This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json) Hash identifier: kvs/PKlB544YPz2KfMDHkNxryhYoE3ePPwOVx6BEIqU= Subject key identifier: F2:49:1B:A6:F5:B0:8C:F9:9C:13:4C:04:DF:5A:2E:96:C0:9A:75:46 Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6 Certificate serial: 019AF31C972723E961BAA29A1722335052BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft Manifest number: 1461 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=) 2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: RVqDSFjrMDzuQGasuvdd4XMITUWt28ypk/k2E8m9LGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:97:27:23:e9:61:ba:a2:9a:17:22:33:50:52:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=f2491ba6f5b08cf99c134c04df5a2e96c09a7546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:28:ad:05:26:5f:4c:3f:a7:27:79:32:37: 2e:9b:10:7f:de:04:ba:6e:6d:d2:ba:c8:d1:54:c8: 6a:49:3c:24:7d:30:73:b6:ed:3a:1d:db:19:70:5a: 16:a2:6d:5b:7c:0e:a0:d6:ff:f1:ee:ca:81:b8:9d: 2e:ad:20:8d:6e:f7:2c:2e:0c:9e:79:58:36:63:02: 2d:6f:c4:fe:69:2b:e8:72:b6:a9:97:fe:22:0c:3e: c9:f4:78:a9:5d:c3:60:71:5c:60:28:a3:3e:03:eb: 12:b0:07:1f:29:43:5e:6d:18:58:03:a0:50:79:88: 66:e5:b4:bd:99:b9:a3:45:55:a9:99:a8:23:24:d2: 4b:81:cd:12:84:48:7d:b3:97:ea:19:b5:b3:ab:d8: b8:17:2c:30:45:6c:81:de:04:fe:fc:d2:0c:a6:40: dc:18:ba:2b:79:62:aa:1b:a4:d6:11:b6:36:42:c6: 38:3d:5c:0b:cc:19:ab:38:92:7a:f9:58:37:f1:a2: 3a:f8:6c:3c:f7:19:ba:31:7f:ce:a1:1f:5d:6a:85: 16:e3:17:90:01:3e:4d:d0:89:85:f7:98:5e:d6:31: 49:4d:13:4c:a0:00:0e:c9:f9:27:6d:7a:1e:ea:69: af:83:77:7c:09:d1:3e:f5:14:90:17:3a:c8:4d:fa: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:1B:A6:F5:B0:8C:F9:9C:13:4C:04:DF:5A:2E:96:C0:9A:75:46 X509v3 Authority Key Identifier: keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7d:20:7a:74:34:e5:25:8d:c2:a0:0a:5e:4b:2a:d9:9a:0c: e9:33:76:83:99:d0:41:12:10:e3:62:de:68:1a:67:03:50:86: 22:02:9a:14:13:0f:d6:63:f7:b6:ee:7d:80:5e:c3:cd:eb:c0: 75:07:5a:d7:60:a9:a6:ab:97:2f:26:6f:60:20:75:6e:ee:9c: 39:eb:db:3a:96:34:95:f9:58:a1:55:eb:37:03:f6:c3:2f:be: e7:84:a6:0f:e2:b8:a2:09:42:3f:64:dd:7a:81:58:b6:a3:7f: 20:f6:b3:0a:fe:b5:6b:52:2b:ee:49:9e:82:6b:ad:15:63:1c: 01:ee:29:f2:4f:7c:7f:f2:42:1a:7f:dc:21:4e:fc:bb:83:5e: bb:01:1a:06:4d:b9:67:82:c7:cb:5c:e8:1d:1b:fb:86:f7:c1: ab:ff:b3:5b:bc:88:79:39:d0:41:8a:92:8d:1d:43:c9:bd:30: a4:5f:d5:54:cb:a2:cc:ee:87:33:d9:5f:4b:02:79:59:ef:fb: ac:a2:74:34:7c:2f:cd:28:82:59:1d:e3:1a:13:7b:97:16:fe: 23:b1:60:45:0c:96:0f:89:88:05:b6:e8:7a:9b:ae:71:32:99: cb:54:6d:5c:ac:b3:6b:0f:c3:90:bf:53:51:07:79:fb:b3:d1: c8:28:18:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJcnI+lhuqKaFyIzUFK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx MDc4YjYwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EyhmMjQ5MWJhNmY1YjA4Y2Y5OWMxMzRjMDRkZjVhMmU5NmMwOWE3NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtakorQUmX0w/pyd5MjcumxB/3gS6 bm3SusjRVMhqSTwkfTBztu06HdsZcFoWom1bfA6g1v/x7sqBuJ0urSCNbvcsLgye eVg2YwItb8T+aSvocrapl/4iDD7J9HipXcNgcVxgKKM+A+sSsAcfKUNebRhYA6BQ eYhm5bS9mbmjRVWpmagjJNJLgc0ShEh9s5fqGbWzq9i4FywwRWyB3gT+/NIMpkDc GLoreWKqG6TWEbY2QsY4PVwLzBmrOJJ6+Vg38aI6+Gw89xm6MX/OoR9daoUW4xeQ AT5N0ImF95he1jFJTRNMoAAOyfknbXoe6mmvg3d8CdE+9RSQFzrITfpKRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJJG6b1sIz5nBNMBN9aLpbAmnVGMB8GA1UdIwQY MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0 LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH0genQ0 5SWNwqAKXksq2ZoM6TN2g5nQQRIQ42LeaBpnA1CGIgKaFBMP1mP3tu59gF7DzevA dQda12CppquXLyZvYCB1bu6cOevbOpY0lflYoVXrNwP2wy++54SmD+K4oglCP2Td eoFYtqN/IPazCv61a1Ir7kmegmutFWMcAe4p8k98f/JCGn/cIU78u4NeuwEaBk25 Z4LHy1zoHRv7hvfBq/+zW7yIeTnQQYqSjR1Dyb0wpF/VVMuizO6HM9lfSwJ5We/7 rKJ0NHwvzSiCWR3jGhN7lxb+I7FgRQyWD4mIBbboepuucTKZy1RtXKyzaw/DkL9T UQd5+7PRyCgY/w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:10 2025 by rpki-client