This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json) Hash identifier: Z6dgHCQPkBa0MwdhDXTvuOQFTrZ8tvi+2fcM0cr9eDs= Subject key identifier: 7A:B4:82:2F:A2:A4:C8:F0:02:10:E8:68:A7:8E:E4:ED:64:C4:DC:0C Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019AF20911D28BD6BE47F7E8FDAF3CB45864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft Manifest number: 0F3A Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: 74i8adSuyk3kRHlH4ayLicT7xOo.roa (hash: Nfrv0YEiRjMeyhh89QiKjse1lGFwS8hysdJzu2cW8w4=) 2: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=) 3: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=) 4: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=) 5: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=) 6: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=) 7: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: JVjCzL9Qf4XLbrdfvcOeqVepzXPnMuySnHHdZ45lsII=) 8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=) 9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:11:d2:8b:d6:be:47:f7:e8:fd:af:3c:b4:58:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=7ab4822fa2a4c8f00210e868a78ee4ed64c4dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:b2:dc:9c:e6:df:fd:5d:d7:2f:14:d9:e3: fc:49:90:5a:98:1e:4a:3f:3c:1d:23:e7:d3:8f:14: bc:29:38:37:15:df:6b:bc:38:81:b3:c8:f7:2a:27: c8:c5:a8:3a:d4:16:17:1e:ee:a2:48:3f:7d:53:1c: 72:95:f9:5f:f1:74:b5:33:66:d4:05:a6:d9:9c:a4: 1b:b6:3b:9b:d0:17:cb:6c:4c:07:42:30:4d:b4:a8: be:a1:15:04:be:dd:6d:a7:aa:98:10:41:b6:06:b1: 4b:e4:e0:3b:24:eb:46:63:0b:5f:5c:0c:c9:8f:37: f3:ff:83:c2:56:06:cb:d5:1f:de:bb:e8:44:69:63: 74:44:0e:7b:06:ca:08:e8:56:62:1e:5f:ce:ae:71: 7b:e7:45:10:51:76:be:7a:c1:2b:1d:79:15:5d:31: 3f:99:6a:45:75:9a:fa:0b:08:de:01:0b:5d:85:f8: 1e:21:8b:79:d4:9e:85:d2:4e:06:39:54:41:b8:c7: 38:0d:7d:ea:3e:c1:eb:40:89:c0:20:ea:98:e0:06: 1c:fb:14:88:53:45:34:e5:eb:d9:cf:21:ab:80:8a: 77:97:64:15:05:27:6d:4e:e5:db:90:a9:79:e0:20: 11:e3:79:d3:77:05:83:27:e3:63:17:58:ff:53:74: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:82:2F:A2:A4:C8:F0:02:10:E8:68:A7:8E:E4:ED:64:C4:DC:0C X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:43:ea:e7:58:9f:37:58:a1:d4:08:19:ea:4d:86:15:9d: 80:7c:82:8b:c3:6b:d8:56:d8:07:84:05:3f:3a:26:fe:64:e8: ee:a9:2a:ce:1b:55:ed:54:12:db:c4:56:1f:2c:c1:69:f0:4f: 11:d3:b7:88:f6:1b:92:10:a4:77:b2:42:bf:f0:81:2c:fa:8b: 41:76:91:5f:98:d5:77:62:2e:c7:c2:04:63:14:57:e3:09:33: 08:a3:ae:aa:65:fc:2a:85:6e:8b:37:26:8e:e3:70:b4:c4:e4: 87:68:c0:4d:97:cf:70:da:93:2b:02:e4:07:46:ad:cb:6e:d4: 33:c6:55:24:21:79:0e:8e:13:35:95:07:c6:e6:7c:5a:90:0d: 00:d3:b5:c4:92:d1:ec:6c:33:d2:59:d5:ae:d5:93:45:2a:3b: fa:1d:98:f2:d0:49:96:65:20:19:12:77:e4:58:38:2d:a9:6e: 3d:cb:ed:31:34:4b:4b:1f:df:23:44:29:f7:b0:a8:11:62:58: e3:79:38:1d:d0:f1:83:2c:ce:fa:18:d7:d6:bf:df:df:53:68: 25:72:e1:17:a1:4e:6c:ee:c8:58:c4:76:bc:b2:88:67:6f:03: 06:cc:ca:32:4f:67:32:9a:8d:b2:b0:1d:8b:b4:d2:b6:01:c2: 02:2d:2f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRHSi9a+R/fo/a88tFhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg3YWI0ODIyZmEyYTRjOGYwMDIxMGU4NjhhNzhlZTRlZDY0YzRkYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Gy3Jzm3/1d1y8U2eP8SZBamB5K PzwdI+fTjxS8KTg3Fd9rvDiBs8j3KifIxag61BYXHu6iSD99Uxxylflf8XS1M2bU BabZnKQbtjub0BfLbEwHQjBNtKi+oRUEvt1tp6qYEEG2BrFL5OA7JOtGYwtfXAzJ jzfz/4PCVgbL1R/eu+hEaWN0RA57BsoI6FZiHl/OrnF750UQUXa+esErHXkVXTE/ mWpFdZr6CwjeAQtdhfgeIYt51J6F0k4GOVRBuMc4DX3qPsHrQInAIOqY4AYc+xSI U0U05evZzyGrgIp3l2QVBSdtTuXbkKl54CAR43nTdwWDJ+NjF1j/U3R1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq0gi+ipMjwAhDoaKeO5O1kxNwMMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggFD6udY nzdYodQIGepNhhWdgHyCi8Nr2FbYB4QFPzom/mTo7qkqzhtV7VQS28RWHyzBafBP EdO3iPYbkhCkd7JCv/CBLPqLQXaRX5jVd2Iux8IEYxRX4wkzCKOuqmX8KoVuizcm juNwtMTkh2jATZfPcNqTKwLkB0aty27UM8ZVJCF5Do4TNZUHxuZ8WpANANO1xJLR 7Gwz0lnVrtWTRSo7+h2Y8tBJlmUgGRJ35Fg4LaluPcvtMTRLSx/fI0Qp97CoEWJY 43k4HdDxgyzO+hjX1r/f31NoJXLhF6FObO7IWMR2vLKIZ28DBszKMk9nMpqNsrAd i7TStgHCAi0vvA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:23 2025 by rpki-client