This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json) Hash identifier: UQCgy18ShaF8f2/ENSnE35HF13CQ2KzB+a3xLsQfoE8= Subject key identifier: 95:A5:7A:EA:76:60:A1:AB:0E:E9:72:76:DB:2D:FF:99:95:EF:6E:E8 Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Certificate serial: 019B32D7932FC721C7274ACDC9F053A3566D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 19:02:27 +0000 Manifest this update: Thu 18 Dec 2025 19:02:27 +0000 Manifest next update: Fri 19 Dec 2025 19:02:27 +0000 Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: fhFeI5wYdGM56i7CNcxlK+RRxL9SdxXV6XnVPHu+yz4=) 2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=) 3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=) 4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:93:2f:c7:21:c7:27:4a:cd:c9:f0:53:a3:56:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Validity Not Before: Dec 18 19:02:27 2025 GMT Not After : Dec 19 19:02:27 2025 GMT Subject: CN=95a57aea7660a1ab0ee97276db2dff9995ef6ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:c2:ba:76:c2:d9:35:07:41:63:b1:d6:3b: 6e:7c:4c:b0:5f:dd:77:cc:e4:97:1a:54:56:6c:4c: b3:8c:ba:0e:b2:6d:56:51:44:d0:06:c2:f0:95:b4: e2:04:3d:aa:41:d7:c7:21:1e:b9:21:63:d4:73:df: 16:06:a0:95:dd:fc:08:75:65:f6:20:bf:db:58:bd: c8:1a:80:48:01:eb:2b:bd:f8:2c:12:ee:1b:21:8f: 32:47:37:68:37:a4:a7:60:c8:c2:be:3f:72:f7:03: 5f:86:a4:04:5e:7f:93:20:2d:77:c4:01:19:6e:9d: 86:e4:03:95:10:88:9e:f2:cd:c5:f9:6c:ea:cd:a7: 67:73:75:e2:39:b8:65:8f:b2:cc:83:24:f2:bd:6d: 03:db:73:29:d1:7b:80:01:73:ee:bc:4d:46:75:1e: 34:4c:a6:55:f6:18:b5:c8:bb:b9:f5:0d:e4:97:8c: e4:cd:b8:e1:ed:6c:29:ee:71:30:3b:1e:54:96:c9: 06:5c:f8:02:8e:15:f4:5c:b0:5e:9f:9f:54:5c:e9: 5c:b1:9d:bd:4c:42:62:9d:21:c4:2c:1e:35:2b:1d: bd:b3:fd:0e:86:3f:72:62:23:54:a9:23:d4:44:db: 47:d7:15:ad:4d:84:fc:39:c9:72:76:ac:10:f6:94: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A5:7A:EA:76:60:A1:AB:0E:E9:72:76:DB:2D:FF:99:95:EF:6E:E8 X509v3 Authority Key Identifier: keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:73:4b:56:18:7d:ba:50:5d:d3:1b:ce:53:f1:6e:4b:44: 4f:64:50:d0:e7:02:90:88:30:ca:35:00:47:37:21:6b:c8:72: cc:94:c3:f7:5b:8f:b4:85:e2:dc:ed:50:84:a7:29:19:4d:1d: 29:b7:72:e0:8c:36:62:c2:22:4e:cd:15:30:e9:ce:cd:05:18: 86:3a:c9:83:96:5d:67:78:0a:b7:52:2e:55:a6:8d:04:de:24: ae:db:76:86:c6:0e:ce:31:7e:5e:fb:87:ea:66:ed:2a:1a:93: a5:87:cd:4a:c8:7c:92:60:75:48:57:68:48:90:cd:02:e7:3c: 89:75:f3:d0:61:12:8a:cf:24:f2:6f:d5:74:4f:2d:14:05:e7: 6a:62:bf:3b:f5:e1:3a:7b:2c:22:3d:ae:cc:51:18:ad:61:e8: ef:82:69:27:93:2e:48:ff:29:14:27:e0:6c:a9:8d:df:90:da: d9:0d:96:0c:23:ba:a4:20:e5:62:3f:dc:06:88:22:85:60:ee: 4a:67:4f:4b:86:bd:a0:2b:f5:b4:a3:b3:c1:aa:58:4a:c7:b2: e1:49:e8:55:57:59:05:ca:d6:e9:af:59:c1:5b:0e:dc:08:94: b7:64:76:45:58:6f:a3:7c:a5:14:35:fd:cc:38:4c:b3:7f:85: 20:83:d2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy15MvxyHHJ0rNyfBTo1ZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri YmYyNWIwHhcNMjUxMjE4MTkwMjI3WhcNMjUxMjE5MTkwMjI3WjAzMTEwLwYDVQQD Eyg5NWE1N2FlYTc2NjBhMWFiMGVlOTcyNzZkYjJkZmY5OTk1ZWY2ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifCunbC2TUHQWOx1jtufEywX913 zOSXGlRWbEyzjLoOsm1WUUTQBsLwlbTiBD2qQdfHIR65IWPUc98WBqCV3fwIdWX2 IL/bWL3IGoBIAesrvfgsEu4bIY8yRzdoN6SnYMjCvj9y9wNfhqQEXn+TIC13xAEZ bp2G5AOVEIie8s3F+Wzqzadnc3XiObhlj7LMgyTyvW0D23Mp0XuAAXPuvE1GdR40 TKZV9hi1yLu59Q3kl4zkzbjh7Wwp7nEwOx5UlskGXPgCjhX0XLBen59UXOlcsZ29 TEJinSHELB41Kx29s/0Ohj9yYiNUqSPURNtH1xWtTYT8OclydqwQ9pTnXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWleup2YKGrDulydtst/5mV727oMB8GA1UdIwQY MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt N2U4YzU1MjZkZTdlLzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFJzS1YY fbpQXdMbzlPxbktET2RQ0OcCkIgwyjUARzcha8hyzJTD91uPtIXi3O1QhKcpGU0d Kbdy4Iw2YsIiTs0VMOnOzQUYhjrJg5ZdZ3gKt1IuVaaNBN4krtt2hsYOzjF+XvuH 6mbtKhqTpYfNSsh8kmB1SFdoSJDNAuc8iXXz0GESis8k8m/VdE8tFAXnamK/O/Xh OnssIj2uzFEYrWHo74JpJ5MuSP8pFCfgbKmN35Da2Q2WDCO6pCDlYj/cBogihWDu SmdPS4a9oCv1tKOzwapYSsey4UnoVVdZBcrW6a9ZwVsO3AiUt2R2RVhvo3ylFDX9 zDhMs3+FIIPSxQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:02:48 2025 by rpki-client