This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json) Hash identifier: t/NCtt0vt1bXyR1BwwQZE6uadOaRGK5ugjdablkCSsk= Subject key identifier: 50:09:70:6B:C4:D8:0F:39:31:68:68:30:A2:DF:49:AC:F0:3F:B2:38 Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90 Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790 Certificate serial: 019AF2097D703B8F25AC8DE344FC1D60D18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: +W5BY9jw6EhkpmC2bpf3irEFpIUsat2tG6ERPtS9POQ=) 2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:70:3b:8f:25:ac:8d:e3:44:fc:1d:60:d1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=5009706bc4d80f3931686830a2df49acf03fb238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:e5:46:08:27:ff:b6:e5:01:ed:b6:4c:e6: b0:51:66:c6:00:ca:cd:c8:a8:ca:fc:8a:68:3c:2f: 87:26:29:12:ef:98:29:45:f7:2b:51:16:b9:38:9a: ab:68:af:0c:1a:5d:58:c0:a9:63:93:51:02:72:2c: 37:6a:c3:47:e2:ef:d7:00:2f:8f:ad:73:71:40:8c: 95:c6:e3:b4:47:cf:88:15:37:de:eb:d9:8b:d6:97: 24:d2:fa:0a:9c:95:78:d5:53:5e:1f:08:d3:75:02: 6a:17:48:38:73:8a:3f:af:98:3b:a0:8f:80:a5:bd: 29:34:d6:95:5a:b2:22:4c:6d:85:57:57:27:e6:7a: c5:58:bc:4c:ea:6f:51:c1:a9:01:33:62:1e:6c:c6: 74:39:0d:cb:e6:00:ce:10:b1:62:a3:c0:18:bb:4d: 09:d9:92:27:fc:d9:ac:9b:4e:9e:72:8a:6c:70:23: c0:cc:9a:ea:2f:37:73:70:8d:37:6c:6b:c0:b9:25: eb:0d:a7:7b:e8:d8:e0:5a:3a:83:9a:8d:c0:a3:3c: 0e:6d:44:81:4d:d2:79:db:a3:a5:ef:3e:b9:a2:17: 5b:62:96:80:54:af:14:72:66:30:07:d1:da:29:29: d9:60:15:8c:63:40:11:2f:99:e5:04:cb:94:26:38: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:09:70:6B:C4:D8:0F:39:31:68:68:30:A2:DF:49:AC:F0:3F:B2:38 X509v3 Authority Key Identifier: keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3f:61:73:9d:13:34:a7:a6:6e:51:84:16:12:bf:ef:a9:27: 36:b5:7e:58:56:81:98:0b:93:e8:23:47:d3:9f:8f:8d:f8:95: 84:fe:c7:38:62:4c:4c:79:64:91:3e:77:ea:d0:2b:c1:06:19: 22:7f:de:ef:f6:23:4d:96:55:42:bc:51:26:cb:74:c0:bb:79: 4f:3c:2e:a1:2c:ca:c0:4c:3f:d7:1e:e4:b4:b3:6d:4d:be:db: 6d:ca:18:9d:7f:d8:d0:d5:1e:db:51:0e:19:ab:94:5d:e1:c2: 39:96:46:80:50:06:b3:a2:a8:cb:7a:bf:67:11:79:05:d3:08: 43:a8:d6:8d:bf:a1:04:39:36:d3:bc:ae:5e:50:69:f8:52:49: 87:21:e8:e0:74:70:f8:98:72:8e:7e:cd:db:2d:70:de:77:ca: ae:3b:40:1a:62:87:0e:9b:0f:50:ca:9c:6e:ac:f2:bd:a2:a0: 96:57:8c:ee:61:b7:37:ef:cb:3a:ba:0a:9f:74:a1:d7:79:56: 3d:69:f9:60:75:13:ac:c2:53:70:90:fe:7e:ed:5a:b2:4d:fd: 96:d2:4d:8d:f6:87:73:e4:34:4a:eb:bb:b1:3d:4e:60:36:1f: 9b:65:14:7b:48:e1:fb:bd:58:e5:5d:91:fd:9a:73:e0:f7:1c: ca:50:1a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX1wO48lrI3jRPwdYNGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2UxYjlmZmIyZTczZDJjOTdmMDg5MzA2M2NhYmIyY2I3 NDY3OTAwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg1MDA5NzA2YmM0ZDgwZjM5MzE2ODY4MzBhMmRmNDlhY2YwM2ZiMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2flRggn/7blAe22TOawUWbGAMrN yKjK/IpoPC+HJikS75gpRfcrURa5OJqraK8MGl1YwKljk1ECciw3asNH4u/XAC+P rXNxQIyVxuO0R8+IFTfe69mL1pck0voKnJV41VNeHwjTdQJqF0g4c4o/r5g7oI+A pb0pNNaVWrIiTG2FV1cn5nrFWLxM6m9RwakBM2IebMZ0OQ3L5gDOELFio8AYu00J 2ZIn/Nmsm06ecopscCPAzJrqLzdzcI03bGvAuSXrDad76NjgWjqDmo3AozwObUSB TdJ526Ol7z65ohdbYpaAVK8UcmYwB9HaKSnZYBWMY0ARL5nlBMuUJjj4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAJcGvE2A85MWhoMKLfSazwP7I4MB8GA1UdIwQY MBaAFNDOG5/7LnPSyX8IkwY8q7LLdGeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgt YjlmYjUzYTJmMDNjLzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgtYjlmYjUzYTJmMDNj LzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj9hc50T NKemblGEFhK/76knNrV+WFaBmAuT6CNH05+PjfiVhP7HOGJMTHlkkT536tArwQYZ In/e7/YjTZZVQrxRJst0wLt5TzwuoSzKwEw/1x7ktLNtTb7bbcoYnX/Y0NUe21EO GauUXeHCOZZGgFAGs6Koy3q/ZxF5BdMIQ6jWjb+hBDk207yuXlBp+FJJhyHo4HRw +Jhyjn7N2y1w3nfKrjtAGmKHDpsPUMqcbqzyvaKglleM7mG3N+/LOroKn3Sh13lW PWn5YHUTrMJTcJD+fu1ask39ltJNjfaHc+Q0Suu7sT1OYDYfm2UUe0jh+71Y5V2R /Zpz4PccylAa6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:43 2025 by rpki-client