This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json) Hash identifier: EN5Ao1n2XPCn3yxOtnC8JnjMfJ+TXuBSwjQfhyloJMU= Subject key identifier: 7E:9A:EE:5A:09:33:13:80:21:44:28:E9:E5:3C:E5:12:88:2A:8A:7F Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33 Certificate serial: 019AF276BB1C2609E00DD425FDD163140C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft Manifest number: 10E5 Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=) 2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: p+EdEVa7gSECMjdjIypuRpiUou2YL83VxfxBzDg8iFA=) 3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=) 4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bb:1c:26:09:e0:0d:d4:25:fd:d1:63:14:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335ca521362226d03c1829003d81d498aa838f33 Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=7e9aee5a09331380214428e9e53ce512882a8a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fc:66:cd:b7:90:b0:38:1d:46:cc:1f:ea:e8: 95:d9:0c:68:f3:f4:81:b7:e2:32:70:62:74:b1:0e: 11:ee:6c:af:35:6a:d3:72:3d:04:ac:16:48:74:cd: 2d:6e:9d:5a:ed:0c:0d:1a:a5:4a:72:2f:6f:de:ec: d5:78:95:2d:5e:7c:a9:f0:86:23:31:a6:76:b7:d3: 89:eb:f5:71:8b:3e:91:ce:29:d9:a8:96:1e:32:0c: eb:f5:e3:b6:61:91:68:8d:6a:95:5b:1d:98:14:d0: e3:84:f3:cc:bf:69:9c:4c:c6:00:ea:50:47:58:3e: 6e:98:44:6c:07:73:c6:15:3e:12:a5:5d:49:ea:d7: 08:0a:31:26:3f:a8:14:74:87:99:70:91:c5:51:08: 8f:19:13:9f:51:4e:21:ae:12:11:43:33:d7:6f:cc: 8d:e0:7d:27:a8:03:9b:c0:74:63:1b:ce:ef:94:39: f6:94:08:1d:d0:7c:07:76:71:39:f1:76:1f:c8:3b: bb:aa:b1:d4:34:68:ce:43:b3:21:c7:29:08:2b:56: 25:25:e8:e3:dc:e1:de:7e:11:8c:93:88:1d:13:0e: 2d:5e:91:e3:01:1f:64:4f:b1:d4:b6:fa:8f:35:78: db:f4:15:23:44:1a:eb:9b:1d:a4:75:4f:dc:34:30: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9A:EE:5A:09:33:13:80:21:44:28:E9:E5:3C:E5:12:88:2A:8A:7F X509v3 Authority Key Identifier: keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a8:f1:63:c9:54:c3:40:92:97:84:aa:f0:44:f9:0d:65:24: 4a:9e:b2:c6:85:01:35:eb:de:27:40:e1:e6:8a:e0:90:0f:ec: 3f:e2:48:6e:4c:f7:78:9f:e5:63:b2:48:be:bc:59:ce:21:0a: f2:01:f6:a2:42:fc:1f:e1:ac:9b:38:f7:aa:a1:10:4f:33:f2: a3:9a:5e:5d:14:d3:ff:ff:47:12:61:cd:b4:1e:1f:45:d2:05: 5c:c9:dc:5b:be:95:61:d5:bf:49:a4:2e:2d:50:cf:66:77:d2: b8:05:e5:d0:a6:43:f0:ce:6f:85:d0:da:b1:bb:03:5f:49:52: e8:13:ed:45:84:82:6f:61:cc:c3:7a:07:e8:12:1f:a0:39:e0: a1:4d:59:fd:97:e2:23:96:d3:db:a3:ab:f1:ef:3a:c6:9b:09: 7c:03:f7:56:10:44:8b:66:6e:8c:02:b7:96:5f:98:30:82:66: ea:66:3e:2b:e6:f5:65:21:77:f1:16:64:07:f2:5e:d8:8b:6a: 16:4e:a2:9e:c3:ca:68:ab:a2:2a:a3:bd:d9:de:68:c2:50:31: 2e:dc:fd:2c:7e:6e:fe:d7:40:5b:3b:2f:4c:94:b0:86:f4:76: 8a:29:02:98:93:12:88:f8:a9:30:2d:18:1a:95:89:1e:e4:62: 07:85:27:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrscJgngDdQl/dFjFAxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4 MzhmMzMwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD Eyg3ZTlhZWU1YTA5MzMxMzgwMjE0NDI4ZTllNTNjZTUxMjg4MmE4YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PxmzbeQsDgdRswf6uiV2Qxo8/SB t+IycGJ0sQ4R7myvNWrTcj0ErBZIdM0tbp1a7QwNGqVKci9v3uzVeJUtXnyp8IYj MaZ2t9OJ6/Vxiz6RzinZqJYeMgzr9eO2YZFojWqVWx2YFNDjhPPMv2mcTMYA6lBH WD5umERsB3PGFT4SpV1J6tcICjEmP6gUdIeZcJHFUQiPGROfUU4hrhIRQzPXb8yN 4H0nqAObwHRjG87vlDn2lAgd0HwHdnE58XYfyDu7qrHUNGjOQ7MhxykIK1YlJejj 3OHefhGMk4gdEw4tXpHjAR9kT7HUtvqPNXjb9BUjRBrrmx2kdU/cNDCyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6a7loJMxOAIUQo6eU85RKIKop/MB8GA1UdIwQY MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6jxY8lU w0CSl4Sq8ET5DWUkSp6yxoUBNeveJ0Dh5orgkA/sP+JIbkz3eJ/lY7JIvrxZziEK 8gH2okL8H+Gsmzj3qqEQTzPyo5peXRTT//9HEmHNtB4fRdIFXMncW76VYdW/SaQu LVDPZnfSuAXl0KZD8M5vhdDasbsDX0lS6BPtRYSCb2HMw3oH6BIfoDngoU1Z/Zfi I5bT26Or8e86xpsJfAP3VhBEi2ZujAK3ll+YMIJm6mY+K+b1ZSF38RZkB/Je2Itq Fk6insPKaKuiKqO92d5owlAxLtz9LH5u/tdAWzsvTJSwhvR2iikCmJMSiPipMC0Y GpWJHuRiB4Un1w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:39 2025 by rpki-client