This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json) Hash identifier: PkGWwNYfjyqPzksKAmktNyNsDrjoJvAU9xdpLji2LHA= Subject key identifier: 0C:AB:9C:96:38:3F:1B:13:92:A1:C3:F5:63:5D:93:2F:3D:6B:BD:1B Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Certificate serial: 019AF12CEC23181F712D365396AE23C06D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=) 2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: uggg3owFhsG+H0F8Cz+nFxk4/2b+9H0P5M2MaSbjoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ec:23:18:1f:71:2d:36:53:96:ae:23:c0:6d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=0cab9c96383f1b1392a1c3f5635d932f3d6bbd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:6b:17:3c:47:b3:8a:8d:fd:6b:45:e5:7f: a0:6e:61:9d:0d:1d:51:1a:76:3d:6c:38:7f:0e:9c: 2c:a6:b3:de:8f:a8:f0:b2:a2:e8:ee:1e:2c:66:cc: c0:fc:12:d1:04:fc:cc:5f:f9:b1:1f:7a:a5:bd:d5: c4:e7:69:09:2e:07:36:7c:2d:d5:a1:59:d1:fb:da: 8d:d5:2b:85:bb:ca:b9:22:12:50:90:b5:d4:ad:54: c3:f0:68:d4:2d:e0:47:8d:16:f4:8b:7e:61:0b:38: 3d:0c:5b:fb:b3:c6:46:54:7f:e3:e5:9d:1b:5e:35: 72:b1:7f:c1:98:29:3d:58:ad:69:b6:04:4f:c1:3b: be:b8:b0:c1:18:c4:10:0b:9a:cb:47:ff:3b:8d:12: dd:56:f4:05:4c:c1:40:ef:74:8b:fb:e3:e7:11:0e: 32:3e:d0:24:44:84:ab:e8:d4:5d:35:93:c9:6b:a5: 14:75:d8:4e:97:de:e6:28:02:2b:4a:40:e2:b1:fe: 13:22:1e:a1:a0:4e:53:ea:f7:bb:b2:38:f9:6a:6f: f3:a9:cd:f8:4e:0b:dc:c3:15:1a:14:c5:de:53:5f: 99:70:58:76:6c:2a:b3:d2:39:dd:2d:bc:c3:31:6f: 80:6e:b7:7d:15:f9:ea:50:46:ad:9b:d9:25:c9:1e: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:9C:96:38:3F:1B:13:92:A1:C3:F5:63:5D:93:2F:3D:6B:BD:1B X509v3 Authority Key Identifier: keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:72:83:5c:7c:b0:db:ab:30:dc:86:b8:c4:9f:9f:8a:15: a0:d5:52:c5:89:10:08:c2:0e:51:35:3e:10:44:ec:66:00:2c: 76:f5:52:d7:41:ee:83:55:54:41:61:86:0d:59:6c:4f:3c:c9: 2b:d0:6d:8e:9d:83:9c:e7:32:74:dd:d9:e5:b9:7a:2c:f1:cd: f3:1a:88:97:9c:1b:3d:63:93:a4:31:cc:8c:6f:58:f9:23:a4: 83:88:8e:4a:69:99:a8:4f:a1:d3:72:35:d1:29:67:20:6f:f8: 20:19:80:fe:79:13:73:7f:61:86:28:5f:f6:b5:f2:c6:8d:e2: 13:ec:0f:7d:b9:98:a9:0f:6b:92:17:42:9c:be:b9:a3:9b:cc: ff:2c:2f:60:9d:49:a3:5b:db:0e:d0:f2:54:bd:f2:4d:f5:cb: 09:06:5a:8e:47:31:01:85:62:ff:c0:86:0b:3e:07:66:cc:13: 09:20:70:91:0f:ef:c8:f8:ec:0a:18:f4:57:52:44:18:45:1e: 0a:7d:21:4d:a0:82:ae:db:10:ac:6a:98:ce:a1:4b:c7:76:49: 02:01:20:28:1c:40:42:60:83:28:96:ad:a5:4a:ff:99:04:b0: b8:93:5d:91:71:b2:4d:a3:b3:63:39:58:9b:ac:34:5c:a4:2a: 3c:25:a2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOwjGB9xLTZTlq4jwG1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTc2ZWY0YWE0OThjMjE1MjRkZDdlZGFkMTZkZTFkM2Ri MDAyZTMwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD EygwY2FiOWM5NjM4M2YxYjEzOTJhMWMzZjU2MzVkOTMyZjNkNmJiZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujdrFzxHs4qN/WtF5X+gbmGdDR1R GnY9bDh/DpwsprPej6jwsqLo7h4sZszA/BLRBPzMX/mxH3qlvdXE52kJLgc2fC3V oVnR+9qN1SuFu8q5IhJQkLXUrVTD8GjULeBHjRb0i35hCzg9DFv7s8ZGVH/j5Z0b XjVysX/BmCk9WK1ptgRPwTu+uLDBGMQQC5rLR/87jRLdVvQFTMFA73SL++PnEQ4y PtAkRISr6NRdNZPJa6UUddhOl97mKAIrSkDisf4TIh6hoE5T6ve7sjj5am/zqc34 TgvcwxUaFMXeU1+ZcFh2bCqz0jndLbzDMW+Abrd9FfnqUEatm9klyR6/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyrnJY4PxsTkqHD9WNdky89a70bMB8GA1UdIwQY MBaAFJvnbvSqSYwhUk3X7a0W3h09sALjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgt OWRmMzcxMDljODFkLzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgtOWRmMzcxMDljODFk LzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPVyg1x8 sNurMNyGuMSfn4oVoNVSxYkQCMIOUTU+EETsZgAsdvVS10Hug1VUQWGGDVlsTzzJ K9Btjp2DnOcydN3Z5bl6LPHN8xqIl5wbPWOTpDHMjG9Y+SOkg4iOSmmZqE+h03I1 0SlnIG/4IBmA/nkTc39hhihf9rXyxo3iE+wPfbmYqQ9rkhdCnL65o5vM/ywvYJ1J o1vbDtDyVL3yTfXLCQZajkcxAYVi/8CGCz4HZswTCSBwkQ/vyPjsChj0V1JEGEUe Cn0hTaCCrtsQrGqYzqFLx3ZJAgEgKBxAQmCDKJatpUr/mQSwuJNdkXGyTaOzYzlY m6w0XKQqPCWiWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:29 2025 by rpki-client