This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json) Hash identifier: L6bHHTVlld4QYbjYul0XwJN4mzSPy2NC1lp3elM9EZU= Subject key identifier: CD:AC:BA:89:21:1B:5C:04:EB:17:BE:09:C8:9F:0A:D6:F0:CD:57:37 Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77 Certificate serial: 019B3B6BA91EBBE3B2C26259FBD28559299E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft Manifest number: 15DE Signing time: Sat 20 Dec 2025 11:01:09 +0000 Manifest this update: Sat 20 Dec 2025 11:01:09 +0000 Manifest next update: Sun 21 Dec 2025 11:01:09 +0000 Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: cE+qkuoU/5/lSM8VSA00wXhlncQzkvH0xBVWHWx40Sw=) 2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a9:1e:bb:e3:b2:c2:62:59:fb:d2:85:59:29:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77 Validity Not Before: Dec 20 11:01:09 2025 GMT Not After : Dec 21 11:01:09 2025 GMT Subject: CN=cdacba89211b5c04eb17be09c89f0ad6f0cd5737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:ce:a3:0d:e4:14:3a:9e:6c:17:93:1f:80: f3:7a:e1:3e:ea:78:2d:ee:48:43:c3:83:26:7c:7a: 16:a2:83:5f:9c:91:36:ad:db:50:29:48:9c:39:1c: e5:eb:f9:57:0f:d3:52:9d:55:9e:04:70:18:f7:43: 06:2e:1f:b6:e7:c5:6d:80:3e:80:72:d3:df:e9:a2: 28:5a:90:78:d1:d9:84:7a:f2:8f:c3:fa:6d:22:e8: 5c:27:b3:1d:14:54:ab:96:01:81:72:60:58:66:6a: 7c:9e:22:b3:cf:59:27:e7:e8:c5:94:07:55:c5:27: 9c:00:e6:fc:85:2f:e6:b4:20:f9:e2:f6:ab:02:3a: 74:8b:12:54:0f:74:93:09:00:ed:eb:21:66:f9:33: df:78:d8:b4:f0:17:06:6c:9c:60:77:ca:8f:02:b9: 38:5f:62:02:de:29:db:e7:a3:be:6d:b7:54:67:44: 98:e4:a3:83:e6:ae:f4:f7:dc:4a:c9:36:d5:55:84: f7:6f:23:3e:dd:e3:cc:65:f5:87:f0:45:ee:3a:e4: 8c:02:96:d0:35:a3:bc:48:93:3b:38:fd:be:46:6b: 8b:a5:83:59:06:9d:5d:04:3f:43:d1:e6:01:1f:56: ae:7c:2f:38:81:ef:79:a5:fc:57:0f:d8:54:1c:0c: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:BA:89:21:1B:5C:04:EB:17:BE:09:C8:9F:0A:D6:F0:CD:57:37 X509v3 Authority Key Identifier: keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:98:85:2d:9f:29:b3:0f:92:37:cc:37:78:b7:c5:4b:20:38: ea:4b:76:e2:79:c1:d8:b4:bc:75:ba:51:35:69:ed:c9:9f:fd: 20:38:fa:fb:77:5e:5b:4a:d8:1a:57:15:8b:73:a9:c1:a3:9e: b3:c5:30:66:77:40:00:c8:97:eb:a8:76:0d:06:ec:28:da:47: d0:0c:a2:eb:e5:22:0f:36:b4:46:bc:5a:33:f5:03:7d:a7:f9: 51:f3:93:6d:43:5b:45:0f:c6:ce:99:b5:31:de:be:24:9b:74: b8:1b:8b:01:f1:02:ed:31:f3:3f:bb:50:d7:ae:86:14:91:b5: 8c:1b:6e:3f:fc:4a:f4:99:81:46:d3:15:96:06:92:98:9e:b0: 09:4b:a5:e3:c2:70:53:d0:d7:db:1b:de:15:fc:26:da:98:26: 13:d9:d5:7b:15:ba:30:85:27:18:95:f7:c9:cb:52:e0:83:83: d9:04:d3:d0:8b:3e:65:c1:98:91:21:ac:e0:bc:e7:00:67:1e: f9:4a:57:c7:cc:c1:cb:03:c3:b1:5c:88:d2:cb:e0:27:24:b2: 5e:5f:3b:e2:fe:f9:76:c8:1a:b5:9a:50:ba:72:7a:20:fa:6f: 92:b7:d6:61:2d:73:27:10:00:fa:be:58:80:ee:8f:81:36:db: 6f:52:8c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6keu+OywmJZ+9KFWSmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk YjdiNzcwHhcNMjUxMjIwMTEwMTA5WhcNMjUxMjIxMTEwMTA5WjAzMTEwLwYDVQQD EyhjZGFjYmE4OTIxMWI1YzA0ZWIxN2JlMDljODlmMGFkNmYwY2Q1NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo43Oow3kFDqebBeTH4DzeuE+6ngt 7khDw4MmfHoWooNfnJE2rdtQKUicORzl6/lXD9NSnVWeBHAY90MGLh+258VtgD6A ctPf6aIoWpB40dmEevKPw/ptIuhcJ7MdFFSrlgGBcmBYZmp8niKzz1kn5+jFlAdV xSecAOb8hS/mtCD54varAjp0ixJUD3STCQDt6yFm+TPfeNi08BcGbJxgd8qPArk4 X2IC3inb56O+bbdUZ0SY5KOD5q7099xKyTbVVYT3byM+3ePMZfWH8EXuOuSMApbQ NaO8SJM7OP2+RmuLpYNZBp1dBD9D0eYBH1aufC84ge95pfxXD9hUHAxrIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2suokhG1wE6xe+CcifCtbwzVc3MB8GA1UdIwQY MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZiFLZ8p sw+SN8w3eLfFSyA46kt24nnB2LS8dbpRNWntyZ/9IDj6+3deW0rYGlcVi3OpwaOe s8UwZndAAMiX66h2DQbsKNpH0Ayi6+UiDza0RrxaM/UDfaf5UfOTbUNbRQ/Gzpm1 Md6+JJt0uBuLAfEC7THzP7tQ166GFJG1jBtuP/xK9JmBRtMVlgaSmJ6wCUul48Jw U9DX2xveFfwm2pgmE9nVexW6MIUnGJX3yctS4IOD2QTT0Is+ZcGYkSGs4LznAGce +UpXx8zBywPDsVyI0svgJySyXl874v75dsgatZpQunJ6IPpvkrfWYS1zJxAA+r5Y gO6PgTbbb1KMUA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:34:16 2025 by rpki-client