This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json) Hash identifier: +T2QM0nTzFWHtdnJSIpemVlAcsC1lWN5Ps/NEbGQQCI= Subject key identifier: 36:5C:AF:35:A7:0A:47:64:A3:15:E7:1D:F5:8C:12:1A:DC:B1:3F:58 Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Certificate serial: 019B3231E624B23C596C6AE3E1A6D4318336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 16:01:29 +0000 Manifest this update: Thu 18 Dec 2025 16:01:29 +0000 Manifest next update: Fri 19 Dec 2025 16:01:29 +0000 Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: Bls1SPxHT/Y5ALi/T1HydhMSTfbrgxzfDlu1drIB584=) 2: fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa (hash: AgVStdTBtz10UhWi+prRN62uYxyB6wfSYy9B3b+hAYM=) 3: jXyVzXU7-Oio9ulAptfw8swowyU.roa (hash: AvjnXmv2cjY8yuFcSYqvGQ/yeH6E1h4Re+Q85B75QSE=) 4: y0ys8oH_BAjKhZB73VQ8OdRVKQQ.roa (hash: EX1QPljWIilhaU7+2aQcyOJZqBoQmUdpiFzyhGZQrYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:e6:24:b2:3c:59:6c:6a:e3:e1:a6:d4:31:83:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Validity Not Before: Dec 18 16:01:29 2025 GMT Not After : Dec 19 16:01:29 2025 GMT Subject: CN=365caf35a70a4764a315e71df58c121adcb13f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:b0:5b:ef:5b:16:0a:c7:a0:60:d2:2d:41: 7f:bc:47:a3:6f:a5:e5:14:ed:a4:6c:e5:4b:55:5f: de:98:92:87:3a:82:1b:91:48:fd:07:12:37:26:5a: 0b:91:a2:0b:94:f9:99:60:5e:23:cd:fb:fb:8f:87: ce:c1:d4:0d:c6:83:b4:0f:42:dc:d0:b9:e9:3d:d0: 6e:01:b4:01:cd:d6:29:d8:4c:41:4e:36:9c:19:e7: 75:18:bd:0f:22:62:1e:e8:26:ab:7a:75:e9:7c:8c: b2:bb:83:d9:b7:7d:af:9d:ca:7f:af:9b:85:bf:c8: 2a:3e:03:0c:72:3c:97:62:2f:17:e1:0d:c3:ea:70: 38:ee:51:27:43:c4:f2:bb:3b:3d:66:d8:38:95:b3: 49:f2:57:9b:d7:ae:5b:da:96:58:33:6c:c2:b3:b5: 0d:9e:c2:78:38:d5:e0:fe:1a:d2:e4:f5:b8:0f:ac: e6:1c:ab:4a:69:da:7f:c1:0f:6a:3b:9f:b5:45:2b: 75:73:f5:ee:b7:8c:ed:da:9f:02:77:c5:3b:17:5f: db:ae:97:b8:1b:3c:2f:99:bf:a1:e7:2b:e2:c5:2f: 60:54:7d:a8:6e:63:ba:d0:ee:df:7a:fd:ff:75:b9: 9c:fb:92:50:ed:59:91:37:85:a1:da:e7:78:3b:d9: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5C:AF:35:A7:0A:47:64:A3:15:E7:1D:F5:8C:12:1A:DC:B1:3F:58 X509v3 Authority Key Identifier: keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:cc:52:60:0b:63:aa:ec:95:74:e9:54:2c:24:c0:45:90:fb: dc:f8:0f:e9:a9:a7:16:a1:99:e5:b8:65:64:11:eb:99:c3:f3: 8b:df:9d:6e:90:1f:21:9e:b1:38:9e:ea:f0:a6:84:8c:84:84: bd:4d:aa:ca:ff:a3:63:f6:71:a3:4c:d2:35:66:fa:34:ef:87: db:90:57:6b:ed:98:b9:ab:c2:54:dc:18:36:28:2c:8b:de:8e: ec:45:ae:13:bc:0d:f0:f1:d0:a2:e8:54:ab:49:84:27:84:85: 53:c9:cd:ea:06:21:c6:5c:5f:aa:1d:2e:4a:54:75:65:a8:97: e9:1f:35:9d:81:92:89:3a:7b:9f:47:d4:d6:26:32:25:ee:e3: d4:0d:6c:66:60:39:31:38:55:09:07:f5:49:9f:4b:14:14:6a: 57:d9:9a:a6:39:91:ad:c5:51:d2:b3:0f:9f:31:91:2d:ae:02: 1c:e8:3c:47:ee:a5:33:f1:16:03:d6:1a:2a:84:58:07:e5:5c: ad:7d:d1:a5:7d:24:cd:f3:fc:42:e6:77:29:2b:75:b1:ae:19: df:a3:0b:39:97:91:7d:1a:45:82:f8:b0:1e:59:2a:2d:9c:a0: 59:12:e4:e7:b8:9b:01:9b:6f:cd:12:21:85:84:6c:94:4d:65: ab:c8:c1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMeYksjxZbGrj4abUMYM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2RkNjU5NjY3MzdjZThmNjVlNDBlZjJmZWExY2ZmYWZi MTYyYjAwHhcNMjUxMjE4MTYwMTI5WhcNMjUxMjE5MTYwMTI5WjAzMTEwLwYDVQQD EygzNjVjYWYzNWE3MGE0NzY0YTMxNWU3MWRmNThjMTIxYWRjYjEzZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CmwW+9bFgrHoGDSLUF/vEejb6Xl FO2kbOVLVV/emJKHOoIbkUj9BxI3JloLkaILlPmZYF4jzfv7j4fOwdQNxoO0D0Lc 0LnpPdBuAbQBzdYp2ExBTjacGed1GL0PImIe6CarenXpfIyyu4PZt32vncp/r5uF v8gqPgMMcjyXYi8X4Q3D6nA47lEnQ8Tyuzs9Ztg4lbNJ8leb165b2pZYM2zCs7UN nsJ4ONXg/hrS5PW4D6zmHKtKadp/wQ9qO5+1RSt1c/Xut4zt2p8Cd8U7F1/brpe4 Gzwvmb+h5yvixS9gVH2obmO60O7fev3/dbmc+5JQ7VmRN4Wh2ud4O9l+fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZcrzWnCkdkoxXnHfWMEhrcsT9YMB8GA1UdIwQY MBaAFN991llmc3zo9l5A7y/qHP+vsWKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMt OGFjODk2NTcwOGJjLzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMtOGFjODk2NTcwOGJj LzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcxSYAtj quyVdOlULCTARZD73PgP6amnFqGZ5bhlZBHrmcPzi9+dbpAfIZ6xOJ7q8KaEjISE vU2qyv+jY/Zxo0zSNWb6NO+H25BXa+2YuavCVNwYNigsi96O7EWuE7wN8PHQouhU q0mEJ4SFU8nN6gYhxlxfqh0uSlR1ZaiX6R81nYGSiTp7n0fU1iYyJe7j1A1sZmA5 MThVCQf1SZ9LFBRqV9mapjmRrcVR0rMPnzGRLa4CHOg8R+6lM/EWA9YaKoRYB+Vc rX3RpX0kzfP8QuZ3KSt1sa4Z36MLOZeRfRpFgviwHlkqLZygWRLk57ibAZtvzRIh hYRslE1lq8jB0g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:28:07 2025 by rpki-client