This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: lkXrUam8DQio3RMPXmMmEY584WO9iO8Wu9UpLaKH/xI= Subject key identifier: 9A:A7:1A:CD:27:9D:FD:1F:9C:FF:E8:C6:7C:35:12:5A:C2:2F:18:C1 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019AF49C2D99B71158668C473EAC6D15F419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: n9lnkuuCfRaQkaI8jYMT9gpxD0cFVWyZtJpgP9I0TU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2d:99:b7:11:58:66:8c:47:3e:ac:6d:15:f4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=9aa71acd279dfd1f9cffe8c67c35125ac22f18c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:35:3e:b1:5d:d3:d4:32:8d:ae:25:89:6d: ad:7c:24:6c:8a:64:93:68:e1:bf:76:c7:14:2d:06: 85:58:bb:b5:33:d5:3c:e3:ae:9c:78:e6:4b:2a:63: ce:03:6d:7d:cd:04:02:79:8e:48:8f:91:4a:71:09: 93:61:40:13:1f:49:c2:af:97:85:f9:3b:92:7c:2a: b0:9c:13:4d:39:87:50:20:2a:da:62:c7:c9:24:12: 03:11:c2:47:7d:5d:ec:e3:aa:7b:08:b1:2c:f9:88: 37:b0:9e:7a:27:9a:d1:bf:7e:2f:ff:14:40:a3:22: e6:54:66:cf:b2:e2:36:a5:cd:0d:da:a3:07:4c:da: 4d:8b:e4:57:11:56:8a:03:18:ad:e5:7f:64:49:4e: 28:47:6d:70:e5:e7:f3:34:7b:91:49:d4:69:56:a1: 18:82:ee:50:32:cb:88:31:f9:d6:46:32:50:63:a3: 2d:52:0e:ed:50:0b:af:49:30:f9:de:94:25:4e:5a: 2a:f4:13:7f:83:bd:eb:4c:8a:cf:64:80:65:91:81: 04:fb:35:ee:a2:31:e4:2a:a2:56:3d:44:6e:8f:5b: 17:40:f7:34:4d:99:f0:33:a9:9a:d9:b5:a8:2f:44: 6a:8e:9b:77:20:1d:03:d9:4c:c7:2b:d2:e1:22:c1: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A7:1A:CD:27:9D:FD:1F:9C:FF:E8:C6:7C:35:12:5A:C2:2F:18:C1 X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1a:16:7d:c6:3c:35:76:bf:42:89:19:67:be:cf:b7:03:a0: 23:ae:20:7f:b0:91:36:ea:0b:ea:41:4d:9b:7f:bd:ae:02:b5: 60:bd:9c:ab:00:95:80:fe:2a:41:2f:e8:88:c8:30:bf:13:3b: 51:09:12:bb:73:82:3b:37:f9:d3:15:5f:13:af:f2:89:6d:bf: 4b:71:ff:87:c9:15:14:08:d3:07:6b:0b:7a:79:33:97:10:a3: 33:bb:b3:67:2f:32:e1:51:9e:81:1f:6e:7f:8a:12:ac:77:47: 11:de:55:ef:13:14:d4:a5:13:09:d3:d3:a4:a7:25:88:33:a6: 35:ef:65:53:b5:09:ae:cf:9f:11:1c:b1:4e:ff:da:54:02:9e: 49:ca:bd:25:e9:94:f9:8d:9c:f2:4b:e0:4f:5b:3a:0b:66:a5: 91:85:31:5c:6e:82:42:41:7d:4c:4d:01:d5:04:da:a7:50:8b: af:8c:1b:a4:21:b3:f8:a7:1c:55:f7:d3:d2:25:98:08:a1:32: 03:3d:e9:3f:62:49:26:4e:8d:2a:3b:a6:e3:53:e5:b6:3e:fd: 77:f6:ba:5c:8f:f7:5d:dc:4c:d5:58:c0:f3:01:d5:ff:38:2d: 24:d4:58:58:2d:52:00:f6:8f:4b:88:91:7f:30:da:a8:39:db: 98:1f:82:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC2ZtxFYZoxHPqxtFfQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD Eyg5YWE3MWFjZDI3OWRmZDFmOWNmZmU4YzY3YzM1MTI1YWMyMmYxOGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbo1PrFd09Qyja4liW2tfCRsimST aOG/dscULQaFWLu1M9U8466ceOZLKmPOA219zQQCeY5Ij5FKcQmTYUATH0nCr5eF +TuSfCqwnBNNOYdQICraYsfJJBIDEcJHfV3s46p7CLEs+Yg3sJ56J5rRv34v/xRA oyLmVGbPsuI2pc0N2qMHTNpNi+RXEVaKAxit5X9kSU4oR21w5efzNHuRSdRpVqEY gu5QMsuIMfnWRjJQY6MtUg7tUAuvSTD53pQlTloq9BN/g73rTIrPZIBlkYEE+zXu ojHkKqJWPURuj1sXQPc0TZnwM6ma2bWoL0Rqjpt3IB0D2UzHK9LhIsFSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqnGs0nnf0fnP/oxnw1ElrCLxjBMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBoWfcY8 NXa/QokZZ77PtwOgI64gf7CRNuoL6kFNm3+9rgK1YL2cqwCVgP4qQS/oiMgwvxM7 UQkSu3OCOzf50xVfE6/yiW2/S3H/h8kVFAjTB2sLenkzlxCjM7uzZy8y4VGegR9u f4oSrHdHEd5V7xMU1KUTCdPTpKcliDOmNe9lU7UJrs+fERyxTv/aVAKeScq9JemU +Y2c8kvgT1s6C2alkYUxXG6CQkF9TE0B1QTap1CLr4wbpCGz+KccVffT0iWYCKEy Az3pP2JJJk6NKjum41Pltj79d/a6XI/3XdxM1VjA8wHV/zgtJNRYWC1SAPaPS4iR fzDaqDnbmB+CqA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:42 2025 by rpki-client