This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json) Hash identifier: 9Vlvu4DTxVZUXXXagB9HMVUXeDpfHkkIsXkts8zE5i0= Subject key identifier: 72:86:BA:BC:8C:73:47:1F:C9:3A:47:03:ED:BB:A9:64:81:F2:99:DA Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Certificate serial: 019B2551F15CD4958E4BF47E418EC7FAF0BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft Manifest number: 0E5D Signing time: Tue 16 Dec 2025 04:01:25 +0000 Manifest this update: Tue 16 Dec 2025 04:01:25 +0000 Manifest next update: Wed 17 Dec 2025 04:01:25 +0000 Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: OH68kV+RvP750CoW89coimytAmeliWL3h4qyzQdZ9pg=) 2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:f1:5c:d4:95:8e:4b:f4:7e:41:8e:c7:fa:f0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Validity Not Before: Dec 16 04:01:25 2025 GMT Not After : Dec 17 04:01:25 2025 GMT Subject: CN=7286babc8c73471fc93a4703edbba96481f299da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:83:d1:5c:dc:f7:a8:e5:5e:da:ea:e3:2d: d6:52:17:f9:09:ea:fa:a2:d6:ae:86:d5:b0:73:3d: 6c:07:27:1f:46:ff:5a:b4:c9:fb:f5:c9:bb:dc:86: 06:4e:e1:1e:28:97:eb:b5:dd:49:fb:65:00:7e:ba: b8:e4:d5:bd:8d:f6:d1:f5:40:9d:6d:f1:eb:90:a4: d7:7e:cd:18:3b:cb:00:cc:43:f0:da:18:82:b3:1c: 15:a3:fd:92:29:0b:51:6e:81:e7:94:49:08:64:2b: 06:71:eb:7e:2a:3f:1b:3e:de:c4:41:60:72:7b:35: 9c:a7:c2:03:3a:1d:85:06:a4:f3:e4:c3:99:7e:9c: d6:be:25:71:56:79:b9:61:e0:94:0b:0e:7a:eb:1f: fa:80:43:44:3e:65:8b:2e:85:e0:14:7d:cd:cb:d6: 4f:a7:7a:27:cc:3a:a4:3c:b5:26:03:d9:93:12:b3: cc:0d:0e:60:ba:f3:54:ba:36:f0:66:6d:67:a4:04: d0:08:24:ca:31:75:78:ca:17:16:44:01:de:70:8d: f8:bc:93:50:f4:08:d2:8c:72:a3:42:99:c9:09:3c: d8:31:60:c0:17:4f:33:da:ea:7a:fb:16:03:c6:54: 40:e9:17:4f:73:da:3b:3a:80:a1:6b:11:bb:59:3b: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:86:BA:BC:8C:73:47:1F:C9:3A:47:03:ED:BB:A9:64:81:F2:99:DA X509v3 Authority Key Identifier: keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ac:d2:3a:96:af:21:31:7d:38:36:28:15:1f:64:60:47:45: 81:c6:bb:7b:79:cf:af:9d:a5:cd:ed:37:c2:3a:6c:f4:c8:cc: 48:4a:a3:20:4b:f1:e6:40:1e:19:ea:5a:04:ca:b2:80:16:88: 56:5a:e1:fd:a8:d0:ed:dc:b3:a8:36:86:47:5a:8d:0c:8f:43: ce:78:86:cf:e1:5f:cd:26:9a:af:71:eb:91:d6:f3:5f:cc:b2: 2c:99:ee:c9:9e:80:a5:62:b1:f4:77:0c:cb:4e:17:8e:cf:2f: 75:56:08:aa:cd:4d:ae:e4:cd:ee:d1:91:a7:28:b8:29:d1:80: c0:21:c1:f0:7c:08:04:b2:65:f6:e2:e0:d5:46:cc:7e:2c:19: ba:10:96:3d:50:17:88:9a:56:f6:2a:8d:d1:76:bc:a6:c3:83: bd:51:02:ab:47:dd:ce:52:29:01:15:fa:4f:e6:a3:0f:90:ab: c7:78:8e:8d:b1:6c:c6:9d:77:ac:c5:8e:4b:6b:77:c9:92:ba: e0:95:68:a3:61:55:03:e8:50:78:d4:a1:6d:de:49:7e:4c:82: cb:16:8a:d3:f8:07:c6:5f:83:35:ee:73:a9:66:54:cf:db:7b: 49:9e:60:6c:4e:60:a1:da:ab:df:09:ef:f5:26:3f:88:b8:5a: a6:82:64:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUfFc1JWOS/R+QY7H+vC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY5NzdkYzNkNWFjNjNiZGJkNmYwZjhhZDVlNmJhYTdj NTRkODYwHhcNMjUxMjE2MDQwMTI1WhcNMjUxMjE3MDQwMTI1WjAzMTEwLwYDVQQD Eyg3Mjg2YmFiYzhjNzM0NzFmYzkzYTQ3MDNlZGJiYTk2NDgxZjI5OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBWD0Vzc96jlXtrq4y3WUhf5Cer6 otauhtWwcz1sBycfRv9atMn79cm73IYGTuEeKJfrtd1J+2UAfrq45NW9jfbR9UCd bfHrkKTXfs0YO8sAzEPw2hiCsxwVo/2SKQtRboHnlEkIZCsGcet+Kj8bPt7EQWBy ezWcp8IDOh2FBqTz5MOZfpzWviVxVnm5YeCUCw566x/6gENEPmWLLoXgFH3Ny9ZP p3onzDqkPLUmA9mTErPMDQ5guvNUujbwZm1npATQCCTKMXV4yhcWRAHecI34vJNQ 9AjSjHKjQpnJCTzYMWDAF08z2up6+xYDxlRA6RdPc9o7OoChaxG7WTuL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKGuryMc0cfyTpHA+27qWSB8pnaMB8GA1UdIwQY MBaAFDNvl33D1axjvb1vD4rV5rqnxU2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjIt M2Y2ODY4YjJkZTk4LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjItM2Y2ODY4YjJkZTk4 LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKzSOpav ITF9ODYoFR9kYEdFgca7e3nPr52lze03wjps9MjMSEqjIEvx5kAeGepaBMqygBaI Vlrh/ajQ7dyzqDaGR1qNDI9DzniGz+FfzSaar3HrkdbzX8yyLJnuyZ6ApWKx9HcM y04Xjs8vdVYIqs1NruTN7tGRpyi4KdGAwCHB8HwIBLJl9uLg1UbMfiwZuhCWPVAX iJpW9iqN0Xa8psODvVECq0fdzlIpARX6T+ajD5Crx3iOjbFsxp13rMWOS2t3yZK6 4JVoo2FVA+hQeNShbd5JfkyCyxaK0/gHxl+DNe5zqWZUz9t7SZ5gbE5godqr3wnv 9SY/iLhapoJkyQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:13 2025 by rpki-client