This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json) Hash identifier: urKDcVmQOkEWkW5GntJtNh6DSp9OM4/Xej8hoLsZ8lI= Subject key identifier: 23:09:EC:4F:02:D6:C8:5A:CD:CA:F9:90:E4:4E:50:B3:04:CB:25:3B Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80 Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80 Certificate serial: 019B32317F4B987B4C13F7F5D10732CD90F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 16:01:03 +0000 Manifest this update: Thu 18 Dec 2025 16:01:03 +0000 Manifest next update: Fri 19 Dec 2025 16:01:03 +0000 Files and hashes: 1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=) 2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: K40zHxZZQPGBT84XxgUuXEl8q9HrReU2jOPKxhsDbXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:7f:4b:98:7b:4c:13:f7:f5:d1:07:32:cd:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80 Validity Not Before: Dec 18 16:01:03 2025 GMT Not After : Dec 19 16:01:03 2025 GMT Subject: CN=2309ec4f02d6c85acdcaf990e44e50b304cb253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:b9:88:af:17:91:28:bc:ba:fb:02:60:2b: d6:56:11:5f:b9:df:c9:e4:5d:c2:f1:13:68:6c:88: 3d:33:28:b2:43:53:9b:df:91:f7:38:b1:3e:18:20: 28:8a:ed:d6:08:a0:66:20:2b:10:f8:92:cc:cc:02: 9e:67:70:af:28:67:04:ff:38:65:69:fb:78:07:9f: e8:4a:af:78:7c:18:ec:f1:92:66:60:51:c0:8f:23: 2e:1e:cd:b7:d5:f7:c9:63:34:21:24:08:ca:08:da: 9b:19:6d:c2:03:c0:df:37:1b:07:1f:cf:d3:e6:0a: 9d:fc:61:25:2d:3a:76:45:f3:03:c4:02:a7:b3:90: 4f:ac:88:e8:ab:29:81:ac:64:3a:29:ff:14:75:22: a6:60:81:e9:31:21:28:df:05:ed:3e:e9:ae:f8:59: 04:60:8c:3a:47:0b:5b:9b:3f:80:38:d0:61:a0:a9: 88:40:1c:1a:f0:fa:b9:bb:bb:8e:1f:f9:8d:16:e9: 55:2a:1e:1a:66:ec:1f:6c:c9:71:20:93:fd:3c:65: b8:cb:87:6b:ec:7b:d3:45:34:55:8c:c6:9d:06:43: 6f:ed:c9:1c:22:19:d7:bd:a4:c5:67:91:03:81:50: 01:90:f5:e8:f2:26:bf:d3:14:a0:f6:bf:eb:c5:40: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:EC:4F:02:D6:C8:5A:CD:CA:F9:90:E4:4E:50:B3:04:CB:25:3B X509v3 Authority Key Identifier: keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fa:a6:bb:e5:18:ce:1b:4a:a0:d2:7d:70:b7:15:4c:55:f0: 95:e7:db:87:1b:df:04:8f:04:e4:03:14:da:0a:21:58:61:af: 61:e1:d7:f9:97:97:b5:06:1a:50:bf:09:15:d9:d7:30:b5:86: 08:2c:a8:20:d5:d1:52:f5:e9:8c:f8:03:cb:44:2e:6b:4f:95: fa:6c:e4:ac:fb:36:ee:9d:aa:dd:78:dc:2c:88:ad:55:21:05: 9a:8b:69:b4:26:74:16:f2:27:eb:bc:86:9c:e7:23:d8:77:61: a7:4d:cc:12:34:cb:ab:55:ea:c9:9a:e0:60:7d:27:3d:3d:4d: 93:f7:49:52:af:41:91:69:73:d2:f8:ea:ce:55:8b:77:3a:18: fd:92:13:b5:c3:fb:6b:38:22:dc:ee:6d:aa:8a:a6:d6:28:54: 04:75:25:1e:47:bd:af:05:cb:74:ba:e6:1c:95:1b:9a:6b:b8: 03:fc:14:9f:fa:d4:69:78:82:8c:99:4b:b8:98:4c:b5:49:1d: 50:23:62:9c:dd:a8:b5:c3:5b:2e:4b:7b:8c:65:d3:76:82:22: 77:08:4d:0e:09:c3:8c:14:3d:ff:75:8d:e6:d4:97:da:eb:12: f0:b9:06:f9:2d:76:c8:ef:c9:45:ed:70:fa:0a:66:54:51:c7: 3b:a9:4a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMX9LmHtME/f10QcyzZDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODMxZWU5NGMzN2I5YjExNTljN2Q3NzMyOTM2MTgxYWI1 NDFkODAwHhcNMjUxMjE4MTYwMTAzWhcNMjUxMjE5MTYwMTAzWjAzMTEwLwYDVQQD EygyMzA5ZWM0ZjAyZDZjODVhY2RjYWY5OTBlNDRlNTBiMzA0Y2IyNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXK5iK8XkSi8uvsCYCvWVhFfud/J 5F3C8RNobIg9MyiyQ1Ob35H3OLE+GCAoiu3WCKBmICsQ+JLMzAKeZ3CvKGcE/zhl aft4B5/oSq94fBjs8ZJmYFHAjyMuHs231ffJYzQhJAjKCNqbGW3CA8DfNxsHH8/T 5gqd/GElLTp2RfMDxAKns5BPrIjoqymBrGQ6Kf8UdSKmYIHpMSEo3wXtPumu+FkE YIw6Rwtbmz+AONBhoKmIQBwa8Pq5u7uOH/mNFulVKh4aZuwfbMlxIJP9PGW4y4dr 7HvTRTRVjMadBkNv7ckcIhnXvaTFZ5EDgVABkPXo8ia/0xSg9r/rxUCk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMJ7E8C1shazcr5kOROULMEyyU7MB8GA1UdIwQY MBaAFJuDHulMN7mxFZx9dzKTYYGrVB2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgt MTI4MGYyZTc4M2Q0LzEvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgtMTI4MGYyZTc4M2Q0 LzEvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivqmu+UY zhtKoNJ9cLcVTFXwlefbhxvfBI8E5AMU2gohWGGvYeHX+ZeXtQYaUL8JFdnXMLWG CCyoINXRUvXpjPgDy0Qua0+V+mzkrPs27p2q3XjcLIitVSEFmotptCZ0FvIn67yG nOcj2Hdhp03MEjTLq1XqyZrgYH0nPT1Nk/dJUq9BkWlz0vjqzlWLdzoY/ZITtcP7 azgi3O5tqoqm1ihUBHUlHke9rwXLdLrmHJUbmmu4A/wUn/rUaXiCjJlLuJhMtUkd UCNinN2otcNbLkt7jGXTdoIidwhNDgnDjBQ9/3WN5tSX2usS8LkG+S12yO/JRe1w +gpmVFHHO6lKVA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:50:23 2025 by rpki-client