This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json) Hash identifier: CL4w97TnLLdbOJExnl1n393/xlBhE6k49cf27oJ8dtA= Subject key identifier: BD:4F:DA:6E:90:F6:95:72:09:11:B5:FD:96:5C:B0:D4:0E:E6:DB:9C Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019AF31B96A2E0D05DF5140614290E976571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft Manifest number: 048E Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=) 2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=) 3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: obLe5bJUvDsVzAPgCOs48fZjnIQdQnH7e3ykIfPdQbY=) 4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=) 5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=) 6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:96:a2:e0:d0:5d:f5:14:06:14:29:0e:97:65:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=bd4fda6e90f695720911b5fd965cb0d40ee6db9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:cb:04:7c:88:58:53:c0:a7:43:68:95:6e: 5f:c2:28:5f:eb:36:e3:2e:1a:72:68:51:5e:7d:6a: 1d:da:ea:2c:64:eb:ac:e9:0a:90:28:d7:cf:97:e2: e5:30:03:a0:eb:7e:8b:92:56:56:c9:27:b9:58:13: f3:09:a6:e1:bf:8f:29:c5:21:a9:cd:86:cd:a9:e3: 32:e0:2c:11:26:ee:79:20:33:43:ca:92:c5:50:67: 3c:40:21:77:ba:55:12:c1:46:3b:9c:b5:80:65:ed: a3:fc:e5:d7:71:5e:cf:84:ec:0d:85:0f:7f:d3:99: 69:e3:95:50:55:8c:8e:81:2b:57:36:ef:9e:6e:b8: 8a:ac:8f:d3:90:21:9d:fe:37:74:c4:60:92:68:f7: 9f:65:f0:9e:fa:9f:57:eb:76:0d:30:fa:85:cb:01: 96:0e:87:0c:c9:e6:15:25:6c:b4:c0:ba:7e:e7:da: 52:1c:8a:cd:a4:e5:0e:28:d3:36:69:d5:56:db:08: f6:1e:1b:56:3c:a9:3d:50:56:82:92:9f:a2:92:9f: 2e:64:b6:25:38:38:14:75:ee:17:0f:88:15:18:13: bd:24:6e:18:c1:20:e8:9c:80:1c:7b:da:bb:6b:76: a5:94:16:22:9b:0c:f4:5d:56:a3:73:14:fd:1b:e7: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:DA:6E:90:F6:95:72:09:11:B5:FD:96:5C:B0:D4:0E:E6:DB:9C X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:45:e2:47:15:48:80:15:ca:a4:f6:47:e3:5f:83:f4:49: d5:d9:d0:72:8c:79:55:67:fb:0b:cb:cb:63:61:9c:74:c1:81: 5b:4b:ec:fc:99:87:e4:be:25:63:90:23:06:15:c1:68:34:2b: 3b:b4:53:83:6e:14:e1:dd:72:5f:79:cb:b5:55:c8:c3:e5:fd: cd:62:9b:c3:8a:e8:d8:7d:3a:d1:18:23:b5:8e:46:21:2a:28: 8d:cb:e1:00:9e:44:cd:21:d6:01:29:7c:47:26:f8:18:60:28: 84:84:80:10:09:35:13:29:5a:1b:43:36:4d:3c:64:d6:9b:96: a6:90:6f:19:7b:23:ed:74:a7:b8:03:e6:25:44:95:91:85:06: 79:a3:46:bc:ab:f2:6b:6b:19:2d:72:d4:f5:11:66:13:62:6a: 1d:5c:f0:a6:4a:13:03:a4:34:59:ae:19:69:fe:3a:00:d8:2b: 87:3a:96:ba:d5:d1:b6:c6:a3:07:86:f9:9c:7c:41:aa:db:fa: eb:e5:19:ed:6a:b9:13:31:c9:ea:e4:0f:ad:d1:47:ed:91:2d: 22:22:72:98:03:34:58:70:c0:aa:a5:15:ca:f4:e7:bb:ee:33: 67:ef:c1:87:46:8a:b6:25:3e:14:a4:42:60:54:09:76:f6:2f: a6:d1:18:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5ai4NBd9RQGFCkOl2VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EyhiZDRmZGE2ZTkwZjY5NTcyMDkxMWI1ZmQ5NjVjYjBkNDBlZTZkYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5jLBHyIWFPAp0NolW5fwihf6zbj LhpyaFFefWod2uosZOus6QqQKNfPl+LlMAOg636LklZWySe5WBPzCabhv48pxSGp zYbNqeMy4CwRJu55IDNDypLFUGc8QCF3ulUSwUY7nLWAZe2j/OXXcV7PhOwNhQ9/ 05lp45VQVYyOgStXNu+ebriKrI/TkCGd/jd0xGCSaPefZfCe+p9X63YNMPqFywGW DocMyeYVJWy0wLp+59pSHIrNpOUOKNM2adVW2wj2HhtWPKk9UFaCkp+ikp8uZLYl ODgUde4XD4gVGBO9JG4YwSDonIAce9q7a3allBYimwz0XVajcxT9G+eORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1P2m6Q9pVyCRG1/ZZcsNQO5tucMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDpF4kcV SIAVyqT2R+Nfg/RJ1dnQcox5VWf7C8vLY2GcdMGBW0vs/JmH5L4lY5AjBhXBaDQr O7RTg24U4d1yX3nLtVXIw+X9zWKbw4ro2H060RgjtY5GISoojcvhAJ5EzSHWASl8 Ryb4GGAohISAEAk1EylaG0M2TTxk1puWppBvGXsj7XSnuAPmJUSVkYUGeaNGvKvy a2sZLXLU9RFmE2JqHVzwpkoTA6Q0Wa4Zaf46ANgrhzqWutXRtsajB4b5nHxBqtv6 6+UZ7Wq5EzHJ6uQPrdFH7ZEtIiJymAM0WHDAqqUVyvTnu+4zZ+/Bh0aKtiU+FKRC YFQJdvYvptEY6w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:57 2025 by rpki-client