This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json) Hash identifier: LYpsbeqwmGsDbMWttaS3Kz2DwCYPd2FN5r0QdOiWXUQ= Subject key identifier: C7:3C:BE:B3:3F:0F:2F:F3:74:14:07:A7:0A:2F:78:00:68:A3:77:6C Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341 Certificate serial: 019AF2094154893A4A14224030F55857EC49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft Manifest number: 1135 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=) 2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: jPrdbwDaOo67nw6ygRHG1h5mm9eUWFVzEVnRw+OTEYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:54:89:3a:4a:14:22:40:30:f5:58:57:ec:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=c73cbeb33f0f2ff3741407a70a2f780068a3776c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:f2:e8:58:f4:d3:75:19:7f:20:e2:ce:5d: 59:7f:68:e6:8f:e2:20:9e:a3:05:62:1c:2b:7b:45: 22:83:d0:25:f2:0b:bc:c2:bb:90:aa:0c:9a:e3:84: 63:62:a5:6b:fd:88:ac:97:d8:ee:e4:53:00:ba:fd: 77:bd:17:78:0a:57:cd:57:92:c0:f7:37:8a:5a:8c: 5b:cd:0d:9f:a7:a2:e0:bf:b0:dd:5b:73:41:1a:7d: c5:06:cb:3f:58:16:16:53:78:dc:d1:d4:09:02:d4: 87:99:2e:42:e9:06:04:4c:e9:bd:e4:77:64:1f:62: 1c:16:dc:78:65:0f:cb:91:7b:83:29:a5:11:94:8a: d6:27:52:3f:40:25:9b:80:37:ff:96:9f:6a:48:d7: 6f:96:db:2d:cf:3a:b8:e8:33:54:47:8c:70:f8:1c: 1d:96:5d:9a:00:60:a1:ef:27:06:e9:18:c7:80:c8: 2b:01:ad:a5:a2:2f:be:fc:88:e7:ac:46:d0:76:08: b3:27:3f:c3:43:62:b5:f2:60:47:45:d3:2d:c2:28: 95:fc:a2:47:bd:b2:28:3e:fe:7c:2b:2c:50:0a:b3: 62:0a:a6:14:cf:c8:11:80:b8:55:1e:e2:62:30:d0: 03:35:e9:6d:a5:0b:77:56:06:a0:10:fe:62:ce:ba: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:BE:B3:3F:0F:2F:F3:74:14:07:A7:0A:2F:78:00:68:A3:77:6C X509v3 Authority Key Identifier: keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:72:9e:28:f7:34:66:9c:91:75:f2:70:3b:2f:96:19:12:23: e2:45:a9:a5:dd:14:46:ab:36:97:00:4b:73:c1:6b:36:96:f2: c1:27:2b:b7:e2:a7:0a:ed:13:ed:cc:f0:42:e1:e5:06:95:79: 9d:d7:f5:cb:45:27:30:e3:bf:af:91:5b:12:c0:c8:2b:17:f2: 4f:8d:94:06:f3:5c:79:dc:8d:e5:65:c3:25:06:d9:15:7b:a7: d3:9f:cb:09:43:a1:80:1e:84:92:65:90:a8:7b:0c:ef:1b:3d: e4:f7:0c:9c:5e:96:ea:94:82:74:77:b9:2d:b9:21:fd:db:2a: e4:4e:c2:12:9b:1e:40:bb:ca:39:35:99:1e:3f:dd:56:cc:9d: 40:4e:84:15:4f:cb:f0:5e:cb:2b:36:94:b8:d1:f1:0c:59:2f: 83:94:71:60:50:c0:80:42:29:e4:8a:6b:92:e4:4a:c2:3c:21: d2:18:03:59:68:3e:a3:dc:7e:29:14:29:28:1b:59:7f:18:1e: c4:5c:12:d7:f6:a3:88:72:b8:2a:6d:9c:54:4a:22:94:e2:00: 25:6a:ea:60:09:56:fd:9a:e1:99:63:04:52:e4:ba:f9:32:59: 06:c5:ce:1c:45:f5:1e:0c:b3:39:f6:b8:5a:d2:ce:7f:fe:6b: 21:17:e6:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUFUiTpKFCJAMPVYV+xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5 ZTIzNDEwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhjNzNjYmViMzNmMGYyZmYzNzQxNDA3YTcwYTJmNzgwMDY4YTM3NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ry6Fj003UZfyDizl1Zf2jmj+Ig nqMFYhwre0Uig9Al8gu8wruQqgya44RjYqVr/Yisl9ju5FMAuv13vRd4ClfNV5LA 9zeKWoxbzQ2fp6Lgv7DdW3NBGn3FBss/WBYWU3jc0dQJAtSHmS5C6QYETOm95Hdk H2IcFtx4ZQ/LkXuDKaURlIrWJ1I/QCWbgDf/lp9qSNdvltstzzq46DNUR4xw+Bwd ll2aAGCh7ycG6RjHgMgrAa2loi++/IjnrEbQdgizJz/DQ2K18mBHRdMtwiiV/KJH vbIoPv58KyxQCrNiCqYUz8gRgLhVHuJiMNADNeltpQt3VgagEP5izrpGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc8vrM/Dy/zdBQHpwoveABoo3dsMB8GA1UdIwQY MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHKeKPc0 ZpyRdfJwOy+WGRIj4kWppd0URqs2lwBLc8FrNpbywScrt+KnCu0T7czwQuHlBpV5 ndf1y0UnMOO/r5FbEsDIKxfyT42UBvNcedyN5WXDJQbZFXun05/LCUOhgB6EkmWQ qHsM7xs95PcMnF6W6pSCdHe5Lbkh/dsq5E7CEpseQLvKOTWZHj/dVsydQE6EFU/L 8F7LKzaUuNHxDFkvg5RxYFDAgEIp5IprkuRKwjwh0hgDWWg+o9x+KRQpKBtZfxge xFwS1/ajiHK4Km2cVEoilOIAJWrqYAlW/ZrhmWMEUuS6+TJZBsXOHEX1HgyzOfa4 WtLOf/5rIRfm5w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client