This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json) Hash identifier: 8hBUKgRpz9bkgAu1BPdRU2AYdTbRyE05YIgIAW4N3c4= Subject key identifier: D3:31:07:CB:4B:F7:63:B4:80:D2:D4:78:66:45:85:D6:83:FA:62:17 Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66 Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966 Certificate serial: 019AF31C941701CBC78CDA8501A216D20D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:07 +0000 Manifest this update: Sat 06 Dec 2025 10:02:07 +0000 Manifest next update: Sun 07 Dec 2025 10:02:07 +0000 Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=) 2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: SHuIDhK9uJnXh1vckZ5U2WEY+v+tugw0P2klSCocyOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:94:17:01:cb:c7:8c:da:85:01:a2:16:d2:0d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966 Validity Not Before: Dec 6 10:02:07 2025 GMT Not After : Dec 7 10:02:07 2025 GMT Subject: CN=d33107cb4bf763b480d2d478664585d683fa6217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:17:97:75:b0:64:c8:ca:85:13:0e:bc:4c:06: 70:8a:22:2c:3d:78:09:22:25:af:96:78:4f:cf:9a: 56:ec:76:ff:b7:42:22:a9:5b:29:0e:9c:f3:83:9d: 40:f5:08:1b:f0:3f:3e:d0:22:f4:5b:ef:40:8e:b5: d0:be:02:0f:02:0f:6c:4f:a9:7d:f5:0c:c8:9f:02: 57:51:4a:79:b6:de:ae:05:79:32:ab:cd:f9:f2:1f: ef:e3:52:be:96:f1:e2:71:e2:df:d4:d6:f8:51:35: 77:7f:fc:2a:c0:b8:f9:b6:eb:50:1c:e7:51:9a:fa: bc:9c:86:b8:e9:6f:7e:8a:b0:1c:90:55:4f:a8:d3: e4:12:01:a6:5b:ad:37:e7:8e:09:19:ca:9d:42:f7: df:a0:f0:19:1d:46:c3:db:20:ed:b7:1b:08:97:3b: 80:ab:86:3d:f5:1b:22:51:01:3d:ba:b8:09:bb:2c: 01:28:58:93:87:fa:ec:a5:82:9c:62:70:f1:90:75: 1a:2d:4e:02:10:ca:44:43:94:f9:6e:0c:63:97:41: 80:cb:0e:c7:ef:bb:51:8e:c7:5a:1b:d6:85:35:ce: 24:0b:5e:a3:fe:d8:2f:32:03:2d:0d:2d:aa:6f:6a: a0:84:15:b6:ec:2b:e6:84:4f:18:0d:ca:db:55:88: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:07:CB:4B:F7:63:B4:80:D2:D4:78:66:45:85:D6:83:FA:62:17 X509v3 Authority Key Identifier: keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ab:a9:1c:fa:dc:86:74:7c:63:c4:3b:a4:f8:31:c0:54:11: 33:18:62:0f:ac:a3:62:08:a4:60:f1:cd:07:ae:be:1e:29:47: 2f:91:b9:d9:5a:f9:e8:91:ef:d0:be:9c:43:95:42:1d:fe:29: 6c:a2:c8:67:4c:27:fb:34:06:25:42:ba:51:7b:a9:22:64:e7: b4:b6:e7:0c:9a:51:7e:90:a0:a0:df:fd:64:eb:c8:ad:ad:cd: 1b:99:d8:52:99:f6:f1:a1:1c:6d:df:3b:a5:2b:ff:97:ef:4d: be:bf:24:c1:38:48:cb:e8:b0:51:c9:ba:a7:ce:d0:d7:7a:e2: 67:ba:2b:84:65:28:4c:32:a2:48:78:63:20:6d:5f:51:6b:4d: 77:4e:10:28:66:6b:03:c2:7f:8d:c7:3c:7d:aa:b1:56:a9:c5: 00:8e:2c:15:26:de:ed:6b:d8:93:52:cc:bc:75:57:e4:13:01: 40:85:b2:5b:eb:0e:6e:3f:1e:bd:1e:17:14:3f:49:1e:2a:48: eb:9e:00:df:d7:33:ed:da:e7:27:e4:83:75:3a:dd:77:e1:d2: c1:65:25:b1:bf:5e:af:ec:45:88:68:6e:dc:04:8b:0c:18:ee: 3f:81:8f:7a:7d:a7:13:59:2f:0e:b7:3a:50:93:b2:fe:f2:c3: 55:6d:20:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJQXAcvHjNqFAaIW0g0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy NGI5NjYwHhcNMjUxMjA2MTAwMjA3WhcNMjUxMjA3MTAwMjA3WjAzMTEwLwYDVQQD EyhkMzMxMDdjYjRiZjc2M2I0ODBkMmQ0Nzg2NjQ1ODVkNjgzZmE2MjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgheXdbBkyMqFEw68TAZwiiIsPXgJ IiWvlnhPz5pW7Hb/t0IiqVspDpzzg51A9Qgb8D8+0CL0W+9AjrXQvgIPAg9sT6l9 9QzInwJXUUp5tt6uBXkyq8358h/v41K+lvHiceLf1Nb4UTV3f/wqwLj5tutQHOdR mvq8nIa46W9+irAckFVPqNPkEgGmW603544JGcqdQvffoPAZHUbD2yDttxsIlzuA q4Y99RsiUQE9urgJuywBKFiTh/rspYKcYnDxkHUaLU4CEMpEQ5T5bgxjl0GAyw7H 77tRjsdaG9aFNc4kC16j/tgvMgMtDS2qb2qghBW27CvmhE8YDcrbVYi+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMxB8tL92O0gNLUeGZFhdaD+mIXMB8GA1UdIwQY MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0 LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6upHPrc hnR8Y8Q7pPgxwFQRMxhiD6yjYgikYPHNB66+HilHL5G52Vr56JHv0L6cQ5VCHf4p bKLIZ0wn+zQGJUK6UXupImTntLbnDJpRfpCgoN/9ZOvIra3NG5nYUpn28aEcbd87 pSv/l+9Nvr8kwThIy+iwUcm6p87Q13riZ7orhGUoTDKiSHhjIG1fUWtNd04QKGZr A8J/jcc8faqxVqnFAI4sFSbe7WvYk1LMvHVX5BMBQIWyW+sObj8evR4XFD9JHipI 654A39cz7drnJ+SDdTrdd+HSwWUlsb9er+xFiGhu3ASLDBjuP4GPen2nE1kvDrc6 UJOy/vLDVW0gyw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:14 2025 by rpki-client