This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json) Hash identifier: gvZ4Nme0TA0C8tn3/sbYqqMekJEsOehQXttagysFgRI= Subject key identifier: EB:DD:51:D9:EC:FA:8D:60:CE:14:74:46:AC:FD:70:09:26:5B:01:55 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019AF2098D4C8E46CB9E7B1A738364450828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft Manifest number: 10A0 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: 1kvPDiaai769V2yTG_UDq-gB8hI.roa (hash: ihWbGOHePlUGrVYysYB0fMUNjr8edNlVyE2WAHzUr44=) 2: 22lLDFU8nwc93-jfzNMpRH5sgrw.roa (hash: +NBjFjyK6WbMQY3zkQQYj9FPVF3OF9alYPIlrwi+mjY=) 3: GE2ARU4cDdNn6enc-akT7XWRQlE.roa (hash: PcLtWTiOiUpmjvYxdyMX87WTs2nrby8CwES10rXpDvs=) 4: IPImfFSLr48PnkrmzC6ajFmIFUc.roa (hash: LSFbNNnWrIkDZvjlyfjRLLzoDQQbky2pRfDTNEQe95c=) 5: _B8GwBiTFdIK4J8SxVFnKGjeQB4.roa (hash: Uz7SoPbGR/+GgXVRcIAynbR4wHfGxFEdNa8TRfSCHnE=) 6: cPYsRSNSYwvq0Z84Mqzu11tyspY.roa (hash: 7w/JKo/QpTGbOA4TgQ+zRI1bBx4gqPGIhie45CT52Rc=) 7: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: +8aNdhGrXBNT2MP8E58zt6gdzjxVbTHn79y3iplME1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8d:4c:8e:46:cb:9e:7b:1a:73:83:64:45:08:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=ebdd51d9ecfa8d60ce147446acfd7009265b0155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:6c:cb:21:95:44:59:e8:fb:44:25:9a:97: ef:1d:93:0f:49:e9:49:b6:f1:2b:8b:e2:09:b6:83: 14:15:da:c9:8c:ae:8c:19:70:cf:41:99:4d:3e:b3: 6b:77:21:c9:05:ca:08:d4:d8:7e:47:e3:ab:c6:be: 21:3c:41:30:e3:3a:f4:aa:c6:3a:ef:f3:6d:72:95: 70:33:ce:65:15:0a:8a:04:d1:3a:a3:bd:10:01:17: 3f:b1:0d:b4:38:31:05:0b:1b:c5:f5:dd:20:20:0b: ae:a9:81:c1:31:ad:0e:d8:60:56:0a:05:26:bf:af: 3e:0e:b3:0b:bf:11:ba:6d:c2:96:50:18:59:e4:73: 00:e1:d0:c1:e7:5a:9f:52:45:0d:02:32:0e:d0:8f: 5b:55:e2:18:de:ef:6b:95:85:c8:0c:e1:c9:63:45: d1:95:02:b5:af:5b:7c:88:fa:b4:12:32:d6:42:cc: 34:f6:f7:2f:b9:18:b8:f6:5a:59:d2:f1:cf:ad:dc: f3:4d:d2:6b:64:06:ba:37:ac:3b:0a:ef:96:1c:db: 67:e3:37:50:e0:07:18:93:e7:31:1b:ee:64:7a:e1: 6b:46:b5:d1:71:77:6d:bd:cd:ae:92:9e:3b:bf:c2: 9f:4d:38:d9:53:46:ad:97:50:d7:90:cb:c4:9e:de: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:51:D9:EC:FA:8D:60:CE:14:74:46:AC:FD:70:09:26:5B:01:55 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:52:f4:87:3a:bc:7c:05:6b:ea:99:79:0a:ed:0b:61:2b: b6:0d:c2:25:65:d7:79:bb:7d:f4:43:78:fc:12:fb:ce:57:ee: 7a:d3:da:19:fd:1d:2e:04:d5:b6:cc:b3:e2:5f:b6:d7:d8:34: a8:cb:39:0b:1b:70:4c:30:20:cd:21:3a:1c:b2:3e:ec:03:c6: e6:64:7c:a8:5d:14:12:d3:28:b5:ef:27:7c:35:46:77:fe:e2: c3:93:25:18:a1:5e:fd:8a:4f:62:e3:31:1c:0c:2d:60:0c:be: 73:23:16:f0:ef:d4:d5:c2:4a:d6:48:48:7c:5b:90:4a:22:b8: 9c:17:0f:44:79:be:03:ae:41:7b:22:6d:80:d9:fd:65:48:4b: a6:75:b2:47:20:7b:13:31:71:69:fd:98:00:c7:5a:83:01:55: 8a:0a:51:ee:c8:ca:57:f1:28:7f:99:9c:7e:55:8e:ce:4a:1b: 66:73:ed:f8:7d:9c:be:11:6d:68:73:f2:b0:55:84:0a:09:96: 3b:aa:9e:a4:48:cd:10:fd:90:5b:9c:c2:e9:20:56:8d:78:4f: 91:8c:94:42:11:05:84:ec:d3:0e:22:49:dd:ac:06:b1:8b:c3: 04:8c:e4:80:d1:2d:86:cb:dc:35:9b:0e:a8:41:2a:c9:26:ba: 56:51:d6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY1MjkbLnnsac4NkRQgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD EyhlYmRkNTFkOWVjZmE4ZDYwY2UxNDc0NDZhY2ZkNzAwOTI2NWIwMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iVsyyGVRFno+0QlmpfvHZMPSelJ tvEri+IJtoMUFdrJjK6MGXDPQZlNPrNrdyHJBcoI1Nh+R+Orxr4hPEEw4zr0qsY6 7/NtcpVwM85lFQqKBNE6o70QARc/sQ20ODEFCxvF9d0gIAuuqYHBMa0O2GBWCgUm v68+DrMLvxG6bcKWUBhZ5HMA4dDB51qfUkUNAjIO0I9bVeIY3u9rlYXIDOHJY0XR lQK1r1t8iPq0EjLWQsw09vcvuRi49lpZ0vHPrdzzTdJrZAa6N6w7Cu+WHNtn4zdQ 4AcYk+cxG+5keuFrRrXRcXdtvc2ukp47v8KfTTjZU0atl1DXkMvEnt5P3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvdUdns+o1gzhR0Rqz9cAkmWwFVMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/RS9Ic6 vHwFa+qZeQrtC2Ertg3CJWXXebt99EN4/BL7zlfuetPaGf0dLgTVtsyz4l+219g0 qMs5CxtwTDAgzSE6HLI+7APG5mR8qF0UEtMote8nfDVGd/7iw5MlGKFe/YpPYuMx HAwtYAy+cyMW8O/U1cJK1khIfFuQSiK4nBcPRHm+A65BeyJtgNn9ZUhLpnWyRyB7 EzFxaf2YAMdagwFVigpR7sjKV/Eof5mcflWOzkobZnPt+H2cvhFtaHPysFWECgmW O6qepEjNEP2QW5zC6SBWjXhPkYyUQhEFhOzTDiJJ3awGsYvDBIzkgNEthsvcNZsO qEEqySa6VlHWrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:31 2025 by rpki-client