This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json) Hash identifier: dpfI1sO4Q1hEw87VOmYs4AWxMUtlCBmukhY3lO4J29k= Subject key identifier: 33:3C:BA:5B:12:BE:19:FC:4D:50:57:46:33:71:0A:3A:AB:0F:3C:26 Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Certificate serial: 019B27772A3E39B3E0B1EC85B0D6686202EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 14:01:19 +0000 Manifest this update: Tue 16 Dec 2025 14:01:19 +0000 Manifest next update: Wed 17 Dec 2025 14:01:19 +0000 Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: i8QIFWuhmlhNBLtcSToMOdMNBkVknksP3M9GjEZEdok=) 2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:2a:3e:39:b3:e0:b1:ec:85:b0:d6:68:62:02:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Validity Not Before: Dec 16 14:01:19 2025 GMT Not After : Dec 17 14:01:19 2025 GMT Subject: CN=333cba5b12be19fc4d50574633710a3aab0f3c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:6d:8f:0b:b5:96:96:fb:d0:76:77:cf:2f: 72:0b:11:42:fa:1e:43:f2:a2:9b:50:2a:44:0e:8f: 5f:0e:d3:46:5f:17:8d:36:5e:22:fc:63:28:dd:d1: 3e:6c:60:de:2b:3f:17:2c:1b:1a:88:90:eb:d5:dc: f9:bb:89:91:c5:eb:cb:2a:74:cc:f7:72:f3:2c:88: fd:ce:12:3e:ea:26:86:27:3e:60:bc:40:62:6e:53: af:cb:30:b8:a7:0e:7e:bf:5b:8c:ce:37:6e:b8:4a: 5a:35:a3:dd:a9:70:43:85:92:bc:95:b6:a4:5e:36: f7:42:76:25:78:7a:d8:0d:cf:5b:77:b1:f5:13:11: 43:b0:ee:95:5c:eb:ff:22:c7:a5:cf:82:67:34:bc: 12:58:eb:83:67:16:67:76:be:47:4c:02:12:c5:ee: cc:92:3f:31:5c:a4:ee:74:7f:1f:19:1e:be:f7:1b: 5a:25:b2:90:f2:9c:22:f3:1b:8b:57:0d:5c:22:9e: 21:11:ec:7b:c3:16:73:4e:77:7e:91:a4:a4:a5:80: 8c:3f:52:ac:06:e2:35:8e:8a:6a:5b:bb:dd:63:89: d1:af:b7:9a:65:33:45:ad:2c:68:84:4b:19:2f:74: 92:e0:bb:b9:6c:b7:2c:c7:79:de:14:d6:14:0b:f5: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3C:BA:5B:12:BE:19:FC:4D:50:57:46:33:71:0A:3A:AB:0F:3C:26 X509v3 Authority Key Identifier: keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1c:8b:97:de:5b:43:3d:4f:d1:50:9b:c2:af:6c:ad:af:d4: 33:17:37:24:19:e5:07:4f:7c:13:77:ba:0c:54:15:c2:11:fb: 75:e4:6b:e3:00:3d:97:f7:84:6b:e0:73:fb:96:19:59:b2:6f: 67:2f:c8:5a:19:d9:e6:2e:b2:58:d2:94:95:e5:5f:aa:3e:1d: 47:3a:64:7d:c2:87:7e:fd:e2:8c:4a:bd:c9:b7:df:b7:d6:dd: 6f:28:36:5a:e6:86:23:e2:c1:2a:46:6a:0c:a1:3f:59:d3:cc: b8:7c:f3:f7:91:f4:44:d2:16:5c:62:fa:95:7e:48:de:bd:bc: 14:b2:8e:7e:fe:a5:6a:56:f7:18:d9:79:97:04:48:24:48:19: f6:3c:c1:b3:31:07:21:1a:04:46:88:a3:60:e3:2c:10:a4:b0: 79:4d:db:4a:b6:fe:d1:c8:b9:26:ae:ef:0b:22:fa:df:83:d3: da:88:07:1e:b5:02:b2:1a:81:a3:5d:2c:6b:32:9f:2d:f0:fb: d0:d1:c8:1e:36:cb:2a:e2:52:2c:1a:c0:62:24:7f:44:1d:d5: aa:91:98:f0:3e:0c:dd:47:08:35:7a:4d:a8:a1:fd:fc:df:0a: e4:fd:f1:b4:2e:1c:3a:0e:a8:9d:2a:58:3d:d3:06:80:c1:5d: 59:f4:d3:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndyo+ObPgseyFsNZoYgLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx YzFhZWYwHhcNMjUxMjE2MTQwMTE5WhcNMjUxMjE3MTQwMTE5WjAzMTEwLwYDVQQD EygzMzNjYmE1YjEyYmUxOWZjNGQ1MDU3NDYzMzcxMGEzYWFiMGYzYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI1tjwu1lpb70HZ3zy9yCxFC+h5D 8qKbUCpEDo9fDtNGXxeNNl4i/GMo3dE+bGDeKz8XLBsaiJDr1dz5u4mRxevLKnTM 93LzLIj9zhI+6iaGJz5gvEBiblOvyzC4pw5+v1uMzjduuEpaNaPdqXBDhZK8lbak Xjb3QnYleHrYDc9bd7H1ExFDsO6VXOv/Iselz4JnNLwSWOuDZxZndr5HTAISxe7M kj8xXKTudH8fGR6+9xtaJbKQ8pwi8xuLVw1cIp4hEex7wxZzTnd+kaSkpYCMP1Ks BuI1jopqW7vdY4nRr7eaZTNFrSxohEsZL3SS4Lu5bLcsx3neFNYUC/WC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM8ulsSvhn8TVBXRjNxCjqrDzwmMB8GA1UdIwQY MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACByLl95b Qz1P0VCbwq9sra/UMxc3JBnlB098E3e6DFQVwhH7deRr4wA9l/eEa+Bz+5YZWbJv Zy/IWhnZ5i6yWNKUleVfqj4dRzpkfcKHfv3ijEq9ybfft9bdbyg2WuaGI+LBKkZq DKE/WdPMuHzz95H0RNIWXGL6lX5I3r28FLKOfv6lalb3GNl5lwRIJEgZ9jzBszEH IRoERoijYOMsEKSweU3bSrb+0ci5Jq7vCyL634PT2ogHHrUCshqBo10sazKfLfD7 0NHIHjbLKuJSLBrAYiR/RB3VqpGY8D4M3UcINXpNqKH9/N8K5P3xtC4cOg6onSpY PdMGgMFdWfTTzQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:23:52 2025 by rpki-client