This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json) Hash identifier: PXNi+M8/jLHWvvQZFjCpXVuxTQVjyvIa7iBEOhoS8/w= Subject key identifier: 32:59:A0:F1:0A:6F:78:7C:A0:7A:86:59:01:CB:1F:1E:98:87:F5:B8 Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Certificate serial: 019B32D7BA82F8A200D8A94794F9FC822A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft Manifest number: 0E64 Signing time: Thu 18 Dec 2025 19:02:37 +0000 Manifest this update: Thu 18 Dec 2025 19:02:37 +0000 Manifest next update: Fri 19 Dec 2025 19:02:37 +0000 Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: j4PrH+O10D/IvJvaXf+NEo33vxmeiWTT0XbGBzQztIs=) 2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:ba:82:f8:a2:00:d8:a9:47:94:f9:fc:82:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Validity Not Before: Dec 18 19:02:37 2025 GMT Not After : Dec 19 19:02:37 2025 GMT Subject: CN=3259a0f10a6f787ca07a865901cb1f1e9887f5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:04:87:ad:36:24:a1:b1:e1:a6:71:8c:e7: 24:02:84:5b:44:9c:19:e3:d1:5b:4a:9a:e6:5e:3e: 80:8b:91:20:3e:7d:41:56:13:6e:a4:51:4d:3f:c7: e9:38:9b:9f:b8:55:e9:be:8d:8f:21:62:f9:2f:cd: 2b:17:96:50:a5:75:bd:7b:f1:8a:9d:7b:47:b4:c8: 4d:25:1d:f1:a8:5b:16:5b:73:ba:4a:e6:2b:20:50: e9:5d:d0:88:28:ee:68:ca:08:01:56:ab:ed:1f:a3: 88:22:a1:07:18:ee:62:95:b7:5a:03:39:a0:4e:18: 5d:ad:11:a0:a0:2c:52:6c:28:26:05:1f:f8:2f:66: d7:77:e0:01:b0:e5:fb:96:f9:08:8f:39:bf:33:96: c9:97:84:dd:f9:79:98:ac:58:5f:c4:a5:fd:ae:d8: e0:86:c2:5a:06:f8:58:3b:b0:cd:e4:18:7d:69:0c: 33:7a:63:7e:e8:40:62:2f:05:ec:9f:bb:ff:51:25: 6b:eb:e7:29:8b:d6:f9:f3:98:dc:d6:01:2c:77:99: a3:81:df:f2:f7:96:ad:d2:11:fd:92:c5:14:c2:e6: ec:65:c7:b6:3e:db:c2:2c:27:8d:92:34:08:45:27: 12:84:b3:82:fe:a4:45:42:58:b4:6a:ac:37:7e:e0: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:59:A0:F1:0A:6F:78:7C:A0:7A:86:59:01:CB:1F:1E:98:87:F5:B8 X509v3 Authority Key Identifier: keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:9d:6f:49:29:ee:24:ec:59:e1:2e:60:9c:79:9b:53:f5:e0: 12:1a:a6:bb:b5:24:57:28:2a:b7:74:cf:8e:31:d9:e5:d7:6e: be:93:7d:f1:3f:ca:fb:91:7d:bb:94:80:9d:7d:71:56:c1:17: 31:65:53:00:1d:1f:71:2d:15:22:61:7b:0c:3a:a5:f8:8a:30: a7:a5:c2:a8:25:6d:fa:1d:5d:7e:18:ea:b8:97:2c:cc:0d:06: 48:71:91:52:78:0d:6d:38:71:de:b4:71:6a:12:b3:94:a6:68: 05:6d:62:7b:0f:a8:3a:c7:6d:34:9d:b9:56:8b:42:e5:62:d7: 3c:91:ac:02:31:d0:b7:24:ee:eb:7d:da:f7:e8:d7:e6:dc:4d: 27:4c:1e:b3:7e:ea:f1:32:a8:0e:49:4f:9d:9d:62:2c:25:86: 27:e5:0c:60:af:28:48:9f:ad:5c:3f:55:9d:35:c9:81:ef:56: 76:0f:34:64:9f:d1:e3:77:0a:b2:d7:ee:99:b1:bb:c6:74:91: f7:87:a2:ad:93:74:a1:18:e8:49:f8:4b:93:9f:f3:9e:bd:07: c9:bf:1a:e1:e4:31:4f:54:92:68:1a:3e:cd:1b:74:19:c2:dd: 07:fb:eb:98:3f:90:ae:40:44:0c:74:86:de:ff:2d:a4:37:e1: 2a:db:05:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17qC+KIA2KlHlPn8gip3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY5NzdkYzNkNWFjNjNiZGJkNmYwZjhhZDVlNmJhYTdj NTRkODYwHhcNMjUxMjE4MTkwMjM3WhcNMjUxMjE5MTkwMjM3WjAzMTEwLwYDVQQD EygzMjU5YTBmMTBhNmY3ODdjYTA3YTg2NTkwMWNiMWYxZTk4ODdmNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotAEh602JKGx4aZxjOckAoRbRJwZ 49FbSprmXj6Ai5EgPn1BVhNupFFNP8fpOJufuFXpvo2PIWL5L80rF5ZQpXW9e/GK nXtHtMhNJR3xqFsWW3O6SuYrIFDpXdCIKO5oyggBVqvtH6OIIqEHGO5ilbdaAzmg ThhdrRGgoCxSbCgmBR/4L2bXd+ABsOX7lvkIjzm/M5bJl4Td+XmYrFhfxKX9rtjg hsJaBvhYO7DN5Bh9aQwzemN+6EBiLwXsn7v/USVr6+cpi9b585jc1gEsd5mjgd/y 95at0hH9ksUUwubsZce2PtvCLCeNkjQIRScShLOC/qRFQli0aqw3fuBDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJZoPEKb3h8oHqGWQHLHx6Yh/W4MB8GA1UdIwQY MBaAFDNvl33D1axjvb1vD4rV5rqnxU2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjIt M2Y2ODY4YjJkZTk4LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjItM2Y2ODY4YjJkZTk4 LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0J1vSSnu JOxZ4S5gnHmbU/XgEhqmu7UkVygqt3TPjjHZ5dduvpN98T/K+5F9u5SAnX1xVsEX MWVTAB0fcS0VImF7DDql+Iowp6XCqCVt+h1dfhjquJcszA0GSHGRUngNbThx3rRx ahKzlKZoBW1iew+oOsdtNJ25VotC5WLXPJGsAjHQtyTu633a9+jX5txNJ0wes37q 8TKoDklPnZ1iLCWGJ+UMYK8oSJ+tXD9VnTXJge9Wdg80ZJ/R43cKstfumbG7xnSR 94eirZN0oRjoSfhLk5/znr0Hyb8a4eQxT1SSaBo+zRt0GcLdB/vrmD+QrkBEDHSG 3v8tpDfhKtsF1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 04:01:12 2025 by rpki-client