This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json) Hash identifier: QKDW7PxYrf/uifkKcrPv329HWdG4XQXBOMbJRkq7UVo= Subject key identifier: 3A:79:B8:14:31:10:AE:4B:BA:EA:EA:CC:66:BA:19:95:90:76:0D:F1 Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520 Certificate serial: 019B3AC6CF612445B0C5B95BE90D0A58327D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft Manifest number: 16ED Signing time: Sat 20 Dec 2025 08:01:06 +0000 Manifest this update: Sat 20 Dec 2025 08:01:06 +0000 Manifest next update: Sun 21 Dec 2025 08:01:06 +0000 Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: JE81vSE7eEkz3Xni+dBdNuzFehWLKzhmpCWbPfxwQPI=) 2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:cf:61:24:45:b0:c5:b9:5b:e9:0d:0a:58:32:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d2d885477d0280264e458eb071f45d91691520 Validity Not Before: Dec 20 08:01:06 2025 GMT Not After : Dec 21 08:01:06 2025 GMT Subject: CN=3a79b8143110ae4bbaeaeacc66ba199590760df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:13:0f:3f:2b:3d:a4:02:e2:64:a9:43:76: b2:84:0c:d2:ba:c4:49:b4:47:71:10:65:8f:6c:7e: 47:7c:1b:b4:fe:2a:ed:c3:c5:37:e8:80:81:7a:c7: 17:29:f5:f7:37:9d:b1:c5:e8:ce:02:ff:cd:de:89: 88:c9:58:30:14:c4:7e:95:0d:5b:69:fb:1f:e7:68: 3d:19:a2:62:cf:e9:6b:45:d6:ab:16:ab:43:f3:1b: 99:5b:07:fc:09:97:bd:81:16:fa:ec:4c:f1:69:bd: 99:e8:e2:a9:df:3b:b7:53:6a:b3:3f:a1:ee:7d:ea: cc:71:0e:35:90:c6:44:a8:88:ba:81:b0:7b:d0:ef: ae:cc:ad:ff:15:e0:18:c1:f8:c4:55:fc:b9:7e:ec: 30:a7:4c:24:7b:ef:ff:87:81:e1:9e:8a:3d:83:e3: cf:09:46:6d:55:ae:8b:94:89:b5:ad:4a:b5:68:63: 44:29:87:f3:10:fa:29:2a:de:9c:9a:31:7e:e8:b7: 82:2d:c8:c3:38:81:20:97:ee:5d:14:28:13:4b:af: e8:94:2c:5b:a3:30:82:f4:f6:4f:00:eb:c4:a1:cc: f5:57:6a:3d:58:2f:ac:10:c6:ab:da:f8:3f:71:12: 36:70:05:f2:db:63:75:65:e9:cb:67:71:5f:61:81: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:B8:14:31:10:AE:4B:BA:EA:EA:CC:66:BA:19:95:90:76:0D:F1 X509v3 Authority Key Identifier: keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:27:49:2e:00:93:8d:16:17:b4:51:b4:1b:1e:84:da:15: a7:23:03:1f:ef:6c:b1:4c:e1:36:bc:f8:30:22:b1:b2:6f:aa: 6d:78:bf:fa:21:28:b9:27:00:1c:4d:bf:85:d7:d1:0e:0a:53: 65:67:02:97:9b:5b:c0:25:af:ec:a9:8b:9e:bb:92:4b:a0:4a: 82:ae:6a:73:26:d4:c8:05:18:07:37:82:35:68:94:9b:c8:51: c5:af:44:f2:ef:6c:9c:3b:9e:9c:6c:7d:21:1d:90:cc:22:68: 32:ac:2d:e8:a9:b1:3d:7b:3a:67:1a:56:97:c0:1d:e1:7c:3d: 42:eb:8f:4f:bc:e3:09:44:80:e1:3b:52:0e:c7:d3:1f:ba:a7: 35:2f:41:ac:1c:c9:10:75:2f:93:7c:31:ae:12:63:fb:d2:27: 5b:65:07:68:44:c7:37:19:6a:f6:1c:88:4a:72:a7:f7:f0:8e: fb:c4:2d:9d:d6:16:0d:3d:4e:61:77:45:b5:89:50:05:b9:4b: 46:fa:9b:c1:bc:99:30:42:36:16:79:8b:0b:5f:ac:fb:fb:24: e3:c6:1f:ab:65:68:34:45:37:e5:32:09:dd:6f:47:bd:76:7a: b7:a1:e9:04:a2:99:df:33:a6:fb:e0:84:b7:6c:c5:56:ed:81: f3:63:e7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xs9hJEWwxblb6Q0KWDJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2 OTE1MjAwHhcNMjUxMjIwMDgwMTA2WhcNMjUxMjIxMDgwMTA2WjAzMTEwLwYDVQQD EygzYTc5YjgxNDMxMTBhZTRiYmFlYWVhY2M2NmJhMTk5NTkwNzYwZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso8TDz8rPaQC4mSpQ3ayhAzSusRJ tEdxEGWPbH5HfBu0/irtw8U36ICBescXKfX3N52xxejOAv/N3omIyVgwFMR+lQ1b afsf52g9GaJiz+lrRdarFqtD8xuZWwf8CZe9gRb67Ezxab2Z6OKp3zu3U2qzP6Hu ferMcQ41kMZEqIi6gbB70O+uzK3/FeAYwfjEVfy5fuwwp0wke+//h4Hhnoo9g+PP CUZtVa6LlIm1rUq1aGNEKYfzEPopKt6cmjF+6LeCLcjDOIEgl+5dFCgTS6/olCxb ozCC9PZPAOvEocz1V2o9WC+sEMar2vg/cRI2cAXy22N1ZenLZ3FfYYHifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp5uBQxEK5LuurqzGa6GZWQdg3xMB8GA1UdIwQY MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwgnSS4A k40WF7RRtBsehNoVpyMDH+9ssUzhNrz4MCKxsm+qbXi/+iEouScAHE2/hdfRDgpT ZWcCl5tbwCWv7KmLnruSS6BKgq5qcybUyAUYBzeCNWiUm8hRxa9E8u9snDuenGx9 IR2QzCJoMqwt6KmxPXs6ZxpWl8Ad4Xw9QuuPT7zjCUSA4TtSDsfTH7qnNS9BrBzJ EHUvk3wxrhJj+9InW2UHaETHNxlq9hyISnKn9/CO+8QtndYWDT1OYXdFtYlQBblL RvqbwbyZMEI2FnmLC1+s+/sk48Yfq2VoNEU35TIJ3W9HvXZ6t6HpBKKZ3zOm++CE t2zFVu2B82Pn9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:00 2025 by rpki-client