This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json) Hash identifier: VD5WSkj1k1jC4Qp+TzxUHl4kZjd4xlM2/9g2pAZoI9w= Subject key identifier: 70:1E:78:2B:A9:B8:32:98:95:41:25:19:FD:DD:80:62:52:0D:2D:E4 Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68 Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468 Certificate serial: 019AF208AB60A2FEC77BBAA8ED4710A0539C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: QiBToX8ij5KS+PBrvGNUaQolfE2o6WBfm0fI203orqI=) 2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:60:a2:fe:c7:7b:ba:a8:ed:47:10:a0:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=701e782ba9b8329895412519fddd8062520d2de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:14:92:8e:66:9d:e1:a6:97:fe:30:22:5d: 46:6f:ab:2c:7d:fa:ed:91:e3:21:e1:34:69:7c:01: 39:d9:bc:c4:1c:ca:d2:e1:4a:9f:5d:fe:08:9b:63: e4:4e:db:a5:74:7a:f2:e4:86:1d:b0:44:df:07:cf: 0d:ee:5e:b0:10:13:f9:5b:5a:bc:8d:66:0e:bd:55: 2f:99:8d:3b:24:3d:a4:02:15:66:7d:0d:55:e9:6c: d5:8b:1f:30:f9:a4:3e:87:bc:e6:dd:eb:2e:1f:c0: eb:3a:07:b5:f1:24:4d:33:98:23:08:1c:78:42:11: ae:12:54:bf:90:fd:19:a9:45:7f:b9:a0:2d:98:26: a2:7c:0d:9c:97:c9:e6:07:c7:9f:1a:78:ff:3e:72: 64:e8:5f:61:bd:48:81:17:1f:b8:51:30:8c:44:76: 99:fd:01:87:27:d3:94:b5:a3:ff:12:12:c1:32:26: 64:e6:42:a7:4d:61:60:88:2b:fc:52:01:99:84:75: 04:09:ea:db:ab:29:6c:93:d1:a6:33:ab:32:8d:d8: 7c:27:70:c6:79:3f:bb:f1:f6:43:f3:7b:5c:63:56: 94:22:21:6d:39:36:9b:ce:7d:78:20:a1:b0:a7:fc: bb:4d:ae:af:dd:bd:b1:94:75:cb:1c:9a:57:a6:78: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1E:78:2B:A9:B8:32:98:95:41:25:19:FD:DD:80:62:52:0D:2D:E4 X509v3 Authority Key Identifier: keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:19:d5:0c:c4:d3:ac:1b:e2:8c:c4:3d:66:d5:17:d0:1d: f9:c7:ad:37:2d:0f:c5:af:b8:f1:20:1d:af:b3:8a:e5:4f:f8: fc:6e:e0:10:b1:ab:34:fc:66:5b:fe:83:e8:c1:27:29:d7:54: a0:74:b2:67:18:1b:4f:ef:39:4a:4c:d6:30:b9:df:7e:9e:c6: e2:01:e1:19:1d:ab:76:48:5f:78:a8:93:ec:96:b0:99:e0:c7: 11:29:f6:7f:52:c5:91:34:cf:52:88:75:e1:ae:9f:8d:e9:ae: f8:68:74:db:02:05:2d:5b:aa:f5:32:28:0c:2f:53:ea:b6:05: 5b:fc:41:d0:c0:d6:f9:4b:fa:49:d8:66:ff:06:b9:88:6d:d6: 91:d5:5c:ac:79:98:49:68:74:90:b7:5c:bd:51:41:53:29:f3: 81:d5:06:6b:e7:9b:67:e3:4d:b3:68:2a:64:96:a1:58:f4:a1: 93:4d:80:c6:c6:32:50:58:c3:71:ea:14:6a:fe:7e:c3:06:78: 7d:cf:04:d3:01:6c:cd:51:f1:49:a6:58:6a:87:19:a1:dc:6f: c5:7a:3d:80:e1:c5:91:dc:0b:66:46:b9:8d:02:0f:b2:f7:04: 8b:bb:bf:39:7f:62:40:ea:68:61:0b:d4:cb:d0:51:06:6c:f7: 5e:56:01:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKtgov7He7qo7UcQoFOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk NjA0NjgwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD Eyg3MDFlNzgyYmE5YjgzMjk4OTU0MTI1MTlmZGRkODA2MjUyMGQyZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW4Uko5mneGml/4wIl1Gb6ssffrt keMh4TRpfAE52bzEHMrS4UqfXf4Im2PkTtuldHry5IYdsETfB88N7l6wEBP5W1q8 jWYOvVUvmY07JD2kAhVmfQ1V6WzVix8w+aQ+h7zm3esuH8DrOge18SRNM5gjCBx4 QhGuElS/kP0ZqUV/uaAtmCaifA2cl8nmB8efGnj/PnJk6F9hvUiBFx+4UTCMRHaZ /QGHJ9OUtaP/EhLBMiZk5kKnTWFgiCv8UgGZhHUECerbqylsk9GmM6syjdh8J3DG eT+78fZD83tcY1aUIiFtOTabzn14IKGwp/y7Ta6v3b2xlHXLHJpXpnjSZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAeeCupuDKYlUElGf3dgGJSDS3kMB8GA1UdIwQY MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX4Z1QzE 06wb4ozEPWbVF9Ad+cetNy0Pxa+48SAdr7OK5U/4/G7gELGrNPxmW/6D6MEnKddU oHSyZxgbT+85SkzWMLnffp7G4gHhGR2rdkhfeKiT7JawmeDHESn2f1LFkTTPUoh1 4a6fjemu+Gh02wIFLVuq9TIoDC9T6rYFW/xB0MDW+Uv6Sdhm/wa5iG3WkdVcrHmY SWh0kLdcvVFBUynzgdUGa+ebZ+NNs2gqZJahWPShk02AxsYyUFjDceoUav5+wwZ4 fc8E0wFszVHxSaZYaocZodxvxXo9gOHFkdwLZka5jQIPsvcEi7u/OX9iQOpoYQvU y9BRBmz3XlYB0A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:14 2025 by rpki-client