This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json) Hash identifier: b3cqxNLfnmYQz3l7BCVDsxG0EGB+Q7Gs2Ypq3TcajSk= Subject key identifier: AC:63:F6:F5:F3:BA:7C:21:43:8E:89:40:A6:35:55:00:0A:BB:5F:AA Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Certificate serial: 019B405C4E783801D3070C62E82818E44539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:02:29 +0000 Manifest this update: Sun 21 Dec 2025 10:02:29 +0000 Manifest next update: Mon 22 Dec 2025 10:02:29 +0000 Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: N43LVcdfIrBQiCu94JvfROb8o8r1uRVpad9VBFfSP3A=) 2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:4e:78:38:01:d3:07:0c:62:e8:28:18:e4:45:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Validity Not Before: Dec 21 10:02:29 2025 GMT Not After : Dec 22 10:02:29 2025 GMT Subject: CN=ac63f6f5f3ba7c21438e8940a63555000abb5faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:5c:ea:ee:ba:24:b0:0a:6b:af:4f:2a:ac: 48:1e:80:0c:65:33:25:8f:f2:4a:a8:98:9e:18:42: e5:74:b5:b4:e8:b8:18:85:fd:bf:a1:81:8f:76:41: ef:31:ec:c5:ef:09:dc:f8:13:2f:1c:37:72:c8:1f: 0e:13:7d:18:a8:e5:b8:87:f2:36:9a:f9:d9:30:65: bd:f7:05:c9:14:ef:76:04:e5:04:2d:bd:7c:c9:29: c2:5d:ca:8e:5b:ff:42:1e:0c:b2:ef:9c:ba:87:74: 61:68:59:eb:b5:9d:64:13:f1:ac:26:59:dd:d4:d5: 89:fd:1a:99:23:1d:fa:13:6f:f3:60:ad:10:07:76: 87:44:41:7a:f3:86:b7:bf:99:2c:0e:08:31:09:8f: 5f:41:7a:35:af:06:16:08:de:34:41:d5:19:70:d5: 98:77:89:36:3b:58:a5:e8:df:76:3d:bf:00:7f:8a: 4e:a3:70:31:44:4b:96:f4:f9:16:7e:04:d9:f5:54: 86:87:f9:9f:ec:29:03:bb:28:70:c1:10:7b:53:f6: 0b:39:dc:42:85:04:7e:76:d1:2d:a8:67:33:1f:9f: f8:8c:a4:1c:66:02:6c:d2:04:fc:45:9c:93:d9:c7: 05:ac:cd:58:d0:bf:10:f9:8b:fe:19:5a:39:e1:9d: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:F6:F5:F3:BA:7C:21:43:8E:89:40:A6:35:55:00:0A:BB:5F:AA X509v3 Authority Key Identifier: keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ed:e6:cb:c7:83:a4:b9:ec:86:1a:c7:ae:85:cb:4b:7d:f8: 6e:92:63:47:be:c8:57:56:9b:58:82:0b:f9:77:79:b1:c6:9a: dd:98:51:c7:3b:86:d7:4e:46:45:44:3b:23:03:4f:01:b1:df: d1:89:36:c0:a8:64:bb:05:21:20:6d:2c:92:8f:79:de:c3:29: fb:ce:cf:9b:8a:12:43:ec:08:70:3f:69:76:a3:d2:ac:e4:6d: a3:48:33:64:b3:d1:01:74:d8:31:00:ef:a0:bd:4b:fd:48:b1: ce:39:05:a9:2c:02:ec:65:e3:15:fd:53:45:2a:9c:e9:dd:79: 99:ee:fc:03:d0:84:36:e5:5a:62:ae:da:7a:63:02:69:d0:a6: 75:8d:3b:1f:0f:3d:31:54:3c:24:95:1a:cd:84:0f:93:e6:94: 04:4f:68:45:16:86:24:c0:0e:9f:c4:74:04:2b:f2:be:1a:1f: 06:a2:14:1d:7f:bb:b4:fb:5c:9b:08:ac:f5:56:93:e9:8d:81: 0e:7e:ea:cb:c9:02:48:4f:32:89:d3:22:9d:53:fb:a5:3e:58: 86:23:f4:f8:c6:77:da:25:36:05:9d:3b:c9:a5:db:4e:f2:dc: b6:e1:c7:36:01:1c:c0:d0:31:72:6c:66:2e:80:38:aa:22:5c: 13:d2:ae:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXE54OAHTBwxi6CgY5EU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj YzY0YTkwHhcNMjUxMjIxMTAwMjI5WhcNMjUxMjIyMTAwMjI5WjAzMTEwLwYDVQQD EyhhYzYzZjZmNWYzYmE3YzIxNDM4ZTg5NDBhNjM1NTUwMDBhYmI1ZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lNc6u66JLAKa69PKqxIHoAMZTMl j/JKqJieGELldLW06LgYhf2/oYGPdkHvMezF7wnc+BMvHDdyyB8OE30YqOW4h/I2 mvnZMGW99wXJFO92BOUELb18ySnCXcqOW/9CHgyy75y6h3RhaFnrtZ1kE/GsJlnd 1NWJ/RqZIx36E2/zYK0QB3aHREF684a3v5ksDggxCY9fQXo1rwYWCN40QdUZcNWY d4k2O1il6N92Pb8Af4pOo3AxREuW9PkWfgTZ9VSGh/mf7CkDuyhwwRB7U/YLOdxC hQR+dtEtqGczH5/4jKQcZgJs0gT8RZyT2ccFrM1Y0L8Q+Yv+GVo54Z2nlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxj9vXzunwhQ46JQKY1VQAKu1+qMB8GA1UdIwQY MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe3my8eD pLnshhrHroXLS334bpJjR77IV1abWIIL+Xd5scaa3ZhRxzuG105GRUQ7IwNPAbHf 0Yk2wKhkuwUhIG0sko953sMp+87Pm4oSQ+wIcD9pdqPSrORto0gzZLPRAXTYMQDv oL1L/UixzjkFqSwC7GXjFf1TRSqc6d15me78A9CENuVaYq7aemMCadCmdY07Hw89 MVQ8JJUazYQPk+aUBE9oRRaGJMAOn8R0BCvyvhofBqIUHX+7tPtcmwis9VaT6Y2B Dn7qy8kCSE8yidMinVP7pT5YhiP0+MZ32iU2BZ07yaXbTvLctuHHNgEcwNAxcmxm LoA4qiJcE9KufQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:30:56 2025 by rpki-client