This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json) Hash identifier: GVisC05FNvgSbNdc7CHlxrbcX9q2/BCY6hCB1j24G18= Subject key identifier: 76:E1:4B:6F:8C:00:36:34:03:62:D0:C0:CE:7F:20:AD:F6:B6:DD:FE Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da Certificate serial: 019AF3526FB2AFA4DD1CEBE1BDD6B7A4050A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: m1oYzcsyUIVaj7cN5hBv7OtBAmzoLKyWyOMJ0d+xch0=) 2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=) 3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6f:b2:af:a4:dd:1c:eb:e1:bd:d6:b7:a4:05:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=76e14b6f8c0036340362d0c0ce7f20adf6b6ddfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:ed:2b:69:ef:5c:00:0b:d8:51:a7:68:93: 12:95:9f:81:3f:0e:c3:bd:87:be:0f:0b:81:4e:ec: 8b:39:64:bb:2d:c0:7a:1f:8e:83:4e:3d:9c:d6:74: 8a:8a:d0:df:e2:de:cc:d5:a2:b4:b4:07:fd:c3:b8: 09:bc:3b:2a:f4:61:f4:4f:45:2c:36:14:ea:ef:4b: db:5c:94:28:ac:30:c3:80:04:c8:7e:75:91:b4:75: 93:91:ee:5e:e8:dc:f8:6b:d6:02:90:5e:6b:e5:dd: cf:a7:5b:83:ee:16:11:6a:5b:54:31:f4:e0:9f:83: c6:5a:30:20:90:6f:6a:0a:62:7c:10:a1:10:f7:96: cf:c2:31:fe:0a:d5:92:73:fd:e5:a2:01:77:d4:26: 9a:0a:e3:df:28:0e:19:86:33:84:23:f8:48:31:ba: ee:81:41:fc:ca:93:df:ce:5c:45:9c:a6:a4:63:bf: 65:8a:20:b0:0a:42:68:45:f5:9f:88:9f:8b:b4:ac: 7d:d3:89:5a:33:28:ba:21:4f:45:87:de:03:8d:21: c7:db:ce:e5:4b:1d:fd:52:3a:27:87:03:28:b5:69: 6e:57:ae:6c:fd:18:0c:61:f8:4d:3d:c8:bc:e3:9a: 80:78:41:10:cf:27:5a:41:58:01:3f:33:f3:00:98: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:4B:6F:8C:00:36:34:03:62:D0:C0:CE:7F:20:AD:F6:B6:DD:FE X509v3 Authority Key Identifier: keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1d:ce:52:0d:11:2d:61:19:65:38:41:15:3d:56:18:96:53: f6:af:1d:d3:20:c9:3a:45:d4:70:fd:06:fe:0c:00:72:0b:be: 19:3b:ed:9d:eb:2d:35:b5:e7:f8:a8:31:d7:1d:28:3c:ba:7e: ee:f7:dc:a7:47:04:ad:2c:d2:57:f8:d5:33:7f:a5:e6:a9:e0: 58:0e:f2:a1:0d:3a:15:a4:7f:88:83:67:0a:af:70:f1:83:a7: 10:47:6c:74:f3:17:0d:6b:d8:d5:39:0d:a3:1f:04:5b:69:7a: 84:44:04:c3:33:32:e3:53:9f:d1:ba:3b:0b:09:c6:8b:ed:99: 97:ff:da:df:11:7f:18:7b:4f:9a:49:13:e3:ec:b9:18:d5:bb: 69:0b:ae:8b:89:5f:5b:52:7b:59:f1:55:65:d3:5e:c9:60:c4: 96:09:48:89:f8:8f:7d:9d:2e:b3:68:eb:42:c6:a1:45:a8:ef: de:db:49:72:e0:de:af:0d:9b:07:21:9e:31:2e:20:aa:5c:97: 95:dd:11:c8:56:49:9d:87:cb:85:a5:35:1e:3d:e4:60:95:8e: 7d:fb:49:52:29:cf:e9:b2:7a:33:4b:17:48:15:ed:1f:34:30: 80:83:c8:cc:36:44:71:b0:18:ef:d9:29:ee:fa:43:96:43:bb: a8:86:f5:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUm+yr6TdHOvhvda3pAUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1 NmYxZGEwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg3NmUxNGI2ZjhjMDAzNjM0MDM2MmQwYzBjZTdmMjBhZGY2YjZkZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlvtK2nvXAAL2FGnaJMSlZ+BPw7D vYe+DwuBTuyLOWS7LcB6H46DTj2c1nSKitDf4t7M1aK0tAf9w7gJvDsq9GH0T0Us NhTq70vbXJQorDDDgATIfnWRtHWTke5e6Nz4a9YCkF5r5d3Pp1uD7hYRaltUMfTg n4PGWjAgkG9qCmJ8EKEQ95bPwjH+CtWSc/3logF31CaaCuPfKA4ZhjOEI/hIMbru gUH8ypPfzlxFnKakY79liiCwCkJoRfWfiJ+LtKx904laMyi6IU9Fh94DjSHH287l Sx39UjonhwMotWluV65s/RgMYfhNPci845qAeEEQzydaQVgBPzPzAJjIuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbhS2+MADY0A2LQwM5/IK32tt3+MB8GA1UdIwQY MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1 LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB3OUg0R LWEZZThBFT1WGJZT9q8d0yDJOkXUcP0G/gwAcgu+GTvtnestNbXn+Kgx1x0oPLp+ 7vfcp0cErSzSV/jVM3+l5qngWA7yoQ06FaR/iINnCq9w8YOnEEdsdPMXDWvY1TkN ox8EW2l6hEQEwzMy41Of0bo7CwnGi+2Zl//a3xF/GHtPmkkT4+y5GNW7aQuui4lf W1J7WfFVZdNeyWDElglIifiPfZ0us2jrQsahRajv3ttJcuDerw2bByGeMS4gqlyX ld0RyFZJnYfLhaU1Hj3kYJWOfftJUinP6bJ6M0sXSBXtHzQwgIPIzDZEcbAY79kp 7vpDlkO7qIb1EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:33 2025 by rpki-client