This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json) Hash identifier: BQxCQIY1YOkJjEw4ePxntXjTitRX2BC0pUTBM0FAKeo= Subject key identifier: 2E:4B:DB:BE:EE:2D:14:95:09:99:EE:0A:36:A6:63:78:00:36:D4:C5 Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497 Certificate serial: 019B330D299B6A8BED5C02C989118D304901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft Manifest number: 0B90 Signing time: Thu 18 Dec 2025 20:00:59 +0000 Manifest this update: Thu 18 Dec 2025 20:00:59 +0000 Manifest next update: Fri 19 Dec 2025 20:00:59 +0000 Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=) 2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: JTJyeD4af6LlRgkwPuPC/0avb15MCwp+Kg3OSmQh62Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:29:9b:6a:8b:ed:5c:02:c9:89:11:8d:30:49:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5193d843af193e24875686673c95896eae3497 Validity Not Before: Dec 18 20:00:59 2025 GMT Not After : Dec 19 20:00:59 2025 GMT Subject: CN=2e4bdbbeee2d14950999ee0a36a663780036d4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:53:bf:86:58:b5:e8:68:f7:cf:4f:b8:73: ec:22:63:27:ee:75:59:80:5a:2e:6f:80:e2:5e:88: 10:9a:38:51:b9:32:e1:36:25:ef:6b:18:79:15:7f: 7f:39:ac:be:08:5a:9e:04:84:d9:10:26:05:82:31: 57:71:33:b4:ef:6b:83:93:b8:b2:01:68:a3:bc:04: 9d:a6:3c:7a:c8:26:29:64:50:e9:ab:f9:b9:80:f5: fe:11:53:9d:42:f7:2a:d6:03:3d:87:6f:0f:1e:15: ce:27:40:af:76:37:92:fe:2f:dc:24:65:b4:e0:93: 18:e9:0c:87:87:a1:4e:56:3f:1f:81:27:8d:fa:c6: f6:6c:90:5c:3c:9f:5b:b8:8f:1c:47:76:89:00:fd: 17:8d:a0:13:fe:67:84:29:b9:29:c1:0e:45:24:bf: 77:8b:10:27:4d:58:ef:b1:bb:11:2d:7b:de:a4:ad: 43:8b:1d:d1:30:17:6f:fd:02:78:a4:dd:af:36:f4: 3a:36:94:7c:d1:20:08:4f:56:54:17:ac:33:74:70: 51:ed:56:7a:5b:91:34:d2:9d:68:65:9e:c3:60:ac: 53:3d:dc:b8:62:65:4e:2d:a6:60:f2:25:d3:ee:fa: a2:7a:4f:09:8d:47:3c:2b:18:49:fd:c3:8b:90:e8: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:DB:BE:EE:2D:14:95:09:99:EE:0A:36:A6:63:78:00:36:D4:C5 X509v3 Authority Key Identifier: keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2f:ec:f0:ec:ec:27:f9:2b:9d:71:1f:13:14:e2:a2:a3:dc: d8:f0:9b:88:f7:a0:63:91:23:7c:ef:72:22:88:f8:e8:73:df: ca:24:81:5e:80:b5:81:88:bb:d6:e5:98:41:47:23:f2:48:2e: 5f:ee:8c:64:81:3a:e0:78:af:f9:ee:86:b3:fd:8d:f9:23:01: f7:f7:1e:2f:b4:1b:1e:44:32:c7:29:70:81:60:aa:b1:47:86: f8:57:50:53:0a:ad:60:9f:9f:2e:72:b1:cb:35:b4:da:2a:a6: 2d:2c:00:67:17:38:b2:c9:a5:ac:72:65:1b:31:ab:d3:64:04: b9:b6:d5:e8:c0:3a:a3:05:ec:94:e8:97:52:a0:ab:47:87:ab: 1e:a6:b4:b2:2d:d6:7e:c6:f2:49:b0:af:ab:02:3f:db:a1:4f: dc:ec:21:1a:77:98:93:a5:2b:a9:50:f7:5b:d7:a4:7c:93:ce: 30:01:67:b2:28:e3:c4:ae:49:34:78:2a:be:e7:1d:79:56:b0: b6:d2:bf:13:b7:9c:29:fd:2b:4a:56:65:f4:55:c0:e8:09:5e: 12:72:42:e7:52:d3:c8:f0:33:58:a1:89:ee:d2:c7:53:77:db: 3f:e5:d3:1e:d5:fa:6f:e9:2a:da:3f:2a:30:dc:91:b2:5e:22: 40:28:48:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDSmbaovtXALJiRGNMEkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh ZTM0OTcwHhcNMjUxMjE4MjAwMDU5WhcNMjUxMjE5MjAwMDU5WjAzMTEwLwYDVQQD EygyZTRiZGJiZWVlMmQxNDk1MDk5OWVlMGEzNmE2NjM3ODAwMzZkNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzihTv4ZYteho989PuHPsImMn7nVZ gFoub4DiXogQmjhRuTLhNiXvaxh5FX9/Oay+CFqeBITZECYFgjFXcTO072uDk7iy AWijvASdpjx6yCYpZFDpq/m5gPX+EVOdQvcq1gM9h28PHhXOJ0CvdjeS/i/cJGW0 4JMY6QyHh6FOVj8fgSeN+sb2bJBcPJ9buI8cR3aJAP0XjaAT/meEKbkpwQ5FJL93 ixAnTVjvsbsRLXvepK1Dix3RMBdv/QJ4pN2vNvQ6NpR80SAIT1ZUF6wzdHBR7VZ6 W5E00p1oZZ7DYKxTPdy4YmVOLaZg8iXT7vqiek8JjUc8KxhJ/cOLkOjRvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5L277uLRSVCZnuCjamY3gANtTFMB8GA1UdIwQY MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt MDAwZWFkMzk3NjVhLzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy/s8Ozs J/krnXEfExTioqPc2PCbiPegY5EjfO9yIoj46HPfyiSBXoC1gYi71uWYQUcj8kgu X+6MZIE64Hiv+e6Gs/2N+SMB9/ceL7QbHkQyxylwgWCqsUeG+FdQUwqtYJ+fLnKx yzW02iqmLSwAZxc4ssmlrHJlGzGr02QEubbV6MA6owXslOiXUqCrR4erHqa0si3W fsbySbCvqwI/26FP3OwhGneYk6UrqVD3W9ekfJPOMAFnsijjxK5JNHgqvucdeVaw ttK/E7ecKf0rSlZl9FXA6AleEnJC51LTyPAzWKGJ7tLHU3fbP+XTHtX6b+kq2j8q MNyRsl4iQChIdA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:30:01 2025 by rpki-client