This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json) Hash identifier: S1UcI5NX4xi7r8noJqmalnjaiJCwDFHdIrS6el2v+EM= Subject key identifier: 81:80:70:69:5B:94:0D:57:2D:FC:41:0B:9A:E5:40:C3:E3:D6:AA:9C Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Certificate serial: 019AF2AD961B4A5728BB3A4B8A63A61EF8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: ZIDUPqqhNEckxK3PGEFftosNIvquMtt+CZkbevwrZ6Y=) 2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:96:1b:4a:57:28:bb:3a:4b:8a:63:a6:1e:f8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=818070695b940d572dfc410b9ae540c3e3d6aa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:6a:40:59:04:89:06:ed:ca:15:ad:df:2e: 4c:c2:6d:b5:9b:b1:26:ea:10:56:9f:22:81:04:bd: 24:f6:01:04:a9:a4:5f:14:00:70:2b:86:0c:db:22: 86:25:f0:75:5b:dc:a8:c6:63:02:fc:56:08:f8:3c: e1:e2:5c:39:6e:9a:89:8a:bf:96:5a:bd:57:84:24: 09:03:cd:f2:fb:8f:0e:40:b6:35:f8:df:ee:16:a6: 10:af:89:00:09:95:86:60:ac:92:ae:68:8b:aa:b7: 6e:e6:8e:ef:26:34:06:95:f9:29:16:7d:ac:35:d2: 2b:76:a8:ce:3c:b4:f1:b6:c5:06:b7:98:f3:10:26: b3:3f:31:fb:6a:5b:89:6c:18:d0:8a:1e:f2:7f:e4: fd:ce:f1:03:b1:0b:d8:8f:3f:af:93:18:b9:59:30: f3:08:ad:ec:b3:42:11:87:37:17:66:e1:7b:2f:14: cc:4b:18:57:6d:73:dc:63:ad:fe:fc:62:f6:9e:71: d0:ab:a8:d3:c6:21:db:8f:f5:58:63:2b:44:a0:35: 4e:8b:51:51:a9:d6:40:9c:48:2c:b4:9f:71:26:27: 07:bc:4c:57:3f:b2:69:00:df:28:ad:71:6b:c3:0d: 87:f2:01:72:5b:d0:7f:a1:53:70:2a:f4:dd:ff:30: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:80:70:69:5B:94:0D:57:2D:FC:41:0B:9A:E5:40:C3:E3:D6:AA:9C X509v3 Authority Key Identifier: keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:b2:81:47:62:95:b2:5b:55:50:ed:92:7c:ec:33:96:f1: 6d:31:d1:49:0e:e9:02:61:3a:6a:a8:96:a2:3f:fb:8b:4d:09: fc:d2:a1:f3:35:a4:da:8a:4e:04:cf:bc:27:64:b8:85:bb:cb: e0:29:8e:91:ec:ef:bb:54:09:96:25:af:46:9d:59:42:31:43: 3e:12:24:1e:19:f2:21:d8:55:00:2c:67:ae:62:25:f6:b4:28: 31:ac:a4:15:8a:29:77:02:b1:d1:64:92:c3:6f:67:c8:d3:b6: d8:78:1b:97:c1:00:72:d6:f2:e3:c5:97:d0:74:c1:75:a8:7a: a0:37:60:0b:fb:9d:9b:94:50:38:2f:99:fd:e4:ec:2b:90:c5: f0:ec:69:72:17:bb:08:1d:a4:26:a9:e2:4c:8b:64:4b:2c:0e: 14:1c:df:4d:58:61:56:af:92:45:a0:35:6d:4f:17:e2:65:b7: 45:a1:70:bf:7a:8b:d5:25:33:cd:a3:ce:54:30:2a:11:e6:98: 07:bc:ee:a5:76:6c:b7:31:d0:0f:87:f8:6a:71:ae:f0:1a:aa: b9:f7:a9:9e:2e:72:31:ce:26:f9:d1:6f:11:8b:57:1f:76:2c: 9e:a1:54:67:72:a8:77:da:c1:dc:c9:84:fa:5d:d8:47:3f:99: 22:e1:ae:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZYbSlcouzpLimOmHvijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4 ZGMyYjYwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg4MTgwNzA2OTViOTQwZDU3MmRmYzQxMGI5YWU1NDBjM2UzZDZhYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJqQFkEiQbtyhWt3y5Mwm21m7Em 6hBWnyKBBL0k9gEEqaRfFABwK4YM2yKGJfB1W9yoxmMC/FYI+Dzh4lw5bpqJir+W Wr1XhCQJA83y+48OQLY1+N/uFqYQr4kACZWGYKySrmiLqrdu5o7vJjQGlfkpFn2s NdIrdqjOPLTxtsUGt5jzECazPzH7aluJbBjQih7yf+T9zvEDsQvYjz+vkxi5WTDz CK3ss0IRhzcXZuF7LxTMSxhXbXPcY63+/GL2nnHQq6jTxiHbj/VYYytEoDVOi1FR qdZAnEgstJ9xJicHvExXP7JpAN8orXFrww2H8gFyW9B/oVNwKvTd/zA2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGAcGlblA1XLfxBC5rlQMPj1qqcMB8GA1UdIwQY MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt ZDJjM2I0YzA5ZWExLzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh6ygUdi lbJbVVDtknzsM5bxbTHRSQ7pAmE6aqiWoj/7i00J/NKh8zWk2opOBM+8J2S4hbvL 4CmOkezvu1QJliWvRp1ZQjFDPhIkHhnyIdhVACxnrmIl9rQoMaykFYopdwKx0WSS w29nyNO22Hgbl8EActby48WX0HTBdah6oDdgC/udm5RQOC+Z/eTsK5DF8Oxpche7 CB2kJqniTItkSywOFBzfTVhhVq+SRaA1bU8X4mW3RaFwv3qL1SUzzaPOVDAqEeaY B7zupXZstzHQD4f4anGu8Bqqufepni5yMc4m+dFvEYtXH3YsnqFUZ3Kod9rB3MmE +l3YRz+ZIuGuiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:52 2025 by rpki-client