This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json) Hash identifier: qJpHf1bol67wtaU5NZ4KivWdU79ODLlnvztYff7Pqd4= Subject key identifier: 14:D5:BC:8B:05:F4:02:79:38:18:A7:B9:CB:EE:36:6C:2C:45:1E:B9 Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Certificate serial: 019B717E055DA40C369712CED676BFB5C144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 23:00:42 +0000 Manifest this update: Tue 30 Dec 2025 23:00:42 +0000 Manifest next update: Wed 31 Dec 2025 23:00:42 +0000 Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=) 2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: HS3+bRitrbn77Bz9/Z+0OAKhJS4d1QDq1EcZVQ6UW4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:05:5d:a4:0c:36:97:12:ce:d6:76:bf:b5:c1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Validity Not Before: Dec 30 23:00:42 2025 GMT Not After : Dec 31 23:00:42 2025 GMT Subject: CN=14d5bc8b05f402793818a7b9cbee366c2c451eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:65:b2:46:c4:2f:0e:f5:4a:9b:dd:9d:ea: cd:62:24:1a:57:10:bb:98:7f:84:72:e7:b7:61:06: b2:e0:cd:c6:87:34:93:2c:58:bb:71:5a:bf:87:6b: 67:8d:7c:62:53:8b:27:46:26:d6:7d:5b:21:42:af: 1b:60:42:93:a1:c2:28:05:ac:af:c4:65:04:4d:61: 2e:6a:2d:eb:a7:c1:a1:19:ac:28:ce:d2:c7:3b:db: 4d:d7:5b:49:0a:dc:15:d6:44:8a:86:74:da:a1:bb: 45:8f:6d:33:68:72:b0:3c:93:aa:c1:49:27:06:0f: 66:90:72:a1:b5:c9:fc:eb:39:d8:64:13:4e:c4:5c: 4f:b8:f3:c3:33:ed:43:87:e8:b4:4a:c5:ab:aa:e4: 3d:b2:e1:96:19:96:2b:b4:83:d7:02:a2:b2:59:96: 7e:8d:d3:f5:cb:47:9e:43:23:91:89:9e:73:55:b7: 08:ca:3f:53:6c:e6:20:f0:0f:7a:26:2e:1e:ca:e2: 70:0d:6a:9d:39:a0:10:1c:c4:a0:52:cc:d7:87:f2: 15:68:d4:4c:0b:b1:58:eb:20:ea:50:37:81:ac:8d: ef:f0:26:8a:ca:a6:51:77:94:a7:bc:a7:4d:6a:22: 8f:4c:b6:1d:41:d4:36:f5:ba:0a:7b:1c:82:25:4c: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:BC:8B:05:F4:02:79:38:18:A7:B9:CB:EE:36:6C:2C:45:1E:B9 X509v3 Authority Key Identifier: keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0a:54:0e:c2:33:9f:bf:ac:e2:4f:59:c4:6a:b7:e7:bb:e1: 70:13:1b:40:20:34:5d:b9:05:bc:bd:4c:95:05:8c:ac:46:cc: 36:1c:e9:f1:54:02:10:d9:94:d0:51:08:b3:55:9d:9d:bb:db: e1:a5:72:a5:ff:b9:a2:73:6f:ab:c1:f8:16:e2:08:8a:41:12: b9:ad:2b:84:3a:c6:5c:08:11:73:26:f9:09:bf:7b:f7:93:09: ea:75:66:16:c1:a9:33:83:2a:db:93:71:af:e7:ca:43:9c:96: 76:db:16:8b:49:36:97:af:18:5d:71:4d:7d:ab:5a:14:0f:f2: 17:24:44:10:2c:72:b2:1e:4a:07:f3:27:85:b1:6b:36:38:3f: e0:9c:7c:eb:1f:9c:6d:5a:51:4f:7a:8a:d7:74:cf:e7:47:35: f1:e9:6b:d9:a9:70:88:e9:3f:8a:40:17:6f:7c:7d:20:75:11: f7:b2:26:90:10:2a:fa:f5:6b:a7:94:49:ac:16:6d:a5:37:b3: c9:4c:64:fe:6a:cc:b7:84:33:4a:23:68:39:ce:62:77:c7:1f: d0:44:f8:c8:e6:2c:c6:c8:33:f2:1e:2c:d9:05:29:c4:8c:d1: 1b:ce:f0:b3:2c:a3:da:7e:fa:c4:62:8c:da:33:28:eb:0b:7b: 8e:03:88:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfgVdpAw2lxLO1na/tcFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4 MzRlMGYwHhcNMjUxMjMwMjMwMDQyWhcNMjUxMjMxMjMwMDQyWjAzMTEwLwYDVQQD EygxNGQ1YmM4YjA1ZjQwMjc5MzgxOGE3YjljYmVlMzY2YzJjNDUxZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRhlskbELw71SpvdnerNYiQaVxC7 mH+Ecue3YQay4M3GhzSTLFi7cVq/h2tnjXxiU4snRibWfVshQq8bYEKTocIoBayv xGUETWEuai3rp8GhGawoztLHO9tN11tJCtwV1kSKhnTaobtFj20zaHKwPJOqwUkn Bg9mkHKhtcn86znYZBNOxFxPuPPDM+1Dh+i0SsWrquQ9suGWGZYrtIPXAqKyWZZ+ jdP1y0eeQyORiZ5zVbcIyj9TbOYg8A96Ji4eyuJwDWqdOaAQHMSgUszXh/IVaNRM C7FY6yDqUDeBrI3v8CaKyqZRd5SnvKdNaiKPTLYdQdQ29boKexyCJUxyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTVvIsF9AJ5OBinucvuNmwsRR65MB8GA1UdIwQY MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1 LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwpUDsIz n7+s4k9ZxGq357vhcBMbQCA0XbkFvL1MlQWMrEbMNhzp8VQCENmU0FEIs1Wdnbvb 4aVypf+5onNvq8H4FuIIikESua0rhDrGXAgRcyb5Cb9795MJ6nVmFsGpM4Mq25Nx r+fKQ5yWdtsWi0k2l68YXXFNfataFA/yFyREECxysh5KB/MnhbFrNjg/4Jx86x+c bVpRT3qK13TP50c18elr2alwiOk/ikAXb3x9IHUR97ImkBAq+vVrp5RJrBZtpTez yUxk/mrMt4QzSiNoOc5id8cf0ET4yOYsxsgz8h4s2QUpxIzRG87wsyyj2n76xGKM 2jMo6wt7jgOIdQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:21:26 2025 by rpki-client