This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json) Hash identifier: Bi388c/5VzWxjvdizz06pUSEbH/v+xAp6VCQ9UAvN88= Subject key identifier: 8C:22:DB:0A:4B:DA:8B:45:59:3F:6B:44:17:5C:03:C8:59:F6:96:6C Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Certificate serial: 019AF16449EE70F9146D03206DAA5205FF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: 7d2KXDB2A32mWwmM7uzJX+inEpFvOFt6lEWjo2vxSSA=) 2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:49:ee:70:f9:14:6d:03:20:6d:aa:52:05:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=8c22db0a4bda8b45593f6b44175c03c859f6966c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:ab:2d:f4:73:a7:70:99:93:85:1e:1b:5d: 99:22:7b:06:06:7e:03:e6:d8:00:87:ed:a0:fa:46: 37:96:b7:05:99:5c:9e:11:62:94:90:85:4c:63:7e: fe:6a:c4:c6:20:e6:11:d3:a7:70:ba:c9:e0:2c:9d: a2:c2:cc:e2:b4:98:eb:ca:12:5b:d5:72:56:14:6a: 65:ad:98:9b:1d:d0:f1:08:3f:c2:dc:c4:8e:fe:cb: 40:61:95:46:24:82:2a:1d:22:db:43:f1:c5:48:0f: e1:83:d5:3f:57:c3:0a:d1:0a:68:b5:0b:59:73:80: 60:39:f6:78:1a:00:15:63:5c:4e:86:b3:dd:a9:f7: bd:a6:a8:f5:ef:71:3f:81:13:87:ef:4a:99:29:9f: bd:7d:0c:20:fd:56:16:7e:5c:75:91:e0:b4:61:29: ee:20:19:9a:65:f1:5b:95:bd:6c:75:39:60:a2:22: 88:af:9c:42:a1:5c:0f:8d:29:cc:b0:57:97:0b:e8: 7f:ef:b4:3d:f5:2e:09:07:cf:56:e4:ef:80:1c:21: e2:7a:dd:8d:b8:67:a6:6b:52:3c:7e:a7:b3:3a:4c: f5:fc:4d:13:c1:a3:41:8c:de:c1:42:ae:c5:50:8e: ed:ba:37:ba:08:af:fa:70:a4:f1:af:34:99:31:25: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:22:DB:0A:4B:DA:8B:45:59:3F:6B:44:17:5C:03:C8:59:F6:96:6C X509v3 Authority Key Identifier: keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:60:77:1a:0d:ed:6a:c6:3a:49:a3:48:09:56:e2:f5:9a:c9: 15:1f:c0:7f:e5:de:ae:c8:3b:7c:02:61:67:f6:e1:19:eb:53: 6f:c1:4f:4a:b1:a4:4d:b7:64:f5:01:c5:b6:ad:40:9e:ef:5f: 76:e3:c9:8b:1b:04:1e:2d:19:a7:01:75:34:36:24:87:01:16: d4:a3:b6:67:3a:e2:f8:79:79:32:9a:57:4a:fa:d9:a1:1d:79: 5a:a0:3e:38:fc:e7:ed:80:2a:12:1e:6d:9d:84:9d:41:48:2e: 94:77:ff:87:dd:2b:f6:77:aa:06:0a:3d:06:56:a6:90:30:24: 5b:c3:ae:43:6c:c3:6d:f4:af:93:4d:f7:5f:81:a4:df:35:43: 68:92:bd:bd:b9:f1:16:9a:c8:01:87:48:ef:76:9a:5d:03:da: 72:ce:f5:37:5b:17:dd:89:2e:e0:13:9a:6c:86:f5:0b:a0:f8: 37:8d:a6:e4:b1:c8:44:d9:52:17:c0:fd:59:9e:a0:96:97:67: ab:7a:85:69:5c:85:b5:87:4e:7d:b2:4d:ad:fc:ef:9f:ad:0a: ce:05:aa:e7:11:29:05:b0:56:6f:90:5f:5c:86:cd:10:be:34: 93:30:ec:3e:67:40:b0:72:09:19:f0:05:27:63:96:b1:7e:eb: fb:bd:21:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEnucPkUbQMgbapSBf8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx YzFhZWYwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD Eyg4YzIyZGIwYTRiZGE4YjQ1NTkzZjZiNDQxNzVjMDNjODU5ZjY5NjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPyrLfRzp3CZk4UeG12ZInsGBn4D 5tgAh+2g+kY3lrcFmVyeEWKUkIVMY37+asTGIOYR06dwusngLJ2iwszitJjryhJb 1XJWFGplrZibHdDxCD/C3MSO/stAYZVGJIIqHSLbQ/HFSA/hg9U/V8MK0QpotQtZ c4BgOfZ4GgAVY1xOhrPdqfe9pqj173E/gROH70qZKZ+9fQwg/VYWflx1keC0YSnu IBmaZfFblb1sdTlgoiKIr5xCoVwPjSnMsFeXC+h/77Q99S4JB89W5O+AHCHiet2N uGema1I8fqezOkz1/E0TwaNBjN7BQq7FUI7tuje6CK/6cKTxrzSZMSVyswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwi2wpL2otFWT9rRBdcA8hZ9pZsMB8GA1UdIwQY MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGB3Gg3t asY6SaNICVbi9ZrJFR/Af+Xersg7fAJhZ/bhGetTb8FPSrGkTbdk9QHFtq1Anu9f duPJixsEHi0ZpwF1NDYkhwEW1KO2Zzri+Hl5MppXSvrZoR15WqA+OPzn7YAqEh5t nYSdQUgulHf/h90r9neqBgo9BlamkDAkW8OuQ2zDbfSvk033X4Gk3zVDaJK9vbnx FprIAYdI73aaXQPacs71N1sX3Yku4BOabIb1C6D4N42m5LHIRNlSF8D9WZ6glpdn q3qFaVyFtYdOfbJNrfzvn60KzgWq5xEpBbBWb5BfXIbNEL40kzDsPmdAsHIJGfAF J2OWsX7r+70hKA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:42 2025 by rpki-client