This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft File: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json) Hash identifier: dpd3b7pGcgas1AhtQtBB391lFJ9TGAeiMnIE6l4ysrI= Subject key identifier: 8C:DF:B7:BB:5E:A5:8D:D7:24:40:4D:84:B6:6B:BC:40:91:AA:CA:84 Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7 Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7 Certificate serial: 019AF31D4C50955428CD74F286BE30ED9EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: OpPpxUjjJRbQSkZ5yK3fu3iEhS4.roa (hash: APIMRZhycs7ZGgKvvm0YHWiJuJg7Ia1Dh+8uoSTLKNA=) 2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: sC4wLd1vthUDyl6cKOpBGmOYgierMgneT0Afxa/pB88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4c:50:95:54:28:cd:74:f2:86:be:30:ed:9e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7 Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=8cdfb7bb5ea58dd724404d84b66bbc4091aaca84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:a0:4e:35:c6:c4:49:1f:d9:79:26:77:c6: 45:ec:a7:3c:8f:30:9c:3c:3a:91:e5:55:fb:e6:70: 27:f1:8c:90:62:34:2c:9b:75:e2:8c:e5:71:66:d8: d7:14:3c:f9:68:c1:b4:0e:c9:56:2f:81:34:7d:d9: 82:26:18:0d:e2:cc:18:1e:fe:51:41:61:53:eb:78: 41:1f:3f:3e:ba:72:ac:de:bc:b7:a6:da:5a:88:a3: 74:a1:1a:e0:75:bd:92:e9:81:e9:6b:5b:b2:ee:28: bc:a6:fd:a1:99:55:60:74:b1:b0:33:4e:81:aa:77: b7:1f:bf:8a:21:b3:f8:68:df:18:7a:21:2a:93:2e: 3e:7a:11:02:2d:fb:81:dc:04:fe:6f:39:ef:08:e9: ce:7a:9f:b8:2f:a8:44:6c:bc:0d:00:05:f5:96:1a: 26:dc:27:93:b1:73:ee:07:92:94:43:2c:0c:d8:b2: c8:e1:29:68:11:71:cc:7b:fa:ba:02:f4:d1:cd:6d: b7:51:25:b4:bd:40:0d:53:94:3c:7d:be:8d:8f:fd: 76:6c:a9:0a:2e:fa:98:3c:d5:e1:79:61:33:9c:f5: d0:c3:f0:10:b8:5f:5d:1f:68:76:d3:93:3e:8e:f8: 87:81:04:08:5a:f6:3c:19:98:19:ae:e6:84:4c:22: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:B7:BB:5E:A5:8D:D7:24:40:4D:84:B6:6B:BC:40:91:AA:CA:84 X509v3 Authority Key Identifier: keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:47:85:23:f1:0a:ea:97:ce:f2:b9:7c:68:9a:20:91:13: d1:59:22:0c:18:92:c9:b6:2a:68:92:b7:2d:ea:78:e6:bd:62: 2f:cf:75:7f:db:d1:5f:61:a9:08:41:20:9f:e6:28:71:6f:53: 35:56:58:08:85:24:53:38:2a:3f:a6:b4:03:51:0c:13:7b:70: eb:85:08:a9:dd:40:30:df:b2:60:be:d1:bc:a4:7c:11:55:ca: 7b:1b:2c:85:99:14:d7:83:37:69:23:65:e6:f1:d2:b5:f3:e3: c0:29:ea:11:59:6a:5a:6a:90:ef:7a:09:d2:e6:e1:f3:a0:d9: b2:e7:4f:94:29:85:63:e9:59:bc:13:09:b9:61:42:1c:0f:10: ef:89:63:f7:8e:be:f1:79:bb:80:29:9d:8b:a0:11:43:e2:df: 45:b3:59:d3:81:bd:9d:da:a4:d6:c9:57:5c:ad:69:33:36:37: 30:fa:bd:39:84:82:68:07:eb:e8:c6:e5:1c:6f:4a:a8:86:3c: ee:ed:1c:41:17:65:4f:07:42:b9:b1:e3:98:55:06:7a:1e:6d: e4:c2:2c:1b:66:b8:41:1a:7d:d9:7d:00:2f:c8:48:da:54:74: 51:d1:c9:b0:5c:32:99:0d:fc:0d:3b:21:db:f8:90:89:e5:e4: a4:9b:83:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUxQlVQozXTyhr4w7Z7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2QwY2FjZmFmYTJlMGQzMTQ5NWRkOTUwZjc2YWY1Zjk4 YmE1ZDcwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD Eyg4Y2RmYjdiYjVlYTU4ZGQ3MjQ0MDRkODRiNjZiYmM0MDkxYWFjYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8CgTjXGxEkf2Xkmd8ZF7Kc8jzCc PDqR5VX75nAn8YyQYjQsm3XijOVxZtjXFDz5aMG0DslWL4E0fdmCJhgN4swYHv5R QWFT63hBHz8+unKs3ry3ptpaiKN0oRrgdb2S6YHpa1uy7ii8pv2hmVVgdLGwM06B qne3H7+KIbP4aN8YeiEqky4+ehECLfuB3AT+bznvCOnOep+4L6hEbLwNAAX1lhom 3CeTsXPuB5KUQywM2LLI4SloEXHMe/q6AvTRzW23USW0vUANU5Q8fb6Nj/12bKkK LvqYPNXheWEznPXQw/AQuF9dH2h205M+jviHgQQIWvY8GZgZruaETCI9oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzft7tepY3XJEBNhLZrvECRqsqEMB8GA1UdIwQY MBaAFHzNDKz6+i4NMUld2VD3avX5i6XXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUt NDM5ZmM4ZjliMzg2LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUtNDM5ZmM4ZjliMzg2 LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKZHhSPx CuqXzvK5fGiaIJET0VkiDBiSybYqaJK3Lep45r1iL891f9vRX2GpCEEgn+YocW9T NVZYCIUkUzgqP6a0A1EME3tw64UIqd1AMN+yYL7RvKR8EVXKexsshZkU14M3aSNl 5vHStfPjwCnqEVlqWmqQ73oJ0ubh86DZsudPlCmFY+lZvBMJuWFCHA8Q74lj946+ 8Xm7gCmdi6ARQ+LfRbNZ04G9ndqk1slXXK1pMzY3MPq9OYSCaAfr6MblHG9KqIY8 7u0cQRdlTwdCubHjmFUGeh5t5MIsG2a4QRp92X0AL8hI2lR0UdHJsFwymQ38DTsh 2/iQieXkpJuDCA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:11 2025 by rpki-client