This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft File: Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json) Hash identifier: HXud7thkoSEeji33+ABqqwp4kzBrqTYysDMenQFSrQM= Subject key identifier: 5B:17:A3:B8:7B:CB:92:B2:56:0F:F9:30:42:0B:43:25:2E:22:E8:AD Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF Certificate issuer: /CN=326f51ca23982103ffe34f9890d0b74e8fa781af Certificate serial: 019AF0BEEF297D17816F5AEF2BBA553063B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft Manifest number: 07C5 Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: 1NJY0/oW9I2fDBGfJ985AWb7G4y7zqgzqzb2dDGY05o=) 2: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (hash: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ef:29:7d:17:81:6f:5a:ef:2b:ba:55:30:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=5b17a3b87bcb92b2560ff930420b43252e22e8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:2c:39:45:85:2f:d2:c5:24:a1:6e:7c:92: a5:61:41:c3:c0:59:10:c6:1f:7b:34:42:38:a9:36: 8a:fc:3b:f0:42:a9:d0:99:af:b3:99:69:51:51:ad: cc:b6:e0:3b:86:e2:9d:44:d5:17:63:1c:00:2e:ed: 4b:28:63:6d:50:52:59:63:f3:a8:3f:1d:94:4d:97: 27:a6:10:4f:fe:e9:9e:fd:63:5f:d3:79:7e:a3:3a: f9:5d:8a:0b:66:2e:ad:57:3f:f7:ac:5d:2a:0c:4f: 35:54:10:91:99:98:80:84:9e:92:a4:de:27:8b:24: d5:15:55:f6:9b:61:61:c5:ba:fd:03:73:70:ba:92: 0e:9e:ad:a8:3f:4a:4a:29:60:7a:a8:13:2a:de:d8: c9:49:45:13:25:53:98:9b:46:ef:b6:3d:b2:e4:2e: 4d:ca:60:07:29:13:aa:72:de:8b:be:b6:88:9f:2d: 6c:1c:ff:b8:44:a7:71:43:01:30:0e:08:f6:34:b9: 3c:03:30:20:a7:67:08:a2:42:5d:bb:35:01:26:bf: 01:21:b2:12:fa:7c:51:61:ef:4b:02:d0:87:83:71: fd:d1:1e:61:22:9d:9a:05:7b:bf:ac:6f:1a:cd:40: 98:af:3c:57:98:f8:2d:90:ff:57:f0:29:b2:f4:e3: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:17:A3:B8:7B:CB:92:B2:56:0F:F9:30:42:0B:43:25:2E:22:E8:AD X509v3 Authority Key Identifier: keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:30:37:27:b9:fe:da:0c:45:d9:ad:7c:4f:5b:55:df:98:f9: c0:0e:f7:17:0e:bc:d0:ee:b9:51:e7:9b:99:0e:d3:46:f7:db: f8:5d:a8:62:a8:8a:d8:76:b6:5c:bd:1b:15:32:dd:39:1a:5a: 80:3a:58:e0:52:00:f5:9a:ef:0a:c6:46:30:3e:4f:b7:b9:6d: ab:bc:2a:ce:c6:02:76:c6:2f:ef:20:88:22:9b:5f:af:5b:4d: 39:32:ac:a5:14:40:06:04:05:c5:ee:99:b6:c5:d7:ff:85:8b: 09:53:fb:9f:3d:ed:86:c4:24:ea:9f:27:73:6d:48:9b:bb:0f: 90:9d:e3:e0:16:16:6e:20:39:38:d6:d2:8d:1e:12:15:62:04: d8:ce:f4:cf:f1:b8:c9:d1:c4:b5:ac:40:0a:f1:3b:70:c4:d6: c2:a9:32:fc:5a:7b:25:32:08:15:06:25:3e:a8:dc:85:cc:c0: d4:66:d9:98:aa:36:6c:49:c1:8c:49:e8:e2:75:ee:df:ec:84: 43:25:d6:dc:3e:db:4a:19:63:02:46:57:7b:49:76:74:8d:5e: 02:78:f3:30:ef:c8:6c:ab:5c:3e:90:f6:55:b5:e6:c6:7d:e0: 60:42:b7:79:bf:8c:40:61:14:b6:a0:e2:df:7c:95:2b:ea:12: 0e:fe:e5:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu8pfReBb1rvK7pVMGO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNmY1MWNhMjM5ODIxMDNmZmUzNGY5ODkwZDBiNzRlOGZh NzgxYWYwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD Eyg1YjE3YTNiODdiY2I5MmIyNTYwZmY5MzA0MjBiNDMyNTJlMjJlOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAAsOUWFL9LFJKFufJKlYUHDwFkQ xh97NEI4qTaK/DvwQqnQma+zmWlRUa3MtuA7huKdRNUXYxwALu1LKGNtUFJZY/Oo Px2UTZcnphBP/ume/WNf03l+ozr5XYoLZi6tVz/3rF0qDE81VBCRmZiAhJ6SpN4n iyTVFVX2m2Fhxbr9A3NwupIOnq2oP0pKKWB6qBMq3tjJSUUTJVOYm0bvtj2y5C5N ymAHKROqct6LvraIny1sHP+4RKdxQwEwDgj2NLk8AzAgp2cIokJduzUBJr8BIbIS +nxRYe9LAtCHg3H90R5hIp2aBXu/rG8azUCYrzxXmPgtkP9X8Cmy9OMtdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsXo7h7y5KyVg/5MEILQyUuIuitMB8GA1UdIwQY MBaAFDJvUcojmCED/+NPmJDQt06Pp4GvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYt OTY2ZmE5NmJlZmYyLzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYtOTY2ZmE5NmJlZmYy LzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTA3J7n+ 2gxF2a18T1tV35j5wA73Fw680O65UeebmQ7TRvfb+F2oYqiK2Ha2XL0bFTLdORpa gDpY4FIA9ZrvCsZGMD5Pt7ltq7wqzsYCdsYv7yCIIptfr1tNOTKspRRABgQFxe6Z tsXX/4WLCVP7nz3thsQk6p8nc21Im7sPkJ3j4BYWbiA5ONbSjR4SFWIE2M70z/G4 ydHEtaxACvE7cMTWwqky/Fp7JTIIFQYlPqjchczA1GbZmKo2bEnBjEno4nXu3+yE QyXW3D7bShljAkZXe0l2dI1eAnjzMO/IbKtcPpD2VbXmxn3gYEK3eb+MQGEUtqDi 33yVK+oSDv7l0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:51:37 2025 by rpki-client