This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: oytZyxWWkYL15OX7VlO5rjcS2EICpVMpiujDrwTsImQ= Subject key identifier: 33:E5:10:95:14:D4:87:0D:03:3D:3F:82:0B:26:21:1E:C9:8C:CF:6A Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019AF37BF520618F28049EFD107D493CF06F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17A7 Signing time: Sat 06 Dec 2025 11:46:18 +0000 Manifest this update: Sat 06 Dec 2025 11:46:18 +0000 Manifest next update: Sun 07 Dec 2025 11:46:18 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: l6NfilPEkQ6nQ0BC1pvHj2kjRbUVZrKjfodMSMJ1aXE=) 5: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:7b:f5:20:61:8f:28:04:9e:fd:10:7d:49:3c:f0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 6 11:46:18 2025 GMT Not After : Dec 7 11:46:18 2025 GMT Subject: CN=33e5109514d4870d033d3f820b26211ec98ccf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:b7:8e:dd:b1:e5:6a:f5:c4:af:2b:8d:90: da:4a:c9:cd:d7:dd:51:db:c9:26:ce:21:bb:35:77: 81:b9:96:20:d7:c5:38:cb:32:2a:d5:d8:72:c6:6d: 6d:41:3a:03:a2:ba:3f:74:00:9b:aa:47:29:c3:05: 02:0c:a4:14:a5:da:e0:73:69:1c:65:08:0e:79:4f: 2f:b6:b2:d3:df:e8:4f:fe:91:ec:be:b3:92:56:1f: b0:c7:ba:a4:3f:59:16:e2:96:a3:5e:1f:c9:0c:51: 94:37:4e:5a:90:ec:ac:8c:97:64:2e:81:ae:2a:64: cf:14:67:b6:ac:c7:c3:16:dd:6b:f4:01:ba:03:85: 0e:02:78:3f:50:f8:47:92:63:7f:ad:55:7d:15:30: 8a:9d:b4:76:5b:10:b4:e4:90:76:19:43:47:3f:1c: 77:ea:0c:e8:70:e0:8a:61:c2:e2:11:64:6b:45:7b: a6:f0:63:26:b3:65:fc:35:3f:8d:fd:48:8c:66:52: de:fe:92:44:ea:8c:6c:6e:34:b8:76:f6:b8:1f:c1: f4:ec:98:9b:9b:60:2d:f9:a9:35:0d:38:34:9a:6d: 0e:4e:09:57:87:f8:3d:c6:ce:41:1f:34:8f:5a:90: 85:13:77:8b:b5:c5:6b:38:4f:24:23:9e:09:06:b0: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:10:95:14:D4:87:0D:03:3D:3F:82:0B:26:21:1E:C9:8C:CF:6A X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1a:d8:cc:a5:16:cf:db:6e:54:09:1c:40:d9:ce:8b:d3:f6: 62:ed:5c:fc:a7:a3:20:58:db:4e:f6:f0:6e:68:9c:5a:2d:81: 4e:f8:22:65:0d:6b:0c:dc:8e:f9:d4:8b:72:b2:0f:9e:a9:d2: 04:07:fa:11:a0:37:97:e6:e2:e1:1e:b5:19:eb:97:c0:c4:ed: 4d:3a:10:0a:a8:c6:05:45:be:95:7c:3a:af:0e:11:f7:2c:a3: df:83:50:e9:93:92:1e:a9:dc:bd:64:5f:56:d6:d7:e7:7b:e6: ce:e0:b2:21:ac:c9:15:9d:a3:33:30:d0:e0:f5:08:23:51:ac: f2:ed:82:4a:06:79:2a:47:0f:e2:86:26:00:61:53:00:b7:32: d6:c7:fb:5b:0e:6e:73:d7:8f:ef:22:3f:1b:c8:d2:31:07:50: 04:6d:66:5b:62:08:b5:91:43:26:0d:e1:f0:6f:62:7c:01:28: 0b:b8:53:45:32:6d:aa:b0:92:8f:d7:3a:12:6c:8a:fd:4d:fd: f0:3c:14:99:ea:b6:1a:a3:8b:1d:b7:c1:6b:6b:79:1e:0e:be: 2d:5f:74:a4:4d:ff:52:34:70:27:d1:99:e3:a8:4f:2a:c9:0d: 3a:6a:0a:53:8b:a7:09:5e:58:86:9a:92:fd:4b:54:34:6b:c8: b9:2d:f3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrze/UgYY8oBJ79EH1JPPBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjA2MTE0NjE4WhcNMjUxMjA3MTE0NjE4WjAzMTEwLwYDVQQD EygzM2U1MTA5NTE0ZDQ4NzBkMDMzZDNmODIwYjI2MjExZWM5OGNjZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG23jt2x5Wr1xK8rjZDaSsnN191R 28kmziG7NXeBuZYg18U4yzIq1dhyxm1tQToDoro/dACbqkcpwwUCDKQUpdrgc2kc ZQgOeU8vtrLT3+hP/pHsvrOSVh+wx7qkP1kW4pajXh/JDFGUN05akOysjJdkLoGu KmTPFGe2rMfDFt1r9AG6A4UOAng/UPhHkmN/rVV9FTCKnbR2WxC05JB2GUNHPxx3 6gzocOCKYcLiEWRrRXum8GMms2X8NT+N/UiMZlLe/pJE6oxsbjS4dva4H8H07Jib m2At+ak1DTg0mm0OTglXh/g9xs5BHzSPWpCFE3eLtcVrOE8kI54JBrBwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPlEJUU1IcNAz0/ggsmIR7JjM9qMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhrYzKUW z9tuVAkcQNnOi9P2Yu1c/KejIFjbTvbwbmicWi2BTvgiZQ1rDNyO+dSLcrIPnqnS BAf6EaA3l+bi4R61GeuXwMTtTToQCqjGBUW+lXw6rw4R9yyj34NQ6ZOSHqncvWRf VtbX53vmzuCyIazJFZ2jMzDQ4PUII1Gs8u2CSgZ5KkcP4oYmAGFTALcy1sf7Ww5u c9eP7yI/G8jSMQdQBG1mW2IItZFDJg3h8G9ifAEoC7hTRTJtqrCSj9c6EmyK/U39 8DwUmeq2GqOLHbfBa2t5Hg6+LV90pE3/UjRwJ9GZ46hPKskNOmoKU4unCV5YhpqS /UtUNGvIuS3zlg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:27 2025 by rpki-client