This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json) Hash identifier: 01S1kjogH9Ztb43SkK9Z8QMORuHBGhfcHOrjqI6TUBA= Subject key identifier: 35:70:E5:95:D5:9A:F4:72:3C:F8:D7:8A:CE:B4:23:F7:4E:7B:CC:FE Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Certificate serial: 019AF16406F741F32206EB87380312A63DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft Manifest number: 0A25 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: C+613G/acCDvN1UHldDlnm0CVLKugcEgzbba9QkjiIs=) 2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:06:f7:41:f3:22:06:eb:87:38:03:12:a6:3d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=3570e595d59af4723cf8d78aceb423f74e7bccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:0b:84:52:16:5a:0b:6f:bd:8a:55:5a:55: d2:eb:31:53:7e:dd:f9:94:c4:2f:f9:c7:bb:d3:90: fb:c3:1c:96:24:29:39:90:c0:11:a9:26:bd:a3:0f: 21:ba:30:b6:f3:5a:aa:57:eb:73:8c:a6:9d:fa:a4: 39:e4:d6:7e:49:25:7a:48:4a:d9:12:1d:0f:00:9f: 37:a5:f6:98:59:d2:95:c4:04:2d:ae:81:31:97:9a: ac:b0:3b:05:33:99:57:57:0c:6e:b0:75:49:7c:53: 4d:f4:b3:9c:01:2f:6b:00:5c:cc:da:36:2d:e0:24: 86:90:4a:52:96:89:f5:ba:cb:c3:18:2c:e8:92:3b: 4a:34:77:a2:96:4c:fc:41:31:c4:f4:5f:ce:84:4f: 6c:68:07:a2:79:05:17:88:21:09:e0:8d:1f:0a:3d: 93:78:c1:1e:d6:97:a1:96:75:89:39:59:46:90:21: 8f:58:78:c7:f8:9e:ad:51:3e:04:ae:bd:27:31:6c: e7:46:af:7a:ed:ea:59:6c:cf:f1:ab:15:2c:44:06: 3b:88:86:e6:bb:c9:d6:0e:6a:63:19:84:b0:af:e8: ed:cf:7d:ac:f7:dd:e6:d9:a0:5d:9b:3c:57:48:2e: 22:52:a6:2e:0b:7e:e4:02:a2:cf:e5:4e:71:f5:cf: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:70:E5:95:D5:9A:F4:72:3C:F8:D7:8A:CE:B4:23:F7:4E:7B:CC:FE X509v3 Authority Key Identifier: keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:46:ed:6c:a1:13:cd:b3:c1:b6:31:8a:23:6e:97:a4:a1:40: b6:47:c0:66:23:dd:f6:83:9e:aa:f9:0c:7d:71:26:89:a2:36: d7:09:60:bd:6a:b2:a5:f6:ce:d9:f1:37:76:3d:18:a8:84:85: c8:b5:d0:85:d6:b2:50:c0:21:77:f4:c0:a0:85:4d:f3:31:2e: e8:50:b3:9e:6e:ab:7e:cb:d3:fd:0f:52:89:45:62:4d:27:b0: 5a:36:71:d5:30:c6:d0:72:c9:89:ce:56:c6:2e:e8:00:f1:cf: c3:dc:6c:98:88:94:b5:f4:49:57:23:7d:14:06:bd:e9:44:b7: e5:ad:db:e4:9c:41:32:11:51:5d:8b:d6:40:c4:39:a4:ae:d2: 93:9d:eb:22:dc:e3:f8:70:47:e3:c7:64:1f:11:83:be:ca:13: 82:03:ae:5d:f5:98:8a:5f:19:1c:65:fb:06:bc:70:c0:32:a7: 3d:ab:6a:71:02:49:1b:10:88:1b:95:c2:a1:11:54:1a:e0:65: 3d:9e:71:89:94:05:6d:cb:4a:d4:05:cd:57:e7:a9:d3:9e:ac: 03:36:39:32:0a:7b:df:e1:38:77:dd:7e:2c:6d:22:7c:05:a1: 09:b6:a3:8d:a9:13:4e:9a:18:12:68:d8:ce:4c:29:a9:6f:71: b9:27:4b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAb3QfMiBuuHOAMSpj25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj ZjFlNjAwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD EygzNTcwZTU5NWQ1OWFmNDcyM2NmOGQ3OGFjZWI0MjNmNzRlN2JjY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SwLhFIWWgtvvYpVWlXS6zFTft35 lMQv+ce705D7wxyWJCk5kMARqSa9ow8hujC281qqV+tzjKad+qQ55NZ+SSV6SErZ Eh0PAJ83pfaYWdKVxAQtroExl5qssDsFM5lXVwxusHVJfFNN9LOcAS9rAFzM2jYt 4CSGkEpSlon1usvDGCzokjtKNHeilkz8QTHE9F/OhE9saAeieQUXiCEJ4I0fCj2T eMEe1pehlnWJOVlGkCGPWHjH+J6tUT4Err0nMWznRq967epZbM/xqxUsRAY7iIbm u8nWDmpjGYSwr+jtz32s993m2aBdmzxXSC4iUqYuC37kAqLP5U5x9c9ZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVw5ZXVmvRyPPjXis60I/dOe8z+MB8GA1UdIwQY MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt ZWRjYzUyZTE3YTk0LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0 LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEbtbKET zbPBtjGKI26XpKFAtkfAZiPd9oOeqvkMfXEmiaI21wlgvWqypfbO2fE3dj0YqISF yLXQhdayUMAhd/TAoIVN8zEu6FCznm6rfsvT/Q9SiUViTSewWjZx1TDG0HLJic5W xi7oAPHPw9xsmIiUtfRJVyN9FAa96US35a3b5JxBMhFRXYvWQMQ5pK7Sk53rItzj +HBH48dkHxGDvsoTggOuXfWYil8ZHGX7BrxwwDKnPatqcQJJGxCIG5XCoRFUGuBl PZ5xiZQFbctK1AXNV+ep056sAzY5Mgp73+E4d91+LG0ifAWhCbajjakTTpoYEmjY zkwpqW9xuSdLUA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:20 2025 by rpki-client