This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json) Hash identifier: tPyLlPBFBsfK+iQeF8q4zMRFl/0j44jsiwFTFAIh1XU= Subject key identifier: D7:1A:8C:B0:E2:63:C0:91:E8:45:BE:7E:2B:5E:B7:0A:D6:2C:DF:F7 Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62 Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462 Certificate serial: 019AF2ADB20C61F33CB25597386CADFC9485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=) 2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: 6mG3RfSJb50tOoYUoYNVtqoowzZgq/tgM6v/C6mkZgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b2:0c:61:f3:3c:b2:55:97:38:6c:ad:fc:94:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=d71a8cb0e263c091e845be7e2b5eb70ad62cdff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:07:01:70:92:bb:1b:86:ac:f6:54:40:f2: cb:b1:39:12:81:8e:04:d1:9b:1f:e2:54:ed:02:94: cb:04:6a:4f:df:e6:26:26:7e:16:d7:9c:8e:a9:3f: 68:81:c9:cd:31:d2:2b:a1:5d:1b:06:c4:3f:45:7c: b4:2d:82:86:4c:2c:d4:10:5c:b9:0d:07:e8:9d:f4: 46:c5:86:7a:51:95:80:94:9b:5b:97:22:95:8d:b0: e6:f4:47:44:22:47:99:a4:90:fc:06:cb:93:16:96: 49:ef:b1:42:d6:4e:9b:40:b4:a9:32:7a:6e:a2:ec: 23:96:ed:0e:12:cd:5a:0a:e5:4a:63:62:09:a3:60: 26:45:10:dc:57:ed:93:d6:16:25:26:63:3d:c1:5a: 4d:25:f3:a9:8e:96:24:a5:27:8b:ad:c5:f0:fd:d7: 9a:8c:dd:52:89:d6:64:af:ed:c0:4b:b8:7a:7c:cf: 3d:1e:88:13:0c:bc:fc:91:13:1c:92:d7:94:99:65: 3d:80:10:21:8e:a5:4b:89:a4:5e:cb:01:8b:f5:70: c6:eb:56:48:a0:24:30:81:0d:0d:90:f2:1a:0b:1d: 17:36:53:8e:e1:a2:fa:1e:0d:80:9c:c7:d5:de:f3: b2:63:f1:ff:3f:50:04:59:a3:38:8a:9f:e3:5e:9a: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:8C:B0:E2:63:C0:91:E8:45:BE:7E:2B:5E:B7:0A:D6:2C:DF:F7 X509v3 Authority Key Identifier: keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fa:b7:2d:91:1c:e4:94:c0:15:ab:42:9b:59:c6:41:27:e5: 9a:84:cf:80:00:78:e5:4d:2a:4c:c6:32:7a:d0:a1:83:f9:bc: f5:74:84:ab:30:e7:db:91:fa:ba:e7:b6:64:f5:46:b9:f5:e5: ad:29:62:e5:0f:bc:b6:c1:34:b5:18:eb:a6:b2:1a:f4:09:e8: bf:7e:4d:a0:7b:ce:95:a5:a8:f6:80:28:b9:ae:20:d4:90:67: 68:0c:5f:55:8e:18:7c:f2:1c:5f:b4:6f:97:d7:a1:fb:2b:24: 59:88:55:7b:dc:dc:91:9d:36:29:22:3d:b4:87:a9:a9:58:7a: ab:0e:d4:e3:f9:9f:9c:bb:0e:be:f6:08:77:83:7c:49:d4:ff: c1:03:49:47:68:7f:98:2b:51:45:b4:30:c0:f7:e7:c1:a6:68: 36:6f:48:ab:73:e7:84:3f:ce:5b:e3:8a:f2:23:5c:9e:d3:c6: 04:53:35:b7:ae:37:ae:60:54:9f:22:44:5b:31:0c:9a:af:e7: 9b:ad:de:1a:66:39:bc:9e:57:2c:b3:f6:43:4a:b5:31:97:df: f4:be:00:b1:11:a1:d1:1c:0b:98:27:32:a3:0b:8c:0a:61:15: bb:69:64:8f:4d:75:8a:18:10:a7:a3:40:aa:2f:8b:4d:b7:be: ca:a7:d7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbIMYfM8slWXOGyt/JSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODY4YTc2ZjViNDc0OGUxZTRiYmE4MzQ3MDFhNjg1Nzdj NjM0NjIwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EyhkNzFhOGNiMGUyNjNjMDkxZTg0NWJlN2UyYjVlYjcwYWQ2MmNkZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/IHAXCSuxuGrPZUQPLLsTkSgY4E 0Zsf4lTtApTLBGpP3+YmJn4W15yOqT9ogcnNMdIroV0bBsQ/RXy0LYKGTCzUEFy5 DQfonfRGxYZ6UZWAlJtblyKVjbDm9EdEIkeZpJD8BsuTFpZJ77FC1k6bQLSpMnpu ouwjlu0OEs1aCuVKY2IJo2AmRRDcV+2T1hYlJmM9wVpNJfOpjpYkpSeLrcXw/dea jN1SidZkr+3AS7h6fM89HogTDLz8kRMckteUmWU9gBAhjqVLiaReywGL9XDG61ZI oCQwgQ0NkPIaCx0XNlOO4aL6Hg2AnMfV3vOyY/H/P1AEWaM4ip/jXpqf7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcajLDiY8CR6EW+fitetwrWLN/3MB8GA1UdIwQY MBaAFJuGinb1tHSOHku6g0cBpoV3xjRiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2Yt NmEzNGU0NmFhYTU2LzEvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2YtNmEzNGU0NmFhYTU2 LzEvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPq3LZEc 5JTAFatCm1nGQSflmoTPgAB45U0qTMYyetChg/m89XSEqzDn25H6uue2ZPVGufXl rSli5Q+8tsE0tRjrprIa9Anov35NoHvOlaWo9oAoua4g1JBnaAxfVY4YfPIcX7Rv l9eh+yskWYhVe9zckZ02KSI9tIepqVh6qw7U4/mfnLsOvvYId4N8SdT/wQNJR2h/ mCtRRbQwwPfnwaZoNm9Iq3PnhD/OW+OK8iNcntPGBFM1t643rmBUnyJEWzEMmq/n m63eGmY5vJ5XLLP2Q0q1MZff9L4AsRGh0RwLmCcyowuMCmEVu2lkj011ihgQp6NA qi+LTbe+yqfX3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:57 2025 by rpki-client