This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json) Hash identifier: 7xRMBUVZWKLRLtL+6vBnJwS/X3f0Hh9yE6MSLUmB2V4= Subject key identifier: DB:FE:76:15:52:1F:59:23:0D:12:88:FE:18:15:C5:24:5D:31:A8:7C Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Certificate serial: 019B3F1197A3895908AB06461913DFE20BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft Manifest number: 04A1 Signing time: Sun 21 Dec 2025 04:01:16 +0000 Manifest this update: Sun 21 Dec 2025 04:01:16 +0000 Manifest next update: Mon 22 Dec 2025 04:01:16 +0000 Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=) 2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: DhZRYIBmqY3qhcQLJXThOyf4o7ipfkMXaV+3H4lYXUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:97:a3:89:59:08:ab:06:46:19:13:df:e2:0b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Validity Not Before: Dec 21 04:01:16 2025 GMT Not After : Dec 22 04:01:16 2025 GMT Subject: CN=dbfe7615521f59230d1288fe1815c5245d31a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:e5:be:9a:f0:b7:ec:92:39:e9:6b:b1:15: 86:68:f1:4b:92:1a:22:f4:3e:c3:3b:a1:ad:1a:0c: de:4d:a6:cd:3e:5b:ad:1b:a2:91:96:c0:f0:50:12: 13:32:41:fb:77:20:27:13:5a:99:23:9d:f2:e8:1c: e7:46:1b:25:ba:3f:b6:8e:e5:3f:3a:af:bf:43:5e: b0:ac:68:6d:44:af:38:a5:d2:b2:fa:b9:ed:22:fd: 7f:bb:af:95:7c:c2:70:04:c7:22:19:37:24:9c:7d: 7c:49:2f:f4:b5:6d:9d:00:cb:d6:7a:f9:7c:74:1a: 7b:8d:28:8a:54:aa:83:37:d5:1b:07:d8:13:56:ef: db:91:55:7f:a0:4e:dd:26:d4:93:1e:6f:62:6e:44: 06:64:a4:3c:46:b6:85:59:5a:90:1c:7a:ab:fa:50: 2a:df:4d:86:24:43:81:96:f5:4a:87:4a:90:44:03: f4:5d:f2:b6:f7:6d:20:12:cf:27:4a:67:e1:7c:bd: d8:de:21:e5:26:87:b7:0b:98:60:d7:76:0d:f0:f7: 4e:81:05:ce:57:ce:0d:32:b3:ea:93:c1:4f:a6:12: ca:b3:3d:a6:b0:3f:d9:58:10:dc:ea:a0:8d:d2:f2: 98:d5:e1:f2:08:01:f1:d7:74:48:cc:cf:ea:4b:02: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FE:76:15:52:1F:59:23:0D:12:88:FE:18:15:C5:24:5D:31:A8:7C X509v3 Authority Key Identifier: keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:21:ec:2e:e3:09:c2:93:ae:7f:1f:f5:7b:04:23:67:62: 77:06:cb:13:b9:59:3e:e6:74:0e:d9:2b:38:73:16:83:a1:ce: 2a:39:90:34:ab:5e:97:7b:a8:4f:2b:db:dd:5c:f2:84:48:f3: c1:c9:a9:d4:ad:f1:79:bc:69:54:ac:8e:d1:e5:42:c5:ae:61: 9f:f7:fd:76:20:a6:6f:2d:fc:f1:68:88:3f:ad:a0:44:20:e8: a5:ab:e2:f0:b6:ce:03:0f:a1:b8:88:f3:01:fe:d9:41:c4:79: 1e:84:01:c2:60:ae:1e:c6:21:b1:c2:62:ad:9a:68:1f:db:af: 9c:74:98:f2:86:39:49:44:c5:30:a7:be:b0:68:9d:68:d2:09: 3b:26:a2:84:08:0e:ad:6d:7f:43:44:9b:c2:64:f8:d2:ce:44: 93:14:6d:bf:55:c2:50:18:81:a4:b5:45:0c:23:f0:04:22:56: 38:05:9e:3a:f1:12:e6:f6:3b:90:ca:c2:37:49:dd:3f:76:b2: 4f:b0:e1:61:50:86:09:c0:2f:19:ec:0e:d0:03:48:dd:28:52: 07:89:7e:6e:b7:f5:62:de:94:df:1f:cc:85:cb:59:10:b3:de: d2:6e:e2:52:ed:ef:1b:ae:8a:db:cf:6d:8b:4e:b4:04:92:a8: 4b:ba:99:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZejiVkIqwZGGRPf4gvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy MGU0NTIwHhcNMjUxMjIxMDQwMTE2WhcNMjUxMjIyMDQwMTE2WjAzMTEwLwYDVQQD EyhkYmZlNzYxNTUyMWY1OTIzMGQxMjg4ZmUxODE1YzUyNDVkMzFhODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3lvprwt+ySOelrsRWGaPFLkhoi 9D7DO6GtGgzeTabNPlutG6KRlsDwUBITMkH7dyAnE1qZI53y6BznRhsluj+2juU/ Oq+/Q16wrGhtRK84pdKy+rntIv1/u6+VfMJwBMciGTcknH18SS/0tW2dAMvWevl8 dBp7jSiKVKqDN9UbB9gTVu/bkVV/oE7dJtSTHm9ibkQGZKQ8RraFWVqQHHqr+lAq 302GJEOBlvVKh0qQRAP0XfK2920gEs8nSmfhfL3Y3iHlJoe3C5hg13YN8PdOgQXO V84NMrPqk8FPphLKsz2msD/ZWBDc6qCN0vKY1eHyCAHx13RIzM/qSwJtOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv+dhVSH1kjDRKI/hgVxSRdMah8MB8GA1UdIwQY MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnYh7C7j CcKTrn8f9XsEI2didwbLE7lZPuZ0DtkrOHMWg6HOKjmQNKtel3uoTyvb3VzyhEjz wcmp1K3xebxpVKyO0eVCxa5hn/f9diCmby388WiIP62gRCDopavi8LbOAw+huIjz Af7ZQcR5HoQBwmCuHsYhscJirZpoH9uvnHSY8oY5SUTFMKe+sGidaNIJOyaihAgO rW1/Q0SbwmT40s5EkxRtv1XCUBiBpLVFDCPwBCJWOAWeOvES5vY7kMrCN0ndP3ay T7DhYVCGCcAvGewO0ANI3ShSB4l+brf1Yt6U3x/MhctZELPe0m7iUu3vG66K289t i060BJKoS7qZGg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:02 2025 by rpki-client