This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json) Hash identifier: CurGHIZ13vasCJE1MS8DuS7m6g/7zIwjp0jmAkuDfAE= Subject key identifier: EB:AA:1B:60:56:77:20:A8:62:DB:47:91:57:2B:D7:D7:9D:14:0F:EB Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Certificate serial: 019AF16469665505D82B466062886F7564F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=) 2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: w+jDuJBHHDqF2H6BX+Gx63nNwTr9H6UkLR7qX39w4LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:66:55:05:d8:2b:46:60:62:88:6f:75:64:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=ebaa1b60567720a862db4791572bd7d79d140feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:ec:1c:10:76:06:61:0f:ae:d9:e9:6a:90: 91:7d:b6:d8:a6:0c:65:54:13:c8:2f:76:88:02:8d: d5:51:62:23:b4:c6:41:34:91:e1:64:30:f4:9b:06: 7a:8b:18:10:a7:79:4f:82:ba:73:44:ea:40:a5:c1: 9c:70:a3:de:37:74:98:48:74:bb:f3:f7:65:a2:ba: 58:3d:93:ed:c6:76:49:ba:62:e9:cb:4f:0d:77:44: 29:4c:fb:27:f4:a8:36:c6:15:7f:88:97:e3:53:ed: c6:75:e6:45:4b:39:ef:fc:95:6e:31:67:4e:81:bb: 60:17:01:7e:38:76:07:3d:50:4e:dd:f2:fe:16:87: cb:65:97:6b:07:43:bd:bc:1f:0c:7c:f5:d7:23:1b: 7a:59:e5:26:4a:97:be:c5:7a:6d:9b:84:1c:30:11: 94:f8:77:c2:f2:fa:1a:9d:ea:a5:c1:94:de:14:0f: 23:b6:ef:a5:82:45:89:f4:2f:9e:41:48:58:8b:a0: b1:14:38:7f:93:3c:90:b1:d4:af:68:30:60:5f:5a: a8:43:50:55:f6:ab:88:4a:d3:e7:2e:58:b5:e8:4e: dc:ac:69:39:5e:98:5a:18:97:a8:07:e3:be:e8:f7: 86:ca:b8:92:c4:bc:8a:56:47:fe:41:f5:a9:4f:70: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AA:1B:60:56:77:20:A8:62:DB:47:91:57:2B:D7:D7:9D:14:0F:EB X509v3 Authority Key Identifier: keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5e:78:b1:4f:d9:4a:c4:e0:2b:87:3f:c5:0e:68:a4:db:5f: 82:06:d7:a9:a5:f9:4f:4f:d3:e6:c6:20:6e:23:bc:d8:37:4a: 47:0c:2f:94:83:0c:70:bf:da:19:11:66:93:48:a2:f2:b8:5b: 1b:95:01:72:3a:08:46:ac:fa:62:8f:60:c0:51:ca:d3:41:c0: f9:ff:b1:97:69:97:be:1b:43:f8:79:c7:c8:9a:7b:a4:76:91: 8d:60:c6:b0:4f:67:94:b2:f1:c7:a3:ac:64:9a:ae:0d:22:13: fb:28:4d:f0:b4:5a:24:2e:0c:8a:db:1c:71:61:a0:73:2a:6d: ed:20:b2:10:98:63:f1:8f:ca:ba:80:5a:94:3d:b9:0e:4f:cc: ef:53:5b:06:0b:27:30:33:21:7a:5c:05:f3:dd:91:e6:52:42: 53:ab:53:86:a0:bc:55:b1:73:a5:40:85:91:fe:95:04:aa:b1: 26:c6:d0:18:52:99:f7:e5:55:70:ab:b0:ca:15:4f:e9:ac:09: 2c:a6:23:67:96:d1:61:a5:40:39:5d:1b:bd:1a:68:c4:08:ed: a1:12:20:6e:e3:40:a4:28:50:ab:6a:ab:14:34:cb:03:bd:6d: e4:9a:37:4b:c5:d8:c6:5a:7d:50:fe:7d:f1:ea:44:85:20:91: b4:44:37:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGlmVQXYK0ZgYohvdWT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2 ZjA4YzIwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EyhlYmFhMWI2MDU2NzcyMGE4NjJkYjQ3OTE1NzJiZDdkNzlkMTQwZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+PsHBB2BmEPrtnpapCRfbbYpgxl VBPIL3aIAo3VUWIjtMZBNJHhZDD0mwZ6ixgQp3lPgrpzROpApcGccKPeN3SYSHS7 8/dlorpYPZPtxnZJumLpy08Nd0QpTPsn9Kg2xhV/iJfjU+3GdeZFSznv/JVuMWdO gbtgFwF+OHYHPVBO3fL+FofLZZdrB0O9vB8MfPXXIxt6WeUmSpe+xXptm4QcMBGU +HfC8voaneqlwZTeFA8jtu+lgkWJ9C+eQUhYi6CxFDh/kzyQsdSvaDBgX1qoQ1BV 9quIStPnLli16E7crGk5XphaGJeoB+O+6PeGyriSxLyKVkf+QfWpT3B5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuqG2BWdyCoYttHkVcr19edFA/rMB8GA1UdIwQY MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3 LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl54sU/Z SsTgK4c/xQ5opNtfggbXqaX5T0/T5sYgbiO82DdKRwwvlIMMcL/aGRFmk0ii8rhb G5UBcjoIRqz6Yo9gwFHK00HA+f+xl2mXvhtD+HnHyJp7pHaRjWDGsE9nlLLxx6Os ZJquDSIT+yhN8LRaJC4MitsccWGgcypt7SCyEJhj8Y/KuoBalD25Dk/M71NbBgsn MDMhelwF892R5lJCU6tThqC8VbFzpUCFkf6VBKqxJsbQGFKZ9+VVcKuwyhVP6awJ LKYjZ5bRYaVAOV0bvRpoxAjtoRIgbuNApChQq2qrFDTLA71t5Jo3S8XYxlp9UP59 8epEhSCRtEQ3MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:44 2025 by rpki-client