This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json) Hash identifier: /zJfPFNW8JUmFjjykH6QsNgepO2+M2NWMNBBdu1WF84= Subject key identifier: 6D:2B:F0:A2:1D:57:BB:72:9D:18:81:49:45:DF:C1:3D:57:4E:6F:3D Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Certificate serial: 019B1EE178A6F75A3B3D6E3945E6725C553E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 22:00:51 +0000 Manifest this update: Sun 14 Dec 2025 22:00:51 +0000 Manifest next update: Mon 15 Dec 2025 22:00:51 +0000 Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: Iob2TKMfOEEF5l64DTgtSvfSv3AG/mWYm8FkD1R1aAM=) 2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:78:a6:f7:5a:3b:3d:6e:39:45:e6:72:5c:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Validity Not Before: Dec 14 22:00:51 2025 GMT Not After : Dec 15 22:00:51 2025 GMT Subject: CN=6d2bf0a21d57bb729d18814945dfc13d574e6f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:20:a6:0c:11:62:46:16:f8:e8:88:76:a5: e4:1c:9e:a5:ee:33:a2:2c:d5:87:e1:05:a7:3c:35: 03:7a:1a:49:a2:5d:39:82:e4:24:68:cc:a5:fd:36: 2d:62:a2:6b:5e:a9:c5:c2:98:f6:b4:9e:f1:d1:d8: 1f:4b:dd:1f:8b:5d:6e:9a:38:df:3a:ec:df:b6:e5: 9a:74:99:8a:d0:7c:ff:d5:0d:10:a1:58:83:22:8b: 0d:2f:9d:c6:a4:ed:bc:6d:5b:ee:3f:2f:08:39:8d: 94:fb:64:b2:c1:48:09:fc:6a:ad:9c:2e:8f:ba:0c: 77:e5:d2:30:cc:71:b2:9a:8b:73:78:08:48:b4:b9: 66:c4:dc:6a:92:4b:00:95:95:e4:45:d3:55:1c:7b: 77:cb:1f:1e:cb:61:a3:b7:7f:28:f1:e7:b6:b8:db: 44:da:63:3f:ac:a0:83:f7:27:01:c1:8c:46:ae:24: a0:e3:d0:40:42:b0:9f:40:7d:fe:25:9d:cd:c0:dd: ad:10:08:7f:df:51:9d:9a:40:1c:a1:d3:d7:4a:d7: 2b:2f:76:44:c1:b8:0c:74:6b:ef:bc:6c:cf:75:2c: 92:e6:bc:9a:c1:4b:d4:24:de:81:5e:9d:9f:0a:94: f0:96:10:64:3b:d0:23:ae:58:f5:96:e0:80:09:96: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2B:F0:A2:1D:57:BB:72:9D:18:81:49:45:DF:C1:3D:57:4E:6F:3D X509v3 Authority Key Identifier: keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:02:18:9c:52:e7:7c:83:35:7d:c3:cf:a8:f8:6a:e0:a4: 28:1f:a6:12:50:ca:2d:db:4c:47:2d:76:e2:d5:4e:4f:64:bd: 44:40:9f:96:d0:d5:55:6b:b4:89:75:8b:ae:52:a0:95:34:ff: 7b:cd:bf:e2:6d:01:d5:ec:50:9d:ac:47:d5:3f:75:ad:c1:22: d0:52:a8:64:eb:f5:9f:98:f6:5c:96:4b:56:d8:27:24:df:f4: fe:37:04:46:59:67:fc:88:cf:ed:7d:03:43:d2:43:54:a6:33: a3:1c:ab:25:c5:f7:95:b9:42:66:5c:15:a9:18:af:5a:20:72: 02:36:af:df:6c:a7:d0:d0:fa:87:47:3e:cb:dc:10:68:25:54: af:7a:d4:bb:5e:b9:1d:3f:ff:79:5c:e2:a1:47:6f:8a:eb:2a: 1b:a1:c4:7d:b2:77:b8:22:f6:b4:0a:bd:e2:41:44:d8:43:fc: 67:d2:64:e1:ae:f9:3b:5d:86:82:51:6a:29:0d:c5:e1:fa:31: fd:53:76:ed:40:a2:cb:16:ed:9f:c6:7c:54:fe:51:e1:16:a5: c0:a7:1d:18:ce:d8:72:09:4a:36:a4:4c:40:83:eb:4d:44:ad: 5a:69:79:78:4f:a5:aa:0c:90:e3:3b:05:f7:0c:ac:ce:1c:03: 78:fc:08:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4Xim91o7PW45ReZyXFU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk OTdjNTAwHhcNMjUxMjE0MjIwMDUxWhcNMjUxMjE1MjIwMDUxWjAzMTEwLwYDVQQD Eyg2ZDJiZjBhMjFkNTdiYjcyOWQxODgxNDk0NWRmYzEzZDU3NGU2ZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUogpgwRYkYW+OiIdqXkHJ6l7jOi LNWH4QWnPDUDehpJol05guQkaMyl/TYtYqJrXqnFwpj2tJ7x0dgfS90fi11umjjf OuzftuWadJmK0Hz/1Q0QoViDIosNL53GpO28bVvuPy8IOY2U+2SywUgJ/GqtnC6P ugx35dIwzHGymotzeAhItLlmxNxqkksAlZXkRdNVHHt3yx8ey2Gjt38o8ee2uNtE 2mM/rKCD9ycBwYxGriSg49BAQrCfQH3+JZ3NwN2tEAh/31GdmkAcodPXStcrL3ZE wbgMdGvvvGzPdSyS5ryawUvUJN6BXp2fCpTwlhBkO9Ajrlj1luCACZa6qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0r8KIdV7tynRiBSUXfwT1XTm89MB8GA1UdIwQY MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6sCGJxS 53yDNX3Dz6j4auCkKB+mElDKLdtMRy124tVOT2S9RECfltDVVWu0iXWLrlKglTT/ e82/4m0B1exQnaxH1T91rcEi0FKoZOv1n5j2XJZLVtgnJN/0/jcERlln/IjP7X0D Q9JDVKYzoxyrJcX3lblCZlwVqRivWiByAjav32yn0ND6h0c+y9wQaCVUr3rUu165 HT//eVzioUdviusqG6HEfbJ3uCL2tAq94kFE2EP8Z9Jk4a75O12GglFqKQ3F4fox /VN27UCiyxbtn8Z8VP5R4RalwKcdGM7YcglKNqRMQIPrTUStWml5eE+lqgyQ4zsF 9wyszhwDePwIHg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:51 2025 by rpki-client