This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json) Hash identifier: mlCh32QGZaJJkEL4dneLcPJ7/zIyMETRHCfUV3Cs584= Subject key identifier: E3:C0:C7:D7:2C:CD:D8:95:C9:15:C0:6A:DC:2E:34:50:2F:4F:A7:20 Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80 Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580 Certificate serial: 019AF12E29F65B911E7730641BFF50277EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft Manifest number: 1077 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: HsmG4JT27fukfUz5Dak+lWdPXodNSs025Puu9ZbQss8=) 2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:f6:5b:91:1e:77:30:64:1b:ff:50:27:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=e3c0c7d72ccdd895c915c06adc2e34502f4fa720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:43:3d:e7:2d:9a:20:a2:76:00:97:a1:4b: 9e:69:4b:3a:57:bf:86:6d:bb:ce:95:4c:93:d9:fb: 52:d7:a3:d5:a2:c3:75:b7:dd:fb:f2:76:dd:ab:31: 9a:77:48:98:b3:86:99:02:ec:ff:04:fe:53:f8:ed: 9f:a6:10:12:54:97:c3:c3:9e:22:63:2f:08:82:16: 6b:73:6e:a4:25:7c:c2:54:2f:46:02:a2:60:27:e3: 50:37:21:62:23:1a:54:2f:e1:06:b3:f1:e2:78:d0: 3f:53:b7:91:f8:e3:23:06:20:38:cf:63:a5:64:92: 84:ac:7e:31:7d:c1:07:69:a7:e7:63:7a:a3:c3:0f: 28:65:64:3c:be:b5:56:64:44:8c:7f:6e:b3:92:38: 7b:21:56:6a:50:46:e4:11:16:28:50:f1:da:59:97: 5d:d5:5f:c1:86:82:be:7f:46:00:7c:96:d7:53:09: 30:6c:57:14:be:65:30:c6:08:97:d3:7f:23:3e:9d: 6b:86:24:02:b1:a6:ea:10:99:58:29:0b:7f:80:ee: e6:74:5e:96:a6:cc:c1:3f:3c:23:f5:70:3e:18:eb: 5f:ae:37:58:09:8a:c6:24:3f:5b:5f:41:26:e7:99: fa:10:b8:1b:94:33:51:9e:59:fd:b1:a8:51:c3:ce: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C0:C7:D7:2C:CD:D8:95:C9:15:C0:6A:DC:2E:34:50:2F:4F:A7:20 X509v3 Authority Key Identifier: keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:48:df:1b:5d:bf:1e:6f:0e:0a:80:10:71:80:a5:bb:21:9f: 35:a5:20:84:b8:97:00:61:c4:47:28:1b:0a:85:3c:1b:fa:a9: 11:5f:2e:7c:f1:4f:2c:76:3f:aa:7b:42:83:08:d7:09:4f:df: 58:23:9a:24:b1:60:0c:f7:7a:04:9a:a2:8b:37:4f:2a:d5:89: f3:8e:c6:e3:35:da:ca:aa:52:62:33:e7:49:37:ad:40:ec:52: 78:e3:6c:ec:2a:f6:d1:0a:85:45:a6:ea:58:62:2f:42:50:49: 6d:5f:30:83:1e:a1:5c:71:b6:2c:ab:16:c9:8c:c8:49:9f:b7: 36:37:1f:b9:dd:88:76:55:c3:82:e7:0c:bd:cd:df:60:03:98: 9c:22:a5:ee:62:50:21:fc:36:c7:85:c5:1b:d8:14:56:8c:5b: e0:85:28:bb:ea:76:6e:37:bd:92:1a:c8:51:88:17:fc:f0:86: c1:98:ec:42:4a:76:54:fb:cb:60:d3:a6:90:b8:35:38:1f:41: fa:94:d2:87:79:8c:36:a5:30:62:26:37:35:e3:61:db:66:e8: 57:bc:9a:09:b4:db:55:a2:92:15:e1:99:5f:c3:32:fc:d1:f7: 93:aa:71:70:84:12:f1:9d:27:12:6f:8f:af:0a:ab:64:67:58: a0:46:5f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLin2W5EedzBkG/9QJ37GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTFhOWVjMGFhOTFiOTMyYWMzYzM1ODZjZmNhY2YwY2Ey OWY1ODAwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD EyhlM2MwYzdkNzJjY2RkODk1YzkxNWMwNmFkYzJlMzQ1MDJmNGZhNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4xDPectmiCidgCXoUueaUs6V7+G bbvOlUyT2ftS16PVosN1t9378nbdqzGad0iYs4aZAuz/BP5T+O2fphASVJfDw54i Yy8IghZrc26kJXzCVC9GAqJgJ+NQNyFiIxpUL+EGs/HieNA/U7eR+OMjBiA4z2Ol ZJKErH4xfcEHaafnY3qjww8oZWQ8vrVWZESMf26zkjh7IVZqUEbkERYoUPHaWZdd 1V/BhoK+f0YAfJbXUwkwbFcUvmUwxgiX038jPp1rhiQCsabqEJlYKQt/gO7mdF6W pszBPzwj9XA+GOtfrjdYCYrGJD9bX0Em55n6ELgblDNRnln9sahRw844IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPAx9cszdiVyRXAatwuNFAvT6cgMB8GA1UdIwQY MBaAFDNRqewKqRuTKsPDWGz8rPDKKfWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgt NjY4OWY4NzJmYzg3LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgtNjY4OWY4NzJmYzg3 LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUjfG12/ Hm8OCoAQcYCluyGfNaUghLiXAGHERygbCoU8G/qpEV8ufPFPLHY/qntCgwjXCU/f WCOaJLFgDPd6BJqiizdPKtWJ847G4zXayqpSYjPnSTetQOxSeONs7Cr20QqFRabq WGIvQlBJbV8wgx6hXHG2LKsWyYzISZ+3Njcfud2IdlXDgucMvc3fYAOYnCKl7mJQ Ifw2x4XFG9gUVoxb4IUou+p2bje9khrIUYgX/PCGwZjsQkp2VPvLYNOmkLg1OB9B +pTSh3mMNqUwYiY3NeNh22boV7yaCbTbVaKSFeGZX8My/NH3k6pxcIQS8Z0nEm+P rwqrZGdYoEZfWg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:01 2025 by rpki-client