This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json) Hash identifier: qrgpnqTI1Xv18NeW3aACb+0zAMPi1vi9OnOzBBvPJ6Y= Subject key identifier: 64:75:9B:14:AE:A3:AA:CB:4A:F2:D4:57:EA:74:E9:45:FC:1E:55:34 Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Certificate serial: 019AF1D1E633533C41616AC8C56B7711960E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft Manifest number: 0479 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=) 2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: 3CP5UjDri16BUEJhfVbTaBS+Z/a9glNVJDbiUgi7h4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:33:53:3c:41:61:6a:c8:c5:6b:77:11:96:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=64759b14aea3aacb4af2d457ea74e945fc1e5534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:c4:15:6d:56:2a:eb:19:72:18:eb:71:4c: 0c:dd:f2:02:2d:a6:c0:50:ba:c4:f2:b9:dd:3e:e6: aa:1d:d3:f1:52:15:2b:5b:45:7b:e5:4f:c0:88:3b: c8:88:cf:fb:49:f4:99:d6:d6:ce:a5:fd:8b:35:36: ed:1e:89:21:9f:1c:d6:3f:c6:1b:77:6e:7c:02:b1: c6:c1:4e:43:19:26:71:db:6e:69:18:19:d9:4c:f6: 2f:fb:44:ce:18:92:b1:b0:ce:e1:37:bd:89:89:93: 9e:6f:33:8c:97:8e:32:c0:21:9e:11:a2:77:a6:55: c4:7f:34:67:bb:e5:45:62:c2:f8:c4:be:73:f4:97: 3b:db:52:df:50:a3:57:f4:90:ec:65:af:13:96:e7: b4:37:1e:fc:a3:9c:87:88:5b:08:0d:7e:7f:9f:27: 56:c9:f0:6b:f5:54:e3:ad:6b:96:66:2c:36:6d:e9: de:d4:55:87:b8:51:37:d2:16:40:ea:34:a3:87:21: 3a:32:90:70:d1:2d:b4:38:35:fd:52:76:f9:d2:76: 94:84:39:01:ff:6b:da:ff:39:76:f6:3c:12:a4:89: 3a:9a:f9:cf:53:20:bf:4d:43:06:dd:31:9c:de:21: 54:2f:8a:fd:69:46:73:4f:24:67:40:78:77:10:5d: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:9B:14:AE:A3:AA:CB:4A:F2:D4:57:EA:74:E9:45:FC:1E:55:34 X509v3 Authority Key Identifier: keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d1:6d:a6:d5:85:c4:16:3a:f7:07:18:3a:7d:b2:4d:7d:09: 1a:55:cd:ad:05:07:3d:49:d1:55:be:b3:dd:b3:f7:a9:ed:f2: 52:3c:eb:a5:6a:10:1a:f4:a8:5f:bf:c8:0b:7f:1f:51:c5:ee: cc:5c:5f:ef:cd:2d:e7:f3:2b:6a:9d:54:0b:01:f6:7a:90:e4: 6d:6d:4f:50:8a:ff:64:71:df:fa:51:66:d4:45:3f:e1:e4:17: e5:43:35:4c:7c:75:83:98:31:bb:73:ff:bb:5a:ca:f0:7d:04: fb:cb:2d:28:19:19:31:f5:7b:0b:8c:95:cb:42:c6:ff:b8:66: 3d:2e:99:a4:9f:22:02:ac:a0:42:70:58:2f:ab:8f:57:f6:d7: 1d:e9:5e:44:ec:04:b3:3c:cf:b7:2f:1e:eb:42:af:60:cb:a6: 7b:9a:59:16:c1:0d:f1:8f:85:47:e6:35:0b:c8:ae:68:d0:c3: 39:75:79:e7:6e:7c:55:21:68:eb:77:e4:7a:b2:44:d7:04:3a: 87:ca:2d:e4:20:3b:34:2c:ab:8e:c4:f4:00:69:08:22:96:f9: 73:5e:12:c0:f4:b0:86:31:75:e2:04:47:7b:7a:ef:b5:25:40: 9c:f0:76:c7:a0:19:e6:3f:a3:e9:4e:4b:05:7a:2b:ad:15:c7: 2f:e5:2a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eYzUzxBYWrIxWt3EZYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy MGU0NTIwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg2NDc1OWIxNGFlYTNhYWNiNGFmMmQ0NTdlYTc0ZTk0NWZjMWU1NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtznEFW1WKusZchjrcUwM3fICLabA ULrE8rndPuaqHdPxUhUrW0V75U/AiDvIiM/7SfSZ1tbOpf2LNTbtHokhnxzWP8Yb d258ArHGwU5DGSZx225pGBnZTPYv+0TOGJKxsM7hN72JiZOebzOMl44ywCGeEaJ3 plXEfzRnu+VFYsL4xL5z9Jc721LfUKNX9JDsZa8Tlue0Nx78o5yHiFsIDX5/nydW yfBr9VTjrWuWZiw2bene1FWHuFE30hZA6jSjhyE6MpBw0S20ODX9Unb50naUhDkB /2va/zl29jwSpIk6mvnPUyC/TUMG3TGc3iFUL4r9aUZzTyRnQHh3EF23PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR1mxSuo6rLSvLUV+p06UX8HlU0MB8GA1UdIwQY MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtFtptWF xBY69wcYOn2yTX0JGlXNrQUHPUnRVb6z3bP3qe3yUjzrpWoQGvSoX7/IC38fUcXu zFxf780t5/Mrap1UCwH2epDkbW1PUIr/ZHHf+lFm1EU/4eQX5UM1THx1g5gxu3P/ u1rK8H0E+8stKBkZMfV7C4yVy0LG/7hmPS6ZpJ8iAqygQnBYL6uPV/bXHeleROwE szzPty8e60KvYMume5pZFsEN8Y+FR+Y1C8iuaNDDOXV55258VSFo63fkerJE1wQ6 h8ot5CA7NCyrjsT0AGkIIpb5c14SwPSwhjF14gRHe3rvtSVAnPB2x6AZ5j+j6U5L BXorrRXHL+Uqmw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:44 2025 by rpki-client