This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json) Hash identifier: VPwDyVdGOOCqPLvK1MpJkNXS4r0sC+HMdulkP3Px7MU= Subject key identifier: EF:D6:72:F8:A1:A5:B6:8A:1D:41:00:7B:19:E0:1F:7D:A2:BB:56:CF Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Certificate serial: 019AF3F7BE58F2360A9FA5DC3EE17958A349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 14:01:30 +0000 Manifest this update: Sat 06 Dec 2025 14:01:30 +0000 Manifest next update: Sun 07 Dec 2025 14:01:30 +0000 Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=) 2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: 7l7P3ND0+DySGPG9Tw19LIZ7yJg5nnUifbGblbfNbUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:be:58:f2:36:0a:9f:a5:dc:3e:e1:79:58:a3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Validity Not Before: Dec 6 14:01:30 2025 GMT Not After : Dec 7 14:01:30 2025 GMT Subject: CN=efd672f8a1a5b68a1d41007b19e01f7da2bb56cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:9f:24:6b:49:b5:3b:29:76:9e:ed:b2:d4: da:de:d2:67:1c:83:3a:f3:92:3b:2f:c6:0a:98:4f: 26:b6:1c:ae:bf:4e:ec:98:3d:35:ae:e2:88:74:ea: bd:4e:84:81:72:5a:ce:45:18:d3:4e:c1:12:d0:a3: 3a:1f:cc:b1:a7:37:1f:d9:29:a4:3c:93:25:e5:93: 5e:fc:0a:76:1d:77:44:08:50:f9:28:3c:11:f1:ac: 3b:3c:84:6a:b9:78:51:74:32:27:ca:80:0b:d2:76: b6:b0:ab:6a:5a:4f:2a:81:77:1a:87:9a:ec:b5:5e: d3:36:44:03:61:a6:ac:de:b2:c4:98:ad:f6:9f:56: cf:d3:9f:f0:d9:a6:6c:cf:cd:42:9a:45:57:09:c3: ca:9b:59:54:29:cd:0b:b2:32:4e:27:28:06:d2:fa: 2a:d1:4d:d5:b1:1d:b0:51:0d:3d:50:5c:16:08:53: 7c:73:aa:96:41:60:24:b7:b4:18:3d:b2:18:b4:ac: 0a:34:8f:44:cb:68:0c:49:28:6e:2f:fb:53:c3:4c: 01:dc:f0:c1:f4:be:78:1b:da:1c:14:8f:8b:ff:c9: 00:5a:d1:48:36:0f:44:e9:6a:d9:e3:cf:0e:15:24: bb:33:3f:9a:c7:81:92:2f:fa:1c:1e:2e:d9:b9:89: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:72:F8:A1:A5:B6:8A:1D:41:00:7B:19:E0:1F:7D:A2:BB:56:CF X509v3 Authority Key Identifier: keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1f:2e:1c:3f:1b:18:8c:36:73:16:03:6f:23:5f:c9:14:62: 52:57:b2:ae:22:34:a4:23:67:cf:49:5f:7b:5a:3f:a7:27:df: f6:4e:cf:83:83:61:a6:7b:ec:cb:8e:e0:f5:d5:a5:61:51:1f: 18:fa:87:7f:20:d6:71:34:f2:a7:99:aa:a8:4f:f3:21:84:80: 35:7c:2e:ab:57:d5:b7:c6:e0:5e:b5:85:9b:a5:b7:e6:04:53: f5:c2:eb:ed:2c:cb:1b:54:8d:ea:2a:eb:b3:87:2a:6e:bf:05: af:16:e8:8d:67:e8:87:e5:ae:2d:fd:95:db:88:79:c6:95:e8: eb:97:89:3d:7d:7e:13:89:b2:49:77:b9:ac:d6:90:e0:06:a7: 97:ff:de:70:24:d7:11:50:38:44:24:3a:eb:28:30:53:4f:d8: 84:fb:5b:bd:94:f9:ba:c5:1e:5b:41:25:73:bc:72:cc:e4:43: e7:b4:d3:b8:36:04:e9:0c:8f:93:5a:a5:a3:e9:12:5c:b7:83: ad:ac:b1:03:98:fd:fa:c2:9f:ee:46:3b:b5:b7:7a:be:5d:05: f0:59:e4:73:41:4f:38:67:cc:c8:f3:61:3a:7a:44:de:72:51: ba:77:07:81:7c:f5:3a:04:69:ec:60:da:07:ea:ef:32:6e:b2: 56:09:ac:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz975Y8jYKn6XcPuF5WKNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWUzOTk5ODRkNzM3NGIyYThlMGFmNzJkMmJmY2YxMDVj ODYxNTQwHhcNMjUxMjA2MTQwMTMwWhcNMjUxMjA3MTQwMTMwWjAzMTEwLwYDVQQD EyhlZmQ2NzJmOGExYTViNjhhMWQ0MTAwN2IxOWUwMWY3ZGEyYmI1NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vWfJGtJtTspdp7tstTa3tJnHIM6 85I7L8YKmE8mthyuv07smD01ruKIdOq9ToSBclrORRjTTsES0KM6H8yxpzcf2Smk PJMl5ZNe/Ap2HXdECFD5KDwR8aw7PIRquXhRdDInyoAL0na2sKtqWk8qgXcah5rs tV7TNkQDYaas3rLEmK32n1bP05/w2aZsz81CmkVXCcPKm1lUKc0LsjJOJygG0voq 0U3VsR2wUQ09UFwWCFN8c6qWQWAkt7QYPbIYtKwKNI9Ey2gMSShuL/tTw0wB3PDB 9L54G9ocFI+L/8kAWtFINg9E6WrZ488OFSS7Mz+ax4GSL/ocHi7ZuYk+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/WcvihpbaKHUEAexngH32iu1bPMB8GA1UdIwQY MBaAFDOuOZmE1zdLKo4K9y0r/PEFyGFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMt MWE4ZGFmZjExZTBjLzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMtMWE4ZGFmZjExZTBj LzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR8uHD8b GIw2cxYDbyNfyRRiUleyriI0pCNnz0lfe1o/pyff9k7Pg4Nhpnvsy47g9dWlYVEf GPqHfyDWcTTyp5mqqE/zIYSANXwuq1fVt8bgXrWFm6W35gRT9cLr7SzLG1SN6irr s4cqbr8FrxbojWfoh+WuLf2V24h5xpXo65eJPX1+E4mySXe5rNaQ4Aanl//ecCTX EVA4RCQ66ygwU0/YhPtbvZT5usUeW0Elc7xyzORD57TTuDYE6QyPk1qlo+kSXLeD rayxA5j9+sKf7kY7tbd6vl0F8Fnkc0FPOGfMyPNhOnpE3nJRuncHgXz1OgRp7GDa B+rvMm6yVgms7g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:23 2025 by rpki-client