This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json) Hash identifier: JVCQzZcyH32xQ5yr+ySY4410YJ1azt/477kqT2JkKE4= Subject key identifier: 12:3E:AE:B4:67:A9:CA:BE:73:CC:94:B8:0D:7C:83:BF:DA:4E:2F:47 Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8 Certificate serial: 019AF209266566D8CCC77958DB9E76FDD05A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft Manifest number: 12DA Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: lGZR2CuyNhgfWI9QMfoUBB/wf+fGuiu04pHYrBzCU70=) 2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:65:66:d8:cc:c7:79:58:db:9e:76:fd:d0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=123eaeb467a9cabe73cc94b80d7c83bfda4e2f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:4f:f4:7e:76:4f:b8:9f:4a:2e:55:d8:a8: 87:71:68:4b:83:41:a0:39:9b:b7:32:20:8e:5c:e5: 3e:8b:6f:ed:47:ea:35:48:e1:f8:d4:65:ba:fd:9b: 40:ee:7b:25:0c:25:bb:a4:24:30:34:52:72:6c:dd: be:bd:e5:4c:3b:a8:0d:b1:95:aa:e2:da:a2:da:35: 85:30:73:c9:68:36:67:c4:9a:3f:0d:d3:8f:82:2a: 67:b4:1c:43:17:7b:54:93:88:70:93:be:47:46:33: ed:bf:8c:3c:cb:66:67:c9:91:7d:53:94:c1:df:23: 7a:6e:4a:df:60:3e:19:2a:2c:42:68:83:70:8f:75: cc:df:96:42:03:9c:99:94:ee:92:ca:61:87:f2:7d: ab:ca:06:66:18:75:e8:7c:4b:82:b1:b5:5c:b6:22: 77:e8:13:eb:6c:40:1b:52:e3:44:3a:74:dc:e4:c2: ff:b3:92:bf:17:03:91:21:11:7e:13:dc:a4:c9:c5: 8a:ae:ef:63:75:84:bf:9f:74:35:68:04:84:e7:09: 40:ad:93:5f:e3:00:09:20:8a:5a:e6:86:f7:7b:b0: 69:4b:a9:a9:fe:62:4e:a4:96:15:2a:6b:fe:3f:1e: e5:d3:2f:27:51:0c:28:22:a2:11:a4:c2:c2:82:d3: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:AE:B4:67:A9:CA:BE:73:CC:94:B8:0D:7C:83:BF:DA:4E:2F:47 X509v3 Authority Key Identifier: keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ef:f6:c7:01:5d:b1:d3:5d:4d:40:85:e1:80:5d:3b:cc:ae: d2:67:ad:43:23:c2:0f:09:61:20:f1:5e:69:05:7c:60:d4:7a: 23:38:36:6f:e1:84:c3:dc:e1:dc:19:24:64:b7:45:ce:0a:f7: cf:98:26:f8:05:3d:53:79:81:51:2f:79:cc:8a:50:e0:e3:9e: a8:48:c8:b5:e8:19:70:76:c5:81:2f:98:6c:d8:f6:2b:f2:ee: f6:73:c5:d7:4b:2d:83:37:5e:eb:13:36:d5:6b:bf:4b:e5:27: 81:2d:e2:8a:3e:ae:df:65:6d:5a:f2:21:45:b5:dc:40:f3:e3: 75:38:5b:60:1b:c1:1f:10:84:d6:39:47:b0:bb:ec:db:ec:fc: dd:84:5f:6d:4c:be:0f:42:6d:f7:56:09:f7:d8:bb:89:ec:51: 16:c6:d5:a9:b3:c7:e8:84:f1:df:f1:09:42:15:45:3f:70:69: 02:9c:56:c8:25:17:30:08:b6:a0:93:a1:89:f4:cf:4d:e4:1c: e1:41:ae:e7:29:ee:ce:c6:0d:a1:3b:27:bb:1b:40:d6:cd:29: 56:2d:93:84:73:ef:dd:d3:17:06:cd:f3:21:c8:9d:99:bc:8e: 51:35:2b:43:37:11:60:96:24:9c:ce:2c:94:4d:ed:2c:08:a4: 8d:74:b1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSZlZtjMx3lY2552/dBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx OTJkYTgwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EygxMjNlYWViNDY3YTljYWJlNzNjYzk0YjgwZDdjODNiZmRhNGUyZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUlP9H52T7ifSi5V2KiHcWhLg0Gg OZu3MiCOXOU+i2/tR+o1SOH41GW6/ZtA7nslDCW7pCQwNFJybN2+veVMO6gNsZWq 4tqi2jWFMHPJaDZnxJo/DdOPgipntBxDF3tUk4hwk75HRjPtv4w8y2ZnyZF9U5TB 3yN6bkrfYD4ZKixCaINwj3XM35ZCA5yZlO6SymGH8n2rygZmGHXofEuCsbVctiJ3 6BPrbEAbUuNEOnTc5ML/s5K/FwORIRF+E9ykycWKru9jdYS/n3Q1aASE5wlArZNf 4wAJIIpa5ob3e7BpS6mp/mJOpJYVKmv+Px7l0y8nUQwoIqIRpMLCgtOlcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI+rrRnqcq+c8yUuA18g7/aTi9HMB8GA1UdIwQY MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu/2xwFd sdNdTUCF4YBdO8yu0metQyPCDwlhIPFeaQV8YNR6Izg2b+GEw9zh3BkkZLdFzgr3 z5gm+AU9U3mBUS95zIpQ4OOeqEjItegZcHbFgS+YbNj2K/Lu9nPF10stgzde6xM2 1Wu/S+UngS3iij6u32VtWvIhRbXcQPPjdThbYBvBHxCE1jlHsLvs2+z83YRfbUy+ D0Jt91YJ99i7iexRFsbVqbPH6ITx3/EJQhVFP3BpApxWyCUXMAi2oJOhifTPTeQc 4UGu5ynuzsYNoTsnuxtA1s0pVi2ThHPv3dMXBs3zIcidmbyOUTUrQzcRYJYknM4s lE3tLAikjXSxcw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:29 2025 by rpki-client