This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft File: miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json) Hash identifier: fqH+yoNRJIaTJvqSLcLD9rRwXhx/5Al8YiYChurzcN0= Subject key identifier: 52:7E:BA:02:C0:B0:F3:97:FE:07:AF:3C:F8:57:E5:94:F7:D1:6A:BE Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Certificate serial: 019AF12D2E5FDB0F27C40DF0805BB6030FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft Manifest number: 0657 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=) 2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=) 3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=) 4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=) 5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: LOub41tFAKLEeH33ZiPBEBBPKK8H//pjTV7tV8yVOYI=) 6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2e:5f:db:0f:27:c4:0d:f0:80:5b:b6:03:0f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=527eba02c0b0f397fe07af3cf857e594f7d16abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:e8:d0:bd:4e:16:85:d8:a9:0d:08:e5:1b: 1e:ab:c1:c5:78:7b:91:d1:93:95:dd:25:7a:5a:da: ef:2d:b4:68:12:ab:56:a7:0c:d8:94:50:6a:15:7d: d7:b9:d9:3a:76:38:ca:48:b4:94:24:29:f7:27:85: 9c:49:60:59:6c:dc:85:4e:24:1c:8b:ca:c5:ba:19: fb:ae:05:6e:53:bb:55:58:aa:e2:ca:05:c9:de:f7: 8a:4f:9c:64:4e:d7:6b:3d:24:9c:79:f2:0b:c1:b5: df:e8:82:a2:a5:74:20:95:73:a5:bf:46:c1:60:c7: c1:95:c1:a4:9e:aa:fa:d7:dd:82:a6:57:43:2c:d0: e1:ce:45:6f:aa:5d:07:13:87:89:32:2c:f3:d8:24: 29:11:6e:a8:1a:bc:79:07:ed:70:0b:8a:04:3c:40: 82:84:12:63:dd:43:15:a0:de:c9:97:2f:ba:6c:da: 2f:82:ab:e4:ca:b8:50:c3:a2:ca:e0:35:79:5e:f9: 01:9c:ea:69:f4:fe:99:d7:29:dd:78:e0:d6:bc:37: d6:47:82:f3:ec:e4:28:cb:36:bb:a7:e2:f4:a2:08: ce:cc:c2:bb:b4:1b:28:7f:39:47:62:e7:df:76:2e: 86:a6:13:66:f4:34:bb:11:07:0b:8f:cb:60:a0:28: 0d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:BA:02:C0:B0:F3:97:FE:07:AF:3C:F8:57:E5:94:F7:D1:6A:BE X509v3 Authority Key Identifier: keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7b:f5:99:85:5e:9a:56:75:0f:61:f2:93:c6:f6:a3:22:a8: 68:74:f9:8a:f1:90:a4:c6:3c:74:27:36:9a:b7:77:40:03:e3: f1:a3:00:83:07:56:03:e8:3e:b5:81:bf:eb:0f:a2:c4:76:aa: f0:ba:a0:46:e8:97:f1:97:25:81:59:b8:8b:da:29:db:4d:ac: 63:0c:c5:0f:56:76:54:c3:32:91:e9:b0:2f:1b:b7:f4:32:bd: d1:ae:96:57:1f:70:78:e1:86:88:74:b2:6d:26:41:b2:fa:e1: 47:58:fc:90:4b:d8:ba:c9:94:2f:ae:90:ff:97:4d:7a:d6:4f: 30:c9:b0:14:98:ca:a1:a5:be:17:d1:80:10:f7:48:ee:7e:a3: 98:13:d5:0e:bb:5e:16:a1:e6:b8:15:69:37:78:6f:76:79:34: 82:30:8d:6f:b7:6c:9e:7a:b3:7b:9e:e8:b2:38:77:ad:17:61: 42:91:83:67:57:d9:7c:7e:55:03:9d:58:91:a6:17:0a:f6:99: 59:04:e4:0c:3e:e8:28:fc:35:22:7e:8a:bf:33:1b:cb:2b:cd: a3:83:68:ca:85:67:3a:f2:be:54:c0:ba:98:be:99:84:ec:f3: 81:8e:6f:45:07:14:3e:a9:95:1a:72:46:e6:66:c3:9f:4c:2b: 2a:30:b5:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS5f2w8nxA3wgFu2Aw/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk ZmI5ZmMwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD Eyg1MjdlYmEwMmMwYjBmMzk3ZmUwN2FmM2NmODU3ZTU5NGY3ZDE2YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxLo0L1OFoXYqQ0I5Rseq8HFeHuR 0ZOV3SV6WtrvLbRoEqtWpwzYlFBqFX3Xudk6djjKSLSUJCn3J4WcSWBZbNyFTiQc i8rFuhn7rgVuU7tVWKriygXJ3veKT5xkTtdrPSScefILwbXf6IKipXQglXOlv0bB YMfBlcGknqr6192CpldDLNDhzkVvql0HE4eJMizz2CQpEW6oGrx5B+1wC4oEPECC hBJj3UMVoN7Jly+6bNovgqvkyrhQw6LK4DV5XvkBnOpp9P6Z1yndeODWvDfWR4Lz 7OQoyza7p+L0ogjOzMK7tBsofzlHYuffdi6GphNm9DS7EQcLj8tgoCgNxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ+ugLAsPOX/gevPPhX5ZT30Wq+MB8GA1UdIwQY MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt Mzg3OWJkNzAzOTQ2LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2 LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3v1mYVe mlZ1D2Hyk8b2oyKoaHT5ivGQpMY8dCc2mrd3QAPj8aMAgwdWA+g+tYG/6w+ixHaq 8LqgRuiX8ZclgVm4i9op202sYwzFD1Z2VMMykemwLxu39DK90a6WVx9weOGGiHSy bSZBsvrhR1j8kEvYusmUL66Q/5dNetZPMMmwFJjKoaW+F9GAEPdI7n6jmBPVDrte FqHmuBVpN3hvdnk0gjCNb7dsnnqze57osjh3rRdhQpGDZ1fZfH5VA51YkaYXCvaZ WQTkDD7oKPw1In6KvzMbyyvNo4NoyoVnOvK+VMC6mL6ZhOzzgY5vRQcUPqmVGnJG 5mbDn0wrKjC1oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:48 2025 by rpki-client