This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json) Hash identifier: eMbM53xQzM6AFdirGMr2FdeIFpQOMbD4PT1lyTigNcQ= Subject key identifier: E2:21:AC:45:F5:6D:10:C2:8E:E4:3B:E7:87:5E:09:B5:32:3F:63:F7 Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109 Certificate serial: 019B41DB1F50C1890E5841F1E239645623B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 17:00:37 +0000 Manifest this update: Sun 21 Dec 2025 17:00:37 +0000 Manifest next update: Mon 22 Dec 2025 17:00:37 +0000 Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: tICHUCq+Wj8X4RzHrqf5t9JVu7K5aFg5sMwd11ilE5Y=) 2: S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa (hash: k0MUzfyKgSwFW5KYtO8cWP9faKM6iooPUUBEmeIqdP0=) 3: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:1f:50:c1:89:0e:58:41:f1:e2:39:64:56:23:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109 Validity Not Before: Dec 21 17:00:37 2025 GMT Not After : Dec 22 17:00:37 2025 GMT Subject: CN=e221ac45f56d10c28ee43be7875e09b5323f63f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:44:d6:32:c3:90:8c:00:f1:aa:cc:32:cd: 54:c5:d1:c8:88:1a:a9:c1:83:fd:2d:12:8b:eb:c9: 78:38:63:58:29:c7:8c:a5:eb:78:30:97:c0:00:5c: d2:fb:d1:e2:b1:6a:40:ec:65:23:25:da:5a:2b:2e: a7:7c:86:a0:cd:69:ae:4b:8c:67:f7:f7:21:dc:3b: 47:ff:f1:a7:3b:64:65:b4:07:b5:c7:45:73:3a:e6: c6:78:d4:f3:a2:91:2b:66:8b:e5:d8:74:1a:f9:52: ad:11:d9:99:b2:d8:47:14:f9:0d:90:e1:04:87:86: 18:b6:72:d2:29:92:34:c8:51:62:d3:d9:66:df:86: 38:50:20:20:42:59:b4:97:85:49:62:f0:42:ed:05: 31:ff:a9:5d:a1:4c:ee:4e:be:26:24:b9:db:fb:a2: b5:51:0e:32:0d:ca:fb:d0:29:f7:aa:70:40:dd:b4: 90:b4:f1:8d:d6:57:f7:a3:dd:56:3e:ee:ef:3f:13: 4f:18:11:43:51:ce:c0:9e:20:86:11:e4:14:06:40: a0:94:0a:de:71:d2:cd:80:7e:3f:cf:64:cd:73:04: db:4f:52:b8:c8:34:6c:4a:98:d5:7d:d0:6d:61:b2: 29:64:a2:af:ec:a4:29:84:7d:c7:5d:71:1c:0c:8b: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:AC:45:F5:6D:10:C2:8E:E4:3B:E7:87:5E:09:B5:32:3F:63:F7 X509v3 Authority Key Identifier: keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8b:f9:d9:c9:01:c3:99:a2:37:39:47:35:2c:bf:71:11:d9: e7:5b:e8:29:c0:0f:59:c5:8e:46:1c:7a:db:78:5e:67:6f:8d: 15:b2:0c:ff:18:de:aa:df:bb:6a:0a:78:7f:b0:47:53:df:51: d7:9d:31:7d:44:d5:94:d2:9e:3b:44:58:1a:b2:4f:c7:2b:55: 89:4e:03:37:c6:68:33:39:65:49:9d:44:4b:b9:3d:1f:3f:92: ac:a8:6b:5a:03:88:59:0f:a4:de:10:36:80:3d:d9:62:9a:8d: a8:0a:a6:f6:60:ef:1f:a0:88:6f:38:e0:30:54:1a:da:dd:6e: 20:f8:bc:bf:13:f9:55:ca:7b:b7:25:3d:af:6e:a9:e2:4c:19: 52:3b:63:aa:0c:78:c9:ea:0a:4d:01:94:9f:75:b8:f5:c3:5e: 93:49:2d:cf:9a:3c:82:13:29:ea:a8:ed:7a:7d:4d:2d:a1:89: f2:ab:13:c6:bc:e5:1f:d7:b6:ad:24:b2:b9:f8:ab:54:e9:91: be:48:9a:f3:a1:e6:eb:0e:66:06:de:ba:21:4f:42:2c:ea:77: 5b:21:d9:b8:6a:34:36:59:63:ea:b1:be:82:25:5f:7e:75:e6: 2d:95:ca:98:99:c6:bf:f9:d3:91:ec:9b:bb:46:2f:7c:45:c1: 08:3c:96:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2x9QwYkOWEHx4jlkViOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOTU0MzMwMzQ5ZjU3NTAyYTc2YWU2ZTk5OTg3ZWZjM2Uz YjgxMDkwHhcNMjUxMjIxMTcwMDM3WhcNMjUxMjIyMTcwMDM3WjAzMTEwLwYDVQQD EyhlMjIxYWM0NWY1NmQxMGMyOGVlNDNiZTc4NzVlMDliNTMyM2Y2M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbNE1jLDkIwA8arMMs1UxdHIiBqp wYP9LRKL68l4OGNYKceMpet4MJfAAFzS+9HisWpA7GUjJdpaKy6nfIagzWmuS4xn 9/ch3DtH//GnO2RltAe1x0VzOubGeNTzopErZovl2HQa+VKtEdmZsthHFPkNkOEE h4YYtnLSKZI0yFFi09lm34Y4UCAgQlm0l4VJYvBC7QUx/6ldoUzuTr4mJLnb+6K1 UQ4yDcr70Cn3qnBA3bSQtPGN1lf3o91WPu7vPxNPGBFDUc7AniCGEeQUBkCglAre cdLNgH4/z2TNcwTbT1K4yDRsSpjVfdBtYbIpZKKv7KQphH3HXXEcDIvpaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIhrEX1bRDCjuQ754deCbUyP2P3MB8GA1UdIwQY MBaAFDOVQzA0n1dQKnaubpmYfvw+O4EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEt ZmRmODRmODNhMjc0LzEvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEtZmRmODRmODNhMjc0 LzEvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATov52ckB w5miNzlHNSy/cRHZ51voKcAPWcWORhx623heZ2+NFbIM/xjeqt+7agp4f7BHU99R 150xfUTVlNKeO0RYGrJPxytViU4DN8ZoMzllSZ1ES7k9Hz+SrKhrWgOIWQ+k3hA2 gD3ZYpqNqAqm9mDvH6CIbzjgMFQa2t1uIPi8vxP5Vcp7tyU9r26p4kwZUjtjqgx4 yeoKTQGUn3W49cNek0ktz5o8ghMp6qjten1NLaGJ8qsTxrzlH9e2rSSyufirVOmR vkia86Hm6w5mBt66IU9CLOp3WyHZuGo0Nllj6rG+giVffnXmLZXKmJnGv/nTkeyb u0YvfEXBCDyWcQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:45:00 2025 by rpki-client