This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json) Hash identifier: 7IwT2JoflsJfGWt3CtGLdxOCP1vcDYxrxaCL0bnraTg= Subject key identifier: 87:44:97:A9:23:F0:21:82:B4:88:B4:61:D9:98:5F:31:57:34:00:32 Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Certificate serial: 019AF12EB151D06CFE6EFD7FA86524382642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=) 2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: 2uC63apwneT0Wj86arXV1iFmBzJNpveCR8InLS4ztTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b1:51:d0:6c:fe:6e:fd:7f:a8:65:24:38:26:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=874497a923f02182b488b461d9985f3157340032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:76:7f:7f:c2:e7:da:9b:1c:8a:e8:d8:65: 5c:e7:97:f1:5f:f8:41:f0:3b:03:da:76:b0:02:3a: 2d:7f:11:dc:53:67:18:ed:fe:65:64:25:13:be:3f: b7:86:17:a3:b1:c4:42:6c:df:52:23:21:a5:d0:d9: ea:06:2d:85:62:22:35:bb:4c:5a:63:da:b9:1b:4f: d3:cd:0a:4a:c0:5a:49:f6:20:17:70:c0:11:46:43: 34:a4:67:49:f6:2f:f6:f1:ee:04:74:65:ff:2c:7e: df:61:6a:a6:b1:d0:47:76:49:62:ec:b7:70:a5:d5: 0e:fa:11:78:d7:6d:b7:77:75:02:71:9b:06:39:72: cc:1f:56:bd:2c:46:00:17:4c:9a:40:02:44:62:f6: 67:93:9b:8d:6d:4c:7d:01:d6:f1:58:df:79:0b:5d: 42:90:7c:87:fe:a1:e8:5b:95:7e:63:f5:6d:22:12: 28:5c:50:79:48:3a:3f:3b:d0:16:1f:c8:64:6b:c9: 2d:35:f1:03:6f:11:b5:5f:8d:ec:fa:c8:82:37:bf: c4:99:0d:0c:3b:ac:e0:61:b5:aa:08:c0:da:78:b5: f6:97:be:0e:d7:b0:47:e0:4e:73:29:48:d3:60:43: 0d:d6:58:de:c8:16:9e:61:01:f8:da:74:a8:d1:53: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:97:A9:23:F0:21:82:B4:88:B4:61:D9:98:5F:31:57:34:00:32 X509v3 Authority Key Identifier: keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:e9:62:f4:35:bb:4b:74:89:6e:f7:fa:56:74:7f:4b:9f: 37:f3:f9:1d:e9:70:c4:79:31:6c:6f:1c:a9:b1:a3:52:f7:76: ab:b4:b9:10:26:b4:3b:71:5e:d8:75:19:20:e7:21:62:f1:d2: 50:76:80:16:05:29:b7:3a:6a:7e:bf:9e:2c:a5:c0:50:71:8b: 31:33:3b:a5:4f:c6:f6:44:c0:6e:59:72:85:2b:fd:99:6f:96: 20:be:7c:89:e7:f8:76:43:24:49:b7:e1:38:5c:fa:58:a1:46: b0:89:b4:ce:13:22:7a:9e:cb:36:95:f0:58:31:73:d8:06:19: eb:d2:c2:dc:d6:cb:14:8f:61:d5:1c:a9:4b:d0:75:71:b5:5b: 2e:fd:87:4a:ea:0d:cd:97:a8:4c:45:42:b5:1e:0a:ff:12:19: 48:bd:ae:95:ab:1d:e7:95:c9:86:50:32:0c:1e:dd:21:25:99: 2d:37:3d:8e:c3:6e:fc:45:b0:27:33:2c:eb:3b:21:9b:b1:64: d1:07:6a:7c:a4:17:ae:3a:93:1b:11:14:2b:97:50:6f:93:1a: 40:5d:5c:b5:1f:61:49:93:11:5a:51:8d:25:70:97:39:37:a3: 32:6a:4c:cb:71:df:ec:68:ad:33:bf:a1:19:5b:58:51:01:58: 29:94:aa:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrFR0Gz+bv1/qGUkOCZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll ZTI0NDQwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD Eyg4NzQ0OTdhOTIzZjAyMTgyYjQ4OGI0NjFkOTk4NWYzMTU3MzQwMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNp2f3/C59qbHIro2GVc55fxX/hB 8DsD2nawAjotfxHcU2cY7f5lZCUTvj+3hhejscRCbN9SIyGl0NnqBi2FYiI1u0xa Y9q5G0/TzQpKwFpJ9iAXcMARRkM0pGdJ9i/28e4EdGX/LH7fYWqmsdBHdkli7Ldw pdUO+hF41223d3UCcZsGOXLMH1a9LEYAF0yaQAJEYvZnk5uNbUx9AdbxWN95C11C kHyH/qHoW5V+Y/VtIhIoXFB5SDo/O9AWH8hka8ktNfEDbxG1X43s+siCN7/EmQ0M O6zgYbWqCMDaeLX2l74O17BH4E5zKUjTYEMN1ljeyBaeYQH42nSo0VPlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdEl6kj8CGCtIi0YdmYXzFXNAAyMB8GA1UdIwQY MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt ZDA4YTljZGVjOTg2LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2 LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ/pYvQ1 u0t0iW73+lZ0f0ufN/P5HelwxHkxbG8cqbGjUvd2q7S5ECa0O3Fe2HUZIOchYvHS UHaAFgUptzpqfr+eLKXAUHGLMTM7pU/G9kTAbllyhSv9mW+WIL58ief4dkMkSbfh OFz6WKFGsIm0zhMiep7LNpXwWDFz2AYZ69LC3NbLFI9h1RypS9B1cbVbLv2HSuoN zZeoTEVCtR4K/xIZSL2ulasd55XJhlAyDB7dISWZLTc9jsNu/EWwJzMs6zshm7Fk 0QdqfKQXrjqTGxEUK5dQb5MaQF1ctR9hSZMRWlGNJXCXOTejMmpMy3Hf7GitM7+h GVtYUQFYKZSqCg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:14 2025 by rpki-client