This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json) Hash identifier: O0PUEWqydiO+G/0hwb5T9y5gglth10Tes2Yg/9n+KJU= Subject key identifier: 55:DB:81:EE:FD:75:7B:B0:ED:85:FD:B7:5A:F2:90:DF:49:46:C2:5F Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Certificate serial: 019AF3896894A6D1E409FDB59034E0822963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=) 2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: yGoK2oYvmACxXiBvZC+EDxc+f4H1xNVaDecSVWUg8nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:68:94:a6:d1:e4:09:fd:b5:90:34:e0:82:29:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=55db81eefd757bb0ed85fdb75af290df4946c25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:0b:36:d1:d5:2d:c9:0d:d1:af:91:c2:0b: 17:4c:a2:34:e9:c3:43:6d:6a:9b:42:62:45:a5:47: cd:be:4c:87:ef:65:87:32:f8:b4:48:71:1c:68:16: 0f:13:a4:74:d8:71:33:e9:19:57:6e:1b:6e:a4:19: 5e:05:db:be:d8:f1:4f:36:d8:58:a6:9f:7a:a0:5b: 2b:5d:d4:5a:0f:e3:d5:8e:f4:bb:ab:de:2f:e4:2d: 43:37:86:8e:bd:84:a3:fc:5a:0a:2f:7e:2e:e4:3a: 66:0b:07:85:81:e6:01:31:b2:82:4f:1e:52:f4:3b: 20:e2:ba:49:b7:41:dd:01:1f:9f:cb:1a:0e:83:70: 2c:b1:15:04:33:1e:d9:67:0a:f7:98:a1:e6:60:ab: 86:ad:a8:53:50:d8:a5:6f:be:71:70:58:e5:f8:04: 92:d8:26:19:f5:c6:1d:d4:44:6d:32:eb:82:88:a4: 5a:42:b6:e5:44:85:31:9c:4d:ec:14:a3:71:94:f9: 50:d1:54:30:a8:bc:4c:b9:51:78:46:aa:90:d9:df: 8d:b9:00:40:b6:40:8c:6e:d1:49:e9:70:37:1e:80: ca:0a:f8:f0:3f:6b:ca:ac:7f:43:d7:28:9f:a7:a7: b6:be:49:fb:2b:b5:45:18:d4:fc:71:bd:61:93:87: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:81:EE:FD:75:7B:B0:ED:85:FD:B7:5A:F2:90:DF:49:46:C2:5F X509v3 Authority Key Identifier: keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:69:86:df:2b:97:9f:75:18:cb:84:cb:09:4b:b8:21:7c:af: 80:44:f7:d0:4b:cc:bc:b2:3d:3b:e0:6e:a8:a2:e8:46:ab:ba: bd:5d:f6:67:fd:3b:53:ca:2f:f5:15:1d:49:7b:50:ba:ca:df: cd:e3:63:1b:de:40:d4:57:62:66:be:62:79:13:2d:3e:b1:78: 13:c0:be:5b:b0:ca:b4:4a:77:66:da:07:8c:4a:a4:3a:3a:a2: d9:33:c8:5b:fe:13:c5:ec:99:36:70:6c:44:f4:cd:29:95:e9: 21:53:10:20:70:eb:08:a5:55:1d:84:d8:cc:bc:1b:6a:f2:7e: 65:3a:24:78:4e:d6:05:e9:41:03:5c:2e:03:57:22:b2:7f:7e: a1:34:cd:2c:73:e8:08:2b:72:50:94:3a:8c:bd:b9:f2:b6:c9: 05:b0:7d:dc:6a:31:b4:a1:0f:62:69:83:2b:7b:ec:53:ed:2a: 81:b1:3f:b4:71:50:9c:31:9f:04:b5:65:64:91:91:2e:7e:5b: 40:31:9c:64:ef:82:04:73:ea:f3:fd:ce:5d:f3:63:ce:93:6e: 2a:9b:6b:3c:80:ba:36:92:dd:e7:29:14:8f:39:c7:55:5d:66: 78:94:fa:f5:a3:a7:32:ac:00:97:e7:d1:6c:22:3e:aa:61:51: 80:80:85:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWiUptHkCf21kDTggiljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0 NTNmNzEwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD Eyg1NWRiODFlZWZkNzU3YmIwZWQ4NWZkYjc1YWYyOTBkZjQ5NDZjMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VILNtHVLckN0a+RwgsXTKI06cND bWqbQmJFpUfNvkyH72WHMvi0SHEcaBYPE6R02HEz6RlXbhtupBleBdu+2PFPNthY pp96oFsrXdRaD+PVjvS7q94v5C1DN4aOvYSj/FoKL34u5DpmCweFgeYBMbKCTx5S 9Dsg4rpJt0HdAR+fyxoOg3AssRUEMx7ZZwr3mKHmYKuGrahTUNilb75xcFjl+ASS 2CYZ9cYd1ERtMuuCiKRaQrblRIUxnE3sFKNxlPlQ0VQwqLxMuVF4RqqQ2d+NuQBA tkCMbtFJ6XA3HoDKCvjwP2vKrH9D1yifp6e2vkn7K7VFGNT8cb1hk4evkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXbge79dXuw7YX9t1rykN9JRsJfMB8GA1UdIwQY MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmmG3yuX n3UYy4TLCUu4IXyvgET30EvMvLI9O+BuqKLoRqu6vV32Z/07U8ov9RUdSXtQusrf zeNjG95A1FdiZr5ieRMtPrF4E8C+W7DKtEp3ZtoHjEqkOjqi2TPIW/4TxeyZNnBs RPTNKZXpIVMQIHDrCKVVHYTYzLwbavJ+ZTokeE7WBelBA1wuA1cisn9+oTTNLHPo CCtyUJQ6jL258rbJBbB93GoxtKEPYmmDK3vsU+0qgbE/tHFQnDGfBLVlZJGRLn5b QDGcZO+CBHPq8/3OXfNjzpNuKptrPIC6NpLd5ykUjznHVV1meJT69aOnMqwAl+fR bCI+qmFRgICFcA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:36 2025 by rpki-client