This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json) Hash identifier: z3/H5Gp7EJxIKX4/0mOEhAqbcPOXYW1ILbwc9ndmzX8= Subject key identifier: B5:42:A2:92:3E:B7:E2:46:BF:3A:5E:A1:EB:D8:33:C3:42:1D:EE:09 Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Certificate serial: 019AF4658B86F5A09507C64B3E3C68BAEDB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: 1oLo2YmoB4so4HsxHSOtL59doCyOHA0UvH+1HesfGqs=) 2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8b:86:f5:a0:95:07:c6:4b:3e:3c:68:ba:ed:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=b542a2923eb7e246bf3a5ea1ebd833c3421dee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:38:a8:d6:59:ef:69:61:ed:57:e5:8e:9a: ca:4f:63:d4:f2:10:cb:ac:78:bc:dd:f9:93:5a:b5: 68:b7:a4:fa:e8:b4:07:b0:5b:f8:32:10:9c:90:08: 29:92:a8:a6:dc:c3:fe:a0:36:da:ae:15:be:81:18: f8:41:13:10:61:f2:24:7d:5d:98:3b:45:53:d1:c5: 2f:6a:ed:b3:13:a7:d7:1a:16:b7:38:15:be:28:24: 4a:00:e1:78:50:8f:4c:0d:39:7c:6f:36:0c:44:48: c9:6d:0c:91:e6:5d:91:8e:d1:a4:d3:91:84:ab:43: 36:d0:fd:ba:a7:4b:8e:dc:52:29:21:db:8d:13:b8: fe:a5:f1:b8:4a:ef:f6:49:10:23:d2:ba:9e:d4:bf: a6:ec:db:e2:26:64:c5:c9:67:11:90:5d:32:7f:96: c1:51:45:63:5b:eb:0e:92:e9:e5:3d:35:27:23:cb: 88:e2:7c:86:fb:0f:e4:f8:e0:57:e5:07:ee:b8:53: 44:eb:fc:e4:f4:83:4b:47:ad:79:84:97:61:f9:1d: 88:74:69:ff:f6:28:9b:81:56:08:ab:10:35:08:ee: a6:03:f6:b9:af:e9:3e:c0:da:88:9e:3b:4c:4d:29: f5:b4:f6:d7:ed:a0:1e:3c:d9:fa:15:e3:ea:6e:cd: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:A2:92:3E:B7:E2:46:BF:3A:5E:A1:EB:D8:33:C3:42:1D:EE:09 X509v3 Authority Key Identifier: keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:25:22:ad:41:46:9a:34:f5:6f:de:18:20:c0:21:ab:00:c4: c2:a2:31:1c:7c:27:d5:f8:b5:86:59:6f:f2:ba:db:d8:12:56: 41:16:bd:e7:de:81:6d:e9:14:aa:89:c6:e5:12:b9:24:ea:32: 64:b9:33:70:5a:77:7e:6c:f9:71:4e:b2:3c:c3:4b:ff:ab:c4: 88:4c:86:48:b7:5d:c8:78:de:1e:92:54:81:2b:b4:a1:ac:f5: 6c:6e:c1:43:4c:bb:2a:13:8c:45:c3:04:e0:ec:7a:31:5c:57: ea:5f:9a:08:df:c6:a1:51:ec:01:82:37:e4:ac:0e:c6:73:93: 20:e9:3e:43:fe:8e:7c:c0:a5:ef:84:54:cd:66:21:4e:d9:cb: e9:bc:35:6c:af:b9:1e:99:5c:03:05:5e:d1:ad:4d:9c:a7:26: 2c:ab:76:a9:96:21:00:13:07:78:66:7f:52:7e:b3:00:94:0d: e3:b5:4e:cd:aa:e0:66:cf:c9:ea:ee:69:42:b2:cb:46:a1:d1: 00:76:1c:ef:a2:ed:69:59:cb:3d:44:92:ff:e3:37:7d:c8:4b: 11:be:aa:1b:ab:e3:2c:a6:c8:54:ea:aa:5c:af:d4:f7:37:4d: d5:68:d9:33:b1:95:21:e7:c5:c9:dc:51:6a:21:4c:d3:5d:09: 65:1a:54:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYuG9aCVB8ZLPjxouu25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk OTdjNTAwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD EyhiNTQyYTI5MjNlYjdlMjQ2YmYzYTVlYTFlYmQ4MzNjMzQyMWRlZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswc4qNZZ72lh7VfljprKT2PU8hDL rHi83fmTWrVot6T66LQHsFv4MhCckAgpkqim3MP+oDbarhW+gRj4QRMQYfIkfV2Y O0VT0cUvau2zE6fXGha3OBW+KCRKAOF4UI9MDTl8bzYMREjJbQyR5l2RjtGk05GE q0M20P26p0uO3FIpIduNE7j+pfG4Su/2SRAj0rqe1L+m7NviJmTFyWcRkF0yf5bB UUVjW+sOkunlPTUnI8uI4nyG+w/k+OBX5QfuuFNE6/zk9INLR615hJdh+R2IdGn/ 9iibgVYIqxA1CO6mA/a5r+k+wNqInjtMTSn1tPbX7aAePNn6FePqbs3r1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVCopI+t+JGvzpeoevYM8NCHe4JMB8GA1UdIwQY MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCUirUFG mjT1b94YIMAhqwDEwqIxHHwn1fi1hllv8rrb2BJWQRa9596BbekUqonG5RK5JOoy ZLkzcFp3fmz5cU6yPMNL/6vEiEyGSLddyHjeHpJUgSu0oaz1bG7BQ0y7KhOMRcME 4Ox6MVxX6l+aCN/GoVHsAYI35KwOxnOTIOk+Q/6OfMCl74RUzWYhTtnL6bw1bK+5 HplcAwVe0a1NnKcmLKt2qZYhABMHeGZ/Un6zAJQN47VOzargZs/J6u5pQrLLRqHR AHYc76LtaVnLPUSS/+M3fchLEb6qG6vjLKbIVOqqXK/U9zdN1WjZM7GVIefFydxR aiFM010JZRpUww== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:23 2025 by rpki-client