This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json) Hash identifier: 2978ViuqNRnRourjwHDicBhhoSGBdaF+I6bVjoSq524= Subject key identifier: 2B:8A:3C:DF:B9:E5:EF:5B:8C:42:2E:0A:93:50:B9:D7:09:EB:54:75 Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Certificate serial: 019B40FFAFE987AB1AFD1F297BBDBECA804F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft Manifest number: 07B1 Signing time: Sun 21 Dec 2025 13:00:57 +0000 Manifest this update: Sun 21 Dec 2025 13:00:57 +0000 Manifest next update: Mon 22 Dec 2025 13:00:57 +0000 Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: vj88+aPd7dlKUM+pCk/y+3sVToouOwzvGJqCxtRW30A=) 2: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (hash: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=) 3: pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa (hash: /iFO5Q2CWXoYbsdsqiARGyGI0bzDMxUuOB7fdJEKKMw=) 4: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (hash: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:af:e9:87:ab:1a:fd:1f:29:7b:bd:be:ca:80:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Validity Not Before: Dec 21 13:00:57 2025 GMT Not After : Dec 22 13:00:57 2025 GMT Subject: CN=2b8a3cdfb9e5ef5b8c422e0a9350b9d709eb5475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:16:43:d2:2a:80:ee:45:87:04:24:f4:30: 9f:82:f6:2a:63:f4:12:4d:3d:98:7b:c6:45:9a:fc: 97:26:e4:72:73:1e:3e:7b:36:37:75:df:3b:9f:43: 3e:99:f5:1b:7e:ad:ba:ca:96:1e:11:fa:d3:c6:39: 89:8f:0e:57:9e:2f:30:56:69:88:43:6d:2c:22:90: d7:dc:90:05:ae:6f:9d:e4:68:45:38:61:fc:88:08: b9:82:cd:5e:bc:6d:11:97:69:77:37:b5:05:ac:de: a2:54:69:0c:00:e8:50:bf:92:ab:e8:3a:9f:c2:c4: 7c:e1:f5:31:0d:c8:0a:3c:85:e6:4e:6e:aa:1c:8b: f8:a0:03:a8:66:36:96:49:e0:57:a1:46:cd:b4:fc: 09:12:f3:c3:37:89:b4:96:d5:02:46:6a:45:a2:8f: 9e:48:3f:41:3c:85:63:f3:a5:6c:cf:ec:f4:5e:b8: c5:65:69:c9:68:c5:ab:c5:a6:e7:70:c4:22:ff:c0: 6c:9a:84:9f:00:ba:30:c5:81:00:ed:00:58:44:0e: cc:7c:c9:47:32:d1:fc:fb:f4:19:2c:05:ef:89:89: 7a:8f:da:c1:29:cf:de:a9:8a:c0:fc:36:be:60:91: c6:40:70:f1:93:fe:37:e8:07:b6:ff:8f:f3:05:b6: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:3C:DF:B9:E5:EF:5B:8C:42:2E:0A:93:50:B9:D7:09:EB:54:75 X509v3 Authority Key Identifier: keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:18:7b:80:5a:16:89:6e:98:bd:ea:a7:6d:ab:7e:8d:d3:0e: e8:9a:c7:28:87:dc:c7:c6:78:7e:6f:64:1b:6f:3e:a1:42:d5: 3b:20:7f:71:88:8b:a5:80:1d:82:ff:c4:2d:e4:da:fe:d8:ce: b6:a1:ac:36:09:5b:ea:29:bc:1b:b7:9d:2d:2c:e6:ea:60:10: 25:e2:f7:3c:c7:c6:15:89:09:68:5d:18:47:ed:85:a9:c7:70: e6:2d:16:87:49:13:e4:63:82:ae:7a:ca:fc:6e:da:b8:17:35: 3b:ef:41:50:ba:4f:b0:7e:e0:64:4b:45:11:d4:8c:24:8e:d5: d7:a5:2a:ae:db:d3:12:19:50:08:20:56:6a:5d:d5:1e:e4:14: 00:e7:ed:67:f4:68:5c:db:ae:8a:24:2b:0c:11:a6:47:69:5b: 92:2d:87:3c:1a:f2:77:f8:ed:cf:fd:78:67:7b:a4:bc:73:82: 62:c1:db:3e:41:ca:8a:fa:7c:16:d7:7f:40:22:0d:55:6c:79: b8:09:c4:47:cc:7f:46:01:5f:fa:cc:07:ae:de:19:23:9e:a8: 8a:29:e5:93:2c:73:d9:b8:b8:30:5e:43:d5:02:c5:17:94:5c: 3d:9e:e3:80:ff:a3:08:3b:9a:46:77:01:37:d0:ab:14:86:ad: d2:f5:f2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/6/ph6sa/R8pe72+yoBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2 MTBjODQwHhcNMjUxMjIxMTMwMDU3WhcNMjUxMjIyMTMwMDU3WjAzMTEwLwYDVQQD EygyYjhhM2NkZmI5ZTVlZjViOGM0MjJlMGE5MzUwYjlkNzA5ZWI1NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEwWQ9IqgO5FhwQk9DCfgvYqY/QS TT2Ye8ZFmvyXJuRycx4+ezY3dd87n0M+mfUbfq26ypYeEfrTxjmJjw5Xni8wVmmI Q20sIpDX3JAFrm+d5GhFOGH8iAi5gs1evG0Rl2l3N7UFrN6iVGkMAOhQv5Kr6Dqf wsR84fUxDcgKPIXmTm6qHIv4oAOoZjaWSeBXoUbNtPwJEvPDN4m0ltUCRmpFoo+e SD9BPIVj86Vsz+z0XrjFZWnJaMWrxabncMQi/8BsmoSfALowxYEA7QBYRA7MfMlH MtH8+/QZLAXviYl6j9rBKc/eqYrA/Da+YJHGQHDxk/436Ae2/4/zBbZIKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuKPN+55e9bjEIuCpNQudcJ61R1MB8GA1UdIwQY MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1 LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhh7gFoW iW6Yveqnbat+jdMO6JrHKIfcx8Z4fm9kG28+oULVOyB/cYiLpYAdgv/ELeTa/tjO tqGsNglb6im8G7edLSzm6mAQJeL3PMfGFYkJaF0YR+2Fqcdw5i0Wh0kT5GOCrnrK /G7auBc1O+9BULpPsH7gZEtFEdSMJI7V16UqrtvTEhlQCCBWal3VHuQUAOftZ/Ro XNuuiiQrDBGmR2lbki2HPBryd/jtz/14Z3ukvHOCYsHbPkHKivp8Ftd/QCINVWx5 uAnER8x/RgFf+swHrt4ZI56oiinlkyxz2bi4MF5D1QLFF5RcPZ7jgP+jCDuaRncB N9CrFIat0vXyKw== -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:24 2025 by rpki-client