This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json) Hash identifier: 2g0eJownY5Sd+eVmmXxifU2cjr2DAMvsuLyfxBnSp7Y= Subject key identifier: 06:4B:E8:01:19:61:66:4E:9B:0F:9C:C8:9C:B1:E8:03:43:3F:69:4B Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Certificate serial: 019B2F675745370DF1C11441B01385A5DDB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 03:01:00 +0000 Manifest this update: Thu 18 Dec 2025 03:01:00 +0000 Manifest next update: Fri 19 Dec 2025 03:01:00 +0000 Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=) 2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: DsbF0s1+FO4q6UNnoxqt70D6EDLUCBi8eFVQkIDcZKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:57:45:37:0d:f1:c1:14:41:b0:13:85:a5:dd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Validity Not Before: Dec 18 03:01:00 2025 GMT Not After : Dec 19 03:01:00 2025 GMT Subject: CN=064be8011961664e9b0f9cc89cb1e803433f694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:29:40:b4:bc:eb:3b:f8:38:34:e9:05:14: 13:26:df:df:f2:0f:f0:a3:01:8b:3e:66:52:18:cc: f1:6c:af:77:a3:25:13:9f:d2:2a:b1:ed:64:74:cc: 64:ed:dd:63:0f:f2:2b:2d:93:44:79:a3:58:78:40: c0:09:45:3d:89:9c:67:27:9d:76:2d:73:84:71:f9: 35:19:d8:e7:4a:89:ef:07:ec:f1:dd:fe:40:c8:b0: fa:67:ea:df:45:d8:d8:56:de:53:5b:f5:65:b9:9d: e6:8f:62:12:b2:60:9c:26:56:96:3b:e6:94:fe:5f: ee:b2:50:fa:10:bd:38:8d:75:7f:7e:ba:0a:80:57: c2:dc:7d:7a:8f:7a:1a:4d:ae:93:28:94:37:b7:07: 08:a9:1b:00:80:72:f8:54:cb:0d:c0:dd:0e:90:0b: fb:e5:d4:a4:fc:00:3a:4a:38:2d:66:f4:09:22:87: fe:14:9e:8d:7c:fc:fb:e3:5a:56:f8:ee:68:53:ec: b6:0e:c3:28:a1:87:f6:ec:5a:2b:a5:f7:be:53:15: 99:58:f6:9e:08:7d:33:bb:a5:a4:7f:09:d9:38:90: 14:22:4f:0e:9d:16:d9:07:b0:8f:4a:3d:0a:54:56: 3d:c6:ff:d0:bb:7d:89:89:12:8f:b6:a3:3c:6f:b0: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4B:E8:01:19:61:66:4E:9B:0F:9C:C8:9C:B1:E8:03:43:3F:69:4B X509v3 Authority Key Identifier: keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5a:5a:52:c7:ed:04:57:8e:43:1d:c9:cc:87:1e:a5:be:ac: b8:68:96:29:3d:ff:50:3f:45:ae:c9:18:ba:eb:3a:1d:33:97: 62:37:ec:39:bd:6d:18:f9:25:fa:40:91:ef:6d:7f:7c:81:de: 17:d1:d6:0e:a0:95:9b:0f:1e:1c:54:dd:03:c9:60:6b:91:b3: 89:22:c7:38:8b:92:73:73:c6:50:4a:b5:83:49:d5:aa:05:c4: b3:9b:a7:59:a0:8e:8b:44:60:13:ff:ba:6a:f9:f6:76:5a:7b: fe:ee:d4:9c:96:25:8f:82:09:6d:1d:f5:57:7b:07:d8:ef:f9: 90:52:02:a9:73:26:48:46:f6:5c:01:fa:b9:5c:83:96:91:7c: 50:86:2e:3f:4e:18:8f:30:f7:d4:4d:58:b5:3c:1e:aa:e8:89: 1d:dd:e9:56:f3:89:77:bb:b7:04:64:85:b4:ba:4e:5c:e9:b7: d8:f2:e7:d5:f5:b4:84:86:4d:6f:fd:f7:65:30:56:69:cd:78: 32:53:2c:a6:46:09:a6:bf:91:24:7a:a2:7e:15:68:ae:cd:4a: e8:2f:46:b3:a2:72:a0:e5:83:53:b7:e8:b6:a7:c8:e5:db:4d: 3a:73:10:de:46:eb:41:a4:ee:29:1c:fc:66:97:83:7f:47:27: 66:87:b3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ1dFNw3xwRRBsBOFpd25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0 NTNmNzEwHhcNMjUxMjE4MDMwMTAwWhcNMjUxMjE5MDMwMTAwWjAzMTEwLwYDVQQD EygwNjRiZTgwMTE5NjE2NjRlOWIwZjljYzg5Y2IxZTgwMzQzM2Y2OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP8pQLS86zv4ODTpBRQTJt/f8g/w owGLPmZSGMzxbK93oyUTn9Iqse1kdMxk7d1jD/IrLZNEeaNYeEDACUU9iZxnJ512 LXOEcfk1GdjnSonvB+zx3f5AyLD6Z+rfRdjYVt5TW/VluZ3mj2ISsmCcJlaWO+aU /l/uslD6EL04jXV/froKgFfC3H16j3oaTa6TKJQ3twcIqRsAgHL4VMsNwN0OkAv7 5dSk/AA6SjgtZvQJIof+FJ6NfPz741pW+O5oU+y2DsMooYf27Forpfe+UxWZWPae CH0zu6WkfwnZOJAUIk8OnRbZB7CPSj0KVFY9xv/Qu32JiRKPtqM8b7CRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZL6AEZYWZOmw+cyJyx6ANDP2lLMB8GA1UdIwQY MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFpaUsft BFeOQx3JzIcepb6suGiWKT3/UD9FrskYuus6HTOXYjfsOb1tGPkl+kCR721/fIHe F9HWDqCVmw8eHFTdA8lga5GziSLHOIuSc3PGUEq1g0nVqgXEs5unWaCOi0RgE/+6 avn2dlp7/u7UnJYlj4IJbR31V3sH2O/5kFICqXMmSEb2XAH6uVyDlpF8UIYuP04Y jzD31E1YtTwequiJHd3pVvOJd7u3BGSFtLpOXOm32PLn1fW0hIZNb/33ZTBWac14 MlMspkYJpr+RJHqifhVors1K6C9Gs6JyoOWDU7fotqfI5dtNOnMQ3kbrQaTuKRz8 ZpeDf0cnZoezGA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:16:29 2025 by rpki-client