This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json) Hash identifier: K64Iyl6v2ePTOYlGr9Enijc+I7HXh7KCYhPZNpLjjfE= Subject key identifier: D0:4A:28:F4:20:0F:8B:53:AC:C2:4E:12:53:15:EF:A2:F2:0E:D8:33 Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Certificate serial: 019AF31D023D31D63F41A6D617C9EDA6C7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=) 2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=) 3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: cOXDPOxLf6vCrasroNywpeH9ofj4lxOsUgA2Pzo8awo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:02:3d:31:d6:3f:41:a6:d6:17:c9:ed:a6:c7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=d04a28f4200f8b53acc24e125315efa2f20ed833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:7f:cd:ef:71:73:0e:20:c1:c2:14:10:28: ff:7d:6e:7a:d3:ec:3a:ac:3d:ce:c8:65:40:6c:80: 17:37:e9:df:2d:a7:b7:7c:7b:05:2f:08:1b:58:7e: d5:9f:a6:83:77:56:b1:04:54:19:cb:aa:41:33:4f: 39:11:4d:9a:2d:6a:e9:49:f9:00:f2:3d:ab:06:35: 7e:be:d2:41:96:6e:48:04:be:4b:3c:bb:74:1b:27: 57:98:4a:b4:76:86:db:d3:7b:a1:a8:72:9f:82:d3: ad:d0:66:fd:f4:5e:dc:db:4a:a9:19:13:20:c7:6c: 58:0c:fc:5b:21:0b:5e:56:c8:e9:0d:dc:b9:7e:bc: 34:62:8e:b4:db:d1:af:1f:ed:5e:3c:37:d0:85:54: 6b:d4:47:a8:bc:10:05:46:87:75:16:f6:20:04:aa: 8c:c1:33:9f:93:92:7b:7a:97:a6:f1:54:cc:7d:39: 61:b5:4c:2a:a3:14:ba:9f:ae:de:e3:82:cc:ac:da: 65:ba:01:b3:e1:d0:19:48:23:5b:7c:35:ee:46:32: 6d:42:d7:b5:87:28:b6:1a:0c:a5:3a:9e:49:bd:eb: ad:d4:05:a0:27:2f:ef:23:88:86:98:ca:19:7e:0f: 4a:55:fc:29:de:a1:9b:d2:61:ec:5b:30:72:61:3d: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4A:28:F4:20:0F:8B:53:AC:C2:4E:12:53:15:EF:A2:F2:0E:D8:33 X509v3 Authority Key Identifier: keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a6:79:cd:a0:8b:b2:f6:de:12:51:72:8d:ae:d5:bc:55:0a: f5:92:78:c4:f7:a8:63:b7:a3:64:19:6f:b6:82:65:85:22:8a: 50:3a:bd:d6:aa:79:15:45:7b:56:08:0d:49:08:51:70:10:a7: 23:31:d0:0c:62:68:39:a0:cc:ca:c5:18:c5:fe:34:55:ff:92: 89:c1:6f:95:09:58:ed:97:b1:20:c0:4d:23:e9:75:45:2c:23: 0c:80:59:86:22:2f:24:84:a7:88:67:66:67:d0:97:22:d7:de: b7:81:1c:04:d1:ed:cb:21:5c:af:c6:e9:8b:74:e8:27:fc:0f: 9e:07:01:49:54:3c:0e:05:25:99:e1:58:67:2b:dd:75:16:fe: 5d:0c:2c:d3:2b:23:da:d4:64:67:33:47:af:84:be:89:f5:e3: 15:6b:78:11:fb:87:b3:f1:ff:60:81:82:23:bd:05:cf:0c:5e: 64:80:99:e4:41:74:05:cf:a3:6d:6e:67:5d:99:ee:44:07:66: 8f:44:ce:fd:87:06:c0:21:e6:1d:42:0b:da:a6:78:ed:7b:fb: 3c:a0:2e:46:89:70:64:11:8d:c3:57:94:5a:bb:92:84:74:b1: 96:57:b2:e9:f2:b4:3b:e2:99:e8:e1:d7:6c:26:be:71:ff:40: e4:ce:18:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQI9MdY/QabWF8ntpsfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk ZWU2MjUwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD EyhkMDRhMjhmNDIwMGY4YjUzYWNjMjRlMTI1MzE1ZWZhMmYyMGVkODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO9/ze9xcw4gwcIUECj/fW560+w6 rD3OyGVAbIAXN+nfLae3fHsFLwgbWH7Vn6aDd1axBFQZy6pBM085EU2aLWrpSfkA 8j2rBjV+vtJBlm5IBL5LPLt0GydXmEq0dobb03uhqHKfgtOt0Gb99F7c20qpGRMg x2xYDPxbIQteVsjpDdy5frw0Yo6029GvH+1ePDfQhVRr1EeovBAFRod1FvYgBKqM wTOfk5J7epem8VTMfTlhtUwqoxS6n67e44LMrNplugGz4dAZSCNbfDXuRjJtQte1 hyi2GgylOp5Jveut1AWgJy/vI4iGmMoZfg9KVfwp3qGb0mHsWzByYT2Z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBKKPQgD4tTrMJOElMV76LyDtgzMB8GA1UdIwQY MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2 LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaZ5zaCL svbeElFyja7VvFUK9ZJ4xPeoY7ejZBlvtoJlhSKKUDq91qp5FUV7VggNSQhRcBCn IzHQDGJoOaDMysUYxf40Vf+SicFvlQlY7ZexIMBNI+l1RSwjDIBZhiIvJISniGdm Z9CXItfet4EcBNHtyyFcr8bpi3ToJ/wPngcBSVQ8DgUlmeFYZyvddRb+XQws0ysj 2tRkZzNHr4S+ifXjFWt4EfuHs/H/YIGCI70FzwxeZICZ5EF0Bc+jbW5nXZnuRAdm j0TO/YcGwCHmHUIL2qZ47Xv7PKAuRolwZBGNw1eUWruShHSxlley6fK0O+KZ6OHX bCa+cf9A5M4Y4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:52 2025 by rpki-client