This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json) Hash identifier: j1yi4NgKz7kFOCzbIPrQ+o4zRA3Zk7LO/0HiQyebLYI= Subject key identifier: E7:A9:65:33:E3:AC:4C:17:76:53:16:AA:EA:D4:0E:B5:33:40:37:66 Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Certificate serial: 019AF3F741208D74BCB87A74DE726A3B418A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=) 2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: jsArkJ/I91H09hW/5RusExQ2KV0Nrm66f4b1ZLWmacs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:41:20:8d:74:bc:b8:7a:74:de:72:6a:3b:41:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=e7a96533e3ac4c17765316aaead40eb533403766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:f0:42:ff:6d:fe:2a:b2:99:ff:7f:17:58: f4:04:f1:f0:9a:58:31:01:e8:a8:71:21:1b:9e:82: fb:3b:89:d4:fb:3d:69:8b:0f:c5:27:9f:fb:c1:57: b6:aa:8c:60:d4:c6:9d:a4:38:05:98:6f:27:6b:f4: f8:f0:96:f8:1e:05:d4:ee:38:60:e9:fd:7e:c8:87: 71:33:23:2c:2e:8d:5c:29:c9:e0:9f:23:c9:dc:06: 00:56:af:55:89:cd:39:90:b4:d3:96:01:6d:0f:ea: 4c:82:64:01:7b:a0:03:88:86:89:6c:e0:93:dc:72: ac:ed:75:f6:ce:36:8d:6f:c8:f8:fb:bd:a5:63:43: b8:e3:a9:83:25:9c:31:c8:1c:3c:36:42:3b:7d:af: 59:a0:08:71:0b:ff:b5:01:6c:29:80:6a:4c:36:e7: 52:07:c9:32:b0:39:70:37:3f:fa:ac:ea:90:a0:3e: e7:be:0d:17:b7:a6:29:17:07:5a:3a:e6:ed:4f:64: 57:5a:8b:a4:1c:00:05:b6:62:20:44:0f:78:bd:90: 30:d2:80:01:9b:8f:87:42:a0:55:da:9a:52:ed:78: 75:bd:63:00:51:91:af:62:b4:ea:d9:a5:54:16:ce: 28:06:4e:af:05:7a:4b:a3:de:1e:64:ea:27:67:2d: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A9:65:33:E3:AC:4C:17:76:53:16:AA:EA:D4:0E:B5:33:40:37:66 X509v3 Authority Key Identifier: keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:89:41:35:06:03:f7:38:a8:c1:bd:c5:3b:3d:03:7b:9b:47: d5:c1:87:16:bb:d3:d8:f0:fa:5e:5f:cc:8a:35:5b:c0:8c:48: 1b:29:4b:64:d6:48:df:a4:33:ba:95:5c:6f:f6:13:f6:75:a8: 67:f2:8e:a9:af:a9:33:58:d5:fa:aa:34:54:f3:89:e0:ad:74: 41:e1:f1:ce:52:80:5e:a6:d2:93:8d:80:25:70:02:c8:f9:8e: 88:ea:4c:68:1a:3a:6a:26:57:46:28:fd:e3:83:cc:5c:68:b9: 95:92:a5:2f:80:a7:57:73:5e:ec:32:31:68:a0:d6:09:92:ba: ad:18:99:cf:55:99:63:c1:38:08:3e:fc:5f:ee:8c:74:9f:19: 06:34:76:69:67:8c:07:a2:a7:e0:74:a9:f2:71:fb:d9:e0:08: 5f:d2:06:71:dd:39:94:d0:3e:c5:6f:2c:4c:84:a1:3a:28:79: 57:33:e4:d1:a3:19:48:1d:94:22:3d:9a:14:cd:57:b3:65:d0: c7:96:12:98:ed:c0:9c:8c:bf:65:7e:6d:60:57:71:d9:72:76: e8:24:34:6c:47:e7:10:dd:7a:bd:26:eb:d6:0f:1b:58:89:1f: 4a:21:93:45:3d:fb:14:de:63:d9:52:a2:ef:9f:02:e2:8a:6d: 64:64:dc:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90EgjXS8uHp03nJqO0GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4 MzRlMGYwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD EyhlN2E5NjUzM2UzYWM0YzE3NzY1MzE2YWFlYWQ0MGViNTMzNDAzNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjafwQv9t/iqymf9/F1j0BPHwmlgx AeiocSEbnoL7O4nU+z1piw/FJ5/7wVe2qoxg1MadpDgFmG8na/T48Jb4HgXU7jhg 6f1+yIdxMyMsLo1cKcngnyPJ3AYAVq9Vic05kLTTlgFtD+pMgmQBe6ADiIaJbOCT 3HKs7XX2zjaNb8j4+72lY0O446mDJZwxyBw8NkI7fa9ZoAhxC/+1AWwpgGpMNudS B8kysDlwNz/6rOqQoD7nvg0Xt6YpFwdaOubtT2RXWoukHAAFtmIgRA94vZAw0oAB m4+HQqBV2ppS7Xh1vWMAUZGvYrTq2aVUFs4oBk6vBXpLo94eZOonZy3ARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOepZTPjrEwXdlMWqurUDrUzQDdmMB8GA1UdIwQY MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1 LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuolBNQYD 9ziowb3FOz0De5tH1cGHFrvT2PD6Xl/MijVbwIxIGylLZNZI36QzupVcb/YT9nWo Z/KOqa+pM1jV+qo0VPOJ4K10QeHxzlKAXqbSk42AJXACyPmOiOpMaBo6aiZXRij9 44PMXGi5lZKlL4CnV3Ne7DIxaKDWCZK6rRiZz1WZY8E4CD78X+6MdJ8ZBjR2aWeM B6Kn4HSp8nH72eAIX9IGcd05lNA+xW8sTIShOih5VzPk0aMZSB2UIj2aFM1Xs2XQ x5YSmO3AnIy/ZX5tYFdx2XJ26CQ0bEfnEN16vSbr1g8bWIkfSiGTRT37FN5j2VKi 758C4optZGTc8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:56 2025 by rpki-client