This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json) Hash identifier: h/Cp3dQXru420QxvoKfy9KjVeQVEoVfJ0IGQFWwS54w= Subject key identifier: F1:44:70:06:C1:A4:16:33:48:0A:1B:9F:77:83:DC:6C:85:6A:AB:04 Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33 Certificate serial: 019B0F6E516941506A67FC5B112185C49BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft Manifest number: 10F4 Signing time: Thu 11 Dec 2025 22:00:46 +0000 Manifest this update: Thu 11 Dec 2025 22:00:46 +0000 Manifest next update: Fri 12 Dec 2025 22:00:46 +0000 Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=) 2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: 06d77FRH75bDlHuIm9Kd2tltln5c6WKCmoMvkA99Svk=) 3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=) 4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:51:69:41:50:6a:67:fc:5b:11:21:85:c4:9b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335ca521362226d03c1829003d81d498aa838f33 Validity Not Before: Dec 11 22:00:46 2025 GMT Not After : Dec 12 22:00:46 2025 GMT Subject: CN=f1447006c1a41633480a1b9f7783dc6c856aab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:58:61:3f:51:67:9f:d6:08:c8:60:08:df: b1:10:f5:e9:92:50:43:48:91:27:35:54:ff:96:f7: df:37:6c:39:4c:33:fc:06:1c:4b:05:8e:d1:2d:9c: 19:7c:5a:40:a4:29:8d:2b:58:a4:cd:f3:90:d0:6f: cf:c4:34:dc:07:23:c8:c3:9a:0b:ee:07:4b:fe:54: d2:31:af:44:14:74:42:7a:1c:c6:9e:9e:d2:ae:4c: 06:b9:7c:b9:7b:a9:5e:fd:ff:cc:d8:2c:92:f5:bd: db:17:88:96:ce:65:eb:ec:62:66:50:b4:e3:e7:43: a2:4b:cd:95:1c:4b:02:ff:d1:37:15:17:1e:fa:6b: 47:78:30:6c:c3:6d:3a:35:d6:45:86:5a:99:53:c6: 16:21:54:0f:ae:bc:18:68:e5:34:1b:94:22:92:87: 1a:6b:e6:cb:00:fc:78:bd:8e:84:e5:c0:03:8f:c1: b8:d4:59:fe:05:5b:92:47:97:69:2d:98:bf:12:aa: a7:60:95:9a:5e:2c:71:90:7e:61:08:cf:4d:a4:33: ad:9f:ed:08:93:02:ef:6d:59:63:dd:cc:f5:14:ab: f9:f9:06:66:b7:cb:07:35:f5:c7:b0:8d:69:68:e0: 0f:13:18:58:83:e8:04:05:ec:2e:ee:e6:61:35:f0: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:70:06:C1:A4:16:33:48:0A:1B:9F:77:83:DC:6C:85:6A:AB:04 X509v3 Authority Key Identifier: keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:9b:c5:68:b7:d1:6d:3e:b0:83:c5:3b:7a:25:d4:a9:f4: f4:b5:01:de:9d:ce:6d:14:c6:f3:fc:60:6e:5b:e2:fa:11:8d: a0:66:88:54:d0:d9:24:29:c1:6f:ac:13:c8:56:7f:62:fb:7f: aa:4c:4f:3f:20:9c:5c:27:9e:1a:e0:c6:69:af:16:bf:de:35: 41:00:f9:78:a2:a6:7a:78:dd:68:e5:72:6d:03:76:78:63:48: 8f:60:83:5b:8b:c1:35:2d:13:e3:60:99:57:b3:15:b9:62:96: 57:5a:fb:76:31:6e:69:4a:02:d5:49:da:ce:6c:29:2b:72:28: 5c:be:f2:53:8f:13:58:c1:f4:7a:a7:bd:f0:af:46:95:d7:a2: cb:d4:55:17:14:3d:6f:a3:ca:94:ad:b2:1e:7e:8b:6c:25:57: 98:6f:9f:ac:43:5c:0c:cd:c5:20:b6:ac:1f:dd:2f:d6:4d:6d: 8d:c8:05:48:64:c8:ab:c6:d7:c9:38:76:97:6b:3b:57:9e:3a: cf:46:fe:22:dd:62:25:66:c5:d0:8f:32:5b:16:93:84:2c:fc: b0:53:8b:13:1d:78:9b:71:03:6e:7d:19:8a:f0:2f:ab:c4:96: 20:64:4f:68:76:0d:7e:cf:33:22:0e:1f:ca:63:e6:7d:17:e9: 65:d1:e8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPblFpQVBqZ/xbESGFxJu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4 MzhmMzMwHhcNMjUxMjExMjIwMDQ2WhcNMjUxMjEyMjIwMDQ2WjAzMTEwLwYDVQQD EyhmMTQ0NzAwNmMxYTQxNjMzNDgwYTFiOWY3NzgzZGM2Yzg1NmFhYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsJYYT9RZ5/WCMhgCN+xEPXpklBD SJEnNVT/lvffN2w5TDP8BhxLBY7RLZwZfFpApCmNK1ikzfOQ0G/PxDTcByPIw5oL 7gdL/lTSMa9EFHRCehzGnp7SrkwGuXy5e6le/f/M2CyS9b3bF4iWzmXr7GJmULTj 50OiS82VHEsC/9E3FRce+mtHeDBsw206NdZFhlqZU8YWIVQPrrwYaOU0G5Qikoca a+bLAPx4vY6E5cADj8G41Fn+BVuSR5dpLZi/EqqnYJWaXixxkH5hCM9NpDOtn+0I kwLvbVlj3cz1FKv5+QZmt8sHNfXHsI1paOAPExhYg+gEBewu7uZhNfAqCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFEcAbBpBYzSAobn3eD3GyFaqsEMB8GA1UdIwQY MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/GbxWi3 0W0+sIPFO3ol1Kn09LUB3p3ObRTG8/xgblvi+hGNoGaIVNDZJCnBb6wTyFZ/Yvt/ qkxPPyCcXCeeGuDGaa8Wv941QQD5eKKmenjdaOVybQN2eGNIj2CDW4vBNS0T42CZ V7MVuWKWV1r7djFuaUoC1UnazmwpK3IoXL7yU48TWMH0eqe98K9Gldeiy9RVFxQ9 b6PKlK2yHn6LbCVXmG+frENcDM3FILasH90v1k1tjcgFSGTIq8bXyTh2l2s7V546 z0b+It1iJWbF0I8yWxaThCz8sFOLEx14m3EDbn0ZivAvq8SWIGRPaHYNfs8zIg4f ymPmfRfpZdHoNQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:46 2025 by rpki-client