This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json) Hash identifier: wwdyqkEqHbvwZBWtAkia/OYrVoLZ4KAchtI8/fBPo9c= Subject key identifier: 7D:11:54:31:4B:C7:30:1F:67:D1:99:43:59:5D:A0:04:19:7D:C3:D8 Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Certificate serial: 019AF12EB7E5A6069B6A1AB022AFEE5FC054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft Manifest number: 140C Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=) 2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: Opmbeju8mCM1Ud2z2DDUHDsNPnAYSjB51ULDv3TlAt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b7:e5:a6:06:9b:6a:1a:b0:22:af:ee:5f:c0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=7d1154314bc7301f67d19943595da004197dc3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:26:64:76:79:79:72:ed:6a:4b:13:1b:78: 57:21:fb:44:f1:90:a7:be:de:11:7a:32:4b:a4:c1: 30:ae:e4:0b:4b:c7:62:c4:3b:c9:48:ae:04:50:01: 9d:f3:a8:96:42:e7:4b:f6:66:23:c3:f1:f6:c9:16: 49:42:f5:76:7f:0c:5b:61:10:08:b1:cd:76:59:0f: 6a:95:fa:6f:8f:d3:f0:ac:e0:ce:ec:2d:e2:30:f2: 5d:fa:15:0f:a1:71:6e:80:7a:c4:20:b1:85:b8:80: a2:17:e8:1f:0f:d6:38:53:c1:8c:72:e6:aa:fd:a3: b0:39:12:78:7a:43:ef:ca:87:1e:75:52:4c:0d:34: ab:d1:c8:78:d8:89:ce:15:5f:13:f2:09:ca:81:63: 2c:7b:74:d7:54:ae:f2:a4:00:b7:07:e3:5f:e4:fc: 1b:7a:57:a0:78:46:19:bb:cb:4b:57:a4:bd:c9:2c: ff:a9:07:b4:7c:36:a5:73:81:37:9c:2a:7f:10:f0: 7e:d6:40:77:b0:0e:e1:00:b2:bf:67:20:7e:bf:52: 3f:dd:22:41:b4:0b:3b:d3:98:3c:90:48:cb:b2:29: f0:f2:ab:c3:99:a4:8f:4a:e1:fa:71:a5:2b:99:71: 1a:62:c6:c7:29:d1:f7:a8:a0:c7:ad:39:d8:17:ab: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:11:54:31:4B:C7:30:1F:67:D1:99:43:59:5D:A0:04:19:7D:C3:D8 X509v3 Authority Key Identifier: keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:52:04:4e:26:e5:8e:e6:6b:7d:25:1f:67:18:e0:f5:66:2e: 39:70:e2:d6:fe:a2:64:bf:aa:86:4e:ab:a2:a9:80:f1:bb:de: c6:bb:2b:d1:99:0d:e0:41:ce:2e:57:d6:ab:51:9c:d0:f4:e4: e5:d0:0e:09:56:ab:8b:dd:e6:0d:cc:44:99:40:57:f8:64:90: 75:dd:44:d5:64:ef:70:d4:c4:6e:f5:f7:57:6b:be:b4:60:6f: 79:5c:0c:75:3a:1c:6f:a2:fd:b3:1b:7b:d3:41:78:e1:5e:0d: 5b:7e:4c:e3:8d:fe:92:b0:95:10:95:61:97:d2:54:3e:f8:00: c0:4e:55:58:5a:dc:5d:55:69:74:c0:31:b5:b2:05:0b:37:be: 65:a2:75:4d:ca:04:d5:b2:49:1d:94:9a:80:b5:df:e1:d2:5e: 7a:01:fe:29:0f:1c:03:73:9c:45:39:ed:73:cb:78:d6:28:bd: 1b:b4:ee:ee:d2:06:4d:b1:65:6e:37:82:95:e6:4a:af:ab:6f: 27:97:d4:f7:9a:8f:fd:b7:af:30:71:3f:ce:78:bd:6c:0f:6e: 74:9f:7c:c3:2b:8e:42:5f:ef:a3:49:f9:d4:f6:13:c2:72:94: c3:d4:16:0c:6c:bf:e2:70:72:70:5f:f2:e8:1b:c9:3c:5e:23: 17:a8:0c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrflpgabahqwIq/uX8BUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0 MjA4YjcwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD Eyg3ZDExNTQzMTRiYzczMDFmNjdkMTk5NDM1OTVkYTAwNDE5N2RjM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIomZHZ5eXLtaksTG3hXIftE8ZCn vt4RejJLpMEwruQLS8dixDvJSK4EUAGd86iWQudL9mYjw/H2yRZJQvV2fwxbYRAI sc12WQ9qlfpvj9PwrODO7C3iMPJd+hUPoXFugHrEILGFuICiF+gfD9Y4U8GMcuaq /aOwORJ4ekPvyocedVJMDTSr0ch42InOFV8T8gnKgWMse3TXVK7ypAC3B+Nf5Pwb elegeEYZu8tLV6S9ySz/qQe0fDalc4E3nCp/EPB+1kB3sA7hALK/ZyB+v1I/3SJB tAs705g8kEjLsinw8qvDmaSPSuH6caUrmXEaYsbHKdH3qKDHrTnYF6v8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0RVDFLxzAfZ9GZQ1ldoAQZfcPYMB8GA1UdIwQY MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt YmVhY2IwOTRmODBjLzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFIETibl juZrfSUfZxjg9WYuOXDi1v6iZL+qhk6roqmA8bvexrsr0ZkN4EHOLlfWq1Gc0PTk 5dAOCVari93mDcxEmUBX+GSQdd1E1WTvcNTEbvX3V2u+tGBveVwMdTocb6L9sxt7 00F44V4NW35M443+krCVEJVhl9JUPvgAwE5VWFrcXVVpdMAxtbIFCze+ZaJ1TcoE 1bJJHZSagLXf4dJeegH+KQ8cA3OcRTntc8t41ii9G7Tu7tIGTbFlbjeCleZKr6tv J5fU95qP/bevMHE/zni9bA9udJ98wyuOQl/vo0n51PYTwnKUw9QWDGy/4nBycF/y 6BvJPF4jF6gMaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:49 2025 by rpki-client