This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json) Hash identifier: eznaYW/AdW7j49aI+uciHKE9ta72SUp5i/Qmikj7DDs= Subject key identifier: AE:9B:BD:9C:95:48:E1:12:AC:58:E4:9E:AE:EC:C0:54:1E:60:BB:4D Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Certificate serial: 019AF6538FD880364AC3C6D105E51E027119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 01:01:02 +0000 Manifest this update: Sun 07 Dec 2025 01:01:02 +0000 Manifest next update: Mon 08 Dec 2025 01:01:02 +0000 Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: MUGqAy6YJOXyE4PkqBQR9IEJTABpDJ+A8tMa8Zly2X8=) 2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8f:d8:80:36:4a:c3:c6:d1:05:e5:1e:02:71:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Validity Not Before: Dec 7 01:01:02 2025 GMT Not After : Dec 8 01:01:02 2025 GMT Subject: CN=ae9bbd9c9548e112ac58e49eaeecc0541e60bb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:b5:f6:53:aa:31:25:b7:09:ba:1c:ba:6d: a2:8f:b1:25:6b:b4:45:40:f9:15:77:4c:a8:fa:70: 8f:a8:bd:0f:d0:16:51:1e:c6:f8:6b:91:f7:ae:30: 22:7c:5f:9b:9a:e8:f6:f2:8c:2e:a9:f6:fc:b5:dd: c0:5b:df:8f:b4:4e:ea:54:cf:b5:91:e8:a6:b1:a7: c0:9d:e5:4d:84:58:ae:a2:fa:2f:be:3f:0a:95:bd: 8c:60:89:04:a6:d0:5e:3f:7e:98:a5:63:94:ab:a7: e1:0c:d1:87:68:f9:af:3e:b8:f8:8d:67:2c:3f:43: ce:03:1f:79:da:22:c0:a3:ed:af:c0:dc:ee:6b:10: 70:78:e5:07:3a:b3:b8:85:2e:7a:a0:47:44:bc:47: c2:17:da:b3:a1:43:77:e5:b5:bd:f7:62:c9:b6:74: 08:95:74:84:d6:10:d2:6d:7b:c4:76:50:19:f5:be: db:d1:43:18:0c:dd:3f:39:27:e5:40:71:8c:77:d9: f9:4d:98:81:9d:a7:e0:39:2e:1e:15:48:6a:81:ac: 8e:fc:83:8c:cb:ff:e9:39:ab:f7:97:12:c6:f8:92: c1:fc:c6:d1:62:f7:fa:58:97:a5:a9:2c:85:61:f6: 45:e1:8e:8a:86:ad:aa:7b:69:1a:14:11:87:99:55: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9B:BD:9C:95:48:E1:12:AC:58:E4:9E:AE:EC:C0:54:1E:60:BB:4D X509v3 Authority Key Identifier: keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8f:18:82:ac:6a:53:34:7b:ad:40:15:21:a3:cb:c9:80:12: bb:40:23:29:ef:6f:f1:75:74:7a:45:ec:42:66:3e:51:24:5c: a1:d3:12:8a:f4:60:e3:d3:c7:67:d1:a2:75:3d:78:96:9b:32: a0:04:ed:dc:53:25:f1:66:3a:cf:8c:22:6b:53:ff:a2:1c:41: 96:94:83:cd:e0:62:15:73:f2:ea:40:b3:65:16:16:17:3e:90: 74:53:3d:3f:b0:c8:25:bf:58:60:6f:03:ad:1d:df:99:0c:2e: 27:8e:a7:7b:eb:4e:95:63:7d:17:0d:db:19:fb:0f:01:74:46: d5:97:b5:f2:7c:cf:f3:aa:e5:b3:b4:d5:4c:50:7d:8e:1a:62: f6:cd:f8:19:06:55:49:4c:09:35:7d:7e:4b:b1:da:25:8f:d7: 35:49:f2:f0:ee:6d:2b:d1:97:6b:dc:04:0f:e2:39:7b:3f:af: 74:58:c9:de:95:0a:5c:78:d3:94:08:bd:d3:87:07:fd:b9:8c: 61:f3:97:4d:69:62:8f:59:78:7c:2e:ee:ec:52:5f:d9:02:b4: 5b:1f:48:ca:ec:77:a0:e9:ce:09:40:fb:2e:0a:01:d1:98:c2: f8:37:a4:07:17:08:94:64:d0:ba:fd:44:a4:2a:e3:e6:8c:d2: 4c:71:a3:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4/YgDZKw8bRBeUeAnEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk Y2MwOWEwHhcNMjUxMjA3MDEwMTAyWhcNMjUxMjA4MDEwMTAyWjAzMTEwLwYDVQQD EyhhZTliYmQ5Yzk1NDhlMTEyYWM1OGU0OWVhZWVjYzA1NDFlNjBiYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT219lOqMSW3Cbocum2ij7Ela7RF QPkVd0yo+nCPqL0P0BZRHsb4a5H3rjAifF+bmuj28owuqfb8td3AW9+PtE7qVM+1 keimsafAneVNhFiuovovvj8Klb2MYIkEptBeP36YpWOUq6fhDNGHaPmvPrj4jWcs P0POAx952iLAo+2vwNzuaxBweOUHOrO4hS56oEdEvEfCF9qzoUN35bW992LJtnQI lXSE1hDSbXvEdlAZ9b7b0UMYDN0/OSflQHGMd9n5TZiBnafgOS4eFUhqgayO/IOM y//pOav3lxLG+JLB/MbRYvf6WJelqSyFYfZF4Y6Khq2qe2kaFBGHmVUi1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6bvZyVSOESrFjknq7swFQeYLtNMB8GA1UdIwQY MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1 LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo8Ygqxq UzR7rUAVIaPLyYASu0AjKe9v8XV0ekXsQmY+USRcodMSivRg49PHZ9GidT14lpsy oATt3FMl8WY6z4wia1P/ohxBlpSDzeBiFXPy6kCzZRYWFz6QdFM9P7DIJb9YYG8D rR3fmQwuJ46ne+tOlWN9Fw3bGfsPAXRG1Ze18nzP86rls7TVTFB9jhpi9s34GQZV SUwJNX1+S7HaJY/XNUny8O5tK9GXa9wED+I5ez+vdFjJ3pUKXHjTlAi904cH/bmM YfOXTWlij1l4fC7u7FJf2QK0Wx9Iyux3oOnOCUD7LgoB0ZjC+DekBxcIlGTQuv1E pCrj5ozSTHGjrw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:37 2025 by rpki-client