This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json) Hash identifier: EGS5iSch24b5jnADLNF15nXBZwivRILiUF7yya/gI5o= Subject key identifier: 08:AF:45:B4:93:1B:60:B9:6D:16:97:42:A6:A1:5D:5B:76:A0:07:8E Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Certificate serial: 019AF16415A4BB24904E42B2F029316504EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=) 2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: XrfGkNIev62DEj01QtnIH+WnQYqmRD8eLslA91saJTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:15:a4:bb:24:90:4e:42:b2:f0:29:31:65:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=08af45b4931b60b96d169742a6a15d5b76a0078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:6c:24:3b:21:cb:14:e6:37:80:b5:1f:65: 5b:d6:d8:19:ad:7a:50:6c:f9:4f:4b:8e:d8:7c:8a: 98:33:b6:b1:9c:42:cc:a7:99:db:d0:bf:63:8f:54: 97:a4:4c:36:64:6e:d3:96:2b:26:29:ac:bb:08:78: f1:4f:ae:af:50:01:bc:d4:7a:64:88:71:ce:71:07: 93:35:e9:5b:d7:c2:fc:13:94:12:b2:a9:11:2a:1b: b9:e7:b3:9c:53:7d:5b:e3:98:ca:50:0b:8a:dd:a0: 5a:89:c5:81:ca:2a:cc:e8:75:ed:53:c4:05:7c:48: 9a:6f:db:ba:b6:53:b3:4f:7a:73:a4:77:6c:a8:37: e7:53:96:96:43:b3:c5:fe:a7:24:cc:80:df:2e:c0: 79:0c:5d:d9:df:bc:1b:1e:f3:58:32:9a:23:f0:43: e6:61:d0:0a:76:7d:5a:a6:62:81:8e:53:2c:a3:9c: d8:b6:44:e0:38:36:76:d3:05:7e:fe:e0:8f:32:a3: 3e:ec:c9:21:70:39:22:14:df:d1:26:83:4e:d8:d7: 1c:f3:89:da:e5:46:3c:0b:bd:88:ad:ad:91:7e:6e: 67:16:2e:cb:f2:5e:8d:14:ce:2f:6b:09:18:18:d9: 1c:8b:21:d2:3d:00:8a:44:ca:ab:2a:40:34:07:0c: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:45:B4:93:1B:60:B9:6D:16:97:42:A6:A1:5D:5B:76:A0:07:8E X509v3 Authority Key Identifier: keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:41:b6:9f:e6:70:5c:97:4d:b2:fe:46:22:52:ba:63:cb: aa:8c:d0:83:af:4a:f6:c3:ea:70:b8:32:72:e7:fb:a1:bf:fb: a7:96:5a:97:b5:5d:7e:86:4d:c2:6d:18:fd:bb:48:29:7b:92: fa:32:82:fb:1f:45:f5:e4:e7:df:60:9c:91:36:5b:e5:ab:8f: c1:55:5e:d1:ae:ac:a7:b7:2f:2a:cd:b4:19:f1:ad:03:78:02: 2e:7e:13:01:39:f1:1f:d4:4e:0a:73:07:12:cb:eb:5a:82:c8: 22:20:45:c5:7b:84:d2:07:96:b5:d2:c2:5c:c5:71:68:52:ee: 08:8c:ee:57:3b:27:45:ec:49:0a:76:cb:54:77:df:67:69:aa: b9:06:91:3e:b1:06:57:cd:c8:66:f9:d5:66:df:11:dd:11:af: 1d:6b:89:56:3d:7e:20:e4:97:b2:9b:27:9e:57:7b:6e:02:4e: 13:ba:6c:4f:49:f4:70:92:29:ac:9e:f1:8f:39:17:eb:bb:ee: 81:4e:64:f9:58:db:5f:2a:c5:87:c1:e1:e1:6a:de:59:5d:04: 2b:b9:1f:ad:d7:ee:64:cb:b2:a7:44:cb:36:cc:d9:de:65:1c: 95:e5:48:68:d7:63:d4:ab:41:e8:02:e2:02:a0:ec:aa:78:c1: 82:bb:81:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBWkuySQTkKy8CkxZQTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3 MWFhYjgwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygwOGFmNDViNDkzMWI2MGI5NmQxNjk3NDJhNmExNWQ1Yjc2YTAwNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthpsJDshyxTmN4C1H2Vb1tgZrXpQ bPlPS47YfIqYM7axnELMp5nb0L9jj1SXpEw2ZG7TlismKay7CHjxT66vUAG81Hpk iHHOcQeTNelb18L8E5QSsqkRKhu557OcU31b45jKUAuK3aBaicWByirM6HXtU8QF fEiab9u6tlOzT3pzpHdsqDfnU5aWQ7PF/qckzIDfLsB5DF3Z37wbHvNYMpoj8EPm YdAKdn1apmKBjlMso5zYtkTgODZ20wV+/uCPMqM+7MkhcDkiFN/RJoNO2Ncc84na 5UY8C72Ira2Rfm5nFi7L8l6NFM4vawkYGNkciyHSPQCKRMqrKkA0BwxwIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAivRbSTG2C5bRaXQqahXVt2oAeOMB8GA1UdIwQY MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4 LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8tBtp/m cFyXTbL+RiJSumPLqozQg69K9sPqcLgycuf7ob/7p5Zal7VdfoZNwm0Y/btIKXuS +jKC+x9F9eTn32CckTZb5auPwVVe0a6sp7cvKs20GfGtA3gCLn4TATnxH9ROCnMH EsvrWoLIIiBFxXuE0geWtdLCXMVxaFLuCIzuVzsnRexJCnbLVHffZ2mquQaRPrEG V83IZvnVZt8R3RGvHWuJVj1+IOSXspsnnld7bgJOE7psT0n0cJIprJ7xjzkX67vu gU5k+VjbXyrFh8Hh4WreWV0EK7kfrdfuZMuyp0TLNszZ3mUcleVIaNdj1KtB6ALi AqDsqnjBgruBRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:12 2025 by rpki-client