This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json) Hash identifier: Z2B3bB0UlrwZFtPxuJuN+1GZQGn7hdb2ciByDOIZwtE= Subject key identifier: 6E:60:1B:94:93:61:91:A0:1D:E6:6E:63:E8:86:3C:FE:35:AA:21:65 Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019AF19B70AB4E2B1677E11791ECEA8D59B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft Manifest number: 04C7 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: fv4pWWym9DFrAOj3zgKGbF34fwrEsbaGXxQOMdH4tPU=) 2: h_r7vIjGm8edkF34J6wcZtrTxn4.roa (hash: rFGn8ZOwSWywtOAH7hZ0p2ezF/XGAzi22VSS7WGREaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:70:ab:4e:2b:16:77:e1:17:91:ec:ea:8d:59:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=6e601b94936191a01de66e63e8863cfe35aa2165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:f0:6f:c9:67:f4:e8:4d:c2:4d:ec:2a:88: a1:bc:a0:9f:b5:7f:1b:9f:bf:6c:91:f4:66:2e:40: b8:70:a9:16:ca:63:44:a3:ec:bf:c0:2f:8f:e5:ea: 87:f1:69:bc:f7:58:97:7f:08:ba:db:93:1a:d6:38: fe:a2:50:83:da:ff:8e:f5:66:b6:b5:6c:62:ec:9f: 58:2c:bc:c8:75:13:7a:6d:13:7f:02:7c:4a:b9:1d: 33:0e:14:e1:92:c9:6d:3a:6e:d4:99:54:fb:eb:17: a9:eb:24:1e:b1:4b:ef:70:27:7b:dc:63:d0:c0:b8: 20:58:50:44:f6:d5:37:83:18:d1:73:23:91:83:77: f2:22:6d:ac:db:00:fd:a8:5b:6e:50:48:70:70:c4: b5:2c:33:26:cf:0f:2e:ee:7b:64:85:fc:68:5e:6d: a3:ad:38:67:b4:42:79:4f:d5:28:6d:60:dd:cd:f7: 0f:85:c5:41:27:db:53:52:24:73:cf:ca:b5:ec:80: 7c:2b:83:3e:d4:74:90:77:52:5f:c7:3d:3d:4c:ee: 4f:52:46:35:c8:a1:d1:09:7c:22:a7:75:23:19:ee: cf:67:aa:4c:aa:16:ab:0f:9a:c2:24:c5:62:45:41: 16:b4:a9:02:39:6d:22:9f:eb:bb:27:0a:4b:a6:1a: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:1B:94:93:61:91:A0:1D:E6:6E:63:E8:86:3C:FE:35:AA:21:65 X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:85:13:10:f8:02:b6:09:e5:e6:13:d4:bd:75:0e:b3:cf:28: c9:bb:c4:c3:ee:98:2c:cb:d8:43:f3:cb:12:d7:8f:cb:3e:9c: 4b:49:a8:a7:ba:51:2e:7c:ce:49:86:93:a0:c1:2a:53:72:d9: c2:e8:e9:f5:10:56:46:12:41:6a:ba:dd:47:dd:0d:31:af:68: 44:44:6f:f7:38:9e:4d:03:3a:a6:d3:ce:1d:c6:56:99:ee:b1: 2d:d7:d4:6a:99:f0:e8:cd:ac:6d:2d:72:93:8b:72:40:3f:20: 99:cd:2d:63:17:05:cd:0e:33:3b:b3:91:5c:e6:c3:64:57:2f: bb:5d:65:7f:52:0e:45:aa:7c:ae:68:ff:49:19:57:fd:1c:1e: 1c:79:59:fc:ff:29:f2:90:6c:fd:38:90:7d:14:b2:cf:ab:ce: 1a:5a:84:40:9f:8a:e0:fc:52:1d:f5:3f:f2:10:0c:60:2d:13: 32:66:e7:0c:19:fd:dc:48:30:03:93:94:95:84:88:e6:1f:1c: 02:1b:ae:b3:81:63:7c:a6:28:a8:79:ed:c2:3e:63:87:15:e1: 84:59:f1:8c:3e:8c:7a:13:03:62:df:8f:16:1e:5d:c4:ce:69: 76:df:80:33:5f:1d:d8:20:14:29:9e:16:02:b3:1c:55:16:33: 53:2a:55:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3CrTisWd+EXkezqjVm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD Eyg2ZTYwMWI5NDkzNjE5MWEwMWRlNjZlNjNlODg2M2NmZTM1YWEyMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMjwb8ln9OhNwk3sKoihvKCftX8b n79skfRmLkC4cKkWymNEo+y/wC+P5eqH8Wm891iXfwi625Ma1jj+olCD2v+O9Wa2 tWxi7J9YLLzIdRN6bRN/AnxKuR0zDhThksltOm7UmVT76xep6yQesUvvcCd73GPQ wLggWFBE9tU3gxjRcyORg3fyIm2s2wD9qFtuUEhwcMS1LDMmzw8u7ntkhfxoXm2j rThntEJ5T9UobWDdzfcPhcVBJ9tTUiRzz8q17IB8K4M+1HSQd1Jfxz09TO5PUkY1 yKHRCXwip3UjGe7PZ6pMqharD5rCJMViRUEWtKkCOW0in+u7JwpLphpJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5gG5STYZGgHeZuY+iGPP41qiFlMB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoUTEPgC tgnl5hPUvXUOs88oybvEw+6YLMvYQ/PLEtePyz6cS0mop7pRLnzOSYaToMEqU3LZ wujp9RBWRhJBarrdR90NMa9oRERv9zieTQM6ptPOHcZWme6xLdfUapnw6M2sbS1y k4tyQD8gmc0tYxcFzQ4zO7ORXObDZFcvu11lf1IORap8rmj/SRlX/RweHHlZ/P8p 8pBs/TiQfRSyz6vOGlqEQJ+K4PxSHfU/8hAMYC0TMmbnDBn93EgwA5OUlYSI5h8c Ahuus4FjfKYoqHntwj5jhxXhhFnxjD6MehMDYt+PFh5dxM5pdt+AM18d2CAUKZ4W ArMcVRYzUypVyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:38:29 2025 by rpki-client