This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: N/OFtBZ2HQHgGwzTQcqbDtLoVI0e6l2RZsF8SlwaZ8s= Subject key identifier: 2C:8A:5C:75:09:89:F0:CB:E3:2D:4C:7D:5F:AD:75:0E:EE:9F:CC:52 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019B3FECB83EF58E61205391271AD1124EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:36 +0000 Manifest this update: Sun 21 Dec 2025 08:00:36 +0000 Manifest next update: Mon 22 Dec 2025 08:00:36 +0000 Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: 9hYEy8RPlNsWMEWSTKSUgt6xv8ae4jNciXnBPXUBB3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:b8:3e:f5:8e:61:20:53:91:27:1a:d1:12:4e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Dec 21 08:00:36 2025 GMT Not After : Dec 22 08:00:36 2025 GMT Subject: CN=2c8a5c750989f0cbe32d4c7d5fad750eee9fcc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:f2:43:0f:d7:74:64:73:f1:d1:60:3b:a5: 25:29:0b:25:70:a9:e2:90:d3:d9:c4:51:3f:25:a3: 6a:0c:10:e9:70:88:0a:b5:6f:77:e1:f3:68:92:db: 1f:b2:14:e8:86:50:67:d1:11:37:b8:2d:10:54:93: 7f:13:f6:ed:2f:e7:95:2b:f9:52:66:2c:1c:42:a1: d9:bc:24:d6:fd:f4:cc:6d:86:93:08:a2:5e:1e:82: 77:1e:41:27:cf:75:d5:ca:e3:e2:cb:4b:5c:2f:70: 7d:cd:c5:66:f6:93:bb:62:ba:1c:d1:9e:a4:35:40: be:b1:7f:8e:af:a7:7e:81:36:d1:7a:cb:69:aa:3c: ff:4c:ae:3f:19:82:b8:f8:00:cb:61:25:a0:38:f1: 0c:bc:e2:46:85:01:3e:fa:e6:9c:16:d7:70:5d:fd: 31:ae:7f:09:6e:a2:ad:24:5c:af:07:55:ef:09:84: c4:5c:7c:6d:18:b4:06:52:6d:a5:fb:a2:2d:a1:55: 83:8f:0e:74:1c:2a:60:12:cb:cf:b0:1f:79:e4:6b: ad:cb:6c:0b:11:1c:0f:6b:cc:c0:1f:03:9c:5c:e2: 22:24:33:b3:a7:37:a9:4d:60:0e:46:60:c2:4e:39: 05:2e:79:25:6e:cc:12:c5:3e:a3:dc:4b:72:c5:a8: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:5C:75:09:89:F0:CB:E3:2D:4C:7D:5F:AD:75:0E:EE:9F:CC:52 X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a1:a2:e9:39:e4:73:ec:d6:83:ba:dc:84:dc:77:69:4b:25: a0:08:5b:0a:fd:f9:2e:3b:9e:44:99:62:ab:72:43:f3:8f:bd: f7:77:c3:b8:77:c1:50:36:7b:e3:38:83:14:94:4e:b0:df:a8: d6:ae:18:6d:ed:d9:a6:35:42:b1:82:86:29:95:1f:74:f4:57: ec:70:3e:39:32:9d:2f:e0:0b:34:a5:2d:5b:ed:f4:98:29:f4: 11:ca:1e:6c:0d:58:f9:55:c8:72:e1:d1:a9:b4:81:e9:e0:3a: 9b:fd:6c:a3:9d:43:76:71:59:c7:36:b2:85:7c:73:fc:50:ed: c8:7f:3b:81:34:98:e3:9c:9b:56:a0:da:c1:b1:c3:ac:4a:e7: 35:ed:f9:9f:23:6a:7b:a8:ff:2f:0a:a3:9c:14:b0:b1:62:f2: 13:e3:66:55:5c:f8:3e:48:77:d7:f0:d3:68:62:39:db:06:9d: f2:01:54:fc:2f:4b:66:1e:5b:ef:fb:40:ae:3a:da:7c:76:66: 2a:51:ce:b1:88:f5:2e:77:c8:f8:38:9d:d6:cd:27:97:61:f1: 4e:c7:a3:53:94:ec:60:5f:c1:f1:fe:a8:d3:2f:4f:e5:bc:87: 8d:e7:18:79:8a:68:38:ab:1c:ea:bd:cb:d4:24:21:f4:0d:25: 58:8f:3d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Lg+9Y5hIFORJxrREk7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjUxMjIxMDgwMDM2WhcNMjUxMjIyMDgwMDM2WjAzMTEwLwYDVQQD EygyYzhhNWM3NTA5ODlmMGNiZTMyZDRjN2Q1ZmFkNzUwZWVlOWZjYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9HyQw/XdGRz8dFgO6UlKQslcKni kNPZxFE/JaNqDBDpcIgKtW934fNoktsfshTohlBn0RE3uC0QVJN/E/btL+eVK/lS ZiwcQqHZvCTW/fTMbYaTCKJeHoJ3HkEnz3XVyuPiy0tcL3B9zcVm9pO7Yroc0Z6k NUC+sX+Or6d+gTbRestpqjz/TK4/GYK4+ADLYSWgOPEMvOJGhQE++uacFtdwXf0x rn8JbqKtJFyvB1XvCYTEXHxtGLQGUm2l+6ItoVWDjw50HCpgEsvPsB955Guty2wL ERwPa8zAHwOcXOIiJDOzpzepTWAORmDCTjkFLnklbswSxT6j3Etyxai8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyKXHUJifDL4y1MfV+tdQ7un8xSMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaGi6Tnk c+zWg7rchNx3aUsloAhbCv35LjueRJliq3JD84+993fDuHfBUDZ74ziDFJROsN+o 1q4Ybe3ZpjVCsYKGKZUfdPRX7HA+OTKdL+ALNKUtW+30mCn0EcoebA1Y+VXIcuHR qbSB6eA6m/1so51DdnFZxzayhXxz/FDtyH87gTSY45ybVqDawbHDrErnNe35nyNq e6j/LwqjnBSwsWLyE+NmVVz4Pkh31/DTaGI52wad8gFU/C9LZh5b7/tArjrafHZm KlHOsYj1LnfI+Did1s0nl2HxTsejU5TsYF/B8f6o0y9P5byHjecYeYpoOKsc6r3L 1CQh9A0lWI89Fg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:47:23 2025 by rpki-client