This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json) Hash identifier: OqyfC/CHPn8PKDWMiIe5GXlx2hc/iyEB7O1TZwnmuhA= Subject key identifier: A3:30:29:B2:A2:22:9C:3F:53:40:A6:20:89:BC:81:FD:03:7D:3A:2B Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019B36B2C0C2BF3A0C1EA1D5597BE772A944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft Manifest number: 0E55 Signing time: Fri 19 Dec 2025 13:00:42 +0000 Manifest this update: Fri 19 Dec 2025 13:00:42 +0000 Manifest next update: Sat 20 Dec 2025 13:00:42 +0000 Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 4IiuqZHDu8X0YN3vGjB4o2BTJ7wVWC8qXXC5nC0Y3Fo=) 2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=) 3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=) 4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:c0:c2:bf:3a:0c:1e:a1:d5:59:7b:e7:72:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Dec 19 13:00:42 2025 GMT Not After : Dec 20 13:00:42 2025 GMT Subject: CN=a33029b2a2229c3f5340a62089bc81fd037d3a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:71:b6:b7:f9:20:d8:07:7b:27:eb:85:88: 31:b4:bd:9f:79:4b:86:dd:33:f4:49:a6:25:67:42: 4e:c7:09:4f:f6:15:62:28:60:00:43:d6:f0:73:cd: 0b:f7:ea:69:a9:e8:09:f8:fd:f8:20:3b:e9:ce:74: 99:95:63:79:2c:83:aa:bb:48:81:32:4f:30:e2:a6: cd:ed:dd:5b:0e:1c:15:68:99:87:96:c0:1c:ad:36: 89:fc:98:c9:82:1d:04:98:87:9c:35:ce:ea:1e:5e: 76:4a:62:4f:39:53:07:f3:99:40:80:99:c9:ed:2e: 1c:d5:49:0c:15:e1:8d:54:ad:36:2d:b1:20:e6:06: 1a:a7:f5:7e:b6:33:6d:67:19:5f:1b:7c:c2:6d:38: 50:ba:62:16:e2:75:c9:60:0e:b3:24:da:fd:4f:f4: f1:ba:a3:4f:a0:9d:c5:63:e0:37:7a:ae:bf:80:02: 7b:59:51:ec:fd:cc:0d:04:81:21:ed:8c:f3:09:17: 57:18:87:b0:4c:d4:86:06:22:cc:c8:06:e5:d8:18: aa:46:f8:d1:64:f7:60:bd:c9:6a:91:d5:22:ca:2e: 01:b7:3c:e0:f2:cd:ff:b6:84:07:cc:09:de:88:a8: 52:d0:fc:a9:4f:ab:ba:40:bb:4e:aa:bf:c9:8b:15: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:30:29:B2:A2:22:9C:3F:53:40:A6:20:89:BC:81:FD:03:7D:3A:2B X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:29:87:9e:9d:2f:f2:7a:83:7c:89:64:ae:b5:2d:ed:f2:b4: 33:5b:f8:72:2c:ae:ec:4f:3f:63:4d:72:7a:8b:29:32:cf:50: a3:49:75:03:b4:20:0e:9d:bf:64:2e:cf:d5:d1:df:36:3a:bf: 4e:d3:63:a7:b0:77:6e:25:25:09:94:36:32:c8:33:5e:7a:80: 3d:0b:55:17:78:7b:1f:7e:5c:af:72:ed:32:36:f4:de:ec:13: 7f:7e:93:1a:ae:0c:2f:1b:ff:ed:a2:9a:66:19:92:d5:8b:bb: fc:d2:e6:e6:38:ec:39:0d:d0:6e:23:d3:1e:83:4d:81:19:46: b0:cd:5e:4f:05:1b:de:d4:a2:90:8b:2a:a8:c3:83:6b:22:4f: 0a:0d:a5:93:09:38:42:43:94:da:d3:88:a4:29:7c:fb:33:cc: e9:3e:24:9f:4c:b9:2d:5b:95:8b:e2:06:67:df:ea:d4:e9:b7: 70:e8:af:c9:f1:0d:44:14:80:dc:05:42:63:2e:10:d9:3b:14: 07:a4:41:f6:71:09:77:8b:e1:cf:20:b8:fc:96:52:35:30:21: 87:8d:94:8f:c2:e6:19:95:da:83:dd:68:a7:6f:88:7f:0f:aa: bb:39:c1:9a:10:a3:34:09:cc:b9:07:bb:b8:89:95:1e:59:ca: f8:58:b3:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2ssDCvzoMHqHVWXvncqlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjUxMjE5MTMwMDQyWhcNMjUxMjIwMTMwMDQyWjAzMTEwLwYDVQQD EyhhMzMwMjliMmEyMjI5YzNmNTM0MGE2MjA4OWJjODFmZDAzN2QzYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRZxtrf5INgHeyfrhYgxtL2feUuG 3TP0SaYlZ0JOxwlP9hViKGAAQ9bwc80L9+ppqegJ+P34IDvpznSZlWN5LIOqu0iB Mk8w4qbN7d1bDhwVaJmHlsAcrTaJ/JjJgh0EmIecNc7qHl52SmJPOVMH85lAgJnJ 7S4c1UkMFeGNVK02LbEg5gYap/V+tjNtZxlfG3zCbThQumIW4nXJYA6zJNr9T/Tx uqNPoJ3FY+A3eq6/gAJ7WVHs/cwNBIEh7YzzCRdXGIewTNSGBiLMyAbl2BiqRvjR ZPdgvclqkdUiyi4Btzzg8s3/toQHzAneiKhS0PypT6u6QLtOqr/JixVFVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMwKbKiIpw/U0CmIIm8gf0DfTorMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdimHnp0v 8nqDfIlkrrUt7fK0M1v4ciyu7E8/Y01yeospMs9Qo0l1A7QgDp2/ZC7P1dHfNjq/ TtNjp7B3biUlCZQ2MsgzXnqAPQtVF3h7H35cr3LtMjb03uwTf36TGq4MLxv/7aKa ZhmS1Yu7/NLm5jjsOQ3QbiPTHoNNgRlGsM1eTwUb3tSikIsqqMODayJPCg2lkwk4 QkOU2tOIpCl8+zPM6T4kn0y5LVuVi+IGZ9/q1Om3cOivyfENRBSA3AVCYy4Q2TsU B6RB9nEJd4vhzyC4/JZSNTAhh42Uj8LmGZXag91op2+Ifw+quznBmhCjNAnMuQe7 uImVHlnK+FizCw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:56:11 2025 by rpki-client