This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json) Hash identifier: BU1C04CTeTIOoAT9UoHtw7PBqY2pDYlz8X8yoVlf9YE= Subject key identifier: B6:99:E4:EA:91:51:81:BC:20:11:FA:A1:1D:B5:93:A0:33:6F:6B:09 Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9 Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9 Certificate serial: 019B3DFE4338AF1EB870B09E7AA39746FE49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft Manifest number: 0EE6 Signing time: Sat 20 Dec 2025 23:00:32 +0000 Manifest this update: Sat 20 Dec 2025 23:00:32 +0000 Manifest next update: Sun 21 Dec 2025 23:00:32 +0000 Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 2qSVkSnsKh7+UDwFenbDpEqmym7MxRuC8TQXdKZ/NWY=) 2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=) 3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:43:38:af:1e:b8:70:b0:9e:7a:a3:97:46:fe:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9 Validity Not Before: Dec 20 23:00:32 2025 GMT Not After : Dec 21 23:00:32 2025 GMT Subject: CN=b699e4ea915181bc2011faa11db593a0336f6b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:f1:8b:24:2c:80:74:4f:e2:b3:22:96:d0: 43:2a:b7:cd:83:79:c2:6b:fe:ba:05:cf:9b:83:c8: 64:bc:32:b3:fb:3d:87:48:55:67:ef:a9:b6:0e:af: 90:53:13:e8:53:bf:0a:b2:69:d3:7e:aa:39:68:e4: 36:1e:c1:10:b9:9a:3a:0f:c1:b9:d4:ad:75:00:5d: 2d:58:37:4c:7d:92:3c:f9:7d:11:fa:6c:80:bb:59: 70:af:48:e8:09:a7:87:b9:8a:23:73:2e:98:39:e8: fc:6e:e1:a4:71:8a:d3:f4:77:b6:0f:cc:52:3d:63: ee:f1:ac:46:00:6f:b0:df:b8:14:4a:bd:55:b8:97: 44:c5:71:a8:50:1f:10:eb:38:3f:c5:a8:7b:a1:80: 8a:d6:3a:2d:ec:66:65:b9:d6:d8:ce:39:08:6d:72: bc:92:2f:87:d2:bb:0c:c3:1a:39:f0:09:17:f0:15: 04:d5:6a:f2:19:1f:f1:56:d6:56:39:92:b8:72:21: 84:ca:c2:e9:5c:29:35:5d:30:a3:52:e1:01:83:40: 6e:1a:81:e6:41:09:fd:14:c0:90:2a:1b:31:b4:e7: 47:cc:29:f0:53:c4:60:e7:e6:8c:4b:f5:2f:c8:4a: 54:b5:e4:2a:bb:05:73:70:65:44:23:f8:fd:3b:36: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:99:E4:EA:91:51:81:BC:20:11:FA:A1:1D:B5:93:A0:33:6F:6B:09 X509v3 Authority Key Identifier: keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6e:b1:82:66:b9:95:c0:ef:e6:56:47:92:ae:74:9f:6a:1e: 08:57:41:30:45:09:38:ea:d2:d8:63:ba:df:8c:0a:b8:c7:42: 55:c8:86:00:25:c4:b3:b4:5f:86:5b:d4:d3:d2:1f:71:7b:fd: c4:3a:3a:69:92:46:06:0c:ad:cf:5b:a2:cc:83:3f:74:0f:c8: 4c:e9:06:fe:e8:6e:0e:da:71:25:c6:f8:9a:11:b1:1a:f4:0c: 0f:e0:76:e0:b5:7a:d1:fa:99:72:41:50:c1:79:22:12:a7:f0: 9c:a6:6d:f2:d9:00:d3:d7:0f:4e:6f:44:d1:2f:f0:3c:ab:87: 4c:83:de:da:33:1a:82:6e:18:f5:b4:ff:7d:30:04:79:f4:9f: 99:66:7a:e8:c3:be:36:ab:2f:84:10:50:ff:5a:cd:8a:ee:81: e6:94:08:f4:ea:8d:eb:fb:11:55:b8:2c:63:e8:33:82:da:79: ed:29:75:15:33:89:7e:bb:f8:3b:39:34:09:07:b3:02:fd:58: 5b:c6:50:ae:16:84:19:0e:bc:79:fa:84:b2:ed:76:2c:6e:d3: f1:de:37:80:66:71:71:d1:b2:1f:4b:7e:cf:77:d9:c5:7b:f5: 8b:a7:3a:a6:af:fc:ab:f9:2b:8e:4e:60:26:79:b6:10:ed:29: ec:52:90:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/kM4rx64cLCeeqOXRv5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYmE2YzBiY2NhMTZjNjg1ZGM3YjliMjdmMTk5YjQyYjRi ZWVlZTkwHhcNMjUxMjIwMjMwMDMyWhcNMjUxMjIxMjMwMDMyWjAzMTEwLwYDVQQD EyhiNjk5ZTRlYTkxNTE4MWJjMjAxMWZhYTExZGI1OTNhMDMzNmY2YjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJHxiyQsgHRP4rMiltBDKrfNg3nC a/66Bc+bg8hkvDKz+z2HSFVn76m2Dq+QUxPoU78KsmnTfqo5aOQ2HsEQuZo6D8G5 1K11AF0tWDdMfZI8+X0R+myAu1lwr0joCaeHuYojcy6YOej8buGkcYrT9He2D8xS PWPu8axGAG+w37gUSr1VuJdExXGoUB8Q6zg/xah7oYCK1jot7GZludbYzjkIbXK8 ki+H0rsMwxo58AkX8BUE1WryGR/xVtZWOZK4ciGEysLpXCk1XTCjUuEBg0BuGoHm QQn9FMCQKhsxtOdHzCnwU8Rg5+aMS/UvyEpUteQquwVzcGVEI/j9OzbbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaZ5OqRUYG8IBH6oR21k6Azb2sJMB8GA1UdIwQY MBaAFDO6bAvMoWxoXce5sn8Zm0K0vu7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYt Y2M3NTc5NzUxOGEwLzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYtY2M3NTc5NzUxOGEw LzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG6xgma5 lcDv5lZHkq50n2oeCFdBMEUJOOrS2GO634wKuMdCVciGACXEs7RfhlvU09IfcXv9 xDo6aZJGBgytz1uizIM/dA/ITOkG/uhuDtpxJcb4mhGxGvQMD+B24LV60fqZckFQ wXkiEqfwnKZt8tkA09cPTm9E0S/wPKuHTIPe2jMagm4Y9bT/fTAEefSfmWZ66MO+ NqsvhBBQ/1rNiu6B5pQI9OqN6/sRVbgsY+gzgtp57Sl1FTOJfrv4Ozk0CQezAv1Y W8ZQrhaEGQ68efqEsu12LG7T8d43gGZxcdGyH0t+z3fZxXv1i6c6pq/8q/krjk5g Jnm2EO0p7FKQkA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:26 2025 by rpki-client