This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json) Hash identifier: otwn9umLJImKsx0LCjXvK00bM39aBFDjNLfRO3AL5lY= Subject key identifier: B0:3E:14:A0:E3:2F:70:B6:AA:3F:6C:A9:A1:66:E3:46:A8:13:EB:5D Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Certificate serial: 019AF31CE72AF691F1EF27BE528DCC374FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:28 +0000 Manifest this update: Sat 06 Dec 2025 10:02:28 +0000 Manifest next update: Sun 07 Dec 2025 10:02:28 +0000 Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: b2yz888Q7590xNqBN0+13qmaXwsSVWicv/+VJx0P1Zk=) 2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e7:2a:f6:91:f1:ef:27:be:52:8d:cc:37:4f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Validity Not Before: Dec 6 10:02:28 2025 GMT Not After : Dec 7 10:02:28 2025 GMT Subject: CN=b03e14a0e32f70b6aa3f6ca9a166e346a813eb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:e3:26:fe:c7:b0:17:ef:34:b3:9d:9c:5d: b6:40:79:e2:3b:04:6a:b6:57:1d:a0:d9:6f:67:b6: 7e:4a:b4:a9:2e:1d:f2:ad:37:73:05:e6:2c:00:f8: 86:fd:23:e5:72:e9:27:79:e2:76:79:7f:88:de:39: 1a:90:5f:ad:27:34:40:40:ae:d5:96:5d:47:6e:96: e6:55:6f:50:8b:a2:de:6b:31:2c:49:d8:c0:74:f6: cb:52:fc:b4:b3:34:ec:c9:99:e2:f3:f9:62:ee:4e: 4a:7f:69:9a:48:f2:9b:88:35:6d:07:9e:ac:da:66: 71:0a:b5:a2:84:a3:c9:7d:05:a6:e0:68:d8:4e:f6: 80:1c:7f:13:1c:45:68:91:bc:d4:c4:a6:c2:7c:e8: 8f:2a:0e:a4:e1:c2:df:ea:d0:91:14:20:2a:78:f8: 04:de:81:d2:4c:50:69:9a:d7:4b:a6:75:34:80:70: fa:70:9e:da:cd:7f:1b:7a:b7:3e:f3:27:76:15:b6: 6d:d6:78:0d:77:7b:30:e1:c3:ad:aa:0f:7f:7c:08: 03:b5:d4:ea:6b:35:1b:d2:51:c2:5f:9e:f1:1a:38: 32:d8:8c:65:91:86:88:58:49:b7:ed:7c:d8:2d:57: fd:c2:f4:17:c6:9a:21:2e:3d:52:91:61:c9:2a:ba: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:14:A0:E3:2F:70:B6:AA:3F:6C:A9:A1:66:E3:46:A8:13:EB:5D X509v3 Authority Key Identifier: keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f0:f3:f9:2c:f5:f7:23:a6:d6:dc:3e:f3:2e:57:a9:a1:22: 14:5a:08:68:7f:c8:03:10:fb:5f:fa:2a:1e:0f:c4:43:d8:4f: 40:1c:a8:52:59:ac:b2:1a:8d:0c:ee:e3:64:9d:d0:f1:2f:90: 31:7c:aa:6a:75:d9:e2:4e:17:dd:83:3f:b8:ff:a4:4d:5f:54: 38:e2:4a:06:2f:09:c3:13:5c:82:18:7f:df:32:9c:0a:aa:d1: 7d:49:94:5c:9f:d7:60:ea:4b:4e:77:c5:92:b5:a4:37:78:2f: 2a:85:9e:28:c7:df:f5:e7:c2:b2:f4:52:f2:90:c6:0f:13:13: ce:d2:63:f2:e9:9e:89:f5:64:4b:03:25:58:c2:9f:c1:95:40: af:12:bb:02:53:1d:3c:a3:8f:8e:39:9a:37:00:f9:26:95:26: e9:39:bd:1c:ff:90:f8:28:b5:b9:31:15:a7:1e:65:6f:9d:a5: 6c:51:da:fa:b0:41:fa:78:8f:69:24:07:d3:a0:94:d8:c3:fd: 14:29:9f:c3:1e:29:8b:1d:2a:d4:b8:ac:f2:49:f9:ca:67:c3: f0:a7:2a:0b:81:98:a0:49:23:26:64:f0:2e:9a:db:09:de:47: 54:b5:4a:e3:bf:d3:04:dc:be:c9:81:76:11:e9:72:e9:db:dd: f1:01:44:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOcq9pHx7ye+Uo3MN0+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj YzY0YTkwHhcNMjUxMjA2MTAwMjI4WhcNMjUxMjA3MTAwMjI4WjAzMTEwLwYDVQQD EyhiMDNlMTRhMGUzMmY3MGI2YWEzZjZjYTlhMTY2ZTM0NmE4MTNlYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTHjJv7HsBfvNLOdnF22QHniOwRq tlcdoNlvZ7Z+SrSpLh3yrTdzBeYsAPiG/SPlcukneeJ2eX+I3jkakF+tJzRAQK7V ll1HbpbmVW9Qi6LeazEsSdjAdPbLUvy0szTsyZni8/li7k5Kf2maSPKbiDVtB56s 2mZxCrWihKPJfQWm4GjYTvaAHH8THEVokbzUxKbCfOiPKg6k4cLf6tCRFCAqePgE 3oHSTFBpmtdLpnU0gHD6cJ7azX8berc+8yd2FbZt1ngNd3sw4cOtqg9/fAgDtdTq azUb0lHCX57xGjgy2IxlkYaIWEm37XzYLVf9wvQXxpohLj1SkWHJKronlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA+FKDjL3C2qj9sqaFm40aoE+tdMB8GA1UdIwQY MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvDz+Sz1 9yOm1tw+8y5XqaEiFFoIaH/IAxD7X/oqHg/EQ9hPQByoUlmsshqNDO7jZJ3Q8S+Q MXyqanXZ4k4X3YM/uP+kTV9UOOJKBi8JwxNcghh/3zKcCqrRfUmUXJ/XYOpLTnfF krWkN3gvKoWeKMff9efCsvRS8pDGDxMTztJj8umeifVkSwMlWMKfwZVArxK7AlMd PKOPjjmaNwD5JpUm6Tm9HP+Q+Ci1uTEVpx5lb52lbFHa+rBB+niPaSQH06CU2MP9 FCmfwx4pix0q1Lis8kn5ymfD8KcqC4GYoEkjJmTwLprbCd5HVLVK47/TBNy+yYF2 Eely6dvd8QFETQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:46 2025 by rpki-client