This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json) Hash identifier: kO6N9t367LLaOss0h3zetY3L3HsmVqsXpGCRw4udBbM= Subject key identifier: 09:AB:E5:9F:1E:9C:39:71:49:10:04:51:72:34:92:83:98:8B:50:6B Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Certificate serial: 019AF0BF6602DF2B384BAEEDF50ABB33AC6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft Manifest number: 1342 Signing time: Fri 05 Dec 2025 23:01:06 +0000 Manifest this update: Fri 05 Dec 2025 23:01:06 +0000 Manifest next update: Sat 06 Dec 2025 23:01:06 +0000 Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: BKv3gCDnT6//cUeR/+Nbu+D5fTXF9e7o6wmSnIwUo+U=) 2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:66:02:df:2b:38:4b:ae:ed:f5:0a:bb:33:ac:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Validity Not Before: Dec 5 23:01:06 2025 GMT Not After : Dec 6 23:01:06 2025 GMT Subject: CN=09abe59f1e9c39714910045172349283988b506b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:d2:fa:22:13:eb:f2:f4:b6:41:cd:ce:2f: 0d:e4:54:78:0e:09:1b:a8:e9:33:a3:aa:eb:d3:97: cc:78:76:b5:0a:93:2e:e7:2e:70:f1:95:20:53:40: 61:a8:a3:0b:1e:a1:0f:2e:8a:1a:a1:d3:22:8c:0a: 8c:67:22:19:9e:3f:b9:fc:51:69:24:fe:91:99:e5: cd:e7:a5:77:7e:10:f0:1b:2c:10:d3:80:cf:25:de: e1:72:bc:cf:39:ba:a3:63:63:f3:ef:ac:b2:78:6e: 76:61:95:2a:3d:b9:b6:77:c9:b6:5b:1f:aa:00:7c: 50:0c:ae:d4:55:7a:52:05:56:da:0c:32:0e:3f:0b: 64:03:4b:88:46:06:8f:0f:bf:fa:73:5f:d2:78:7e: b5:44:73:7c:ba:92:d1:24:a0:e1:04:fd:94:6f:de: 14:bd:ff:04:f7:28:8d:a3:74:53:6a:25:06:31:c2: c0:90:4e:75:61:9c:a4:c5:a9:8b:b2:92:f6:14:26: b7:c3:f3:ef:2b:91:62:ff:cb:97:b5:fe:55:05:3b: 2f:37:a2:6c:90:f0:29:78:a2:b5:59:46:cd:10:7c: 5a:72:fc:78:be:65:cf:db:c8:cd:3a:84:38:32:23: ae:58:bb:0e:c1:b4:07:3f:2c:2c:e2:0c:20:35:44: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:E5:9F:1E:9C:39:71:49:10:04:51:72:34:92:83:98:8B:50:6B X509v3 Authority Key Identifier: keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:33:da:68:4e:91:3f:f6:7c:9b:e8:1f:e0:e1:c3:83:e8:9e: 74:24:92:97:e0:dd:0f:e8:bc:2d:0f:89:2e:02:26:c4:4a:ef: 2a:43:ce:0a:e0:08:12:30:22:50:05:5c:fa:a6:c7:a9:f9:ae: 44:fa:91:1e:f7:62:1c:ea:5c:cc:e7:a0:29:a1:ca:d3:72:ec: 4c:fc:c0:66:6f:f8:6a:37:ed:23:7d:13:c5:8e:b9:b0:87:64: 72:fc:02:fe:c4:9e:32:eb:93:18:9b:d4:34:7e:42:00:bc:fb: 6a:4b:03:da:b6:4f:9d:34:15:f4:65:35:d6:be:4f:7e:11:c5: 5d:10:af:eb:0b:c8:6d:9d:b3:ea:a6:f1:a9:6b:e5:44:8d:b1: 09:19:d3:3b:8f:d9:09:4a:90:87:50:4a:1a:a5:b9:7f:20:20: 34:c1:4f:57:c8:bb:69:5b:fc:47:b2:97:b0:0a:ab:54:50:3f: 83:51:4d:9a:44:27:a9:a5:bb:6e:fb:15:84:a9:91:9c:36:8f: 1f:48:d3:fd:34:3f:c1:79:b1:06:7c:63:bc:9a:af:b5:23:a4: 46:4b:03:44:da:e0:dc:cd:3c:c8:f7:0c:75:d9:2e:85:c5:f7: af:d0:20:0c:5e:ce:26:6f:1b:0f:f3:76:88:31:fe:7b:67:53: 0c:85:87:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2YC3ys4S67t9Qq7M6xqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm NmUzNGUwHhcNMjUxMjA1MjMwMTA2WhcNMjUxMjA2MjMwMTA2WjAzMTEwLwYDVQQD EygwOWFiZTU5ZjFlOWMzOTcxNDkxMDA0NTE3MjM0OTI4Mzk4OGI1MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hTS+iIT6/L0tkHNzi8N5FR4Dgkb qOkzo6rr05fMeHa1CpMu5y5w8ZUgU0BhqKMLHqEPLooaodMijAqMZyIZnj+5/FFp JP6RmeXN56V3fhDwGywQ04DPJd7hcrzPObqjY2Pz76yyeG52YZUqPbm2d8m2Wx+q AHxQDK7UVXpSBVbaDDIOPwtkA0uIRgaPD7/6c1/SeH61RHN8upLRJKDhBP2Ub94U vf8E9yiNo3RTaiUGMcLAkE51YZykxamLspL2FCa3w/PvK5Fi/8uXtf5VBTsvN6Js kPApeKK1WUbNEHxacvx4vmXP28jNOoQ4MiOuWLsOwbQHPyws4gwgNUQgDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmr5Z8enDlxSRAEUXI0koOYi1BrMB8GA1UdIwQY MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjPaaE6R P/Z8m+gf4OHDg+iedCSSl+DdD+i8LQ+JLgImxErvKkPOCuAIEjAiUAVc+qbHqfmu RPqRHvdiHOpczOegKaHK03LsTPzAZm/4ajftI30TxY65sIdkcvwC/sSeMuuTGJvU NH5CALz7aksD2rZPnTQV9GU11r5PfhHFXRCv6wvIbZ2z6qbxqWvlRI2xCRnTO4/Z CUqQh1BKGqW5fyAgNMFPV8i7aVv8R7KXsAqrVFA/g1FNmkQnqaW7bvsVhKmRnDaP H0jT/TQ/wXmxBnxjvJqvtSOkRksDRNrg3M08yPcMddkuhcX3r9AgDF7OJm8bD/N2 iDH+e2dTDIWHBA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:26 2025 by rpki-client