This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: gMpXpFQa6ySd1k6B/ONrnx5PXcXh5INnBUWLGEIkEAE= Subject key identifier: 40:CC:5F:69:D7:0E:23:54:3E:2E:1B:CA:58:13:FE:6C:D4:29:6E:DA Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019AA1FF69EA212AC643F1954544CC0F01EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0712 Signing time: Thu 20 Nov 2025 16:01:01 +0000 Manifest this update: Thu 20 Nov 2025 16:01:01 +0000 Manifest next update: Fri 21 Nov 2025 16:01:01 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Q6bas5RBRuyvt0p8tnz9+nJY5Eh4zG47YT4e3uodl/M=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 15:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:ff:69:ea:21:2a:c6:43:f1:95:45:44:cc:0f:01:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Nov 20 16:01:01 2025 GMT Not After : Nov 21 16:01:01 2025 GMT Subject: CN=40cc5f69d70e23543e2e1bca5813fe6cd4296eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:81:68:b8:85:71:34:7f:43:cf:05:df:05: b7:d0:76:be:d2:4c:2c:f9:89:f5:d9:f7:c3:ea:48: 1f:f2:c1:4e:2a:53:c4:f8:62:16:0e:90:5b:4d:84: c3:07:04:a4:76:f5:c9:ff:4c:ca:0a:93:fb:42:0b: 7a:95:47:3d:88:94:0e:19:16:82:94:0b:ff:a9:f3: 99:df:f5:d5:97:9a:16:71:af:a8:10:db:43:cd:ab: d2:5f:f3:1d:bc:2d:82:9c:39:03:35:10:2f:58:49: 1e:be:d5:dd:38:8a:60:29:8e:2b:66:af:e8:83:b6: b2:80:17:8e:ca:f0:92:25:36:62:ee:01:36:9e:04: 67:05:9d:5f:84:12:78:fc:c8:ae:16:b8:ce:7c:c2: 19:c9:19:07:ed:be:c3:c2:ff:84:8d:8e:01:d3:fb: ca:70:fb:4e:dc:de:75:b7:6f:69:94:25:14:d7:29: e4:a3:ab:0f:bc:a5:4e:34:67:b2:3b:8b:42:37:04: 7f:82:32:45:d9:da:f7:7f:41:36:e5:a6:db:39:80: 3e:1d:9d:f9:f7:92:a2:34:3c:2e:7c:c2:f8:31:23: da:76:9f:99:59:12:0f:39:93:0a:75:db:0a:11:2a: 26:a7:02:88:b0:64:db:61:c0:6d:84:90:15:7d:17: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:5F:69:D7:0E:23:54:3E:2E:1B:CA:58:13:FE:6C:D4:29:6E:DA X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:d6:77:a2:7b:3e:47:68:f7:7c:cb:0c:fa:84:e7:cd:76: 2c:a2:39:53:3e:9c:c5:73:db:41:f0:0b:95:23:e7:95:cd:5f: c1:f4:0c:90:a7:88:32:0d:fc:cc:96:d5:b6:25:b2:ab:33:ba: 73:74:e9:bf:f8:e0:11:95:43:36:72:e9:49:37:2c:f9:86:73: eb:5a:76:f5:ea:0b:ba:4d:8f:6c:6b:0a:da:cc:9d:71:68:fe: 66:be:e0:c3:40:45:cd:3c:c3:29:84:0f:cb:88:84:a1:e5:19: c7:ca:55:1a:bd:2d:ef:42:85:00:7d:81:2a:0e:36:59:6c:b6: 59:e5:ca:f9:a2:ca:ff:e7:a1:59:d9:3f:0e:6b:82:50:8a:a2: 0f:7f:8b:83:33:e6:36:63:58:6a:bd:4b:db:5c:ed:02:23:e3: ca:5a:b6:39:e6:34:09:1e:8a:af:48:f5:36:fd:12:3e:28:5e: bd:0b:07:8a:06:aa:f5:8e:40:d0:66:3d:49:68:4e:85:21:aa: dc:96:bb:a5:bf:af:79:90:57:59:09:e4:88:24:c7:ff:36:81: cf:63:41:c6:fd:af:04:b0:f4:35:82:00:19:94:f3:42:bf:82: b3:db:df:4a:fd:35:b1:76:e4:fe:07:3e:4e:2c:b8:59:a5:24: 8f:40:4b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqh/2nqISrGQ/GVRUTMDwHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMTIwMTYwMTAxWhcNMjUxMTIxMTYwMTAxWjAzMTEwLwYDVQQD Eyg0MGNjNWY2OWQ3MGUyMzU0M2UyZTFiY2E1ODEzZmU2Y2Q0Mjk2ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoCBaLiFcTR/Q88F3wW30Ha+0kws +Yn12ffD6kgf8sFOKlPE+GIWDpBbTYTDBwSkdvXJ/0zKCpP7Qgt6lUc9iJQOGRaC lAv/qfOZ3/XVl5oWca+oENtDzavSX/MdvC2CnDkDNRAvWEkevtXdOIpgKY4rZq/o g7aygBeOyvCSJTZi7gE2ngRnBZ1fhBJ4/MiuFrjOfMIZyRkH7b7Dwv+EjY4B0/vK cPtO3N51t29plCUU1ynko6sPvKVONGeyO4tCNwR/gjJF2dr3f0E25abbOYA+HZ35 95KiNDwufML4MSPadp+ZWRIPOZMKddsKESompwKIsGTbYcBthJAVfRc+iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDMX2nXDiNUPi4bylgT/mzUKW7aMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa3Wd6J7 Pkdo93zLDPqE5812LKI5Uz6cxXPbQfALlSPnlc1fwfQMkKeIMg38zJbVtiWyqzO6 c3Tpv/jgEZVDNnLpSTcs+YZz61p29eoLuk2PbGsK2sydcWj+Zr7gw0BFzTzDKYQP y4iEoeUZx8pVGr0t70KFAH2BKg42WWy2WeXK+aLK/+ehWdk/DmuCUIqiD3+LgzPm NmNYar1L21ztAiPjylq2OeY0CR6Kr0j1Nv0SPihevQsHigaq9Y5A0GY9SWhOhSGq 3Ja7pb+veZBXWQnkiCTH/zaBz2NBxv2vBLD0NYIAGZTzQr+Cs9vfSv01sXbk/gc+ Tiy4WaUkj0BLww== -----END CERTIFICATE-----Generated at Thu Nov 20 23:51:24 2025 by rpki-client