This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json) Hash identifier: 7sc9vxiLoJp34wm0LWhmhyfk8I0SsiEpVC7+F62CtkM= Subject key identifier: 30:C2:1E:F8:95:A1:CC:92:AD:6E:9E:3C:85:07:3C:A6:20:D8:E1:05 Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Certificate serial: 019B3C7EF31D793AE9CCB9F8A205E6DF0E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft Manifest number: 0D08 Signing time: Sat 20 Dec 2025 16:01:51 +0000 Manifest this update: Sat 20 Dec 2025 16:01:51 +0000 Manifest next update: Sun 21 Dec 2025 16:01:51 +0000 Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: h0OgtzIq0f6QgmOgPdTzarVtyXzFqJog83nAAUb7xmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f3:1d:79:3a:e9:cc:b9:f8:a2:05:e6:df:0e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Validity Not Before: Dec 20 16:01:51 2025 GMT Not After : Dec 21 16:01:51 2025 GMT Subject: CN=30c21ef895a1cc92ad6e9e3c85073ca620d8e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:b3:ff:6b:12:34:05:fc:fe:8d:1d:a3:34: d3:a4:77:73:5c:47:da:45:12:83:14:b5:2d:3f:5f: 3b:03:5f:7a:bc:b0:49:3a:ed:34:de:22:60:0d:da: 58:94:b6:e4:31:ff:f8:ac:a0:97:08:6a:9b:67:f6: 13:4e:ad:a8:36:b3:9b:9b:e4:4d:97:74:16:8a:06: 82:3a:1a:a2:f9:db:bf:ee:0c:21:fb:43:e5:ae:76: 93:83:b5:32:98:c3:9b:74:e2:8d:a1:fa:14:09:8b: 58:88:17:fd:15:8d:37:97:d9:e7:af:d6:61:c1:dd: 5e:c3:a0:27:01:1b:3d:d5:68:a7:b1:ad:85:22:f9: 10:f3:e5:db:19:4e:f3:ba:5e:35:14:e7:05:1f:a2: a3:74:7b:db:1a:5a:91:5e:1b:17:25:10:b7:93:bc: d1:0b:a9:8c:00:3c:ec:54:69:c2:5d:ee:08:f5:d5: a1:2c:6f:90:e5:d8:a2:49:c0:ec:62:31:e0:c4:e2: 03:fb:80:1d:2d:d2:e5:28:48:ad:90:6f:2c:06:83: c2:62:b7:44:37:7d:80:f8:e1:0e:22:b3:5a:49:2a: 37:e3:b7:e3:a4:cc:96:9c:b6:a2:92:7a:c0:f5:ff: 98:55:4b:09:ca:c5:6f:68:57:a8:2f:5f:c3:d4:0d: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C2:1E:F8:95:A1:CC:92:AD:6E:9E:3C:85:07:3C:A6:20:D8:E1:05 X509v3 Authority Key Identifier: keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cc:99:00:4e:2b:44:a3:f2:12:e6:ab:f9:0a:9b:d4:7c:32: e0:43:05:4e:a4:f9:8f:ee:bf:56:ac:34:98:82:cf:b0:26:a0: ed:30:be:9c:3d:51:bb:8f:f4:a9:b4:30:60:33:ae:86:60:24: 2d:75:2b:47:b6:ef:f6:7a:cd:a8:2c:1c:5d:1f:6e:e7:12:e4: 1e:a8:e7:f7:ef:a7:5e:76:1f:b4:62:06:ee:e9:ba:c5:20:5d: bc:34:ef:01:b2:b0:60:2e:99:5e:52:e5:67:56:0d:c0:cd:69: c6:cd:b1:51:cf:72:61:9d:b4:40:7e:b4:32:0b:f8:91:88:a5: 3f:0e:78:33:c8:0e:af:b6:19:26:d6:51:78:d3:e4:a8:5b:c5: f9:00:c2:b7:c0:7c:3a:89:36:2b:87:7d:f2:43:fc:f7:a7:fa: 77:9d:e6:0b:32:2c:99:75:b7:39:34:0d:27:a2:b7:11:23:60: 44:2c:a1:0c:df:85:b3:27:85:63:30:01:65:1b:ba:ec:c8:39: cd:59:8c:30:39:81:07:1c:c0:57:dc:82:39:87:31:16:3a:73: d6:87:46:29:d4:3d:d8:f4:10:25:d7:bd:be:a8:1d:79:f7:4e: 15:3d:da:df:57:0b:60:e8:e7:11:57:01:5a:11:87:43:9b:68: df:ea:da:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvMdeTrpzLn4ogXm3w4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw MzljNGUwHhcNMjUxMjIwMTYwMTUxWhcNMjUxMjIxMTYwMTUxWjAzMTEwLwYDVQQD EygzMGMyMWVmODk1YTFjYzkyYWQ2ZTllM2M4NTA3M2NhNjIwZDhlMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrez/2sSNAX8/o0dozTTpHdzXEfa RRKDFLUtP187A196vLBJOu003iJgDdpYlLbkMf/4rKCXCGqbZ/YTTq2oNrObm+RN l3QWigaCOhqi+du/7gwh+0PlrnaTg7UymMObdOKNofoUCYtYiBf9FY03l9nnr9Zh wd1ew6AnARs91Winsa2FIvkQ8+XbGU7zul41FOcFH6KjdHvbGlqRXhsXJRC3k7zR C6mMADzsVGnCXe4I9dWhLG+Q5diiScDsYjHgxOID+4AdLdLlKEitkG8sBoPCYrdE N32A+OEOIrNaSSo347fjpMyWnLaiknrA9f+YVUsJysVvaFeoL1/D1A3cnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDCHviVocySrW6ePIUHPKYg2OEFMB8GA1UdIwQY MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMyZAE4r RKPyEuar+Qqb1Hwy4EMFTqT5j+6/Vqw0mILPsCag7TC+nD1Ru4/0qbQwYDOuhmAk LXUrR7bv9nrNqCwcXR9u5xLkHqjn9++nXnYftGIG7um6xSBdvDTvAbKwYC6ZXlLl Z1YNwM1pxs2xUc9yYZ20QH60Mgv4kYilPw54M8gOr7YZJtZReNPkqFvF+QDCt8B8 Ook2K4d98kP896f6d53mCzIsmXW3OTQNJ6K3ESNgRCyhDN+FsyeFYzABZRu67Mg5 zVmMMDmBBxzAV9yCOYcxFjpz1odGKdQ92PQQJde9vqgdefdOFT3a31cLYOjnEVcB WhGHQ5to3+rapg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:29:56 2025 by rpki-client