This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json) Hash identifier: gRIu9hZP/M3mz9sZSq+GQGqQ/h6gfRLqq/1EYMwMDH4= Subject key identifier: E7:0B:DD:8B:B3:72:D3:0B:45:52:73:0D:CD:AF:2D:AC:82:91:B1:F5 Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Certificate serial: 019B2EF9CA1AB984CC493B7F460010631386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft Manifest number: 0EE2 Signing time: Thu 18 Dec 2025 01:01:20 +0000 Manifest this update: Thu 18 Dec 2025 01:01:20 +0000 Manifest next update: Fri 19 Dec 2025 01:01:20 +0000 Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=) 2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: RSIFwjRr0FQglTMbwCrDUikzjfLNx1nSvrsRnJm/Lpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:ca:1a:b9:84:cc:49:3b:7f:46:00:10:63:13:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Validity Not Before: Dec 18 01:01:20 2025 GMT Not After : Dec 19 01:01:20 2025 GMT Subject: CN=e70bdd8bb372d30b4552730dcdaf2dac8291b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:bf:39:d0:31:0f:7e:fa:79:ef:56:f0:7b: db:8f:c1:10:e7:b8:65:03:23:4c:63:02:c1:b8:d4: 17:04:1a:40:5c:aa:65:7b:a8:d3:79:36:19:31:e2: 81:7a:2a:f6:38:3b:fa:d4:92:83:00:b5:83:03:cc: ca:d3:0d:da:00:c9:e1:7f:30:92:a0:92:d7:35:46: 69:72:fa:40:7a:5a:c2:67:5a:1c:02:9b:d0:e7:f3: 6d:3f:5b:1b:9d:78:30:ad:ac:e9:9a:ce:7b:ea:f2: 60:70:7e:ab:e6:5b:b4:fd:a0:5f:2f:ba:75:47:6d: a4:18:b5:40:46:f1:7b:33:af:04:c0:c3:14:be:5b: 27:07:41:f5:d5:a5:19:5d:2b:b0:43:4d:c9:87:1a: aa:ca:50:54:4d:b8:df:ff:83:c8:ab:f4:95:e7:1e: 7a:36:fc:65:4d:03:87:e8:b7:3d:e8:57:4b:22:21: 97:61:90:8a:73:00:81:df:5e:58:60:b4:55:85:75: b4:55:5c:52:7e:11:db:1b:84:c5:7d:03:11:a0:53: 1a:bf:b8:6e:6c:f1:20:d3:e9:10:d7:2a:5a:0e:aa: 4b:cb:3f:47:9d:9d:43:34:72:0f:96:7e:91:ca:db: 6b:0b:c0:69:62:71:6e:6e:01:a0:81:e5:11:0a:b0: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0B:DD:8B:B3:72:D3:0B:45:52:73:0D:CD:AF:2D:AC:82:91:B1:F5 X509v3 Authority Key Identifier: keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c6:45:d2:ec:43:03:81:88:25:00:b5:45:23:4e:ec:5d:c4: 6c:7e:5d:82:b3:ff:1e:9d:f3:f6:cb:ef:fd:77:b9:bc:1b:56: 14:a4:52:e3:99:1b:a7:00:7d:67:3a:d3:0b:53:83:cc:0c:b0: b3:f0:54:6a:2b:d1:0b:d7:dc:45:5f:b2:e2:b7:b3:c5:3d:38: 44:04:ff:80:62:8b:1d:ed:1b:4e:29:7b:f6:40:ed:4e:4b:c9: d5:01:32:ec:ab:36:a3:85:06:d4:0e:77:a0:2b:cc:de:c5:42: 36:b4:60:02:ec:58:0b:bf:8c:74:6e:43:5c:73:3f:d5:ce:e0: e6:33:03:dc:21:db:18:00:c3:d4:8e:80:a1:29:7b:d9:97:9c: 9d:ea:98:5e:ee:d0:fa:12:97:0c:f3:f9:4e:82:04:33:3c:62: dd:b3:ac:e3:46:f8:92:d2:3d:46:47:e2:a0:d8:10:1b:a5:34: 04:c1:72:f8:8a:71:bc:94:9a:a7:ec:79:8d:9f:43:5a:d2:cc: 3d:bb:30:14:85:06:05:57:8d:39:ac:bc:b2:25:37:63:2f:42: e7:c2:04:7f:f3:06:91:1f:61:6f:63:e8:83:a2:e5:c8:2d:ea: 36:d7:68:ff:c8:4c:3c:d4:25:35:23:4b:97:61:ea:3d:18:2e: 21:3e:7c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+coauYTMSTt/RgAQYxOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll ZTI0NDQwHhcNMjUxMjE4MDEwMTIwWhcNMjUxMjE5MDEwMTIwWjAzMTEwLwYDVQQD EyhlNzBiZGQ4YmIzNzJkMzBiNDU1MjczMGRjZGFmMmRhYzgyOTFiMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXa/OdAxD376ee9W8Hvbj8EQ57hl AyNMYwLBuNQXBBpAXKple6jTeTYZMeKBeir2ODv61JKDALWDA8zK0w3aAMnhfzCS oJLXNUZpcvpAelrCZ1ocApvQ5/NtP1sbnXgwrazpms576vJgcH6r5lu0/aBfL7p1 R22kGLVARvF7M68EwMMUvlsnB0H11aUZXSuwQ03JhxqqylBUTbjf/4PIq/SV5x56 NvxlTQOH6Lc96FdLIiGXYZCKcwCB315YYLRVhXW0VVxSfhHbG4TFfQMRoFMav7hu bPEg0+kQ1ypaDqpLyz9HnZ1DNHIPln6RyttrC8BpYnFubgGggeURCrAsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcL3YuzctMLRVJzDc2vLayCkbH1MB8GA1UdIwQY MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt ZDA4YTljZGVjOTg2LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2 LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsZF0uxD A4GIJQC1RSNO7F3EbH5dgrP/Hp3z9svv/Xe5vBtWFKRS45kbpwB9ZzrTC1ODzAyw s/BUaivRC9fcRV+y4rezxT04RAT/gGKLHe0bTil79kDtTkvJ1QEy7Ks2o4UG1A53 oCvM3sVCNrRgAuxYC7+MdG5DXHM/1c7g5jMD3CHbGADD1I6AoSl72ZecneqYXu7Q +hKXDPP5ToIEMzxi3bOs40b4ktI9RkfioNgQG6U0BMFy+IpxvJSap+x5jZ9DWtLM PbswFIUGBVeNOay8siU3Yy9C58IEf/MGkR9hb2Pog6LlyC3qNtdo/8hMPNQlNSNL l2HqPRguIT58Xg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:37:26 2025 by rpki-client