This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json) Hash identifier: ufK/Uep810NyahvFymqmO3DH0P0A2qZ3VU8IE/Afhkk= Subject key identifier: 42:CD:AB:DD:D7:FB:4E:FE:3E:10:3C:D7:59:6A:76:02:4E:0F:BE:16 Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a Certificate serial: 019AF4653A79EEEE0D6FBBA0A72309E9D347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:05 +0000 Manifest this update: Sat 06 Dec 2025 16:01:05 +0000 Manifest next update: Sun 07 Dec 2025 16:01:05 +0000 Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=) 2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: teRzSm1TpFSU+chOonsWnGv1d7yT+B+p1ESe1cpNwpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3a:79:ee:ee:0d:6f:bb:a0:a7:23:09:e9:d3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a Validity Not Before: Dec 6 16:01:05 2025 GMT Not After : Dec 7 16:01:05 2025 GMT Subject: CN=42cdabddd7fb4efe3e103cd7596a76024e0fbe16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:0a:e5:9f:a0:2c:6c:6a:77:f0:87:e5:13: 67:cd:d5:f3:a8:87:eb:6a:e9:5b:9d:13:e6:18:70: 86:1c:99:62:9f:e6:a1:ce:1e:8e:32:3f:e4:57:4a: ad:e6:1b:93:ca:17:c9:85:3e:18:9a:47:2c:59:22: 6e:15:c6:ba:b3:6b:08:d8:d7:5d:9b:34:7e:e3:91: 5d:a0:08:aa:d2:3d:1f:ff:b3:a9:44:95:2e:43:6a: 54:62:46:fa:56:51:3f:4b:ee:63:5d:c7:8b:f4:60: ae:3c:15:77:3d:cf:67:ef:3e:97:3a:53:87:bb:fe: f6:49:cb:17:b9:2b:d1:35:93:94:d2:70:89:99:91: 77:85:96:5d:e7:e4:b2:be:b6:bb:50:48:6b:ad:83: 28:3c:4a:50:77:56:4d:2d:6b:30:8f:b7:52:82:89: be:56:cd:c2:b0:7a:82:fa:4c:96:45:1c:18:21:72: 74:ac:4a:91:75:78:99:b5:53:87:6f:60:99:19:7b: f4:5d:21:57:55:c5:ae:8d:c2:49:fb:07:e4:10:98: 15:08:8c:17:1f:07:ed:b2:2f:ef:17:cf:77:ff:86: 75:b3:d6:dc:ba:78:52:87:1c:cc:66:e2:8c:a0:32: db:cd:4d:66:44:ce:88:2c:51:ab:9a:13:44:61:6a: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CD:AB:DD:D7:FB:4E:FE:3E:10:3C:D7:59:6A:76:02:4E:0F:BE:16 X509v3 Authority Key Identifier: keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:01:30:a6:a1:c3:e7:6d:43:5b:31:34:af:f8:bb:88:37: 24:9f:6c:1a:35:b9:4a:41:d5:49:b8:87:06:0d:29:09:b7:fe: ef:1c:61:cf:4f:77:2a:89:a1:54:6e:81:11:20:9c:75:41:dc: f3:4a:36:ec:86:5a:a7:ca:dd:6a:4c:c9:b3:16:6f:02:dc:33: bd:3a:88:6a:fa:7c:6b:cb:51:c9:8b:80:67:17:60:ca:bb:1d: a2:2d:79:84:46:54:88:4f:37:b9:1b:78:88:d0:2d:cb:ab:f1: 01:7b:6a:06:de:2f:a9:f7:a8:7e:41:f0:8c:41:ed:27:ef:b2: f5:ea:4c:4b:a1:c7:c1:fd:5b:19:b8:05:a3:31:42:58:7e:fe: 6e:45:0e:1c:b8:73:f9:43:ea:fe:af:b3:21:d3:30:d2:51:e0: 70:51:9f:ff:c9:24:dc:cd:a6:8b:b9:03:43:52:1a:d2:de:db: 56:a1:22:a4:72:63:e3:92:96:fa:a8:10:57:96:16:e5:c6:91: c8:30:09:b8:ff:19:24:fc:51:c1:1b:a2:a8:d6:3d:be:2e:84: 32:5d:82:8c:a2:f4:6d:56:b9:4c:3e:f1:e0:ca:18:17:14:cd: f7:5f:09:24:5f:eb:74:6a:a3:df:6c:15:e2:f8:22:2c:81:75: 8f:57:ca:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTp57u4Nb7ugpyMJ6dNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNDEwODc1Y2E3OGNjNWUzZDE5MmUwNTRhOTZkZjAzMDJj N2Y5N2EwHhcNMjUxMjA2MTYwMTA1WhcNMjUxMjA3MTYwMTA1WjAzMTEwLwYDVQQD Eyg0MmNkYWJkZGQ3ZmI0ZWZlM2UxMDNjZDc1OTZhNzYwMjRlMGZiZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzsK5Z+gLGxqd/CH5RNnzdXzqIfr aulbnRPmGHCGHJlin+ahzh6OMj/kV0qt5huTyhfJhT4YmkcsWSJuFca6s2sI2Ndd mzR+45FdoAiq0j0f/7OpRJUuQ2pUYkb6VlE/S+5jXceL9GCuPBV3Pc9n7z6XOlOH u/72ScsXuSvRNZOU0nCJmZF3hZZd5+Syvra7UEhrrYMoPEpQd1ZNLWswj7dSgom+ Vs3CsHqC+kyWRRwYIXJ0rEqRdXiZtVOHb2CZGXv0XSFXVcWujcJJ+wfkEJgVCIwX Hwftsi/vF893/4Z1s9bcunhShxzMZuKMoDLbzU1mRM6ILFGrmhNEYWoeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELNq93X+07+PhA811lqdgJOD74WMB8GA1UdIwQY MBaAFDNBCHXKeMxePRkuBUqW3wMCx/l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjkt ZjA4MTZlMzhhZGRlLzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjktZjA4MTZlMzhhZGRl LzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcisBMKah w+dtQ1sxNK/4u4g3JJ9sGjW5SkHVSbiHBg0pCbf+7xxhz093KomhVG6BESCcdUHc 80o27IZap8rdakzJsxZvAtwzvTqIavp8a8tRyYuAZxdgyrsdoi15hEZUiE83uRt4 iNAty6vxAXtqBt4vqfeofkHwjEHtJ++y9epMS6HHwf1bGbgFozFCWH7+bkUOHLhz +UPq/q+zIdMw0lHgcFGf/8kk3M2mi7kDQ1Ia0t7bVqEipHJj45KW+qgQV5YW5caR yDAJuP8ZJPxRwRuiqNY9vi6EMl2CjKL0bVa5TD7x4MoYFxTN918JJF/rdGqj32wV 4vgiLIF1j1fK1w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:26 2025 by rpki-client