This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json) Hash identifier: 7Kx+w4/koX8WQjIsioVTRP4YtCbHpn1SrC3pYsDoEtc= Subject key identifier: 43:23:E5:9F:23:77:2A:2D:A1:B4:F9:35:36:4A:EF:17:0F:4E:C3:E8 Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Certificate serial: 019AF2093D537AB1E2288B6DEB72446782A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft Manifest number: 0DE2 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=) 2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: Gkbma0zbE4mtdsZUVaaBFu+JtKdcJn7etk935thOFpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3d:53:7a:b1:e2:28:8b:6d:eb:72:44:67:82:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=4323e59f23772a2da1b4f935364aef170f4ec3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:47:db:d6:be:ab:98:6c:44:d8:09:02:f6: 4e:c4:03:43:2c:d1:e1:0a:5f:67:e9:9d:07:6d:d3: 04:bd:52:38:92:48:6e:19:bc:ac:d5:85:ac:6d:d5: 72:7d:5e:40:85:d7:9e:15:25:f8:c7:39:19:83:ee: cd:cb:54:59:9b:a2:ef:32:a4:b1:13:4a:e9:92:54: 45:62:2a:5d:09:f7:fe:43:6e:8d:48:d7:f8:f0:e8: e9:18:00:3e:f1:f0:1b:f6:a2:4e:25:7f:b2:a7:52: 64:f6:cd:6e:f1:0e:e0:78:0b:a9:76:ae:87:6b:11: 94:ea:eb:5a:0f:68:63:7d:92:14:64:36:1d:55:16: b2:23:87:cb:f4:70:30:1d:52:2b:5c:0d:e1:56:57: 12:63:98:ec:b8:ba:cf:50:3f:90:df:aa:7b:02:93: 9b:0c:28:58:a2:93:88:c6:b5:71:7c:40:e5:fb:8a: e8:11:eb:1a:5a:80:18:ba:a4:00:45:1a:cf:fc:1e: c2:ee:8a:20:d2:3a:5e:61:d7:26:6f:1b:0d:2d:55: 04:37:51:1e:a5:6d:71:38:82:89:f9:9a:d8:23:4b: 0f:80:e7:ee:34:44:ec:9b:88:d4:7d:be:5a:bb:74: 89:5f:0f:60:08:6e:9d:0e:ef:07:5a:dd:96:d1:0d: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:E5:9F:23:77:2A:2D:A1:B4:F9:35:36:4A:EF:17:0F:4E:C3:E8 X509v3 Authority Key Identifier: keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b2:6a:7b:f8:e6:f2:a8:22:49:5e:6f:89:1c:52:01:8b:4d: b7:91:75:b0:d5:6f:f7:0e:75:09:3c:82:c6:b3:9e:da:b4:91: 33:e2:3b:57:54:99:a0:0d:df:84:9b:b7:10:05:20:dd:39:e5: c1:4c:d0:a7:36:66:15:9a:eb:d7:b5:c7:49:26:9d:d5:cc:3b: 38:49:bc:17:ff:0b:b3:8f:9b:7b:ff:62:da:dd:b7:52:95:33: c9:9c:24:bc:85:8e:ba:10:22:13:26:85:ca:7b:eb:c4:3e:b4: 07:bd:ae:d9:8b:0b:be:cc:b9:b0:aa:68:07:94:cc:a5:38:be: 1b:79:e7:d5:73:15:d8:5e:03:ab:6a:7f:eb:29:ad:a4:1e:83: 48:ea:de:f2:b7:79:70:9e:cb:b4:11:f0:35:fc:57:65:b1:ed: d2:91:3d:b5:75:e8:50:f6:57:ae:b7:4b:e0:37:a5:1c:7e:a6: 8f:93:7f:68:48:d7:49:d0:d5:12:13:19:f0:97:46:09:f8:6f: d5:af:f4:b8:dc:8c:d4:09:67:b5:6f:2d:c6:33:c3:74:01:b7: e1:6d:52:9c:f7:08:ed:53:f7:45:ec:0d:2f:d4:d4:4b:4f:6d: 20:7c:27:37:23:57:53:0e:76:f6:ab:22:1a:89:b6:46:b0:f6: e4:9c:e7:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT1TerHiKItt63JEZ4KhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl NzUyZjMwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD Eyg0MzIzZTU5ZjIzNzcyYTJkYTFiNGY5MzUzNjRhZWYxNzBmNGVjM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYJH29a+q5hsRNgJAvZOxANDLNHh Cl9n6Z0HbdMEvVI4kkhuGbys1YWsbdVyfV5AhdeeFSX4xzkZg+7Ny1RZm6LvMqSx E0rpklRFYipdCff+Q26NSNf48OjpGAA+8fAb9qJOJX+yp1Jk9s1u8Q7geAupdq6H axGU6utaD2hjfZIUZDYdVRayI4fL9HAwHVIrXA3hVlcSY5jsuLrPUD+Q36p7ApOb DChYopOIxrVxfEDl+4roEesaWoAYuqQARRrP/B7C7oog0jpeYdcmbxsNLVUEN1Ee pW1xOIKJ+ZrYI0sPgOfuNETsm4jUfb5au3SJXw9gCG6dDu8HWt2W0Q1M1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMj5Z8jdyotobT5NTZK7xcPTsPoMB8GA1UdIwQY MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt OWMxZjY5YTI0MmJhLzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrJqe/jm 8qgiSV5viRxSAYtNt5F1sNVv9w51CTyCxrOe2rSRM+I7V1SZoA3fhJu3EAUg3Tnl wUzQpzZmFZrr17XHSSad1cw7OEm8F/8Ls4+be/9i2t23UpUzyZwkvIWOuhAiEyaF ynvrxD60B72u2YsLvsy5sKpoB5TMpTi+G3nn1XMV2F4Dq2p/6ymtpB6DSOre8rd5 cJ7LtBHwNfxXZbHt0pE9tXXoUPZXrrdL4DelHH6mj5N/aEjXSdDVEhMZ8JdGCfhv 1a/0uNyM1AlntW8txjPDdAG34W1SnPcI7VP3RewNL9TUS09tIHwnNyNXUw529qsi Gom2RrD25JzneQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:23 2025 by rpki-client