This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json) Hash identifier: cvZWd2whXjAmF/jrJx2XKmsuQLFvfqQ1y3Yu6nPgQZU= Subject key identifier: 54:CD:57:2A:41:BD:BD:5A:FC:1A:D4:02:26:29:E0:24:57:43:57:42 Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Certificate serial: 019B54F4AD97C54A56F60613476841A16CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 10:01:19 +0000 Manifest this update: Thu 25 Dec 2025 10:01:19 +0000 Manifest next update: Fri 26 Dec 2025 10:01:19 +0000 Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: 4MBj1657fZvWiVWNn30eVO10bVipHrbPg8/pPd6TS0w=) 2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:ad:97:c5:4a:56:f6:06:13:47:68:41:a1:6c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Validity Not Before: Dec 25 10:01:19 2025 GMT Not After : Dec 26 10:01:19 2025 GMT Subject: CN=54cd572a41bdbd5afc1ad4022629e02457435742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:ed:cc:24:a3:cb:c6:aa:e6:d8:b6:2f:87: ec:b9:1e:4f:d3:f6:35:ad:40:72:4e:25:58:7b:7a: da:d0:a3:e2:41:43:e9:b6:a5:d2:8d:f1:2b:2e:41: 55:41:90:3c:7a:54:11:1d:10:48:a2:0c:1f:69:a0: ee:24:b0:75:c7:8d:33:2f:26:ac:0d:81:0e:b0:00: fc:c9:c8:bd:f1:76:01:d2:07:c9:84:a8:68:fa:29: ba:9c:bc:0e:ef:ea:78:57:69:fb:ae:05:73:5e:ed: 4f:52:de:bc:84:ea:b6:9e:17:36:10:53:91:2c:17: 47:c7:9c:7c:28:e8:bc:56:62:21:c5:7e:d6:6e:01: 01:05:4b:30:96:8e:f5:fd:db:22:52:f5:fe:cf:62: 47:b6:44:91:6b:59:c5:6d:29:e5:74:81:23:c3:f2: fb:46:d0:e8:3f:69:2c:dc:53:93:3e:19:22:79:5d: b7:bd:17:a1:da:fb:a6:82:cd:d8:e7:e7:cf:95:e7: 68:83:ec:ff:ec:f5:f7:10:ff:4f:b4:09:4c:e1:c0: 96:0d:3a:e4:ac:17:17:98:68:a5:50:45:67:87:0a: bd:4a:67:fb:64:63:62:bf:92:2c:35:2a:d5:d4:c8: c3:ee:34:a7:f1:2d:3c:c3:10:82:4a:74:34:8f:27: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:57:2A:41:BD:BD:5A:FC:1A:D4:02:26:29:E0:24:57:43:57:42 X509v3 Authority Key Identifier: keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:41:f6:00:9e:f5:b3:d2:65:d4:eb:2a:4a:3c:40:28:76:25: 68:04:50:68:5d:83:35:56:7b:a2:7e:90:09:a5:8a:1d:87:b1: d9:12:52:1c:b0:9b:e9:a6:35:68:64:88:38:d6:d6:cc:c2:b2: 48:3c:62:33:b7:a6:e8:94:72:48:82:96:99:96:a2:33:e8:00: 37:54:6f:e4:9a:84:c7:0e:26:75:0c:43:9e:ee:7d:71:9a:e8: 90:9b:1e:2b:b8:1c:96:15:1f:e7:16:49:fe:44:34:7b:27:65: 51:1d:2e:9b:3e:60:5d:1e:bf:8d:aa:5b:85:e8:8c:95:fa:a5: d5:fe:32:b8:88:4d:a1:32:fe:a3:57:2c:ff:e6:0c:d2:d9:09: 2f:42:ba:17:88:3c:eb:50:a4:82:a7:6e:05:b4:15:6b:42:48: eb:0a:13:d7:85:92:cc:3c:61:e9:45:44:20:e0:ac:cb:7e:ad: 05:9e:ae:cf:ee:3e:de:05:07:26:38:ac:ae:b6:f4:0c:ee:40: f2:64:3c:26:f4:5c:48:11:d8:60:95:34:7e:9b:81:a0:9b:ff: d8:9d:fa:05:f6:5f:5e:b9:91:f2:0b:b4:52:4e:5b:0a:d9:7a: a8:15:be:fe:5d:63:55:aa:6d:b8:24:ce:96:f7:82:9d:ee:f2: f1:42:a3:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9K2XxUpW9gYTR2hBoWzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk Y2MwOWEwHhcNMjUxMjI1MTAwMTE5WhcNMjUxMjI2MTAwMTE5WjAzMTEwLwYDVQQD Eyg1NGNkNTcyYTQxYmRiZDVhZmMxYWQ0MDIyNjI5ZTAyNDU3NDM1NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcTtzCSjy8aq5ti2L4fsuR5P0/Y1 rUByTiVYe3ra0KPiQUPptqXSjfErLkFVQZA8elQRHRBIogwfaaDuJLB1x40zLyas DYEOsAD8yci98XYB0gfJhKho+im6nLwO7+p4V2n7rgVzXu1PUt68hOq2nhc2EFOR LBdHx5x8KOi8VmIhxX7WbgEBBUswlo71/dsiUvX+z2JHtkSRa1nFbSnldIEjw/L7 RtDoP2ks3FOTPhkieV23vReh2vumgs3Y5+fPledog+z/7PX3EP9PtAlM4cCWDTrk rBcXmGilUEVnhwq9Smf7ZGNiv5IsNSrV1MjD7jSn8S08wxCCSnQ0jyckowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTNVypBvb1a/BrUAiYp4CRXQ1dCMB8GA1UdIwQY MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1 LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEH2AJ71 s9Jl1OsqSjxAKHYlaARQaF2DNVZ7on6QCaWKHYex2RJSHLCb6aY1aGSIONbWzMKy SDxiM7em6JRySIKWmZaiM+gAN1Rv5JqExw4mdQxDnu59cZrokJseK7gclhUf5xZJ /kQ0eydlUR0umz5gXR6/japbheiMlfql1f4yuIhNoTL+o1cs/+YM0tkJL0K6F4g8 61CkgqduBbQVa0JI6woT14WSzDxh6UVEIOCsy36tBZ6uz+4+3gUHJjisrrb0DO5A 8mQ8JvRcSBHYYJU0fpuBoJv/2J36BfZfXrmR8gu0Uk5bCtl6qBW+/l1jVaptuCTO lveCne7y8UKjrA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:20:24 2025 by rpki-client