This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json) Hash identifier: mTfN6lmKxPg8B42mSnWBd6meaxvc5LQwzwWBKbFdwcA= Subject key identifier: 41:A7:D3:72:2A:FC:AB:E0:97:E6:F3:4D:A1:2E:B5:2D:3E:20:65:DC Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019AF12DD889EE1407A2A38BA2579B5DC8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft Manifest number: 0BDD Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=) 2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: EAgBA0NSDD+6VYU7Gs2PfBovffFMlITCt5o5p6krZGs=) 3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=) 4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=) 5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d8:89:ee:14:07:a2:a3:8b:a2:57:9b:5d:c8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=41a7d3722afcabe097e6f34da12eb52d3e2065dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:78:d6:48:35:42:49:88:f7:57:85:b5:2d: 7a:cf:e8:4b:f4:40:cc:19:a1:86:71:bd:71:eb:73: e8:d4:49:8c:96:1b:b3:1e:00:fc:18:40:9a:22:9f: 84:c9:b8:fa:62:d0:72:0c:8d:0a:b8:f0:51:f0:69: 31:c5:8d:97:ab:b5:62:4d:e1:66:06:7b:b4:92:85: a9:3d:66:9f:d1:48:12:7f:b3:30:fb:36:2f:31:a0: 0a:fe:a0:8b:13:61:51:d0:bd:30:0a:9e:b9:e7:25: 0b:5f:2d:7e:bb:5e:45:15:5c:54:d3:8a:7a:19:5d: 9b:51:7e:99:38:c3:38:ce:2f:74:78:10:65:10:b9: d3:d0:37:81:7b:0e:c4:42:ef:71:c4:23:e6:a8:19: a8:d3:b7:90:3d:f0:ba:cf:ae:8e:7b:34:41:e2:c3: b9:82:ae:5b:ad:da:5f:21:10:23:81:9d:d7:68:30: 21:27:ab:26:2d:fe:57:f4:a6:02:ed:2e:2b:ee:8b: 7b:65:e6:fe:3c:9a:4e:9a:f2:a6:28:33:9a:38:02: cd:2a:3a:b0:8f:17:b7:15:29:3e:26:25:63:35:b4: dd:fc:4c:c0:35:3a:91:d9:a9:32:6b:ad:50:04:13: f7:9e:00:4b:41:7a:fa:01:00:30:77:1b:75:7f:0e: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:D3:72:2A:FC:AB:E0:97:E6:F3:4D:A1:2E:B5:2D:3E:20:65:DC X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3e:de:eb:7a:75:5c:f0:25:4c:a7:4e:0d:aa:c3:12:5a:d6: ce:19:63:46:de:eb:5e:18:74:23:6d:89:dc:65:d3:ea:87:87: f0:49:af:71:d1:fa:90:49:49:d7:7b:d2:8e:11:6e:fe:a1:e3: 1f:3d:ea:d8:d9:5e:00:53:43:06:9e:dc:48:c3:95:32:2e:60: 50:20:f6:a8:74:d8:de:32:d1:27:5e:d7:72:57:88:8a:2a:16: 40:bd:a1:8a:b0:3d:5c:21:63:cf:10:ca:e3:7f:b2:cc:85:cf: 79:f3:af:b5:9f:c3:b7:16:0b:b1:35:fa:0c:2d:b3:e7:56:7f: 67:7d:2e:12:b0:47:b4:0d:7b:a6:80:97:3c:fb:08:db:6b:b7: d5:33:60:3e:3e:d0:4b:84:e8:e3:40:67:8a:03:01:8a:df:a9: 70:dd:10:ce:21:53:a5:16:4b:da:a5:1c:1d:fd:76:fb:a8:b3: bb:ed:fd:51:a8:44:c9:4f:f4:70:d4:28:3a:02:b8:95:9d:a7: a0:a4:ec:1e:67:ea:ca:73:39:6a:51:9d:3a:c4:eb:4d:4d:95: e1:11:32:85:c9:bd:56:07:13:2d:18:1d:e9:7f:90:1c:b5:43: 10:38:18:ad:68:f8:7e:f3:70:0d:a9:95:24:6c:2f:11:f3:e6: 4b:10:4d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdiJ7hQHoqOLolebXcjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD Eyg0MWE3ZDM3MjJhZmNhYmUwOTdlNmYzNGRhMTJlYjUyZDNlMjA2NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0941kg1QkmI91eFtS16z+hL9EDM GaGGcb1x63Po1EmMlhuzHgD8GECaIp+Eybj6YtByDI0KuPBR8GkxxY2Xq7ViTeFm Bnu0koWpPWaf0UgSf7Mw+zYvMaAK/qCLE2FR0L0wCp655yULXy1+u15FFVxU04p6 GV2bUX6ZOMM4zi90eBBlELnT0DeBew7EQu9xxCPmqBmo07eQPfC6z66OezRB4sO5 gq5brdpfIRAjgZ3XaDAhJ6smLf5X9KYC7S4r7ot7Zeb+PJpOmvKmKDOaOALNKjqw jxe3FSk+JiVjNbTd/EzANTqR2akya61QBBP3ngBLQXr6AQAwdxt1fw700wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGn03Iq/Kvgl+bzTaEutS0+IGXcMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT7e63p1 XPAlTKdODarDElrWzhljRt7rXhh0I22J3GXT6oeH8EmvcdH6kElJ13vSjhFu/qHj Hz3q2NleAFNDBp7cSMOVMi5gUCD2qHTY3jLRJ17XcleIiioWQL2hirA9XCFjzxDK 43+yzIXPefOvtZ/DtxYLsTX6DC2z51Z/Z30uErBHtA17poCXPPsI22u31TNgPj7Q S4To40BnigMBit+pcN0QziFTpRZL2qUcHf12+6izu+39UahEyU/0cNQoOgK4lZ2n oKTsHmfqynM5alGdOsTrTU2V4REyhcm9VgcTLRgd6X+QHLVDEDgYrWj4fvNwDamV JGwvEfPmSxBN7A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:43 2025 by rpki-client