This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json) Hash identifier: TR5S5mixr4me+/2bAhmOJBrdO3yhOCg1fFoTZIdPSVo= Subject key identifier: 6A:35:ED:C7:CF:D2:14:89:4E:E9:6F:B7:EC:A5:E3:FE:7F:92:DC:9D Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48 Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348 Certificate serial: 019B26D269B9A22ED49DE0DBC14D283D3414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 11:01:22 +0000 Manifest this update: Tue 16 Dec 2025 11:01:22 +0000 Manifest next update: Wed 17 Dec 2025 11:01:22 +0000 Files and hashes: 1: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: o7DuqKELULT1xPyvjNs4X1oMzD0tpX89FD/PRdMraxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:69:b9:a2:2e:d4:9d:e0:db:c1:4d:28:3d:34:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348 Validity Not Before: Dec 16 11:01:22 2025 GMT Not After : Dec 17 11:01:22 2025 GMT Subject: CN=6a35edc7cfd214894ee96fb7eca5e3fe7f92dc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:c1:06:9b:ce:2b:7b:a1:98:e2:41:84:77: d0:3e:4d:fe:f4:2b:84:ba:f4:71:6c:41:6b:c5:97: 47:e0:e5:65:06:fa:9a:05:eb:50:0c:4f:99:b3:b8: 26:0d:16:ed:d9:d2:70:58:c9:44:ef:e2:68:1d:59: 7b:52:1f:ba:02:58:4c:99:ab:34:8f:7f:04:fb:1f: 7d:15:71:b2:33:68:fc:bf:93:66:13:93:03:00:f6: 53:d8:11:05:0d:93:c5:9e:f1:76:82:e4:9e:a9:7d: 7e:67:94:13:18:56:22:1e:21:67:29:65:74:f2:47: e3:24:f5:f6:99:f8:ce:5f:44:66:bd:aa:f7:c7:ba: 87:8b:53:56:81:c3:d0:1c:97:52:f8:48:90:f8:d3: d5:d3:95:74:18:a0:61:9c:e3:de:be:21:9e:90:b1: 14:a7:84:d4:78:93:d5:48:61:27:b3:78:f1:fe:a8: bb:81:a5:71:b9:b7:cf:d9:1b:95:09:bb:54:5a:e8: 7c:63:c5:32:d6:60:85:d6:a5:fc:6f:2b:cd:c4:a6: 65:4e:76:49:5e:7f:df:a5:11:43:49:8e:e0:71:e3: 28:76:28:ee:af:26:c1:dd:2d:c7:1b:43:f0:0f:15: e0:31:95:0a:46:44:4b:93:a7:b6:64:49:9a:08:aa: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:ED:C7:CF:D2:14:89:4E:E9:6F:B7:EC:A5:E3:FE:7F:92:DC:9D X509v3 Authority Key Identifier: keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:80:2a:89:bf:73:63:a0:6f:ac:34:3d:07:fc:a9:d7:25:ef: 61:e9:76:5c:c5:04:da:61:16:00:8c:7c:c9:21:85:09:ba:8e: 8e:09:a8:9d:09:39:1b:f3:d6:31:1b:b0:b8:90:cc:f6:9d:58: 6e:60:46:18:f5:c5:70:5d:1f:b9:cd:d5:77:61:f5:30:d6:40: 2e:74:6d:41:2c:22:99:b7:0f:44:94:ee:d7:ce:51:ea:d2:ff: 51:44:6d:53:49:1e:93:16:e7:5f:24:01:9a:d4:78:77:13:8d: 63:d3:0a:11:29:4a:1d:b3:ab:e7:65:3a:63:e9:b8:a6:06:52: 86:3e:0a:6a:ea:08:87:4f:98:82:3f:91:7f:8b:93:fd:10:d9: cb:07:c0:54:d5:f1:b1:16:56:72:aa:e2:f7:e8:1a:bb:86:ac: bb:ed:c1:69:c9:d2:88:88:b7:f1:b2:be:54:d9:42:ce:90:43: e7:f7:15:a1:0a:f8:36:37:84:ed:11:43:7c:fa:09:94:1f:09: a6:0c:8b:38:ac:0d:ce:3b:ec:d0:4e:d3:13:12:fe:fe:4f:33: 00:2b:49:f8:4c:7e:20:5f:63:de:69:7e:0d:bc:39:c2:9f:b7: 14:df:b2:63:c3:f7:64:02:77:7d:e7:5a:2f:72:ad:30:0c:56: e7:a5:68:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0mm5oi7UneDbwU0oPTQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYmI4ZmNjYzZkNmFiNzJiYTUyOTRiMDk5ODVkZTc5OWVh MDYzNDgwHhcNMjUxMjE2MTEwMTIyWhcNMjUxMjE3MTEwMTIyWjAzMTEwLwYDVQQD Eyg2YTM1ZWRjN2NmZDIxNDg5NGVlOTZmYjdlY2E1ZTNmZTdmOTJkYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6rBBpvOK3uhmOJBhHfQPk3+9CuE uvRxbEFrxZdH4OVlBvqaBetQDE+Zs7gmDRbt2dJwWMlE7+JoHVl7Uh+6AlhMmas0 j38E+x99FXGyM2j8v5NmE5MDAPZT2BEFDZPFnvF2guSeqX1+Z5QTGFYiHiFnKWV0 8kfjJPX2mfjOX0Rmvar3x7qHi1NWgcPQHJdS+EiQ+NPV05V0GKBhnOPeviGekLEU p4TUeJPVSGEns3jx/qi7gaVxubfP2RuVCbtUWuh8Y8Uy1mCF1qX8byvNxKZlTnZJ Xn/fpRFDSY7gceModijurybB3S3HG0PwDxXgMZUKRkRLk6e2ZEmaCKqGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo17cfP0hSJTulvt+yl4/5/ktydMB8GA1UdIwQY MBaAFDO7j8zG1qtyulKUsJmF3nmeoGNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTd1UHpNYldxM0s2VXBTd21ZWGVlWjZnWTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81NmI4OGMtYmE5NS00N2E3LThhZjgt MTI5MDdjOTlmYTQ5LzEvTTd1UHpNYldxM0s2VXBTd21ZWGVlWjZnWTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81NmI4OGMtYmE5NS00N2E3LThhZjgtMTI5MDdjOTlmYTQ5 LzEvTTd1UHpNYldxM0s2VXBTd21ZWGVlWjZnWTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIAqib9z Y6BvrDQ9B/yp1yXvYel2XMUE2mEWAIx8ySGFCbqOjgmonQk5G/PWMRuwuJDM9p1Y bmBGGPXFcF0fuc3Vd2H1MNZALnRtQSwimbcPRJTu185R6tL/UURtU0kekxbnXyQB mtR4dxONY9MKESlKHbOr52U6Y+m4pgZShj4KauoIh0+Ygj+Rf4uT/RDZywfAVNXx sRZWcqri9+gau4asu+3BacnSiIi38bK+VNlCzpBD5/cVoQr4NjeE7RFDfPoJlB8J pgyLOKwNzjvs0E7TExL+/k8zACtJ+Ex+IF9j3ml+Dbw5wp+3FN+yY8P3ZAJ3feda L3KtMAxW56VoBQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:32:53 2025 by rpki-client