This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json) Hash identifier: ZoRpmTiQbuY4aCTH3sSTAHrUxGF8Wo7h7QwJP6LOc6I= Subject key identifier: 78:23:19:5B:05:C9:AA:7A:0F:0D:E2:00:FE:A9:CA:A8:80:4F:EA:6A Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8 Certificate serial: 019B3F482788A6EE288C7D6C4AC60B416597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft Manifest number: 1302 Signing time: Sun 21 Dec 2025 05:00:51 +0000 Manifest this update: Sun 21 Dec 2025 05:00:51 +0000 Manifest next update: Mon 22 Dec 2025 05:00:51 +0000 Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: rhGbGU/UKl/RNgLVsuFXxaGqosXfETEmKHMzcOM+rIk=) 2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:27:88:a6:ee:28:8c:7d:6c:4a:c6:0b:41:65:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8 Validity Not Before: Dec 21 05:00:51 2025 GMT Not After : Dec 22 05:00:51 2025 GMT Subject: CN=7823195b05c9aa7a0f0de200fea9caa8804fea6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:74:96:04:f2:d3:7d:1a:95:a9:5b:47:e0: 41:be:c5:06:f9:ab:ef:0c:dd:b9:0d:f5:59:03:38: c8:48:a7:a0:c7:e8:f7:fa:bd:e0:43:74:f2:18:29: 9b:bc:d2:d7:7a:aa:b1:c5:7e:68:af:7c:59:a7:29: 58:b8:8d:4c:09:d3:74:64:45:a2:c3:3a:59:f2:ca: 74:75:24:7e:76:03:97:73:18:ff:88:58:f0:ef:f0: db:ca:bc:86:da:b9:62:df:ca:1e:3a:86:bf:1d:d1: 09:72:d9:5a:51:7b:f0:23:2e:4e:bc:97:d5:bd:88: c6:71:57:fb:ba:af:93:30:a1:88:9a:1a:07:9e:84: 54:0a:44:09:16:df:9c:7a:42:23:61:5e:08:2d:ef: 1a:42:1b:5e:bc:0d:f6:4a:d6:0c:09:54:18:8f:57: 60:6c:8e:60:aa:33:2f:7c:a7:f2:6c:a3:3e:0a:20: db:7f:29:b6:03:63:93:a9:52:92:9e:24:e5:60:16: f2:02:a1:9c:2a:06:63:70:d5:1c:99:66:ee:16:1f: 9c:01:0e:a3:c7:06:e4:a3:13:e4:9a:26:1d:68:24: 09:fc:94:67:3f:b0:b0:b9:cf:94:de:67:34:b9:1b: da:b0:ac:f0:53:56:0a:47:e8:b4:51:d8:f6:f0:b2: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:23:19:5B:05:C9:AA:7A:0F:0D:E2:00:FE:A9:CA:A8:80:4F:EA:6A X509v3 Authority Key Identifier: keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ba:1a:f0:c5:16:f6:f0:84:84:e2:b4:26:73:66:cf:8b:3b: 04:0d:51:dc:0d:62:68:1c:b2:cd:a1:ca:13:57:43:db:ac:8a: 58:44:27:cb:3a:1f:c8:68:00:5a:e9:3d:c6:ff:28:e5:a1:e6: 14:97:f4:fa:77:a3:0c:0b:fc:74:eb:52:bb:00:55:31:ca:17: 7b:c5:bd:be:2e:f0:e4:1f:08:7a:56:39:49:23:6b:24:0e:63: b8:21:81:94:24:5c:4b:db:a8:17:7e:8f:f5:ab:b0:8f:09:7d: dc:28:84:84:23:2c:37:70:9e:f1:d8:46:5a:b4:dd:d2:ed:23: bc:7a:ab:dc:6c:10:b8:ac:76:4e:48:a5:4a:51:e7:33:c8:8a: 3d:84:5f:87:f4:0b:1e:3d:e2:41:ac:2b:d8:e6:3b:17:58:86: d2:62:94:22:e5:83:6a:79:e4:98:b8:e7:26:c9:01:12:c2:95: 00:01:35:52:25:1e:ee:bf:e7:da:e2:b9:6f:b8:5f:68:7d:11: e5:78:28:78:f1:43:a6:bd:5a:b1:ff:89:bb:23:c9:b8:22:bf: 22:99:87:0a:82:ed:5f:46:10:e7:cb:36:a0:ab:84:bd:52:73: bc:6f:47:dd:06:d8:9d:c6:a2:ac:d8:ed:44:31:12:dc:15:e5: c6:73:9f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SCeIpu4ojH1sSsYLQWWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx OTJkYTgwHhcNMjUxMjIxMDUwMDUxWhcNMjUxMjIyMDUwMDUxWjAzMTEwLwYDVQQD Eyg3ODIzMTk1YjA1YzlhYTdhMGYwZGUyMDBmZWE5Y2FhODgwNGZlYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEZ0lgTy030alalbR+BBvsUG+avv DN25DfVZAzjISKegx+j3+r3gQ3TyGCmbvNLXeqqxxX5or3xZpylYuI1MCdN0ZEWi wzpZ8sp0dSR+dgOXcxj/iFjw7/DbyryG2rli38oeOoa/HdEJctlaUXvwIy5OvJfV vYjGcVf7uq+TMKGImhoHnoRUCkQJFt+cekIjYV4ILe8aQhtevA32StYMCVQYj1dg bI5gqjMvfKfybKM+CiDbfym2A2OTqVKSniTlYBbyAqGcKgZjcNUcmWbuFh+cAQ6j xwbkoxPkmiYdaCQJ/JRnP7Cwuc+U3mc0uRvasKzwU1YKR+i0Udj28LKSwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgjGVsFyap6Dw3iAP6pyqiAT+pqMB8GA1UdIwQY MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLoa8MUW 9vCEhOK0JnNmz4s7BA1R3A1iaByyzaHKE1dD26yKWEQnyzofyGgAWuk9xv8o5aHm FJf0+nejDAv8dOtSuwBVMcoXe8W9vi7w5B8IelY5SSNrJA5juCGBlCRcS9uoF36P 9auwjwl93CiEhCMsN3Ce8dhGWrTd0u0jvHqr3GwQuKx2TkilSlHnM8iKPYRfh/QL Hj3iQawr2OY7F1iG0mKUIuWDannkmLjnJskBEsKVAAE1UiUe7r/n2uK5b7hfaH0R 5XgoePFDpr1asf+JuyPJuCK/IpmHCoLtX0YQ58s2oKuEvVJzvG9H3QbYncairNjt RDES3BXlxnOfCw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:19 2025 by rpki-client