This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json) Hash identifier: 61iS9DvysgI3AJCLTPV9z6RE7Sfh/6NN7GFxv3E2vwU= Subject key identifier: B5:46:48:96:E3:F0:E7:FE:68:37:CD:44:D5:E1:83:19:3A:E3:BA:23 Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80 Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580 Certificate serial: 019B405BE0909D65DFB3FFADC7312708B4EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft Manifest number: 10A0 Signing time: Sun 21 Dec 2025 10:02:01 +0000 Manifest this update: Sun 21 Dec 2025 10:02:01 +0000 Manifest next update: Mon 22 Dec 2025 10:02:01 +0000 Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: 5SUzPaCx4eDRQ/kizXgdI/DjiRuJZNVxNMikjL447YY=) 2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:e0:90:9d:65:df:b3:ff:ad:c7:31:27:08:b4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580 Validity Not Before: Dec 21 10:02:01 2025 GMT Not After : Dec 22 10:02:01 2025 GMT Subject: CN=b5464896e3f0e7fe6837cd44d5e183193ae3ba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:20:96:13:b1:43:fd:b5:eb:28:a3:f8:87: 35:4b:2b:84:20:25:12:64:c4:64:9a:d8:b4:b0:30: 41:c8:36:75:ab:34:cc:d3:3d:f1:b9:42:6a:4e:f0: a0:4d:f7:d8:9f:18:e0:70:39:28:b8:b0:23:0f:82: d3:d2:ab:52:19:28:7e:01:53:b5:05:13:c7:94:0c: 9f:36:d0:fc:af:f3:aa:1e:9f:38:23:98:ff:a1:7d: f5:be:5f:8a:2a:6d:27:3d:86:80:a9:37:cc:6d:0a: 86:2c:50:0d:b0:8e:75:bf:3c:6e:d9:e7:a2:db:50: bc:03:d1:13:0c:67:87:b5:04:2d:91:f9:43:66:cb: bc:82:7e:95:90:ca:ea:23:0f:cb:c6:03:36:6d:86: bd:b3:26:31:f1:49:36:0f:d3:45:f8:65:29:16:89: f2:ca:55:06:28:ec:76:2c:a6:95:02:cf:f1:77:5d: 99:d8:12:a4:3c:c2:55:f9:9b:93:ef:43:ce:f0:23: 9e:95:95:23:5e:89:54:2b:1a:44:4f:2c:18:32:f5: 86:95:08:9d:55:14:7c:8d:9c:0c:d2:35:e8:ae:26: f1:20:26:75:46:e1:cb:d4:b8:c0:21:23:b8:f9:61: 1f:2c:39:0d:d3:d4:8e:75:54:97:5e:12:5c:29:f7: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:48:96:E3:F0:E7:FE:68:37:CD:44:D5:E1:83:19:3A:E3:BA:23 X509v3 Authority Key Identifier: keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:25:08:e9:91:02:42:82:24:17:01:35:79:bb:05:bf:5e:5c: 45:3b:87:04:74:49:ed:4d:37:3c:de:90:39:1b:c0:3e:3e:48: ea:88:27:ea:62:78:ad:40:0b:72:59:26:47:32:0d:46:ba:8d: cf:23:22:a7:52:56:e7:25:ed:de:54:cc:69:8f:28:47:56:28: d2:2c:8d:f2:b8:88:cf:c0:20:9d:24:55:63:41:56:01:cd:b5: 4f:aa:00:fa:18:37:d0:85:4a:55:fe:95:79:5d:ff:24:1d:3b: d5:70:58:21:86:82:1f:d5:89:52:f3:45:e0:9e:38:7a:38:0b: 47:dc:47:d1:f7:b5:bb:88:8d:0e:d7:33:91:46:99:6e:6c:47: 6d:43:74:2f:64:87:5d:1c:14:da:28:ed:36:6b:8f:e3:ba:43: 8a:34:70:58:de:54:c6:6a:48:03:f9:38:6c:a0:dd:de:96:6a: 35:3d:fb:92:63:23:ef:18:5c:c1:d2:31:6c:d0:c7:60:53:88: 11:23:ab:7b:7a:e8:8d:f5:cb:2c:08:e0:1f:13:db:2a:6b:51: 35:36:23:e8:36:aa:cb:7f:c5:48:4f:92:41:ac:e6:2a:23:55: 31:c9:55:c0:0a:bd:f3:b2:a8:50:ef:1f:a6:04:83:2e:c2:32: f9:4b:b6:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW+CQnWXfs/+txzEnCLTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTFhOWVjMGFhOTFiOTMyYWMzYzM1ODZjZmNhY2YwY2Ey OWY1ODAwHhcNMjUxMjIxMTAwMjAxWhcNMjUxMjIyMTAwMjAxWjAzMTEwLwYDVQQD EyhiNTQ2NDg5NmUzZjBlN2ZlNjgzN2NkNDRkNWUxODMxOTNhZTNiYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs64glhOxQ/216yij+Ic1SyuEICUS ZMRkmti0sDBByDZ1qzTM0z3xuUJqTvCgTffYnxjgcDkouLAjD4LT0qtSGSh+AVO1 BRPHlAyfNtD8r/OqHp84I5j/oX31vl+KKm0nPYaAqTfMbQqGLFANsI51vzxu2eei 21C8A9ETDGeHtQQtkflDZsu8gn6VkMrqIw/LxgM2bYa9syYx8Uk2D9NF+GUpFony ylUGKOx2LKaVAs/xd12Z2BKkPMJV+ZuT70PO8COelZUjXolUKxpETywYMvWGlQid VRR8jZwM0jXoribxICZ1RuHL1LjAISO4+WEfLDkN09SOdVSXXhJcKfcZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVGSJbj8Of+aDfNRNXhgxk647ojMB8GA1UdIwQY MBaAFDNRqewKqRuTKsPDWGz8rPDKKfWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgt NjY4OWY4NzJmYzg3LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYzRmYmItNzc0NS00NzU5LWEwYzgtNjY4OWY4NzJmYzg3 LzEvTTFHcDdBcXBHNU1xdzhOWWJQeXM4TW9wOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISUI6ZEC QoIkFwE1ebsFv15cRTuHBHRJ7U03PN6QORvAPj5I6ogn6mJ4rUALclkmRzINRrqN zyMip1JW5yXt3lTMaY8oR1Yo0iyN8riIz8AgnSRVY0FWAc21T6oA+hg30IVKVf6V eV3/JB071XBYIYaCH9WJUvNF4J44ejgLR9xH0fe1u4iNDtczkUaZbmxHbUN0L2SH XRwU2ijtNmuP47pDijRwWN5UxmpIA/k4bKDd3pZqNT37kmMj7xhcwdIxbNDHYFOI ESOre3rojfXLLAjgHxPbKmtRNTYj6Daqy3/FSE+SQazmKiNVMclVwAq987KoUO8f pgSDLsIy+Uu20w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:08 2025 by rpki-client