This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json) Hash identifier: weNHjCF7QVtprWUUOBMjj/0Qoom6GsW0xfZWVLMcAYk= Subject key identifier: A5:67:98:4B:A7:59:B4:F7:D0:05:5E:38:62:41:18:37:BA:2B:B7:54 Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77 Certificate serial: 019AF2094CD007641DC424A241F7CE9EFFCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft Manifest number: 15B8 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: uybauLggVRAoKdV/EsXWw/mJg190kFRtoolS0BJrP94=) 2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4c:d0:07:64:1d:c4:24:a2:41:f7:ce:9e:ff:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=a567984ba759b4f7d0055e3862411837ba2bb754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:af:f1:47:55:1b:8b:34:7a:f6:e6:dd:05: f3:6f:ff:ce:63:5e:1b:e0:b3:15:75:94:4e:36:c6: f3:44:86:d1:a2:da:96:a9:c1:eb:78:01:8a:e2:c1: 42:e8:f9:bd:22:ab:40:0f:11:06:a2:33:50:bf:0b: 78:8f:ba:13:e2:e0:82:b9:03:7c:34:fd:c2:39:09: 47:94:8f:65:43:ba:9c:c2:58:0f:eb:5e:cc:34:c1: 3c:03:e6:44:45:ee:ad:d8:fd:18:2f:98:ee:35:6e: 56:87:a4:6d:91:39:a4:d6:42:e4:39:30:87:ba:69: e3:d7:68:a7:27:e2:63:8e:10:69:c9:29:56:03:e5: 02:ff:2a:e1:64:f3:4a:79:ad:e0:37:d6:b9:68:45: 52:6b:59:aa:db:9d:0f:b5:e5:94:f8:12:33:04:d0: be:b7:c1:8a:42:b0:54:ec:ad:8d:8f:80:7c:e3:25: 85:f9:1a:e3:c6:0a:9f:dc:0c:5c:6a:6d:f8:4b:11: 97:9d:4d:7c:34:d6:cb:f4:38:01:7a:da:48:4d:47: df:56:64:00:b6:2b:a6:19:d6:2f:66:65:69:a1:b3: 36:c8:d5:dd:9f:ba:84:a2:87:27:61:20:de:dc:09: 81:51:be:17:f0:1e:79:60:27:f7:8f:40:6a:8b:fe: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:98:4B:A7:59:B4:F7:D0:05:5E:38:62:41:18:37:BA:2B:B7:54 X509v3 Authority Key Identifier: keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f2:88:95:1d:6f:66:17:ad:24:5e:9a:a1:24:96:1c:a8:d3: eb:34:21:08:14:fd:3a:51:ea:85:9c:25:69:90:33:25:37:e1: 7b:79:61:13:1d:13:f7:90:08:bd:bf:47:ce:64:d8:12:e3:65: 6d:e1:0a:0e:1b:bd:ce:c7:6d:80:2f:6f:cc:92:dc:ca:eb:24: 03:6e:45:77:36:9b:04:34:22:83:60:89:17:00:82:78:62:ed: 1b:40:9e:c4:be:87:2a:a6:b4:23:9e:ef:cf:32:b6:2f:a8:cb: 9d:24:71:30:c3:28:81:87:2f:79:32:50:8c:c2:78:d8:2a:c9: cd:7b:7c:84:37:d3:28:55:dc:52:1b:a2:b0:5f:a4:be:56:f8: 67:7a:32:db:6b:47:41:b5:24:5a:b3:72:60:8c:73:9b:83:52: 4b:b6:2b:d7:be:66:cc:73:fc:6f:22:ec:4a:ee:93:cc:fb:0d: 5d:1d:49:3a:55:51:73:6d:79:0b:c2:4c:3c:fb:5a:04:ae:f6: 60:3d:ec:ed:fc:d4:b5:2e:b2:fb:c9:a0:2f:ea:92:d6:8b:61: 0a:56:87:37:85:88:29:8e:9e:d8:18:d4:2b:79:e8:98:2a:11: 15:d3:11:d2:a7:99:69:b3:cf:65:e2:c4:2b:a6:e8:9f:88:60: 25:9c:ff:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUzQB2QdxCSiQffOnv/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk YjdiNzcwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EyhhNTY3OTg0YmE3NTliNGY3ZDAwNTVlMzg2MjQxMTgzN2JhMmJiNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf2v8UdVG4s0evbm3QXzb//OY14b 4LMVdZRONsbzRIbRotqWqcHreAGK4sFC6Pm9IqtADxEGojNQvwt4j7oT4uCCuQN8 NP3COQlHlI9lQ7qcwlgP617MNME8A+ZERe6t2P0YL5juNW5Wh6RtkTmk1kLkOTCH umnj12inJ+JjjhBpySlWA+UC/yrhZPNKea3gN9a5aEVSa1mq250PteWU+BIzBNC+ t8GKQrBU7K2Nj4B84yWF+Rrjxgqf3Axcam34SxGXnU18NNbL9DgBetpITUffVmQA tiumGdYvZmVpobM2yNXdn7qEoocnYSDe3AmBUb4X8B55YCf3j0Bqi/454wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVnmEunWbT30AVeOGJBGDe6K7dUMB8GA1UdIwQY MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfKIlR1v ZhetJF6aoSSWHKjT6zQhCBT9OlHqhZwlaZAzJTfhe3lhEx0T95AIvb9HzmTYEuNl beEKDhu9zsdtgC9vzJLcyuskA25FdzabBDQig2CJFwCCeGLtG0CexL6HKqa0I57v zzK2L6jLnSRxMMMogYcveTJQjMJ42CrJzXt8hDfTKFXcUhuisF+kvlb4Z3oy22tH QbUkWrNyYIxzm4NSS7Yr175mzHP8byLsSu6TzPsNXR1JOlVRc215C8JMPPtaBK72 YD3s7fzUtS6y+8mgL+qS1othClaHN4WIKY6e2BjUK3nomCoRFdMR0qeZabPPZeLE K6bon4hgJZz/oA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:27 2025 by rpki-client