This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft File: m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json) Hash identifier: bXhG4XkKMy2cilCJWdN2osdBqSsR5PNpXoVE1im67qk= Subject key identifier: D2:D7:21:D5:32:0E:DD:AB:E7:EF:5A:D8:73:F4:D6:76:46:FC:BD:02 Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab Certificate serial: 019AF3F7F90299BE59CF34C68817F5F982DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:45 +0000 Manifest this update: Sat 06 Dec 2025 14:01:45 +0000 Manifest next update: Sun 07 Dec 2025 14:01:45 +0000 Files and hashes: 1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=) 2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=) 3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=) 4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=) 5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: WVMoUtUAfthz/F6T2uCnuTG89a8xMv18YjWF/RUbDyA=) 6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f9:02:99:be:59:cf:34:c6:88:17:f5:f9:82:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab Validity Not Before: Dec 6 14:01:45 2025 GMT Not After : Dec 7 14:01:45 2025 GMT Subject: CN=d2d721d5320eddabe7ef5ad873f4d67646fcbd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:55:d2:47:11:4e:eb:22:5f:52:f2:e4:7b: ed:33:4f:78:be:29:09:a3:bc:15:a6:c1:70:44:62: 65:ec:7f:61:41:2b:f3:19:d4:ee:24:fe:0b:60:d7: 51:c2:d9:a6:a6:23:b9:49:e7:86:1b:ba:84:09:50: 42:2e:8b:5b:19:3b:37:51:48:d4:49:e7:a3:4d:d0: e0:8c:2b:4b:39:c8:5b:5e:98:db:e2:cc:20:5f:a2: c3:06:f0:f5:37:83:94:13:2a:e9:f8:5c:03:1c:36: 75:a3:1c:2e:17:21:d6:f0:44:96:fd:85:3c:71:70: b5:2a:f9:25:bb:6c:03:01:a3:21:28:da:5f:d4:2b: f9:5a:63:4d:c1:59:8a:94:e2:b7:b2:f8:0b:bd:2f: 82:ac:8b:23:41:4c:22:2a:53:7c:2d:71:00:65:8c: 84:af:9a:9e:c5:6f:dc:ff:a7:35:e6:27:d4:87:16: 2e:e2:f1:a5:7a:84:2f:85:d0:3b:97:73:84:ee:29: e1:fb:84:a3:36:09:fd:76:21:c4:4c:26:57:93:98: 73:93:de:7a:06:22:ab:01:78:f5:ba:21:5c:2c:4d: ec:65:c2:6d:9a:be:22:6f:30:f3:50:3c:69:35:5a: b7:63:40:35:7a:ea:fe:2a:f6:11:ed:11:1e:ee:7c: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:21:D5:32:0E:DD:AB:E7:EF:5A:D8:73:F4:D6:76:46:FC:BD:02 X509v3 Authority Key Identifier: keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c6:4b:46:6a:67:73:08:03:54:c2:05:c8:1b:e0:d8:fe:5d: ce:eb:4e:98:f0:61:cd:ff:ea:82:ed:7e:63:f6:d7:cf:ea:ea: cf:b8:53:50:c7:95:bf:27:1a:de:5a:27:da:a7:8b:c9:4a:8c: 01:fd:09:11:8c:69:b3:ba:34:f9:c3:b4:fb:03:9a:ca:64:46: 8a:9a:ec:4c:fd:7f:9d:d6:c8:79:76:58:84:c3:85:72:29:6a: ce:28:50:bc:9b:e0:8a:d2:bf:52:5b:f8:96:58:e9:fa:72:b9: c3:e6:8b:d8:ab:bc:3b:85:fb:7d:91:c3:91:65:4c:de:4c:89: f7:e0:f4:1a:9a:d4:e6:a3:1d:0e:44:3c:e0:2c:e3:d2:45:fa: 84:d5:c5:df:b6:38:0b:a9:f1:d7:d4:5d:9b:cf:7c:50:d3:cc: ea:ee:53:8a:b6:2d:76:b4:5d:60:b6:6e:d7:e7:3e:a4:03:04: ff:e0:f7:fc:cf:92:36:39:1a:e1:52:72:ac:01:2b:b3:f5:c4: 53:df:19:53:a4:a7:6a:62:69:c4:d5:ab:e7:8d:97:44:ad:a4: 6e:c6:d8:3c:43:15:7f:6c:35:38:2a:cc:59:f7:d6:41:8a:f6: 4d:69:58:42:de:0a:40:ed:cb:43:c9:51:28:98:0e:e5:71:86: 6a:f9:51:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/kCmb5ZzzTGiBf1+YLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODliOGNmNDdmN2M0ODVkNjI4ZDBhMzU5YTE2YTgxNWNk MDA0YWIwHhcNMjUxMjA2MTQwMTQ1WhcNMjUxMjA3MTQwMTQ1WjAzMTEwLwYDVQQD EyhkMmQ3MjFkNTMyMGVkZGFiZTdlZjVhZDg3M2Y0ZDY3NjQ2ZmNiZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy1V0kcRTusiX1Ly5HvtM094vikJ o7wVpsFwRGJl7H9hQSvzGdTuJP4LYNdRwtmmpiO5SeeGG7qECVBCLotbGTs3UUjU SeejTdDgjCtLOchbXpjb4swgX6LDBvD1N4OUEyrp+FwDHDZ1oxwuFyHW8ESW/YU8 cXC1Kvklu2wDAaMhKNpf1Cv5WmNNwVmKlOK3svgLvS+CrIsjQUwiKlN8LXEAZYyE r5qexW/c/6c15ifUhxYu4vGleoQvhdA7l3OE7inh+4SjNgn9diHETCZXk5hzk956 BiKrAXj1uiFcLE3sZcJtmr4ibzDzUDxpNVq3Y0A1eur+KvYR7REe7nxCFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLXIdUyDt2r5+9a2HP01nZG/L0CMB8GA1UdIwQY MBaAFJuJuM9H98SF1ijQo1mhaoFc0ASrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDct NjJlMjYwMzEzZTRjLzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDctNjJlMjYwMzEzZTRj LzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMZLRmpn cwgDVMIFyBvg2P5dzutOmPBhzf/qgu1+Y/bXz+rqz7hTUMeVvyca3lon2qeLyUqM Af0JEYxps7o0+cO0+wOaymRGiprsTP1/ndbIeXZYhMOFcilqzihQvJvgitK/Ulv4 lljp+nK5w+aL2Ku8O4X7fZHDkWVM3kyJ9+D0GprU5qMdDkQ84Czj0kX6hNXF37Y4 C6nx19Rdm898UNPM6u5TirYtdrRdYLZu1+c+pAME/+D3/M+SNjka4VJyrAErs/XE U98ZU6SnamJpxNWr542XRK2kbsbYPEMVf2w1OCrMWffWQYr2TWlYQt4KQO3LQ8lR KJgO5XGGavlRyA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:40 2025 by rpki-client