This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json) Hash identifier: N2MV5OkwEe0XTXuO+xJsvWpI5Xo00CF//5wTYw9GSm8= Subject key identifier: 45:AB:1A:61:73:47:04:7A:36:22:F7:A8:49:6C:72:8B:6D:20:98:83 Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Certificate serial: 019AF19AB10A1FD56B960256D4CFEB90D59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft Manifest number: 0F1D Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: n2i7tKcxLUe96RL3rSpry/Ah0MYpdh2e6HogWW+UdJA=) 2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b1:0a:1f:d5:6b:96:02:56:d4:cf:eb:90:d5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=45ab1a617347047a3622f7a8496c728b6d209883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:f4:b6:f9:66:a4:cf:71:3b:2a:f8:ad:11: 92:24:9d:5b:1d:2f:e2:9a:db:4e:c2:f1:ec:d0:15: 75:7c:c9:a4:09:6b:71:cd:c7:6d:99:3b:7e:4d:50: c3:01:7a:78:0a:23:bf:75:20:9f:c0:01:24:da:0b: 66:7b:3c:ad:4c:52:d6:95:4a:06:92:80:c1:70:6d: 2e:95:cb:52:01:9d:e4:a2:4d:11:14:db:46:8c:2a: 79:94:92:89:38:31:3f:b3:5e:c9:f8:ac:4f:e9:6c: b5:b7:b5:fa:73:5c:6a:f9:11:a9:cf:84:82:6f:ee: c6:3a:ac:72:bc:29:3a:f0:66:40:12:53:4f:dd:4d: ae:42:a3:98:0f:b6:d4:76:b3:45:f2:46:f4:e4:a6: 38:7f:a3:ba:24:c7:aa:ad:0a:f5:57:62:89:93:0c: cd:90:d1:06:07:72:fd:be:60:6c:6e:74:01:1e:d7: b9:66:53:2d:53:cf:ad:de:e4:9c:47:a7:91:db:f1: 80:7a:0b:be:09:29:15:45:18:35:77:07:d8:dc:a5: b0:3d:62:f5:50:bb:7e:d2:a4:0d:0d:51:fd:b8:ec: 80:48:62:5c:31:fd:bc:d1:72:9f:be:17:d1:de:8a: 58:aa:e7:1c:5b:c3:33:ad:39:99:20:04:53:6e:d6: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AB:1A:61:73:47:04:7A:36:22:F7:A8:49:6C:72:8B:6D:20:98:83 X509v3 Authority Key Identifier: keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1b:c2:e9:d5:7d:1d:eb:e8:5e:6b:74:e9:44:c5:e1:80:67: c4:22:eb:ab:c6:42:50:7e:97:76:1e:ed:94:49:e3:f9:e6:ca: 38:14:6b:f4:aa:8d:ae:c3:06:6c:96:d6:c5:a7:43:02:c3:3a: aa:85:e5:8f:f8:e1:37:99:89:bd:d5:04:51:d2:d2:89:92:ba: fb:7e:1e:ae:48:e7:50:e8:fb:76:03:f6:cd:3a:d0:d1:85:3b: d9:d5:4f:4a:9c:32:cd:d2:35:15:ed:b8:f3:80:96:cc:ff:4e: 77:c1:98:c7:b5:a6:0a:71:e9:9e:94:ca:ad:25:89:36:cb:61: 80:42:b4:e0:b1:66:ac:10:06:f7:53:0c:b2:cc:95:d1:d6:89: a0:14:7b:93:fe:aa:97:38:46:2a:fb:ee:f4:cb:cb:4b:64:35: f5:23:d2:12:7c:5b:09:0f:3e:94:b8:eb:72:f9:2d:9c:4a:94: 7c:44:65:13:5d:d1:96:26:cb:71:18:c4:7e:c5:d6:d8:e9:8a: 08:b7:30:bb:d9:80:c3:e1:3a:fa:8c:58:28:b8:c3:ea:b1:c7: 19:89:90:62:2c:74:28:a0:17:b2:79:62:1d:67:8b:06:62:8b: 4b:25:8e:1e:94:c6:91:60:09:b8:49:f7:df:75:ce:31:2c:18: ee:04:18:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrEKH9VrlgJW1M/rkNWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl NzVhYjMwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg0NWFiMWE2MTczNDcwNDdhMzYyMmY3YTg0OTZjNzI4YjZkMjA5ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O70tvlmpM9xOyr4rRGSJJ1bHS/i mttOwvHs0BV1fMmkCWtxzcdtmTt+TVDDAXp4CiO/dSCfwAEk2gtmezytTFLWlUoG koDBcG0ulctSAZ3kok0RFNtGjCp5lJKJODE/s17J+KxP6Wy1t7X6c1xq+RGpz4SC b+7GOqxyvCk68GZAElNP3U2uQqOYD7bUdrNF8kb05KY4f6O6JMeqrQr1V2KJkwzN kNEGB3L9vmBsbnQBHte5ZlMtU8+t3uScR6eR2/GAegu+CSkVRRg1dwfY3KWwPWL1 ULt+0qQNDVH9uOyASGJcMf280XKfvhfR3opYquccW8MzrTmZIARTbtbLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWrGmFzRwR6NiL3qElscottIJiDMB8GA1UdIwQY MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshvC6dV9 HevoXmt06UTF4YBnxCLrq8ZCUH6Xdh7tlEnj+ebKOBRr9KqNrsMGbJbWxadDAsM6 qoXlj/jhN5mJvdUEUdLSiZK6+34erkjnUOj7dgP2zTrQ0YU72dVPSpwyzdI1Fe24 84CWzP9Od8GYx7WmCnHpnpTKrSWJNsthgEK04LFmrBAG91MMssyV0daJoBR7k/6q lzhGKvvu9MvLS2Q19SPSEnxbCQ8+lLjrcvktnEqUfERlE13RlibLcRjEfsXW2OmK CLcwu9mAw+E6+oxYKLjD6rHHGYmQYix0KKAXsnliHWeLBmKLSyWOHpTGkWAJuEn3 33XOMSwY7gQY3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:32 2025 by rpki-client