This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json) Hash identifier: PZTtSCMPvsb7bXSWwS825OtbbUlPtHtTunRmaydZQTU= Subject key identifier: 5D:30:A4:C8:CB:44:B4:D6:4C:73:C9:C2:5C:16:23:DB:74:9A:92:32 Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7 Certificate serial: 019B45140BB3C07AB9748B36A67AA833F7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft Manifest number: 0A2D Signing time: Mon 22 Dec 2025 08:01:40 +0000 Manifest this update: Mon 22 Dec 2025 08:01:40 +0000 Manifest next update: Tue 23 Dec 2025 08:01:40 +0000 Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: CEA6vzMfFoHM+VsXAmAM1w+cWklSiTtLFpWtgCXgqZo=) 2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=) 3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:0b:b3:c0:7a:b9:74:8b:36:a6:7a:a8:33:f7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7 Validity Not Before: Dec 22 08:01:40 2025 GMT Not After : Dec 23 08:01:40 2025 GMT Subject: CN=5d30a4c8cb44b4d64c73c9c25c1623db749a9232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:25:38:2c:b0:48:6b:7e:8c:77:f6:89:57: 90:24:cb:8c:86:d4:e1:50:b0:5c:95:14:35:36:57: 8f:d0:c9:df:39:5b:a3:67:2b:0c:d3:a3:4f:fa:e2: 0a:cb:91:49:60:39:ca:b0:a9:a7:7b:ca:1d:3e:77: c7:f2:c3:5e:ca:33:ae:6a:29:11:0d:22:e5:2c:c2: 6f:56:bb:e1:c4:3e:ab:c8:13:b8:45:f0:63:67:ea: 60:58:43:e4:13:9e:4d:74:b4:aa:61:06:ac:ee:51: c6:11:2a:db:5f:8d:9f:b7:49:ae:47:84:c5:bf:bc: e2:66:d3:ac:48:f7:99:97:13:4d:34:0c:d3:69:7b: e7:1b:a8:ca:8b:64:3d:6b:dc:9b:27:49:b0:4a:45: 7a:33:46:4f:fb:9c:47:ba:d1:0e:ab:a7:93:b5:d7: e9:08:5d:58:07:7c:19:d6:67:18:8c:0d:6e:0c:ed: 9c:5f:4e:7e:2c:ee:03:35:6e:78:d2:d9:87:89:82: 78:40:68:4e:e9:3f:24:db:e1:a8:37:63:ba:fb:37: 3b:4a:b2:df:5b:17:3d:05:3e:90:0f:06:e6:0c:b7: 58:d8:fb:5f:67:ed:a2:f3:ca:2a:1d:03:b1:d8:18: 87:dc:cf:a8:08:b3:73:ed:13:8e:da:14:e9:98:15: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:A4:C8:CB:44:B4:D6:4C:73:C9:C2:5C:16:23:DB:74:9A:92:32 X509v3 Authority Key Identifier: keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:32:d3:fe:38:62:1b:a3:b0:e0:0b:c4:b7:5c:95:bf:e8:ec: 8c:88:c3:db:02:1c:b6:f8:da:3d:3c:cc:fd:a0:5f:48:38:60: fb:90:24:c1:50:4c:7e:d6:c9:58:f6:fb:b0:25:b0:bd:be:48: 60:94:a8:33:50:ac:dc:18:2f:2f:47:8e:7f:7a:14:03:11:b8: 3d:98:5a:b5:12:56:94:1a:7f:88:a6:fc:45:3f:44:54:bb:72: 70:fa:40:ed:e1:dc:4d:e2:da:d6:e6:61:09:a2:dd:12:2e:4f: 84:8e:f9:80:dc:83:33:82:b4:eb:c0:81:21:c0:19:b1:dc:1a: a5:74:29:9e:be:85:ba:6e:1d:dc:85:64:e7:5a:ed:63:9e:f4: 05:6b:fd:ae:67:0f:58:ff:e0:11:e5:c3:75:f2:76:f7:06:71: 46:2b:2c:35:dc:ce:eb:c3:5a:82:52:b9:15:97:50:25:e1:31: 36:c1:15:02:9f:76:a3:bb:85:d2:b3:3b:90:e2:a1:e3:a6:fa: a2:6f:4a:f3:f0:36:3e:48:30:62:04:d8:4b:da:b7:a6:ee:eb: 19:8e:23:77:71:c5:c9:74:5c:df:73:c9:f6:ba:75:f2:83:be: ca:fb:c2:2a:99:c0:66:eb:aa:39:86:0b:10:24:d0:57:a9:cb: f4:5c:cb:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFAuzwHq5dIs2pnqoM/fkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy MTVhZTcwHhcNMjUxMjIyMDgwMTQwWhcNMjUxMjIzMDgwMTQwWjAzMTEwLwYDVQQD Eyg1ZDMwYTRjOGNiNDRiNGQ2NGM3M2M5YzI1YzE2MjNkYjc0OWE5MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YslOCywSGt+jHf2iVeQJMuMhtTh ULBclRQ1NleP0MnfOVujZysM06NP+uIKy5FJYDnKsKmne8odPnfH8sNeyjOuaikR DSLlLMJvVrvhxD6ryBO4RfBjZ+pgWEPkE55NdLSqYQas7lHGESrbX42ft0muR4TF v7ziZtOsSPeZlxNNNAzTaXvnG6jKi2Q9a9ybJ0mwSkV6M0ZP+5xHutEOq6eTtdfp CF1YB3wZ1mcYjA1uDO2cX05+LO4DNW540tmHiYJ4QGhO6T8k2+GoN2O6+zc7SrLf Wxc9BT6QDwbmDLdY2PtfZ+2i88oqHQOx2BiH3M+oCLNz7ROO2hTpmBWV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0wpMjLRLTWTHPJwlwWI9t0mpIyMB8GA1UdIwQY MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDLT/jhi G6Ow4AvEt1yVv+jsjIjD2wIctvjaPTzM/aBfSDhg+5AkwVBMftbJWPb7sCWwvb5I YJSoM1Cs3BgvL0eOf3oUAxG4PZhatRJWlBp/iKb8RT9EVLtycPpA7eHcTeLa1uZh CaLdEi5PhI75gNyDM4K068CBIcAZsdwapXQpnr6Fum4d3IVk51rtY570BWv9rmcP WP/gEeXDdfJ29wZxRissNdzO68NaglK5FZdQJeExNsEVAp92o7uF0rM7kOKh46b6 om9K8/A2PkgwYgTYS9q3pu7rGY4jd3HFyXRc33PJ9rp18oO+yvvCKpnAZuuqOYYL ECTQV6nL9FzL4w== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:34 2025 by rpki-client