This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json) Hash identifier: rTkj7K0pEylQY8YMF0yDNkbhVGs95mdvQ8QHlWnVDFs= Subject key identifier: A6:EB:B1:6C:3F:B0:8B:FA:09:1B:A9:BC:D0:0F:8A:3A:50:A3:FB:00 Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520 Certificate serial: 019AF35242FA38994640F73DA48C14D091B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft Manifest number: 16C8 Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: LbLC21MfVhWPBSXefRov4Ku+ReLPX7A1aLJ9lhmMfsQ=) 2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:42:fa:38:99:46:40:f7:3d:a4:8c:14:d0:91:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d2d885477d0280264e458eb071f45d91691520 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=a6ebb16c3fb08bfa091ba9bcd00f8a3a50a3fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:99:66:87:88:0b:42:33:8c:62:f7:d2:f1: 54:5f:25:51:ae:ef:dc:dc:39:60:48:b9:ed:13:03: 8c:25:ef:5f:83:81:bd:95:49:f5:7d:df:8d:c3:f8: cb:18:d1:30:c1:14:e0:55:de:f4:f7:12:5d:41:03: 80:3a:b0:35:89:71:cd:f5:8b:75:76:ea:6a:02:74: f2:b1:2b:f8:62:7a:43:9d:8e:f4:11:cc:e1:00:a5: cd:0f:84:19:74:da:2e:a3:ee:99:a9:d0:6b:d2:87: a7:77:76:93:07:43:95:c8:57:06:f1:d5:be:b5:01: 58:cd:51:ef:a8:4f:92:1b:29:5d:bd:e6:03:66:4e: c3:e1:35:00:d7:be:78:70:a5:cf:62:89:e3:5d:7e: e4:bd:a7:dd:2d:dc:9c:99:30:bb:77:59:e6:a8:7b: cc:8e:e2:d8:ea:a0:eb:a0:4f:f3:58:5b:cf:d5:16: 46:c0:83:62:34:80:5b:a6:e8:12:17:d1:47:66:25: 32:05:46:eb:17:36:66:cd:1b:f7:fc:c3:85:71:37: dd:d6:97:8e:01:ac:52:9f:cf:fe:e0:b0:5b:3c:e6: bb:8b:a2:86:15:98:98:65:0a:84:3f:a6:d9:22:32: 29:43:c7:2f:6e:b4:05:fd:c3:79:cd:59:47:bc:b9: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:B1:6C:3F:B0:8B:FA:09:1B:A9:BC:D0:0F:8A:3A:50:A3:FB:00 X509v3 Authority Key Identifier: keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:c5:c2:a7:79:75:8c:53:90:76:45:39:32:96:7d:9f:de: 32:b4:29:6e:e5:69:6f:74:51:2f:60:a3:ee:54:a2:55:f5:ed: e5:86:b7:e7:1c:c6:30:97:2d:5a:c9:1d:72:c0:d0:f8:77:00: 94:9c:46:ec:5f:09:e6:90:d6:f2:0f:9e:67:b1:22:87:99:93: ba:6f:8d:f8:da:53:41:54:88:a6:52:93:29:97:4b:52:23:cf: a4:86:33:58:51:cf:3e:73:de:68:56:76:1c:9f:15:df:5d:2a: 32:30:cb:03:95:15:86:28:c7:75:3a:ef:b3:e2:af:df:c8:c1: 4c:2c:ec:ab:58:5c:97:c8:e7:1a:41:f8:9a:68:95:d0:b9:d4: 56:6c:20:e4:3d:34:4e:f1:1c:7f:10:8c:ea:01:c1:d0:7d:22: 87:a4:88:c3:4d:2b:4b:df:56:58:c3:ce:26:cd:c6:a4:20:44: 20:1b:2f:11:8a:52:57:e9:45:73:ab:0e:fe:16:f0:57:69:ec: 4b:6d:d9:fb:a3:a0:98:16:b2:63:ef:76:ea:7b:ae:66:08:58: 1f:62:f1:b9:4a:08:40:90:09:2e:5b:8a:94:40:5d:59:d7:5c: 2c:1b:6b:62:59:9f:c0:ac:cc:ab:fd:a5:1d:e6:98:e5:6d:ac: ad:cd:1e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkL6OJlGQPc9pIwU0JG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2 OTE1MjAwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhhNmViYjE2YzNmYjA4YmZhMDkxYmE5YmNkMDBmOGEzYTUwYTNmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz2ZZoeIC0IzjGL30vFUXyVRru/c 3DlgSLntEwOMJe9fg4G9lUn1fd+Nw/jLGNEwwRTgVd709xJdQQOAOrA1iXHN9Yt1 dupqAnTysSv4YnpDnY70EczhAKXND4QZdNouo+6ZqdBr0oend3aTB0OVyFcG8dW+ tQFYzVHvqE+SGyldveYDZk7D4TUA1754cKXPYonjXX7kvafdLdycmTC7d1nmqHvM juLY6qDroE/zWFvP1RZGwINiNIBbpugSF9FHZiUyBUbrFzZmzRv3/MOFcTfd1peO AaxSn8/+4LBbPOa7i6KGFZiYZQqEP6bZIjIpQ8cvbrQF/cN5zVlHvLl2xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbrsWw/sIv6CRupvNAPijpQo/sAMB8GA1UdIwQY MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGTFwqd5 dYxTkHZFOTKWfZ/eMrQpbuVpb3RRL2Cj7lSiVfXt5Ya35xzGMJctWskdcsDQ+HcA lJxG7F8J5pDW8g+eZ7Eih5mTum+N+NpTQVSIplKTKZdLUiPPpIYzWFHPPnPeaFZ2 HJ8V310qMjDLA5UVhijHdTrvs+Kv38jBTCzsq1hcl8jnGkH4mmiV0LnUVmwg5D00 TvEcfxCM6gHB0H0ih6SIw00rS99WWMPOJs3GpCBEIBsvEYpSV+lFc6sO/hbwV2ns S23Z+6OgmBayY+926nuuZghYH2LxuUoIQJAJLluKlEBdWddcLBtrYlmfwKzMq/2l HeaY5W2src0eIw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:05 2025 by rpki-client