This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json) Hash identifier: UnxpzGXuEvLchD+ASBfBGtBO32dyBHJuShw5FRvVh7I= Subject key identifier: 55:C5:44:69:A8:9A:F4:60:20:18:88:EE:EA:9C:E6:B1:17:B6:E2:B7 Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Certificate serial: 019B4E84284DABFDAF5D88ED9D00CF388F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft Manifest number: 04A9 Signing time: Wed 24 Dec 2025 04:00:42 +0000 Manifest this update: Wed 24 Dec 2025 04:00:42 +0000 Manifest next update: Thu 25 Dec 2025 04:00:42 +0000 Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=) 2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: R+K3rremVfUOIN97PGnGMEn/+ata3SF3lifdjHD65I4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:28:4d:ab:fd:af:5d:88:ed:9d:00:cf:38:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Validity Not Before: Dec 24 04:00:42 2025 GMT Not After : Dec 25 04:00:42 2025 GMT Subject: CN=55c54469a89af460201888eeea9ce6b117b6e2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:01:6e:89:ac:15:8d:59:f4:ec:a8:3a:ae: 83:39:81:ca:3a:82:d5:e8:fb:c2:b5:05:3d:8f:2c: dc:0f:73:74:88:b4:04:38:65:89:a0:64:f4:24:52: 34:b7:1a:f2:02:29:a6:b4:c3:8f:1c:26:e3:e7:53: de:f6:c3:91:ea:03:3b:c4:41:b2:31:af:69:b2:62: 77:84:0f:b3:70:9f:7e:df:ab:00:e9:8d:25:b6:4c: c4:02:c4:b7:99:14:92:7e:48:eb:d0:a2:b5:f9:1e: 9b:6b:9a:7f:08:d6:ba:8b:b0:10:90:9e:c7:70:2b: ce:7b:08:98:de:cb:2e:51:3c:a1:13:ad:4d:84:19: 0d:4f:eb:30:46:4a:bd:87:6d:e0:2f:6c:2b:bb:93: 30:2f:34:ae:cb:ba:da:79:e5:03:e1:17:0d:dd:58: 57:35:1e:23:eb:f0:86:eb:d2:8c:1e:b8:e2:e8:5d: 8c:b8:c8:f8:93:12:28:71:34:ca:9f:7f:17:d5:48: 13:85:a2:5c:0b:c4:7c:09:9e:1d:f6:30:03:35:09: 5b:53:2d:8d:d9:36:ef:a6:73:af:93:4b:44:05:a9: 99:8c:e8:14:ce:47:09:7c:cc:73:a2:f5:98:d7:84: e9:f3:fc:fa:29:d6:4c:4c:4a:40:c7:fa:23:f4:37: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C5:44:69:A8:9A:F4:60:20:18:88:EE:EA:9C:E6:B1:17:B6:E2:B7 X509v3 Authority Key Identifier: keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e4:5c:32:b1:30:38:0c:98:a5:39:47:99:6f:12:9c:4c:3b: 64:46:b3:fe:9a:4b:16:2f:8c:f9:d0:41:d4:4b:6d:b3:be:cf: 9a:39:16:e7:6a:55:71:0f:3f:b8:51:9e:ca:59:ef:3f:95:fa: d4:a5:c8:03:f8:e6:99:ea:cc:ef:7a:37:e2:b7:5e:b9:91:8d: 2d:7a:ac:95:7a:43:41:55:9f:38:24:31:c5:15:dd:9e:f3:5d: fa:c6:b0:a4:56:a2:63:1d:d1:16:36:58:fa:f2:1e:a6:b7:99: 97:ee:81:56:b2:d5:f3:ec:81:5d:25:6b:28:12:07:9d:75:f9: 2e:de:dd:5d:8c:b1:b6:88:c0:59:8d:6a:3b:63:ef:e5:42:05: 69:c9:68:07:36:3b:5a:a8:15:ec:4f:81:ad:f5:2a:fd:c8:48: 15:bf:ac:80:8f:79:f6:f9:ca:e4:a7:ad:73:24:f4:bb:33:9b: d0:fc:2b:f3:6d:a3:78:25:bc:c3:ab:3e:27:5e:53:57:20:9f: 7f:01:ea:dc:4d:ae:6d:d2:8f:62:2a:ff:57:e3:8c:b0:4f:7a: fc:f6:d9:06:8f:79:11:20:76:dc:be:3a:35:ad:be:62:55:51: 94:14:f5:a9:b1:b1:62:c7:60:94:1d:a2:a8:79:6e:5c:d8:f1: 17:cb:11:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhChNq/2vXYjtnQDPOI8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy MGU0NTIwHhcNMjUxMjI0MDQwMDQyWhcNMjUxMjI1MDQwMDQyWjAzMTEwLwYDVQQD Eyg1NWM1NDQ2OWE4OWFmNDYwMjAxODg4ZWVlYTljZTZiMTE3YjZlMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZsBbomsFY1Z9OyoOq6DOYHKOoLV 6PvCtQU9jyzcD3N0iLQEOGWJoGT0JFI0txryAimmtMOPHCbj51Pe9sOR6gM7xEGy Ma9psmJ3hA+zcJ9+36sA6Y0ltkzEAsS3mRSSfkjr0KK1+R6ba5p/CNa6i7AQkJ7H cCvOewiY3ssuUTyhE61NhBkNT+swRkq9h23gL2wru5MwLzSuy7raeeUD4RcN3VhX NR4j6/CG69KMHrji6F2MuMj4kxIocTTKn38X1UgThaJcC8R8CZ4d9jADNQlbUy2N 2TbvpnOvk0tEBamZjOgUzkcJfMxzovWY14Tp8/z6KdZMTEpAx/oj9DeNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXFRGmomvRgIBiI7uqc5rEXtuK3MB8GA1UdIwQY MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuRcMrEw OAyYpTlHmW8SnEw7ZEaz/ppLFi+M+dBB1Etts77PmjkW52pVcQ8/uFGeylnvP5X6 1KXIA/jmmerM73o34rdeuZGNLXqslXpDQVWfOCQxxRXdnvNd+sawpFaiYx3RFjZY +vIepreZl+6BVrLV8+yBXSVrKBIHnXX5Lt7dXYyxtojAWY1qO2Pv5UIFacloBzY7 WqgV7E+BrfUq/chIFb+sgI959vnK5KetcyT0uzOb0Pwr822jeCW8w6s+J15TVyCf fwHq3E2ubdKPYir/V+OMsE96/PbZBo95ESB23L46Na2+YlVRlBT1qbGxYsdglB2i qHluXNjxF8sRLA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:06:19 2025 by rpki-client