This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json) Hash identifier: XkvjGc5FcVAdnltVxmHmWZlNSftz48QlFcp8guOATmY= Subject key identifier: 25:97:75:7E:C0:B9:FF:5B:EC:52:AD:B9:85:6C:DA:FE:8C:70:EA:53 Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0 Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0 Certificate serial: 019AF19AC2553296ECD7BEA24F9535E83184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft Manifest number: 0898 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: f7MZqzZhyN1RBYV3nokC29jvA8jPTzvvoP5PMXczkLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c2:55:32:96:ec:d7:be:a2:4f:95:35:e8:31:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33860c837221990709cf5aea29db8168953e7de0 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=2597757ec0b9ff5bec52adb9856cdafe8c70ea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:45:a9:3f:24:19:16:6a:a0:29:52:9a:2d: 72:a2:a6:73:97:f7:d6:e1:ff:d2:87:38:6d:53:be: 3d:11:41:02:4d:cb:16:b9:d2:92:db:77:50:66:a4: e7:40:c4:f6:51:db:20:66:d8:3c:a5:c5:4a:6e:57: c6:cf:93:d6:a4:4c:17:b3:10:24:ba:87:5d:46:09: 34:9d:90:1d:e8:91:98:53:85:88:49:37:f7:6d:07: e3:6b:dc:0b:be:e0:98:b0:6f:70:f7:37:aa:16:85: cb:ec:13:c4:dc:8b:d3:e4:3d:4f:5b:f8:90:1f:34: 1b:36:d7:55:79:ac:f5:7b:8a:a7:0d:ad:04:8a:7c: 6e:83:d1:71:ab:52:10:5f:9f:a4:64:26:16:23:8b: 6d:76:86:53:cc:41:ad:2d:86:83:11:80:c2:8b:c5: 7b:fc:d3:60:e2:86:cd:dd:b7:d3:d1:93:36:cc:80: 77:ca:bb:ce:f1:be:1a:cb:ef:24:35:d4:d4:cf:e1: bf:a8:f1:fc:e9:c7:94:d9:12:ab:e5:c7:1e:6c:22: b8:6b:c8:2f:b6:9a:1c:02:de:74:0d:6c:5c:bb:ec: 3f:40:d2:8f:5e:fa:5e:50:3d:8b:f9:a7:ff:1b:ff: 27:62:ec:af:7d:77:fc:11:95:a3:8d:13:be:10:8c: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:97:75:7E:C0:B9:FF:5B:EC:52:AD:B9:85:6C:DA:FE:8C:70:EA:53 X509v3 Authority Key Identifier: keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:7e:7a:a1:ed:fe:b2:f0:b4:f1:80:c4:cd:a5:3b:dd:5d:07: ac:29:e3:1e:a1:fd:da:a9:8a:54:42:04:be:e6:e4:fa:1a:9b: e1:dc:e3:34:53:05:76:4f:a7:4c:b6:c7:37:5e:d3:39:ea:e7: 36:be:e4:ab:89:d6:bb:0b:8b:a5:a0:93:52:0f:cd:1f:7e:cf: 82:90:66:16:0c:e3:31:fe:7f:21:5b:e4:68:35:0d:81:41:50: 37:72:f9:62:b2:a3:45:af:a7:e8:02:2c:4e:25:e1:df:04:62: b6:38:53:f2:a8:b5:bd:d2:d1:ee:d5:1b:94:a1:47:ad:fa:19: 9f:37:c8:de:ba:8e:3d:83:2c:46:d5:56:e2:0c:08:7a:08:73: e1:e0:d8:42:0a:d5:ff:cb:93:b4:44:46:b6:0c:8d:c5:3b:a2: b1:67:6b:39:de:4f:43:12:f6:42:76:0c:e1:3a:96:29:fc:dc: d7:29:d8:16:0d:3e:a8:ae:22:33:2a:d1:35:e7:b9:22:83:ed: c7:a4:8b:11:ac:e3:ec:b1:58:2e:20:e4:33:8f:49:ac:be:b7: 62:0a:b7:be:95:85:4e:19:76:55:d5:96:73:db:79:85:59:8a: 78:4c:e8:3f:62:6d:7a:85:57:fd:e9:3d:6e:9e:ce:13:14:6f: 63:02:30:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsJVMpbs176iT5U16DGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODYwYzgzNzIyMTk5MDcwOWNmNWFlYTI5ZGI4MTY4OTUz ZTdkZTAwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EygyNTk3NzU3ZWMwYjlmZjViZWM1MmFkYjk4NTZjZGFmZThjNzBlYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9FqT8kGRZqoClSmi1yoqZzl/fW 4f/ShzhtU749EUECTcsWudKS23dQZqTnQMT2UdsgZtg8pcVKblfGz5PWpEwXsxAk uoddRgk0nZAd6JGYU4WISTf3bQfja9wLvuCYsG9w9zeqFoXL7BPE3IvT5D1PW/iQ HzQbNtdVeaz1e4qnDa0Einxug9Fxq1IQX5+kZCYWI4ttdoZTzEGtLYaDEYDCi8V7 /NNg4obN3bfT0ZM2zIB3yrvO8b4ay+8kNdTUz+G/qPH86ceU2RKr5ccebCK4a8gv tpocAt50DWxcu+w/QNKPXvpeUD2L+af/G/8nYuyvfXf8EZWjjRO+EIxo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWXdX7Auf9b7FKtuYVs2v6McOpTMB8GA1UdIwQY MBaAFDOGDINyIZkHCc9a6inbgWiVPn3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hNWViY2ItZjAxMS00ODAxLTk0ZmYt YjgyZTUzMDEwNTk3LzEvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hNWViY2ItZjAxMS00ODAxLTk0ZmYtYjgyZTUzMDEwNTk3 LzEvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0n56oe3+ svC08YDEzaU73V0HrCnjHqH92qmKVEIEvubk+hqb4dzjNFMFdk+nTLbHN17TOern Nr7kq4nWuwuLpaCTUg/NH37PgpBmFgzjMf5/IVvkaDUNgUFQN3L5YrKjRa+n6AIs TiXh3wRitjhT8qi1vdLR7tUblKFHrfoZnzfI3rqOPYMsRtVW4gwIeghz4eDYQgrV /8uTtERGtgyNxTuisWdrOd5PQxL2QnYM4TqWKfzc1ynYFg0+qK4iMyrRNee5IoPt x6SLEazj7LFYLiDkM49JrL63Ygq3vpWFThl2VdWWc9t5hVmKeEzoP2JteoVX/ek9 bp7OExRvYwIwlA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:45 2025 by rpki-client