This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft File: M-9NaJSNJyyfOEhtdTIRy16oTis.mft (raw, json) Hash identifier: jEhzIeT8Csuujz4n3+5o15RhSxJ0VEs3MbPtYem/4T0= Subject key identifier: EB:1E:D6:A7:AA:6D:06:04:43:38:20:E8:BD:CE:51:FF:92:B2:61:AC Authority key identifier: 33:EF:4D:68:94:8D:27:2C:9F:38:48:6D:75:32:11:CB:5E:A8:4E:2B Certificate issuer: /CN=33ef4d68948d272c9f38486d753211cb5ea84e2b Certificate serial: 019AF1D2530291585595EB1970CFFA2490B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft Manifest number: 7E Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: M-9NaJSNJyyfOEhtdTIRy16oTis.crl (hash: zESCYNLt9QjRSGMBP+V7RLQeaJ96V1Y+kout1M+Txg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:53:02:91:58:55:95:eb:19:70:cf:fa:24:90:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ef4d68948d272c9f38486d753211cb5ea84e2b Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=eb1ed6a7aa6d0604433820e8bdce51ff92b261ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:2f:95:df:45:bb:de:a7:ef:7f:39:28:fc: 00:f6:ec:ca:36:51:bb:54:0f:4e:4f:4f:21:38:5f: 6e:bb:0e:de:2c:88:0b:58:76:05:7d:6b:3a:a8:18: 27:4e:9d:7d:f0:4e:0d:b9:6f:8a:5e:45:9d:87:ac: c9:36:55:3a:d7:30:5e:d1:1e:42:87:1a:33:69:60: 8a:7e:d8:3e:2a:a2:57:93:2d:30:d3:ec:e2:ec:5f: 3a:41:50:de:a0:b9:7c:11:bd:80:cc:d7:52:62:16: 87:18:41:78:1c:08:1c:2f:a8:d5:38:e0:da:0d:c6: cb:69:f9:90:f9:17:b9:f9:9a:5a:bb:8c:74:d9:c7: c0:92:99:ff:c1:40:d6:52:11:d8:31:89:df:3d:07: af:20:eb:e4:35:54:1c:24:3b:1c:14:14:58:0f:8c: 0a:10:27:f6:11:6b:03:30:5f:bf:06:76:b1:85:9e: b4:57:c7:05:97:bf:27:ff:a7:96:2b:01:21:78:69: da:42:54:79:66:d9:fb:b0:9d:08:2b:37:51:ca:5a: 71:c4:00:18:25:52:76:a5:2c:86:d9:36:c2:76:c0: f2:c2:7b:a0:9c:21:e7:12:43:fa:26:f5:ca:5c:b6: d4:fe:ce:ad:9a:d5:1d:21:e0:f5:e7:25:86:50:d0: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:D6:A7:AA:6D:06:04:43:38:20:E8:BD:CE:51:FF:92:B2:61:AC X509v3 Authority Key Identifier: keyid:33:EF:4D:68:94:8D:27:2C:9F:38:48:6D:75:32:11:CB:5E:A8:4E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e6:22:41:75:1e:aa:96:c6:66:c7:89:07:71:5a:c0:4b:61: 25:49:a4:4f:41:a4:9a:ad:03:03:3e:99:74:d1:3b:85:ca:89: c3:cf:a7:ef:51:3e:ec:5c:6c:10:b4:d9:69:92:1d:6d:26:5a: ad:4e:db:b9:ac:07:54:e9:81:71:db:3b:31:16:95:94:31:57: fe:b0:91:9b:4a:1e:71:85:5b:df:fe:ce:5b:c0:91:96:8f:63: 7d:50:f7:b8:8c:80:a7:9e:bd:7e:47:c8:c2:5e:df:02:04:13: ac:2a:d3:a5:c4:7a:44:86:b3:6b:57:39:ec:5a:e0:e4:da:f6: ff:5d:dd:b5:94:50:62:3e:43:b6:3a:7c:72:cf:ee:2e:f3:95: bf:cd:cb:1d:6d:d7:9b:bf:56:94:86:8a:c5:d5:c5:bc:68:8b: b3:a7:25:4e:dd:a4:59:2c:cb:61:0c:ed:80:12:82:d7:97:1a: e8:e2:d9:cc:b0:96:b3:58:bd:57:c7:63:e2:3a:f0:a4:0e:15: 54:e8:73:30:be:ee:6d:13:6e:6a:ce:d1:3c:5b:a7:f2:53:8b: 96:49:c0:50:58:7d:46:b2:b9:67:dc:d6:af:73:94:32:6f:f0: 71:0c:d2:42:b2:b5:d8:6b:7c:26:f6:37:0a:24:45:91:d2:50: 30:ed:87:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lMCkVhVlesZcM/6JJC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWY0ZDY4OTQ4ZDI3MmM5ZjM4NDg2ZDc1MzIxMWNiNWVh ODRlMmIwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhlYjFlZDZhN2FhNmQwNjA0NDMzODIwZThiZGNlNTFmZjkyYjI2MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhsvld9Fu96n7385KPwA9uzKNlG7 VA9OT08hOF9uuw7eLIgLWHYFfWs6qBgnTp198E4NuW+KXkWdh6zJNlU61zBe0R5C hxozaWCKftg+KqJXky0w0+zi7F86QVDeoLl8Eb2AzNdSYhaHGEF4HAgcL6jVOODa DcbLafmQ+Re5+Zpau4x02cfAkpn/wUDWUhHYMYnfPQevIOvkNVQcJDscFBRYD4wK ECf2EWsDMF+/BnaxhZ60V8cFl78n/6eWKwEheGnaQlR5Ztn7sJ0IKzdRylpxxAAY JVJ2pSyG2TbCdsDywnugnCHnEkP6JvXKXLbU/s6tmtUdIeD15yWGUNDFOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOse1qeqbQYEQzgg6L3OUf+SsmGsMB8GA1UdIwQY MBaAFDPvTWiUjScsnzhIbXUyEcteqE4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS05TmFKU05KeXlmT0VodGRUSVJ5MTZvVGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8xYjU1ZGYtMzAxMi00YzAzLThhMWQt YjYzMWM2ZDFjNWU4LzEvTS05TmFKU05KeXlmT0VodGRUSVJ5MTZvVGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8xYjU1ZGYtMzAxMi00YzAzLThhMWQtYjYzMWM2ZDFjNWU4 LzEvTS05TmFKU05KeXlmT0VodGRUSVJ5MTZvVGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeYiQXUe qpbGZseJB3FawEthJUmkT0Gkmq0DAz6ZdNE7hcqJw8+n71E+7FxsELTZaZIdbSZa rU7buawHVOmBcds7MRaVlDFX/rCRm0oecYVb3/7OW8CRlo9jfVD3uIyAp569fkfI wl7fAgQTrCrTpcR6RIaza1c57Frg5Nr2/13dtZRQYj5Dtjp8cs/uLvOVv83LHW3X m79WlIaKxdXFvGiLs6clTt2kWSzLYQztgBKC15ca6OLZzLCWs1i9V8dj4jrwpA4V VOhzML7ubRNuas7RPFun8lOLlknAUFh9RrK5Z9zWr3OUMm/wcQzSQrK12Gt8JvY3 CiRFkdJQMO2HKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:27 2025 by rpki-client