This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json) Hash identifier: APpytLFfxCV+k8WpQpUjr9XH8KtYfuP8NdZyBVB1A2o= Subject key identifier: 82:40:D6:A9:95:13:45:6E:A1:EA:30:A2:A0:00:E1:FC:75:DE:EC:33 Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Certificate serial: 019B5E9C2CDB1587CDCEF71A255BFCC41176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 07:00:51 +0000 Manifest this update: Sat 27 Dec 2025 07:00:51 +0000 Manifest next update: Sun 28 Dec 2025 07:00:51 +0000 Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: iBu5mz2imtAwlix/0mcaQl5HaEbHZU8LD63OoJjdXo0=) 2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:2c:db:15:87:cd:ce:f7:1a:25:5b:fc:c4:11:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Validity Not Before: Dec 27 07:00:51 2025 GMT Not After : Dec 28 07:00:51 2025 GMT Subject: CN=8240d6a99513456ea1ea30a2a000e1fc75deec33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:1c:00:48:78:81:fb:ef:07:90:a5:d6:22: fa:49:16:5d:de:4e:3d:3a:2e:5e:73:8f:36:1d:ae: 0f:67:f3:2b:26:dc:4e:3f:2e:5e:70:99:52:22:c6: 28:0d:75:1e:04:81:7a:86:1b:cf:28:dc:7c:b1:a8: 5e:80:08:5e:ad:67:e8:52:3f:03:dd:8f:27:bd:e2: 47:78:cd:27:07:45:c7:07:00:9f:16:e5:58:4e:1b: a8:ed:fd:13:23:61:32:6e:ac:e0:05:7a:d4:87:0c: b3:4d:9e:9c:38:94:b9:a8:a8:93:69:c6:7a:70:fc: 3f:c9:59:be:4f:1b:5e:f1:c1:99:9a:8c:c8:0b:b1: d4:cd:a0:be:e7:fc:8c:1d:d7:37:ae:44:b0:b5:42: c6:81:5d:0a:d4:c3:3f:72:ed:80:bc:b2:34:8d:17: 38:12:61:a6:0b:50:64:de:dd:49:c9:65:f8:bd:8d: 3c:3b:82:35:6c:05:51:8c:25:45:0c:f9:af:f5:55: 18:82:75:00:42:26:1d:43:7a:a9:b8:2a:ff:46:2c: 53:9c:28:05:e3:eb:57:af:01:ae:a9:4d:2c:92:ee: 9d:49:41:5c:44:f3:8b:38:c1:f9:67:f9:1d:0e:a0: 38:70:54:a0:f8:86:6a:31:8e:e8:bb:a0:5f:3c:31: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:D6:A9:95:13:45:6E:A1:EA:30:A2:A0:00:E1:FC:75:DE:EC:33 X509v3 Authority Key Identifier: keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a6:b8:7d:59:c8:2e:6d:42:2c:6a:68:0c:74:cb:c2:cd:ed: c0:a2:40:f0:a1:8b:d6:3d:1f:38:3d:66:ee:49:30:9c:1f:d9: 00:27:d0:b6:39:4c:f5:fe:41:f9:94:c3:d2:50:52:21:53:2e: 1b:a8:68:9b:85:4d:fc:c3:ba:a9:7c:07:55:f4:c2:3d:b8:db: 67:f2:3d:71:1f:a2:a2:82:d2:73:12:01:b0:51:07:95:75:63: 0a:44:1a:6d:e7:a6:c1:00:e4:e4:d0:dd:32:a3:a8:3e:67:59: 55:96:1f:af:5e:40:a9:c8:33:98:44:bd:03:78:ec:c0:95:fd: 6f:b6:b0:3e:7a:e7:fe:36:7a:af:8b:e4:c5:67:25:82:b7:a3: dc:2f:71:93:14:16:3b:da:46:11:6a:c6:6b:09:df:58:db:c0: a9:c9:d3:32:dd:f8:51:98:86:c3:2d:9b:80:80:24:3c:2b:67: e7:35:3f:8d:6b:5f:21:5d:f0:1d:b8:76:9b:60:77:39:1a:8d: 42:11:65:9b:ce:1e:b1:17:af:2c:0c:03:0d:40:ae:43:14:76: 3b:cc:3d:ca:fd:93:d0:80:a6:7e:f5:1a:18:06:ec:0c:fd:55: aa:a8:8a:b0:5d:62:76:73:64:c0:34:ec:d1:1b:d1:b8:01:ac: 17:df:fb:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenCzbFYfNzvcaJVv8xBF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk OTdjNTAwHhcNMjUxMjI3MDcwMDUxWhcNMjUxMjI4MDcwMDUxWjAzMTEwLwYDVQQD Eyg4MjQwZDZhOTk1MTM0NTZlYTFlYTMwYTJhMDAwZTFmYzc1ZGVlYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE0cAEh4gfvvB5Cl1iL6SRZd3k49 Oi5ec482Ha4PZ/MrJtxOPy5ecJlSIsYoDXUeBIF6hhvPKNx8sahegAherWfoUj8D 3Y8nveJHeM0nB0XHBwCfFuVYThuo7f0TI2EybqzgBXrUhwyzTZ6cOJS5qKiTacZ6 cPw/yVm+Txte8cGZmozIC7HUzaC+5/yMHdc3rkSwtULGgV0K1MM/cu2AvLI0jRc4 EmGmC1Bk3t1JyWX4vY08O4I1bAVRjCVFDPmv9VUYgnUAQiYdQ3qpuCr/RixTnCgF 4+tXrwGuqU0sku6dSUFcRPOLOMH5Z/kdDqA4cFSg+IZqMY7ou6BfPDHu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJA1qmVE0VuoeowoqAA4fx13uwzMB8GA1UdIwQY MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaa4fVnI Lm1CLGpoDHTLws3twKJA8KGL1j0fOD1m7kkwnB/ZACfQtjlM9f5B+ZTD0lBSIVMu G6hom4VN/MO6qXwHVfTCPbjbZ/I9cR+iooLScxIBsFEHlXVjCkQabeemwQDk5NDd MqOoPmdZVZYfr15AqcgzmES9A3jswJX9b7awPnrn/jZ6r4vkxWclgrej3C9xkxQW O9pGEWrGawnfWNvAqcnTMt34UZiGwy2bgIAkPCtn5zU/jWtfIV3wHbh2m2B3ORqN QhFlm84esRevLAwDDUCuQxR2O8w9yv2T0ICmfvUaGAbsDP1VqqiKsF1idnNkwDTs 0RvRuAGsF9/71Q== -----END CERTIFICATE-----Generated at Sat Dec 27 09:14:01 2025 by rpki-client