This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json) Hash identifier: 4oldck3WNAZ0p+HWHjPej1BWhgrYFRSdIIM/2ADYYxs= Subject key identifier: 7A:55:4D:29:C6:0F:77:AF:54:51:3C:35:FD:EB:45:EB:BA:B2:72:D0 Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Certificate serial: 019AF12DB9F6899D9F84F6885C0BC0967CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft Manifest number: 0CE1 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: G2HzV1bRTeFxd1vZAskSdvpbMa9Wx4c6dS4EkO8KYcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b9:f6:89:9d:9f:84:f6:88:5c:0b:c0:96:7c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=7a554d29c60f77af54513c35fdeb45ebbab272d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:57:25:82:b8:33:8f:be:e9:b3:bf:37:ed: 76:c5:ef:22:b8:9c:39:31:de:ab:8b:c2:5b:64:f0: 5b:c7:e0:ad:d7:0d:f8:cb:92:71:4f:5e:3c:02:37: bb:7b:dc:c9:69:ce:8b:9d:6a:ab:18:47:2c:09:47: 0e:fa:fa:75:a4:e7:ae:4d:fa:fe:c3:7e:77:63:31: ea:a0:a5:d1:55:fb:a9:c2:5c:62:66:42:c8:c0:17: 86:8d:28:91:e0:42:87:d9:2f:7c:ca:a6:6b:d4:ab: e9:73:7d:57:eb:d6:a4:6e:71:96:b4:e0:41:3b:32: 78:3d:b1:6a:af:fd:fd:c9:bd:23:28:2e:77:c0:fd: 24:ec:31:73:24:a6:17:92:b6:e5:1f:30:b4:4c:fc: 42:94:d9:f8:75:75:25:cf:ff:c4:5c:bd:8f:c4:06: 4e:bd:dd:a8:1f:9f:4a:06:12:52:d2:6a:66:0b:ec: 90:a9:de:87:7a:99:c8:16:c3:9a:bb:98:3b:79:ca: 1e:4a:32:38:d8:51:04:09:f3:3d:32:85:d6:49:d4: 5a:de:78:3b:83:81:7e:3e:63:a7:b2:a1:d0:a4:c4: ff:bc:0d:9e:70:b4:2e:d1:2d:5d:85:16:b2:0d:c4: 09:2c:60:c7:5f:aa:06:7e:e5:d2:50:e0:03:20:b9: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:4D:29:C6:0F:77:AF:54:51:3C:35:FD:EB:45:EB:BA:B2:72:D0 X509v3 Authority Key Identifier: keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:82:37:e4:01:57:fe:96:1b:77:ad:de:ad:59:bc:93:ff:79: 1a:79:e0:ec:19:27:59:a4:94:53:f5:4d:84:ef:26:3b:30:ce: d1:41:ae:b2:f5:29:91:76:79:17:18:5b:a3:ec:57:8c:b9:20: ac:0d:79:9a:b3:66:b1:38:db:27:a2:0d:20:f3:49:42:09:a7: fe:09:32:d1:d6:00:94:7f:48:f2:2e:5e:a1:d8:c6:06:7a:2a: 90:78:6f:1e:1c:4e:d4:cf:fd:22:1b:95:90:cb:22:6b:99:b6: 59:d6:e9:01:d5:18:4e:c0:a2:30:1f:5c:9f:57:4b:ec:ae:fd: 5a:d4:49:5e:62:2f:fe:e8:91:b2:b8:44:b0:00:c7:25:2d:6e: 6f:d5:7e:cd:1f:56:e0:9e:42:70:71:82:77:70:f0:45:89:9b: c3:9c:0b:48:6d:f7:53:7b:89:73:23:2a:01:bd:dd:b0:a1:3b: 8e:6c:5b:bb:57:d2:49:59:45:d6:c1:b6:b4:cc:44:53:89:c8: 1f:57:80:1f:75:b9:33:24:8c:d5:c9:5c:be:58:57:19:c0:24: 1b:78:b4:1e:65:b6:86:3a:5d:65:d4:8b:22:67:4e:da:d9:3f: c9:2a:4c:17:07:83:ae:4a:27:14:2c:05:9b:0a:8e:2c:ef:0d: 01:7c:1a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbn2iZ2fhPaIXAvAlny+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw MzljNGUwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD Eyg3YTU1NGQyOWM2MGY3N2FmNTQ1MTNjMzVmZGViNDVlYmJhYjI3MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv5XJYK4M4++6bO/N+12xe8iuJw5 Md6ri8JbZPBbx+Ct1w34y5JxT148Aje7e9zJac6LnWqrGEcsCUcO+vp1pOeuTfr+ w353YzHqoKXRVfupwlxiZkLIwBeGjSiR4EKH2S98yqZr1Kvpc31X69akbnGWtOBB OzJ4PbFqr/39yb0jKC53wP0k7DFzJKYXkrblHzC0TPxClNn4dXUlz//EXL2PxAZO vd2oH59KBhJS0mpmC+yQqd6HepnIFsOau5g7ecoeSjI42FEECfM9MoXWSdRa3ng7 g4F+PmOnsqHQpMT/vA2ecLQu0S1dhRayDcQJLGDHX6oGfuXSUOADILlYgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpVTSnGD3evVFE8Nf3rReu6snLQMB8GA1UdIwQY MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoI35AFX /pYbd63erVm8k/95Gnng7BknWaSUU/VNhO8mOzDO0UGusvUpkXZ5Fxhbo+xXjLkg rA15mrNmsTjbJ6INIPNJQgmn/gky0dYAlH9I8i5eodjGBnoqkHhvHhxO1M/9IhuV kMsia5m2WdbpAdUYTsCiMB9cn1dL7K79WtRJXmIv/uiRsrhEsADHJS1ub9V+zR9W 4J5CcHGCd3DwRYmbw5wLSG33U3uJcyMqAb3dsKE7jmxbu1fSSVlF1sG2tMxEU4nI H1eAH3W5MySM1clcvlhXGcAkG3i0HmW2hjpdZdSLImdO2tk/ySpMFweDrkonFCwF mwqOLO8NAXwaZA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:33 2025 by rpki-client