This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json) Hash identifier: ulr3qDeRWcvIWuw10EnjSMVGPJ602BgoARppIyP4gLE= Subject key identifier: 8A:F6:D2:ED:40:64:67:F7:E4:87:16:66:C4:61:6F:79:56:48:F0:10 Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B5D539E4D66FA77C5A594F54F58AF03CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft Manifest number: 0C15 Signing time: Sat 27 Dec 2025 01:01:59 +0000 Manifest this update: Sat 27 Dec 2025 01:01:59 +0000 Manifest next update: Sun 28 Dec 2025 01:01:59 +0000 Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=) 2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: 0EzNboS9lQGI5j/OAP56bbG/2RoHw/m45KV3Cna4MIE=) 3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=) 4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=) 5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:9e:4d:66:fa:77:c5:a5:94:f5:4f:58:af:03:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Dec 27 01:01:59 2025 GMT Not After : Dec 28 01:01:59 2025 GMT Subject: CN=8af6d2ed406467f7e4871666c4616f795648f010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:df:8c:3c:26:97:b1:eb:5f:e2:c1:ff:ac: 2e:d5:93:f8:f8:41:2e:93:07:e0:72:6c:8e:ec:5e: 60:10:10:57:3a:f5:13:a0:58:e8:c3:8b:aa:8f:8f: 1c:d2:d9:69:c0:8a:17:43:8a:9e:aa:bd:02:99:bc: 78:da:6b:4f:ca:62:5d:4b:89:9b:87:2e:06:ab:c0: 83:84:a9:e4:9e:ee:b4:0b:7a:9e:d5:ab:df:60:63: 9e:2e:f5:25:d8:f8:9e:f1:94:29:50:de:75:bd:a8: f2:3e:d9:8a:0c:3a:76:fd:ce:c6:0d:f4:16:dc:1e: 78:49:78:ff:99:31:f8:8f:18:31:29:3c:8f:ca:0c: 92:38:88:bc:d1:f1:e5:7d:ff:37:51:db:2d:70:24: 20:c0:64:44:1c:c5:a3:20:47:ec:45:d6:57:99:1f: 7b:35:05:d4:ef:48:a8:32:3f:73:bb:c9:eb:ce:e6: 45:56:3d:77:ae:f6:60:46:61:6d:f1:7c:5c:2c:c2: a8:3c:2e:ea:50:73:22:50:4b:9e:ae:00:3e:39:4d: 16:14:b7:c0:e7:a0:51:4a:91:24:0a:1e:06:a9:e5: 31:fb:53:7f:94:7b:94:49:f2:eb:0e:75:d8:71:b4: d3:fc:90:a6:ce:12:4b:bf:88:10:f6:ba:73:d9:2a: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F6:D2:ED:40:64:67:F7:E4:87:16:66:C4:61:6F:79:56:48:F0:10 X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:89:22:52:4a:7c:a4:5d:9d:15:01:29:5d:a4:28:9e:a1:a4: 18:96:5c:6d:06:ca:cb:20:1c:6d:0c:58:7e:9b:47:5b:37:fb: 90:fc:ef:65:29:f1:3d:4e:61:a3:1d:2c:d0:c6:b5:cb:88:ba: 85:fd:f0:5d:69:c3:39:c7:70:8d:25:73:be:95:a1:ed:53:cf: f9:81:48:9c:89:f5:78:d2:17:82:38:21:83:40:19:a4:54:5d: 01:01:8e:b4:67:3d:22:69:56:9a:53:9f:25:71:14:65:89:25: 70:83:5d:e2:e5:cb:46:fd:ee:81:3a:9f:e8:d6:48:2f:2e:5c: ed:ae:fd:92:1b:2c:20:d2:1b:71:5d:94:1b:84:a0:1a:ae:bd: ab:0f:ff:94:e0:10:bd:45:09:31:28:aa:11:0d:08:54:59:ac: eb:d8:dc:0b:67:27:bc:3f:6a:b6:f5:80:c0:d6:6b:25:76:a8: 8b:18:d0:71:22:dc:8e:c0:36:63:11:a6:b1:51:e9:8e:19:44: bd:af:e4:1a:5a:88:9c:f5:cc:07:c0:b1:71:a6:f4:44:ff:29: ec:73:05:f3:ef:00:3d:34:9c:c9:64:ad:d5:e9:0c:89:17:e4: f8:e8:43:7d:31:a1:d0:b4:13:bd:98:bb:55:ff:b7:b2:e1:0f: 81:dc:93:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU55NZvp3xaWU9U9YrwPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjUxMjI3MDEwMTU5WhcNMjUxMjI4MDEwMTU5WjAzMTEwLwYDVQQD Eyg4YWY2ZDJlZDQwNjQ2N2Y3ZTQ4NzE2NjZjNDYxNmY3OTU2NDhmMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylffjDwml7HrX+LB/6wu1ZP4+EEu kwfgcmyO7F5gEBBXOvUToFjow4uqj48c0tlpwIoXQ4qeqr0Cmbx42mtPymJdS4mb hy4Gq8CDhKnknu60C3qe1avfYGOeLvUl2Pie8ZQpUN51vajyPtmKDDp2/c7GDfQW 3B54SXj/mTH4jxgxKTyPygySOIi80fHlff83UdstcCQgwGREHMWjIEfsRdZXmR97 NQXU70ioMj9zu8nrzuZFVj13rvZgRmFt8XxcLMKoPC7qUHMiUEuergA+OU0WFLfA 56BRSpEkCh4GqeUx+1N/lHuUSfLrDnXYcbTT/JCmzhJLv4gQ9rpz2SoGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr20u1AZGf35IcWZsRhb3lWSPAQMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIkiUkp8 pF2dFQEpXaQonqGkGJZcbQbKyyAcbQxYfptHWzf7kPzvZSnxPU5hox0s0Ma1y4i6 hf3wXWnDOcdwjSVzvpWh7VPP+YFInIn1eNIXgjghg0AZpFRdAQGOtGc9ImlWmlOf JXEUZYklcINd4uXLRv3ugTqf6NZILy5c7a79khssINIbcV2UG4SgGq69qw//lOAQ vUUJMSiqEQ0IVFms69jcC2cnvD9qtvWAwNZrJXaoixjQcSLcjsA2YxGmsVHpjhlE va/kGlqInPXMB8Cxcab0RP8p7HMF8+8APTScyWSt1ekMiRfk+OhDfTGh0LQTvZi7 Vf+3suEPgdyTlw== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:40 2025 by rpki-client