This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json) Hash identifier: YrXkH6FK/vmOXY6lITlGVqKkpipBjaXfxIoIH8TeRyY= Subject key identifier: 65:46:5B:9D:38:69:B7:9D:B1:5A:B1:C9:55:40:77:99:49:1E:1C:02 Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Certificate serial: 019AF12E5F62306EE43B2B5FCAF102776BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: HMxuS6pf8fBDHcDjcdGZQ9HZ+WfexidOBTMn2w33BQE=) 2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5f:62:30:6e:e4:3b:2b:5f:ca:f1:02:77:6b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=65465b9d3869b79db15ab1c955407799491e1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:5b:c6:03:38:27:e0:67:a4:e7:55:13:31: 90:53:bf:77:41:56:87:8f:d8:fe:85:71:70:55:df: 3d:86:cc:1c:05:20:4d:72:d1:06:48:38:6b:ce:c7: 5b:19:28:16:37:ae:c3:d6:e1:36:72:50:0c:c1:26: 48:8a:7f:65:25:5e:3c:6f:03:ae:16:bf:88:d4:98: af:53:b7:e2:5b:bc:36:02:b8:e8:70:c1:fa:02:7c: bf:10:d8:ee:54:f7:cc:19:65:88:89:da:53:4b:5e: 86:62:25:0f:5f:b0:92:a2:08:03:b6:53:7a:27:81: c7:3a:b2:6e:07:08:e2:36:98:3c:89:db:f2:3b:1b: 5d:92:be:47:05:0e:a0:b3:ff:eb:51:81:2e:5a:b9: f3:8d:34:1d:3a:b6:99:5d:7a:cc:06:96:a0:63:b0: 4d:22:68:c0:a9:09:69:8c:71:fe:b5:6b:45:2b:1b: 9d:68:7d:f9:98:69:89:c8:36:be:bc:1c:85:9c:a4: a5:d9:c4:e2:d9:48:88:94:e0:2c:23:8d:2b:cb:f0: 73:7a:98:c0:dd:92:c6:2a:48:43:16:d5:a1:e0:33: de:f7:8d:17:65:b0:7f:3d:c2:9a:e2:00:d9:89:84: 10:48:05:e6:a8:5b:c6:4c:dc:01:86:cc:62:19:21: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:5B:9D:38:69:B7:9D:B1:5A:B1:C9:55:40:77:99:49:1E:1C:02 X509v3 Authority Key Identifier: keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:75:04:f4:4a:73:e3:6b:2f:7b:b8:21:ac:ef:b2:95:db:00: 79:51:0b:f0:ef:8c:ae:5e:43:dc:9d:37:e7:57:11:d1:7f:d3: fe:69:e3:61:d2:77:61:81:56:c1:7f:ee:ae:3e:b2:f4:d7:7f: 6c:c5:a6:41:09:fb:f9:64:41:80:b3:17:89:aa:44:07:6a:7b: 0c:de:41:7b:06:a5:c6:88:d1:f6:52:ff:57:b4:fc:77:9b:aa: 58:56:b0:7c:7e:5b:ad:8c:47:30:0d:2a:8b:ae:1b:e5:64:7a: 45:b0:cd:ef:93:bb:51:33:1b:22:f2:a3:84:3e:1b:9d:87:50: 92:13:23:62:17:8b:d6:64:fb:d2:f4:9e:bc:89:77:62:fc:41: 8b:23:4e:6c:cb:54:50:b5:b2:61:9d:03:40:3f:4c:3e:6f:ba: d1:f1:9a:38:db:eb:b9:2c:07:ee:6f:e5:e7:63:61:6b:3f:d2: 2c:57:d8:44:71:39:11:14:de:c7:2d:e6:04:80:41:97:e9:60: 22:b9:d1:3b:46:83:52:d6:41:38:7c:ce:f9:c1:a3:87:ba:10: 7e:41:62:18:c1:69:75:9e:0b:a4:51:6c:f9:ae:c3:d1:6a:6b: 66:f7:80:1a:10:29:fd:d0:76:d9:80:2b:93:45:67:2b:c6:38: c2:f0:84:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl9iMG7kOytfyvECd2vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY5NzdkYzNkNWFjNjNiZGJkNmYwZjhhZDVlNmJhYTdj NTRkODYwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg2NTQ2NWI5ZDM4NjliNzlkYjE1YWIxYzk1NTQwNzc5OTQ5MWUxYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r9bxgM4J+BnpOdVEzGQU793QVaH j9j+hXFwVd89hswcBSBNctEGSDhrzsdbGSgWN67D1uE2clAMwSZIin9lJV48bwOu Fr+I1JivU7fiW7w2ArjocMH6Any/ENjuVPfMGWWIidpTS16GYiUPX7CSoggDtlN6 J4HHOrJuBwjiNpg8idvyOxtdkr5HBQ6gs//rUYEuWrnzjTQdOraZXXrMBpagY7BN ImjAqQlpjHH+tWtFKxudaH35mGmJyDa+vByFnKSl2cTi2UiIlOAsI40ry/BzepjA 3ZLGKkhDFtWh4DPe940XZbB/PcKa4gDZiYQQSAXmqFvGTNwBhsxiGSG6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVGW504abedsVqxyVVAd5lJHhwCMB8GA1UdIwQY MBaAFDNvl33D1axjvb1vD4rV5rqnxU2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjIt M2Y2ODY4YjJkZTk4LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjItM2Y2ODY4YjJkZTk4 LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3UE9Epz 42sve7ghrO+yldsAeVEL8O+Mrl5D3J0351cR0X/T/mnjYdJ3YYFWwX/urj6y9Nd/ bMWmQQn7+WRBgLMXiapEB2p7DN5BewalxojR9lL/V7T8d5uqWFawfH5brYxHMA0q i64b5WR6RbDN75O7UTMbIvKjhD4bnYdQkhMjYheL1mT70vSevIl3YvxBiyNObMtU ULWyYZ0DQD9MPm+60fGaONvruSwH7m/l52Nhaz/SLFfYRHE5ERTexy3mBIBBl+lg IrnRO0aDUtZBOHzO+cGjh7oQfkFiGMFpdZ4LpFFs+a7D0WprZveAGhAp/dB22YAr k0VnK8Y4wvCEEw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:18 2025 by rpki-client