This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json) Hash identifier: T4Qks8j7H52Bf6djagrnbOUnpR0bc/DL4HXbrlMXZ/4= Subject key identifier: 5C:31:8B:9A:A5:1D:80:2D:FE:38:09:B0:AD:4D:69:64:84:0A:DC:DC Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019AF0F5F52480B89B6B9A5899046E75590F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft Manifest number: 0FB1 Signing time: Sat 06 Dec 2025 00:00:42 +0000 Manifest this update: Sat 06 Dec 2025 00:00:42 +0000 Manifest next update: Sun 07 Dec 2025 00:00:42 +0000 Files and hashes: 1: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=) 2: _RG38RYDV8XCGP63JRH0IruOPOQ.roa (hash: sUnqtqAeRsj4aEysWIOSTKFJQIMojCeLnix7ODtsEOY=) 3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: g5p6T4AAsFIxUWRwbVInKxUV5IZ/iKcOlXz1xRzPprk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f5:24:80:b8:9b:6b:9a:58:99:04:6e:75:59:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Dec 6 00:00:42 2025 GMT Not After : Dec 7 00:00:42 2025 GMT Subject: CN=5c318b9aa51d802dfe3809b0ad4d6964840adcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:36:ca:1e:19:75:06:76:ca:22:51:ac:52: fe:61:68:b0:bb:1c:98:54:31:72:64:55:06:34:85: 30:47:24:2c:f4:74:73:1c:e0:c6:94:c4:71:82:7b: 25:70:7c:d8:7a:bc:12:56:1b:45:d8:43:cd:f7:ed: 6b:cd:b3:1b:0d:c4:4f:2d:2f:de:42:f6:ea:71:46: dc:08:86:d3:fb:43:46:b1:7f:97:20:c4:73:8e:5b: 27:94:90:26:dd:d1:b1:54:c0:02:b1:2a:60:a7:6e: 65:97:8e:c1:e8:c9:ef:ca:60:88:79:f3:43:aa:c7: b3:65:fb:5b:98:a2:8f:ba:cc:9e:2f:92:a1:1d:ed: a4:5f:a3:c4:34:91:38:d1:c6:0c:2c:81:97:0b:0d: e9:50:66:6e:59:48:cb:b8:df:70:eb:3e:c2:49:c4: f7:10:7c:30:68:5d:f8:06:47:b1:5e:07:4f:68:77: f1:63:d4:0f:cd:90:ed:b6:1b:98:ea:53:ff:5c:0c: 7e:5b:85:5c:aa:77:96:9e:7e:47:ce:2f:c9:a6:99: 39:db:15:0f:cd:19:51:b6:f2:17:86:da:9f:21:ba: 46:3a:d0:d5:ee:75:5f:40:a0:0e:84:be:b9:bb:13: 62:a3:53:b4:b5:9f:61:92:fe:29:36:0b:65:2c:98: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:8B:9A:A5:1D:80:2D:FE:38:09:B0:AD:4D:69:64:84:0A:DC:DC X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:13:4a:30:33:69:8a:a1:40:5b:8d:6d:e1:d0:c2:6b:33:41: 6e:e4:5f:48:34:19:e8:c5:d0:31:98:f8:ba:76:d2:54:37:ed: c2:35:0f:dc:20:40:6c:e3:bc:8e:50:43:38:a0:17:7c:71:f0: 33:6c:e4:e0:de:e8:67:30:9f:b3:42:dd:ec:cd:52:1f:5d:74: 7a:9f:8b:68:a0:46:4f:b2:fd:07:81:ce:ac:8a:9d:52:d8:41: 5c:96:b2:95:df:34:97:5e:77:9a:87:cb:c2:89:62:64:e2:51: c0:14:98:d6:47:b4:1e:25:be:dc:a7:67:07:b0:c0:11:1c:36: 24:9e:57:dd:f5:94:32:3f:b7:c6:d9:3d:8d:28:a7:9a:9d:35: d2:9a:e7:60:bf:c0:64:09:cc:0a:a3:49:5f:03:a0:c8:72:16: c9:cc:41:bf:5c:79:a1:e4:3a:d9:34:c1:e1:c3:70:5a:07:8a: 45:64:62:bc:1e:53:1b:e2:0a:28:f0:86:cc:ba:2a:0a:f4:07: b0:fc:f7:bd:de:ad:da:b2:14:ff:7f:5a:c7:82:f7:29:e2:ff: a6:80:92:f6:09:52:72:0f:82:b0:f5:79:67:39:8b:87:af:41: c3:07:bf:75:e5:da:fd:ef:d9:22:5d:4e:2b:5e:34:f3:a4:b8: 45:b8:ad:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fUkgLiba5pYmQRudVkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjUxMjA2MDAwMDQyWhcNMjUxMjA3MDAwMDQyWjAzMTEwLwYDVQQD Eyg1YzMxOGI5YWE1MWQ4MDJkZmUzODA5YjBhZDRkNjk2NDg0MGFkY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjY2yh4ZdQZ2yiJRrFL+YWiwuxyY VDFyZFUGNIUwRyQs9HRzHODGlMRxgnslcHzYerwSVhtF2EPN9+1rzbMbDcRPLS/e QvbqcUbcCIbT+0NGsX+XIMRzjlsnlJAm3dGxVMACsSpgp25ll47B6MnvymCIefND qsezZftbmKKPusyeL5KhHe2kX6PENJE40cYMLIGXCw3pUGZuWUjLuN9w6z7CScT3 EHwwaF34BkexXgdPaHfxY9QPzZDtthuY6lP/XAx+W4VcqneWnn5Hzi/Jppk52xUP zRlRtvIXhtqfIbpGOtDV7nVfQKAOhL65uxNio1O0tZ9hkv4pNgtlLJi7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwxi5qlHYAt/jgJsK1NaWSECtzcMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRNKMDNp iqFAW41t4dDCazNBbuRfSDQZ6MXQMZj4unbSVDftwjUP3CBAbOO8jlBDOKAXfHHw M2zk4N7oZzCfs0Ld7M1SH110ep+LaKBGT7L9B4HOrIqdUthBXJayld80l153mofL woliZOJRwBSY1ke0HiW+3KdnB7DAERw2JJ5X3fWUMj+3xtk9jSinmp010prnYL/A ZAnMCqNJXwOgyHIWycxBv1x5oeQ62TTB4cNwWgeKRWRivB5TG+IKKPCGzLoqCvQH sPz3vd6t2rIU/39ax4L3KeL/poCS9glScg+CsPV5ZzmLh69Bwwe/deXa/e/ZIl1O K14086S4Rbit7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:41 2025 by rpki-client