This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft File: M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json) Hash identifier: qad0nSCVrYWOs0svibL7lD1kPRAx8aw3hTrsJdNSis0= Subject key identifier: FE:FA:8C:3C:DA:4D:49:01:21:AE:1C:32:18:73:4F:62:78:71:49:02 Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E Certificate issuer: /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e Certificate serial: 019AF0BF7C09D8F69ABB7E84FBFB390A80DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft Manifest number: 0181 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa (hash: JMBYVhl1br5C36w4dCy9ILJG/1PRS8u33zsXvftn/Yw=) 2: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: aOCRVRbxZAUi+JSqk+5P2FTHXl9iHeQC8vI15EssSBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7c:09:d8:f6:9a:bb:7e:84:fb:fb:39:0a:80:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=fefa8c3cda4d490121ae1c3218734f6278714902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:eb:9b:6b:74:03:4f:fd:c3:97:ae:de:99: e3:69:d1:69:2e:ea:7e:af:ef:d5:38:a2:39:d9:60: df:20:e0:2f:76:85:e2:2e:64:5b:e8:82:8c:64:16: df:f2:97:78:92:96:10:7a:39:1c:4f:86:cc:a1:f2: 12:6e:92:b6:5f:01:b8:46:a8:9d:4d:8d:a2:ed:3f: 5d:a7:fa:97:7b:13:85:0d:ad:d0:2e:1c:35:49:12: 1c:1f:9f:66:91:49:26:14:79:f3:26:ee:e3:c9:f4: c0:4e:1c:7f:77:f2:ee:f2:06:dd:c4:91:e5:87:ce: df:e4:0b:ed:75:1a:df:0b:e6:b0:4e:41:63:6a:25: 6c:39:cc:1d:e4:78:34:f5:73:11:99:44:1a:53:ea: 10:93:b9:9a:55:94:9e:60:4c:48:c4:e7:2d:7e:22: e0:5f:41:28:ef:35:63:92:f7:4f:67:fa:66:b0:49: 42:0d:c8:c8:1f:e6:cc:99:3f:10:cf:de:09:8e:fb: 60:2a:93:5c:c4:69:05:d1:2d:fa:11:b9:73:71:a2: a3:7d:6a:27:7e:f8:85:60:1d:da:7b:96:a8:f4:68: cf:8b:e5:3a:0e:b8:93:47:56:0b:5d:05:4c:10:1c: 01:59:39:b5:98:d4:51:33:c7:95:d9:00:80:fd:b0: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:8C:3C:DA:4D:49:01:21:AE:1C:32:18:73:4F:62:78:71:49:02 X509v3 Authority Key Identifier: keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bd:e1:7c:8c:a2:dd:a0:78:a1:25:45:2c:28:3b:b0:e3:16: fb:34:a4:ff:2f:c4:5b:b4:4d:d5:8b:1f:4c:b2:f6:1a:f3:b6: e0:b5:f0:33:f8:17:6b:77:2d:b7:35:c1:7e:66:1d:d6:f1:3b: 20:b0:1b:22:b7:b6:f8:9d:d9:92:81:a5:3e:4e:d4:6d:ed:10: 2d:98:88:a4:85:2d:60:18:32:8b:85:0e:ab:7f:b5:85:c3:d4: b9:c5:a6:9a:f8:34:5c:fe:e4:ea:fa:c6:e2:a4:d4:a7:7a:be: 69:fb:4f:d7:55:ef:f0:36:de:4b:e6:61:f3:99:09:07:a6:01: c9:ad:fa:d7:8b:7f:c3:f3:69:2d:d0:40:1d:36:29:fd:5d:1d: 5f:02:89:fb:3c:03:3a:d2:54:d6:c7:dc:bc:37:ce:ce:c0:39: 0b:f8:6f:12:88:96:08:bc:fd:17:27:15:b4:a3:9d:64:7f:6c: 6b:5b:9b:1f:0e:23:6f:15:58:b2:41:0d:e6:a8:06:fa:07:17: c4:27:60:c3:2f:5b:f6:ba:da:ee:8c:e8:17:db:e3:b4:65:52: 60:73:de:48:96:46:47:18:59:a2:17:e3:6a:b9:24:35:1b:77: 13:21:16:80:ca:9d:d0:03:d6:b4:66:31:5b:3d:b5:61:1a:be: 80:5a:12:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3wJ2Paau36E+/s5CoDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjQ2YWIxN2FlZjIzOWE5NmJkZTdiNmNjYjcwNmY3ZTBi NjJiNmUwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EyhmZWZhOGMzY2RhNGQ0OTAxMjFhZTFjMzIxODczNGY2Mjc4NzE0OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJrrm2t0A0/9w5eu3pnjadFpLup+ r+/VOKI52WDfIOAvdoXiLmRb6IKMZBbf8pd4kpYQejkcT4bMofISbpK2XwG4Rqid TY2i7T9dp/qXexOFDa3QLhw1SRIcH59mkUkmFHnzJu7jyfTAThx/d/Lu8gbdxJHl h87f5AvtdRrfC+awTkFjaiVsOcwd5Hg09XMRmUQaU+oQk7maVZSeYExIxOctfiLg X0Eo7zVjkvdPZ/pmsElCDcjIH+bMmT8Qz94JjvtgKpNcxGkF0S36EblzcaKjfWon fviFYB3ae5ao9GjPi+U6DriTR1YLXQVMEBwBWTm1mNRRM8eV2QCA/bDc0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP76jDzaTUkBIa4cMhhzT2J4cUkCMB8GA1UdIwQY MBaAFDP0arF67yOalr3ntsy3BvfgtituMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYt NmYwN2EwN2QyNzY5LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYtNmYwN2EwN2QyNzY5 LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg73hfIyi 3aB4oSVFLCg7sOMW+zSk/y/EW7RN1YsfTLL2GvO24LXwM/gXa3cttzXBfmYd1vE7 ILAbIre2+J3ZkoGlPk7Ube0QLZiIpIUtYBgyi4UOq3+1hcPUucWmmvg0XP7k6vrG 4qTUp3q+aftP11Xv8DbeS+Zh85kJB6YBya3614t/w/NpLdBAHTYp/V0dXwKJ+zwD OtJU1sfcvDfOzsA5C/hvEoiWCLz9FycVtKOdZH9sa1ubHw4jbxVYskEN5qgG+gcX xCdgwy9b9rra7ozoF9vjtGVSYHPeSJZGRxhZohfjarkkNRt3EyEWgMqd0APWtGYx Wz21YRq+gFoSqw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:25 2025 by rpki-client