This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json) Hash identifier: CjCml7vFIzy6ryycXCoeeRINGvvv1MTj+Qt4YywVJ3Q= Subject key identifier: 5A:6C:07:3D:C7:75:6F:A3:18:19:73:14:2C:FE:A9:56:85:3A:C5:F7 Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Certificate serial: 019B638C1C3D3B5D4BF854BF1467AB198DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft Manifest number: 0F58 Signing time: Sun 28 Dec 2025 06:01:25 +0000 Manifest this update: Sun 28 Dec 2025 06:01:25 +0000 Manifest next update: Mon 29 Dec 2025 06:01:25 +0000 Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: p4hIMb1765DrjufBN8wiyTHH9D5ypvDCcykZsYk6sAI=) 2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8c:1c:3d:3b:5d:4b:f8:54:bf:14:67:ab:19:8d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Validity Not Before: Dec 28 06:01:25 2025 GMT Not After : Dec 29 06:01:25 2025 GMT Subject: CN=5a6c073dc7756fa3181973142cfea956853ac5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:cf:e3:c7:ef:43:b9:c0:10:6e:55:c6:20: 7b:c9:5c:22:28:95:73:f7:67:d5:ed:70:d3:7d:2f: cf:25:bb:0a:a3:f0:6b:6a:9f:7f:fe:47:de:ab:10: f1:54:4c:bb:03:55:36:16:19:7b:f6:77:43:c1:52: c5:42:91:2a:a8:07:c1:7f:16:3b:ac:fd:8d:eb:c1: 58:12:a6:ed:9c:72:bf:90:01:a6:f0:e1:16:95:0d: 2f:cf:39:73:eb:e7:9a:3d:32:07:36:98:bf:66:db: 57:48:54:16:06:08:8a:b0:56:67:39:8a:8f:0e:7e: a8:ea:f3:5f:35:ad:35:d4:09:17:52:c4:e5:9d:96: 85:36:5c:55:9b:f7:2b:f1:46:72:92:15:47:1c:72: c0:9b:02:1d:ae:5a:58:57:53:72:3b:b0:a7:b5:df: 7b:a5:42:35:38:e0:83:ee:64:9f:f4:f9:46:03:e1: d1:f3:2d:22:72:6d:90:58:d1:8d:3c:3d:a5:d3:e4: f2:a1:d4:16:89:b5:4d:33:71:ff:a0:2d:ef:07:62: c9:20:3e:f9:7e:ff:08:1d:23:a3:c1:5c:26:07:7c: 6f:a5:a1:10:7c:c1:58:1e:b3:e0:0a:7f:82:0f:08: dd:f5:26:1d:4d:1b:8c:a1:9f:16:5c:e3:62:bb:37: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:07:3D:C7:75:6F:A3:18:19:73:14:2C:FE:A9:56:85:3A:C5:F7 X509v3 Authority Key Identifier: keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:23:af:4f:20:82:c7:6a:5d:a6:48:d4:63:81:b0:fd:5c:de: 9a:ae:5c:de:19:55:6e:2f:94:eb:72:0b:44:1e:f8:22:31:94: c4:af:2c:82:b0:27:31:5c:cd:fe:32:6b:83:0f:8c:15:d7:1f: 9b:52:f2:61:8b:52:77:11:41:ef:9c:15:db:f9:e5:00:9e:cd: 24:37:05:af:98:ce:98:85:3e:5f:04:8e:a3:2c:eb:ef:47:f7: c0:84:1f:15:5c:1e:f4:ea:0e:e2:52:a2:bf:e2:2c:bc:e9:81: 86:57:a7:bf:e9:d6:44:71:f8:f1:57:87:8f:2b:af:2e:1f:10: e0:d2:93:29:cb:07:df:e8:f3:20:b4:ee:4f:0a:1b:b2:a8:4d: 6f:e1:4a:c6:8a:d9:e5:1f:ff:63:19:e4:e7:d7:69:a4:d9:ed: 69:e6:c6:eb:9a:11:b3:c2:74:66:05:55:91:94:02:a3:fd:c1: a6:2d:8d:11:05:b2:db:f8:cc:b7:8a:5f:52:d3:01:a3:f8:45: ea:1b:b1:1e:98:13:be:d3:d1:8a:88:5c:cd:09:20:bf:a7:1f: cf:65:02:33:b8:7c:dd:4f:bf:39:59:4e:7f:b1:fa:21:bc:08: 30:fd:86:4e:2f:26:85:36:d2:c9:bb:76:22:fa:df:bf:93:a1: 98:ec:99:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjjBw9O11L+FS/FGerGY3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl NzVhYjMwHhcNMjUxMjI4MDYwMTI1WhcNMjUxMjI5MDYwMTI1WjAzMTEwLwYDVQQD Eyg1YTZjMDczZGM3NzU2ZmEzMTgxOTczMTQyY2ZlYTk1Njg1M2FjNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzzP48fvQ7nAEG5VxiB7yVwiKJVz 92fV7XDTfS/PJbsKo/Brap9//kfeqxDxVEy7A1U2Fhl79ndDwVLFQpEqqAfBfxY7 rP2N68FYEqbtnHK/kAGm8OEWlQ0vzzlz6+eaPTIHNpi/ZttXSFQWBgiKsFZnOYqP Dn6o6vNfNa011AkXUsTlnZaFNlxVm/cr8UZykhVHHHLAmwIdrlpYV1NyO7Cntd97 pUI1OOCD7mSf9PlGA+HR8y0icm2QWNGNPD2l0+TyodQWibVNM3H/oC3vB2LJID75 fv8IHSOjwVwmB3xvpaEQfMFYHrPgCn+CDwjd9SYdTRuMoZ8WXONiuzcyDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpsBz3HdW+jGBlzFCz+qVaFOsX3MB8GA1UdIwQY MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSOvTyCC x2pdpkjUY4Gw/Vzemq5c3hlVbi+U63ILRB74IjGUxK8sgrAnMVzN/jJrgw+MFdcf m1LyYYtSdxFB75wV2/nlAJ7NJDcFr5jOmIU+XwSOoyzr70f3wIQfFVwe9OoO4lKi v+IsvOmBhlenv+nWRHH48VeHjyuvLh8Q4NKTKcsH3+jzILTuTwobsqhNb+FKxorZ 5R//Yxnk59dppNntaebG65oRs8J0ZgVVkZQCo/3Bpi2NEQWy2/jMt4pfUtMBo/hF 6huxHpgTvtPRiohczQkgv6cfz2UCM7h83U+/OVlOf7H6IbwIMP2GTi8mhTbSybt2 Ivrfv5OhmOyZXw== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:07 2025 by rpki-client