This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json) Hash identifier: IXHYBvAEs5hWvBSvFdslNNLxoefj7lrrW8uGjuPrXp4= Subject key identifier: 1D:6D:13:86:0E:13:35:12:0A:3E:D0:E3:9D:C2:3E:E9:2C:CB:3C:C6 Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Certificate serial: 019B3F4856543F226735C506A120F277B668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft Manifest number: 169E Signing time: Sun 21 Dec 2025 05:01:03 +0000 Manifest this update: Sun 21 Dec 2025 05:01:03 +0000 Manifest next update: Mon 22 Dec 2025 05:01:03 +0000 Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=) 2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: +TwTSuo66NcwQGAM6UDBJoxUsHptEN2i5AZFZtRR9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:56:54:3f:22:67:35:c5:06:a1:20:f2:77:b6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154 Validity Not Before: Dec 21 05:01:03 2025 GMT Not After : Dec 22 05:01:03 2025 GMT Subject: CN=1d6d13860e1335120a3ed0e39dc23ee92ccb3cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:96:61:a9:54:bf:89:94:8d:d1:c9:e3:21: ca:02:4a:5c:36:31:27:46:f2:7b:cb:7f:01:26:bc: 88:65:90:c8:ff:be:1e:b5:34:b3:19:1e:e8:9d:6c: 9c:67:09:0c:36:f8:db:a7:1b:2c:b3:7d:1c:f5:45: 22:31:17:83:9c:27:f4:69:0d:52:a8:77:2a:0a:d7: 4b:77:9a:c5:ce:f2:21:68:7b:7c:e0:8c:f0:93:2f: 0f:80:30:4a:fc:2b:2d:0d:b2:bf:ec:d0:10:5e:4b: 2f:9c:35:f1:ec:9e:d1:1f:27:98:85:99:40:5d:47: c4:c4:99:17:30:fe:a4:8f:b6:bf:82:3e:5c:a2:68: da:07:ca:6f:ca:a8:ee:8a:0e:32:c3:0f:6e:53:44: 6f:23:28:9d:32:23:7f:5c:47:db:69:b0:80:ea:d8: b7:ea:d5:0b:93:81:f5:53:3f:da:f7:da:03:99:00: df:47:61:d4:c9:e2:68:c0:ae:45:dc:7f:94:9d:26: 16:71:00:fe:ff:6a:4e:18:0a:a5:3a:db:86:7c:c6: 70:ea:a3:c4:20:18:32:6b:28:25:d9:0b:67:42:72: 4d:8d:a8:c9:9f:b0:28:c4:7b:9a:2b:f9:c5:ee:c7: f0:55:8e:5f:cd:65:ef:5d:02:be:cd:dc:ff:d0:23: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6D:13:86:0E:13:35:12:0A:3E:D0:E3:9D:C2:3E:E9:2C:CB:3C:C6 X509v3 Authority Key Identifier: keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2e:54:4d:70:06:d9:5b:5c:63:5e:fe:8a:6a:a3:b4:cd:97: 0d:a4:45:95:a9:65:5b:30:31:d7:87:cc:6a:3a:75:e5:f7:56: 6c:b9:1c:e7:1a:aa:7c:7f:03:39:e9:47:81:ce:a7:b9:aa:82: 72:84:36:a0:4a:a3:c1:34:b9:db:4f:e3:a9:3b:11:cb:8e:67: f3:74:49:0b:a2:84:13:d0:82:62:df:5b:01:3f:b3:6c:4b:62: e0:a0:ec:23:e2:29:4d:1c:e6:be:54:f1:7a:98:ec:0d:bb:56: 05:10:5f:ed:29:8d:fa:7b:7d:6b:92:2a:d9:77:a4:54:3a:50: 5a:94:c4:aa:de:cf:91:fa:25:60:f3:0c:46:2b:ca:ae:39:57: ae:26:ac:de:b2:71:c5:a3:d7:f8:8e:3f:f8:54:65:57:1d:9c: b6:67:22:e2:4c:58:e9:29:7f:5a:ae:4b:44:dc:cc:cf:67:90: 3e:0e:c8:9b:8d:72:5a:c0:8a:63:01:8b:3e:96:a2:e1:7f:c2: 00:f6:b5:76:9f:c8:58:13:81:e9:b3:06:5a:f9:3f:86:28:e6: 0a:92:ce:9a:8b:cc:6b:20:d5:17:23:c9:7d:b5:19:d8:86:19: 22:11:59:ba:2c:21:77:94:f3:36:ab:4d:9b:7d:a4:fe:10:95: 8d:2d:4a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFZUPyJnNcUGoSDyd7ZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWUzOTk5ODRkNzM3NGIyYThlMGFmNzJkMmJmY2YxMDVj ODYxNTQwHhcNMjUxMjIxMDUwMTAzWhcNMjUxMjIyMDUwMTAzWjAzMTEwLwYDVQQD EygxZDZkMTM4NjBlMTMzNTEyMGEzZWQwZTM5ZGMyM2VlOTJjY2IzY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLCWYalUv4mUjdHJ4yHKAkpcNjEn RvJ7y38BJryIZZDI/74etTSzGR7onWycZwkMNvjbpxsss30c9UUiMReDnCf0aQ1S qHcqCtdLd5rFzvIhaHt84Izwky8PgDBK/CstDbK/7NAQXksvnDXx7J7RHyeYhZlA XUfExJkXMP6kj7a/gj5comjaB8pvyqjuig4yww9uU0RvIyidMiN/XEfbabCA6ti3 6tULk4H1Uz/a99oDmQDfR2HUyeJowK5F3H+UnSYWcQD+/2pOGAqlOtuGfMZw6qPE IBgyaygl2QtnQnJNjajJn7AoxHuaK/nF7sfwVY5fzWXvXQK+zdz/0COPHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1tE4YOEzUSCj7Q453CPuksyzzGMB8GA1UdIwQY MBaAFDOuOZmE1zdLKo4K9y0r/PEFyGFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMt MWE4ZGFmZjExZTBjLzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82Mjg0NmUtMDE4OS00NjhkLWE4ZDMtMWE4ZGFmZjExZTBj LzEvTTY0NW1ZVFhOMHNxamdyM0xTdjg4UVhJWVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi5UTXAG 2VtcY17+imqjtM2XDaRFlallWzAx14fMajp15fdWbLkc5xqqfH8DOelHgc6nuaqC coQ2oEqjwTS520/jqTsRy45n83RJC6KEE9CCYt9bAT+zbEti4KDsI+IpTRzmvlTx epjsDbtWBRBf7SmN+nt9a5Iq2XekVDpQWpTEqt7PkfolYPMMRivKrjlXrias3rJx xaPX+I4/+FRlVx2ctmci4kxY6Sl/Wq5LRNzMz2eQPg7Im41yWsCKYwGLPpai4X/C APa1dp/IWBOB6bMGWvk/hijmCpLOmovMayDVFyPJfbUZ2IYZIhFZuiwhd5TzNqtN m32k/hCVjS1KnA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:29 2025 by rpki-client