bSvmUmmyFJLuxSvoLyKPsRlIWUs= Subject key identifier: 85:97:30:98:D4:02:63:5D:59:DD:D3:31:F6:03:09:14:41:91:B0:27 Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13 Certificate issuer: /CN=3261efe627712604f35b9ad9ccbf0368695f5013 Certificate serial: 019AF0BF34C265D08650BA5D5869BE1E8074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft Manifest number: 01A9 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: MmHv5idxJgTzW5rZzL8DaGlfUBM.crl (hash: SmRZTJ7oNi2/gKh2Jghkj25Vm0SPFWlSB+HmUi59KqU=) 2: YGuDE3vatbpuiraxDUsEQP0I-8M.roa (hash: oWCmcqNYGbhIxxvnhOzPFCagvtC48p+eG4AMg8r9Xn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:34:c2:65:d0:86:50:ba:5d:58:69:be:1e:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013 Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=85973098d402635d59ddd331f60309144191b027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:db:29:b9:61:73:13:04:2e:9b:e0:7b:c6: 0d:1a:71:9d:49:6d:3f:4f:f8:d2:9c:98:f4:b9:b1: 73:90:a9:51:0a:00:04:b4:d0:73:b4:82:2e:d1:84: c0:d8:10:39:b5:14:83:fe:bf:97:d5:5e:bc:e6:c4: 74:a4:c8:dd:a9:03:ce:2e:7a:e3:32:de:a9:b5:4b: 13:ba:90:38:9f:e0:2a:25:c8:8b:e6:e4:a2:90:92: 9a:ce:b3:e1:18:48:4c:4f:62:b7:33:29:b9:19:cc: bd:97:18:42:b5:4d:dc:a5:4f:0f:d8:bd:f0:b7:3d: 35:6f:c2:b0:2a:46:f9:dd:1b:c2:02:85:97:0f:3d: e2:4c:ba:22:09:1d:6c:86:28:98:a5:de:20:18:03: 06:78:5d:61:8a:d4:94:a3:92:a9:7b:1d:da:58:c2: e0:74:0a:52:b3:5f:a0:ff:95:d5:01:6c:cd:91:32: 14:ed:49:38:b4:c8:ee:f2:df:0d:d6:4d:6b:0f:91: c2:ec:99:26:4f:0a:da:b0:39:83:f2:b5:b1:41:a8: 19:8a:37:81:28:fc:96:72:9d:91:7a:31:75:69:e2: 75:30:d6:33:ae:e2:d0:f8:16:fc:dc:a4:52:66:a5: 32:ad:cd:cd:3e:71:8b:07:27:70:15:2e:6e:57:5c: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:30:98:D4:02:63:5D:59:DD:D3:31:F6:03:09:14:41:91:B0:27 X509v3 Authority Key Identifier: keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ba:d6:20:8a:f5:d8:33:65:90:d1:14:d0:59:52:e6:56:08: de:df:52:83:40:f4:88:08:60:ec:da:db:f1:f6:75:05:53:5a: 2a:8e:e7:36:b3:d0:c2:5e:5b:f2:7f:4e:8e:04:91:67:86:32: d5:7d:a4:9b:b3:ef:cc:cb:85:05:60:96:b7:c8:43:ff:3e:df: 66:de:8d:54:7a:aa:6b:19:e2:fb:bb:f4:99:5c:f6:2c:b3:49: 0d:b6:c8:f8:d5:00:35:e4:7e:f8:3c:a5:83:9b:4c:09:3b:db: 24:5e:ee:9a:3f:fe:dd:d1:7e:aa:1d:39:b4:63:5c:f3:17:a8: bd:3a:2f:49:54:35:83:bc:5f:e0:c6:be:0d:53:f4:7f:b2:b3: 44:99:ee:2c:67:d0:fe:a7:0b:15:24:0c:ac:48:07:28:1c:5a: 94:ac:4a:94:f2:3e:e0:4f:d5:d7:4c:6c:84:fe:83:a9:06:49: b6:a5:d7:82:0b:12:a1:f1:4a:e0:c6:4a:2d:af:60:e9:b5:5f: 11:5f:bc:2f:3b:26:32:b8:3d:b8:08:d4:a4:af:89:e0:96:b4: 27:60:71:ea:81:e2:98:c4:9f:47:f2:08:5c:81:c3:40:7f:dc: ef:ed:14:cc:89:14:e4:b3:a2:d3:67:79:7e:89:a2:0c:47:94: 96:4f:69:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzTCZdCGULpdWGm+HoB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjFlZmU2Mjc3MTI2MDRmMzViOWFkOWNjYmYwMzY4Njk1 ZjUwMTMwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD Eyg4NTk3MzA5OGQ0MDI2MzVkNTlkZGQzMzFmNjAzMDkxNDQxOTFiMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCfbKblhcxMELpvge8YNGnGdSW0/ T/jSnJj0ubFzkKlRCgAEtNBztIIu0YTA2BA5tRSD/r+X1V685sR0pMjdqQPOLnrj Mt6ptUsTupA4n+AqJciL5uSikJKazrPhGEhMT2K3Mym5Gcy9lxhCtU3cpU8P2L3w tz01b8KwKkb53RvCAoWXDz3iTLoiCR1shiiYpd4gGAMGeF1hitSUo5Kpex3aWMLg dApSs1+g/5XVAWzNkTIU7Uk4tMju8t8N1k1rD5HC7JkmTwrasDmD8rWxQagZijeB KPyWcp2RejF1aeJ1MNYzruLQ+Bb83KRSZqUyrc3NPnGLBydwFS5uV1z+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWXMJjUAmNdWd3TMfYDCRRBkbAnMB8GA1UdIwQY MBaAFDJh7+YncSYE81ua2cy/A2hpX1ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1IdjVpZHhKZ1R6VzVyWnpMOERhR2xmVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wZGUzOGMtYmFhOS00MDg3LTliZDUt NzU3Y2IyNzBkNGMyLzEvTW1IdjVpZHhKZ1R6VzVyWnpMOERhR2xmVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wZGUzOGMtYmFhOS00MDg3LTliZDUtNzU3Y2IyNzBkNGMy LzEvTW1IdjVpZHhKZ1R6VzVyWnpMOERhR2xmVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrrWIIr1 2DNlkNEU0FlS5lYI3t9Sg0D0iAhg7Nrb8fZ1BVNaKo7nNrPQwl5b8n9OjgSRZ4Yy 1X2km7PvzMuFBWCWt8hD/z7fZt6NVHqqaxni+7v0mVz2LLNJDbbI+NUANeR++Dyl g5tMCTvbJF7umj/+3dF+qh05tGNc8xeovTovSVQ1g7xf4Ma+DVP0f7KzRJnuLGfQ /qcLFSQMrEgHKBxalKxKlPI+4E/V10xshP6DqQZJtqXXggsSofFK4MZKLa9g6bVf EV+8LzsmMrg9uAjUpK+J4Ja0J2Bx6oHimMSfR/IIXIHDQH/c7+0UzIkU5LOi02d5 fomiDEeUlk9pGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:21 2025 by rpki-client