This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json) Hash identifier: jyPd5I6LpuxgnUqLs1Z8tbiaJPWeNhtIgT19tRKGPqM= Subject key identifier: BE:99:C1:FC:CE:A1:54:A3:8A:1D:8B:65:F9:19:CC:C4:5F:06:C1:F5 Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33 Certificate serial: 019B1B04C29D2C16012F3704A9AA363B04AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft Manifest number: 10FA Signing time: Sun 14 Dec 2025 04:00:55 +0000 Manifest this update: Sun 14 Dec 2025 04:00:55 +0000 Manifest next update: Mon 15 Dec 2025 04:00:55 +0000 Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=) 2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: g3juj/2WMhI/ATPEdUz0z5eWSpb1QpdEiFH/F+UMWQ8=) 3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=) 4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:c2:9d:2c:16:01:2f:37:04:a9:aa:36:3b:04:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335ca521362226d03c1829003d81d498aa838f33 Validity Not Before: Dec 14 04:00:55 2025 GMT Not After : Dec 15 04:00:55 2025 GMT Subject: CN=be99c1fccea154a38a1d8b65f919ccc45f06c1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:78:0a:03:bb:f2:7b:b5:9a:de:80:61:15: ba:f8:d7:24:01:5a:11:ca:35:70:84:50:36:ba:85: 14:32:6a:db:3d:78:ea:f5:65:91:83:47:95:27:08: 55:f0:df:e5:b2:d9:a2:00:5f:48:fd:ac:4a:16:03: 3d:c5:fc:05:05:5d:02:4e:1b:2f:ae:df:14:9c:0d: 31:15:2e:bc:ab:ba:e9:7d:42:db:83:31:65:49:4d: f7:37:bd:a4:00:11:05:fe:14:d4:b2:c6:b0:1c:5a: e5:2a:0b:89:10:69:ad:a4:10:1d:1d:90:dd:42:49: 8b:c7:4f:68:75:fe:e1:42:ab:a7:e5:ea:13:cd:41: 3d:c1:cb:ef:44:10:bd:46:27:86:54:30:48:49:0b: 2e:2e:13:e0:1d:9b:47:c0:94:31:64:d3:82:68:fd: fb:2d:b1:db:fa:62:03:64:ce:af:e4:c7:9d:82:4d: ae:00:1c:66:25:0c:e8:e2:94:b8:09:11:06:3b:75: d4:93:e8:62:10:89:3a:0b:78:47:50:12:d8:7f:0c: 63:77:85:02:91:34:f7:4d:81:a5:e1:2f:9f:1d:c6: 61:15:73:16:e7:e0:2e:1b:3d:ab:a4:d4:5a:3f:cd: ee:39:5d:05:c1:ab:04:eb:5d:a3:1d:43:74:f8:0b: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:99:C1:FC:CE:A1:54:A3:8A:1D:8B:65:F9:19:CC:C4:5F:06:C1:F5 X509v3 Authority Key Identifier: keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:73:bc:c2:13:44:e9:ed:91:70:96:2e:cf:c3:20:64:13: d8:ab:0f:91:5b:3e:72:b1:fe:b6:dc:f1:b3:87:08:f7:82:48: 51:e2:72:8d:da:63:b7:c7:9d:55:b5:4c:d5:38:a0:79:5e:47: 0a:95:45:39:43:b7:68:d3:5b:aa:cd:c6:e0:15:af:13:b3:86: 15:30:1a:51:cd:60:ff:d6:4a:ff:d1:98:71:60:1a:07:eb:1d: 86:70:a5:db:3a:46:2f:3c:34:fd:d2:37:94:d6:d5:4b:b1:98: ac:6d:c1:1d:d1:38:0e:e3:03:da:09:fa:17:e7:94:59:ef:ee: 69:28:f8:0f:2c:d3:10:54:27:bd:64:19:28:9d:bf:e9:8b:a0: 02:de:ea:31:4e:08:44:d4:b6:a1:73:7b:9c:c0:bd:6b:65:35: 2c:e2:b2:46:84:45:0b:fa:d2:73:a1:a0:ef:46:95:b3:05:33: c7:92:da:a2:b4:15:d5:c9:82:3f:27:25:af:83:78:63:76:a6: bc:14:72:86:09:66:98:71:b5:fe:fb:d1:db:b3:1e:be:29:82: 1a:56:f3:b6:29:c2:78:93:16:08:32:25:c8:ab:e0:68:10:9d: ff:1e:85:a3:f8:dd:ff:b8:7c:e3:27:63:28:8e:3b:a9:c7:c4: 65:69:cd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBMKdLBYBLzcEqao2OwSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4 MzhmMzMwHhcNMjUxMjE0MDQwMDU1WhcNMjUxMjE1MDQwMDU1WjAzMTEwLwYDVQQD EyhiZTk5YzFmY2NlYTE1NGEzOGExZDhiNjVmOTE5Y2NjNDVmMDZjMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwJ4CgO78nu1mt6AYRW6+NckAVoR yjVwhFA2uoUUMmrbPXjq9WWRg0eVJwhV8N/lstmiAF9I/axKFgM9xfwFBV0CThsv rt8UnA0xFS68q7rpfULbgzFlSU33N72kABEF/hTUssawHFrlKguJEGmtpBAdHZDd QkmLx09odf7hQqun5eoTzUE9wcvvRBC9RieGVDBISQsuLhPgHZtHwJQxZNOCaP37 LbHb+mIDZM6v5Medgk2uABxmJQzo4pS4CREGO3XUk+hiEIk6C3hHUBLYfwxjd4UC kTT3TYGl4S+fHcZhFXMW5+AuGz2rpNRaP83uOV0FwasE612jHUN0+AubywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6ZwfzOoVSjih2LZfkZzMRfBsH1MB8GA1UdIwQY MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPopzvMIT ROntkXCWLs/DIGQT2KsPkVs+crH+ttzxs4cI94JIUeJyjdpjt8edVbVM1TigeV5H CpVFOUO3aNNbqs3G4BWvE7OGFTAaUc1g/9ZK/9GYcWAaB+sdhnCl2zpGLzw0/dI3 lNbVS7GYrG3BHdE4DuMD2gn6F+eUWe/uaSj4DyzTEFQnvWQZKJ2/6YugAt7qMU4I RNS2oXN7nMC9a2U1LOKyRoRFC/rSc6Gg70aVswUzx5LaorQV1cmCPyclr4N4Y3am vBRyhglmmHG1/vvR27MevimCGlbztinCeJMWCDIlyKvgaBCd/x6Fo/jd/7h84ydj KI47qcfEZWnN+Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:09 2025 by rpki-client