This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json) Hash identifier: ZMJKzf0N8mo4ASTPh6IbHUzuddwrFpM467DkWPZut5M= Subject key identifier: 41:FD:1B:65:EB:85:1A:54:6A:08:B7:AE:BB:FA:ED:41:22:AE:EF:CF Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341 Certificate serial: 019B33B247D1128D989BEB4A95E8494857CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft Manifest number: 1157 Signing time: Thu 18 Dec 2025 23:01:20 +0000 Manifest this update: Thu 18 Dec 2025 23:01:20 +0000 Manifest next update: Fri 19 Dec 2025 23:01:20 +0000 Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=) 2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: lBaz2mKu9NAwxR9fpySdeKk0hb0G5chLdrUoLDb26Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:47:d1:12:8d:98:9b:eb:4a:95:e8:49:48:57:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341 Validity Not Before: Dec 18 23:01:20 2025 GMT Not After : Dec 19 23:01:20 2025 GMT Subject: CN=41fd1b65eb851a546a08b7aebbfaed4122aeefcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:5e:ef:cd:e1:07:b8:f8:30:a3:b1:44:ac: 18:f1:ce:fd:89:49:28:01:52:d9:ae:c2:ab:f3:ed: 4e:37:14:30:30:e9:20:27:91:23:1b:55:92:19:de: cc:1e:7a:0f:e5:39:1f:0c:47:86:17:9e:9e:cb:fc: 05:a2:84:6e:9f:78:bd:eb:f3:f5:3b:f2:be:6a:2f: f3:d1:b5:41:4a:06:eb:55:bb:8e:c4:ee:91:a7:96: f5:0c:3b:e2:74:0c:ab:5c:b4:b5:69:f6:1f:6a:99: 3d:f8:30:30:f7:33:42:99:9f:3c:18:ef:a3:b7:9a: 25:d4:e3:96:ea:3f:ca:ef:d9:ac:57:63:ce:c8:5c: b1:fa:37:ab:c4:ab:3b:1a:df:62:61:c5:54:c1:74: 89:c9:a6:95:28:79:e0:b0:e1:8f:a2:50:2a:45:1a: 30:43:71:3f:2b:00:4f:81:07:60:c2:db:f0:ec:0c: 59:25:16:e7:fa:ee:46:2e:2a:a7:0e:63:6f:ed:30: c8:2a:00:14:a9:8a:52:85:21:80:f9:b8:b2:a6:93: d0:3c:1f:db:86:c0:35:1e:81:78:d1:ac:3a:00:59: bb:8c:28:bd:80:5d:e1:c6:1a:c3:46:4b:77:14:53: d3:5f:8c:3e:cd:f2:9b:fd:14:6a:6f:57:8d:f7:a6: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FD:1B:65:EB:85:1A:54:6A:08:B7:AE:BB:FA:ED:41:22:AE:EF:CF X509v3 Authority Key Identifier: keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b9:83:ea:2f:66:c8:4b:c0:5e:96:d0:01:80:79:e7:9a:7c: ae:5a:bf:8b:0e:d2:ba:19:dd:ef:2e:cc:9f:f9:b0:a7:14:35: a4:84:14:fe:30:fc:ce:7d:89:99:33:1a:67:8a:43:e0:61:3a: 20:5d:1d:2a:6d:01:53:58:89:f7:ad:39:e7:23:fd:53:0b:59: 69:2b:24:87:d5:5b:1e:a0:b6:18:18:97:19:d9:56:e2:98:54: 1d:82:f3:d7:19:b7:ef:c3:95:6d:bb:4a:65:1e:c6:28:f5:30: 14:f1:b9:e9:c0:c6:4b:36:52:4d:84:42:38:76:c6:b6:37:4d: 64:bb:05:17:d0:8c:33:7a:55:4e:b1:53:14:5b:45:f9:0c:e3: fd:49:94:85:41:d5:7c:55:85:f8:b2:24:31:9d:6f:19:f5:a2: cc:47:ed:c1:0c:de:a0:38:83:2d:c4:b9:6e:90:8e:a0:6d:6f: 3c:15:00:8d:8b:ff:8b:90:01:6a:31:f0:14:c7:5b:29:cb:fc: b1:d2:b7:46:1b:37:2a:1d:14:6d:54:88:a7:c5:7d:b6:1a:a0: c7:87:c8:46:84:4f:7e:0a:25:53:4f:16:28:0b:e0:cb:b4:c5: 19:c6:b6:c9:71:41:29:ce:8d:42:ee:ef:cf:c9:d9:9e:f2:f6: c5:26:4f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszskfREo2Ym+tKlehJSFfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5 ZTIzNDEwHhcNMjUxMjE4MjMwMTIwWhcNMjUxMjE5MjMwMTIwWjAzMTEwLwYDVQQD Eyg0MWZkMWI2NWViODUxYTU0NmEwOGI3YWViYmZhZWQ0MTIyYWVlZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocpe783hB7j4MKOxRKwY8c79iUko AVLZrsKr8+1ONxQwMOkgJ5EjG1WSGd7MHnoP5TkfDEeGF56ey/wFooRun3i96/P1 O/K+ai/z0bVBSgbrVbuOxO6Rp5b1DDvidAyrXLS1afYfapk9+DAw9zNCmZ88GO+j t5ol1OOW6j/K79msV2POyFyx+jerxKs7Gt9iYcVUwXSJyaaVKHngsOGPolAqRRow Q3E/KwBPgQdgwtvw7AxZJRbn+u5GLiqnDmNv7TDIKgAUqYpShSGA+biyppPQPB/b hsA1HoF40aw6AFm7jCi9gF3hxhrDRkt3FFPTX4w+zfKb/RRqb1eN96Y8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH9G2XrhRpUagi3rrv67UEiru/PMB8GA1UdIwQY MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7mD6i9m yEvAXpbQAYB555p8rlq/iw7Suhnd7y7Mn/mwpxQ1pIQU/jD8zn2JmTMaZ4pD4GE6 IF0dKm0BU1iJ96055yP9UwtZaSskh9VbHqC2GBiXGdlW4phUHYLz1xm378OVbbtK ZR7GKPUwFPG56cDGSzZSTYRCOHbGtjdNZLsFF9CMM3pVTrFTFFtF+Qzj/UmUhUHV fFWF+LIkMZ1vGfWizEftwQzeoDiDLcS5bpCOoG1vPBUAjYv/i5ABajHwFMdbKcv8 sdK3Rhs3Kh0UbVSIp8V9thqgx4fIRoRPfgolU08WKAvgy7TFGca2yXFBKc6NQu7v z8nZnvL2xSZPVw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:10:02 2025 by rpki-client