This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json) Hash identifier: FccbEyiGLca0D8wHUzk+Bh5Mpc4Dlg3zBv5a1eZI3WM= Subject key identifier: B7:72:54:BA:74:4D:E7:FF:B9:6D:23:B6:66:5E:00:DB:A9:5D:EC:42 Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a Certificate serial: 019B684456845E6FA4D375FE00CC01860FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 04:01:07 +0000 Manifest this update: Mon 29 Dec 2025 04:01:07 +0000 Manifest next update: Tue 30 Dec 2025 04:01:07 +0000 Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=) 2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: 0UVy8s+8Dr4Mn1hqQV20wvrTtuQjkTMLkRUb0qGhb3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:56:84:5e:6f:a4:d3:75:fe:00:cc:01:86:0f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a Validity Not Before: Dec 29 04:01:07 2025 GMT Not After : Dec 30 04:01:07 2025 GMT Subject: CN=b77254ba744de7ffb96d23b6665e00dba95dec42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:35:50:49:4c:00:4b:1a:84:e6:db:3c:04: 1e:bd:09:4b:7a:09:4b:44:35:ac:a7:73:c0:81:4f: a3:33:00:0c:40:ce:25:29:b1:1b:8e:e0:1a:1e:57: 92:90:bf:e4:e6:70:09:e1:1f:51:9f:f3:2f:7d:c1: 24:29:61:76:7e:2c:50:ad:fb:1a:3e:fd:03:88:70: 31:24:b0:58:5e:ea:33:ea:54:3d:ff:69:13:bb:f7: 4b:97:32:1d:c6:a4:75:da:17:df:35:38:04:44:e7: 7d:57:05:12:3b:6a:e2:95:66:ec:5b:b9:d1:ca:6f: c8:39:8b:3d:7c:86:61:a1:2c:7a:f6:e6:f8:48:36: 77:df:46:00:10:f9:ad:47:da:ed:75:56:2b:35:f1: 1c:10:12:51:18:7b:42:cc:81:ac:8c:d9:c7:d5:c3: dd:8b:02:d4:8e:a5:2b:05:12:27:1c:cd:de:f4:77: 0f:2e:2e:eb:45:6e:d9:5e:05:08:db:48:37:5d:44: 12:2a:18:02:cb:63:ba:61:f9:9f:34:26:17:0c:5b: ad:3c:f0:ee:20:b9:ce:3f:06:68:59:f6:95:15:e7: aa:d7:44:13:ec:6c:86:fc:c2:4b:a5:5c:52:9b:c8: 6c:98:67:b2:6b:ec:d6:46:0a:37:03:78:99:92:57: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:72:54:BA:74:4D:E7:FF:B9:6D:23:B6:66:5E:00:DB:A9:5D:EC:42 X509v3 Authority Key Identifier: keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f7:81:d1:07:f4:81:9b:30:f2:34:a4:d8:c4:81:83:a4:1f: e1:0e:bd:ae:a3:a2:11:d5:e7:a9:84:8c:54:31:28:fd:04:47: 7e:d4:b7:3c:38:47:f7:18:02:41:32:64:13:b5:e2:41:8f:9f: 66:b3:dc:c1:26:fb:58:24:b1:ab:8a:3f:61:b1:b2:20:77:a8: 81:b3:a5:45:a6:79:f1:3a:10:82:2a:3f:22:52:bc:c1:92:a6: 16:27:22:c6:43:b5:ce:aa:dd:21:21:40:f6:36:9f:87:bf:26: 1d:02:cd:3b:6a:ee:c1:0f:58:46:4c:89:c0:de:55:b7:50:a6: ef:29:24:84:10:4b:44:77:6d:bf:e2:20:43:56:2b:1a:0f:b7: d1:b3:a3:1a:22:0b:ef:60:09:ae:14:d9:b9:33:20:ec:40:bc: 39:ac:19:c4:be:43:76:96:f7:03:60:97:6b:f6:e8:85:b3:af: 17:2d:e2:b4:a1:05:ca:4c:67:62:29:cd:83:7c:d3:00:f2:de: 7c:44:d4:2b:b8:a5:9e:46:6a:22:8f:9d:22:a6:40:2e:da:fe: 6b:18:64:f1:c5:22:03:3f:9b:6c:0c:cb:78:0e:97:0b:b8:bc: 36:d3:a2:b2:1b:42:d7:c9:81:a5:10:d8:83:66:82:57:1f:06: ce:9e:9e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRFaEXm+k03X+AMwBhg/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNDEwODc1Y2E3OGNjNWUzZDE5MmUwNTRhOTZkZjAzMDJj N2Y5N2EwHhcNMjUxMjI5MDQwMTA3WhcNMjUxMjMwMDQwMTA3WjAzMTEwLwYDVQQD EyhiNzcyNTRiYTc0NGRlN2ZmYjk2ZDIzYjY2NjVlMDBkYmE5NWRlYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyI1UElMAEsahObbPAQevQlLeglL RDWsp3PAgU+jMwAMQM4lKbEbjuAaHleSkL/k5nAJ4R9Rn/MvfcEkKWF2fixQrfsa Pv0DiHAxJLBYXuoz6lQ9/2kTu/dLlzIdxqR12hffNTgEROd9VwUSO2rilWbsW7nR ym/IOYs9fIZhoSx69ub4SDZ330YAEPmtR9rtdVYrNfEcEBJRGHtCzIGsjNnH1cPd iwLUjqUrBRInHM3e9HcPLi7rRW7ZXgUI20g3XUQSKhgCy2O6YfmfNCYXDFutPPDu ILnOPwZoWfaVFeeq10QT7GyG/MJLpVxSm8hsmGeya+zWRgo3A3iZkle9dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdyVLp0Tef/uW0jtmZeANupXexCMB8GA1UdIwQY MBaAFDNBCHXKeMxePRkuBUqW3wMCx/l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjkt ZjA4MTZlMzhhZGRlLzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjktZjA4MTZlMzhhZGRl LzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/eB0Qf0 gZsw8jSk2MSBg6Qf4Q69rqOiEdXnqYSMVDEo/QRHftS3PDhH9xgCQTJkE7XiQY+f ZrPcwSb7WCSxq4o/YbGyIHeogbOlRaZ58ToQgio/IlK8wZKmFicixkO1zqrdISFA 9jafh78mHQLNO2ruwQ9YRkyJwN5Vt1Cm7ykkhBBLRHdtv+IgQ1YrGg+30bOjGiIL 72AJrhTZuTMg7EC8OawZxL5Ddpb3A2CXa/bohbOvFy3itKEFykxnYinNg3zTAPLe fETUK7ilnkZqIo+dIqZALtr+axhk8cUiAz+bbAzLeA6XC7i8NtOishtC18mBpRDY g2aCVx8Gzp6eUQ== -----END CERTIFICATE-----Generated at Mon Dec 29 12:04:59 2025 by rpki-client