This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: ghjMFDudmojRA057xUhmmx+4TI8WeRfr30NLZ5EgEpw= Subject key identifier: C7:69:E3:BA:94:A5:99:05:78:6C:AD:46:BC:21:6F:48:D4:29:4E:53 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B17CDAA4B42354EE784B08F89C79C2292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 074F Signing time: Sat 13 Dec 2025 13:01:53 +0000 Manifest this update: Sat 13 Dec 2025 13:01:53 +0000 Manifest next update: Sun 14 Dec 2025 13:01:53 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Mn9n3/cDcA7vPiyXtPO/AD99ux0vQCeHIidolEVJo+8=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 13:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cd:aa:4b:42:35:4e:e7:84:b0:8f:89:c7:9c:22:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 13 13:01:53 2025 GMT Not After : Dec 14 13:01:53 2025 GMT Subject: CN=c769e3ba94a59905786cad46bc216f48d4294e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:2a:51:b8:68:d2:5a:6c:2c:1a:e8:a7:37: 63:1e:4e:8f:a7:98:e4:c6:3e:ac:58:1c:a8:a6:6f: 70:bc:c9:f2:c2:04:27:a6:7e:40:d7:da:15:65:87: 4a:da:b7:8f:8a:97:c8:56:96:4e:7a:43:e4:42:1d: d3:eb:32:8d:e7:4c:c1:45:a3:a5:0c:82:cc:9c:e9: 87:33:34:89:0e:30:ca:8b:08:2d:95:76:2b:07:55: b4:1b:c5:19:68:57:4c:d8:c8:ae:fc:e4:24:e6:71: e3:dc:cc:0f:64:6b:04:17:b1:59:23:45:49:02:da: 7b:8d:13:4c:eb:10:de:0d:fb:8a:30:57:04:8f:86: 68:5f:e7:b8:1a:18:94:03:0e:73:1a:74:ec:cb:54: a6:a5:f1:3e:14:c4:ed:29:da:30:e0:84:d4:15:45: 58:a0:13:e5:91:77:ec:5d:58:45:44:47:03:de:36: 54:38:9c:95:c5:ee:37:15:8c:a7:55:20:3c:3d:a7: a5:f6:cb:f8:46:a9:37:14:d4:49:5d:a3:28:6a:b6: 8f:1f:35:de:6c:ff:ed:fd:54:8e:ad:94:c8:38:68: 92:2b:bb:f7:9a:09:48:65:b8:9e:92:19:0e:4c:f2: 91:6f:83:6c:6f:e6:17:ed:70:92:8c:48:ad:f3:35: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:69:E3:BA:94:A5:99:05:78:6C:AD:46:BC:21:6F:48:D4:29:4E:53 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4d:3e:53:4b:97:00:c6:56:d3:d2:38:e3:e7:ef:4b:c0:1d: 39:82:6b:80:dc:3f:d2:30:d0:e0:fe:1c:25:0a:0d:25:5a:54: 5a:de:7f:5b:5f:11:7e:98:77:ac:43:88:8e:5d:8e:1c:bf:2b: 85:35:0b:40:b6:55:d7:d2:26:34:75:ad:84:86:25:ee:2f:9a: c3:c2:27:da:d8:44:95:ce:e9:4a:c7:eb:38:39:45:fa:d8:00: 5c:be:0f:70:42:55:70:57:5a:08:6a:78:1d:64:fb:d5:5c:64: d5:13:11:e6:e4:c7:da:b5:d1:44:d8:bd:b9:25:17:45:96:45: 84:41:96:71:1c:b8:5e:0f:0d:48:ea:bc:52:5d:35:57:31:68: d1:28:57:fd:03:91:9d:c9:18:a0:80:fa:f9:9d:a1:ec:34:4f: 64:e6:48:a4:a7:70:e9:32:bc:93:ed:da:c9:0d:46:be:4f:0f: 9f:ba:77:56:fa:aa:84:10:73:78:de:f3:5f:dc:d1:96:a2:35: cc:75:9f:16:31:ee:ac:3c:8c:1a:a2:0c:fd:a9:f3:e4:41:d4: 29:20:a5:53:67:55:71:0a:25:19:04:0c:75:0d:75:26:70:14: 6f:2c:93:37:80:80:da:33:56:91:f3:0b:13:4b:5f:7c:24:c3: 5d:86:b5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzapLQjVO54Swj4nHnCKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjEzMTMwMTUzWhcNMjUxMjE0MTMwMTUzWjAzMTEwLwYDVQQD EyhjNzY5ZTNiYTk0YTU5OTA1Nzg2Y2FkNDZiYzIxNmY0OGQ0Mjk0ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT8qUbho0lpsLBropzdjHk6Pp5jk xj6sWByopm9wvMnywgQnpn5A19oVZYdK2rePipfIVpZOekPkQh3T6zKN50zBRaOl DILMnOmHMzSJDjDKiwgtlXYrB1W0G8UZaFdM2Miu/OQk5nHj3MwPZGsEF7FZI0VJ Atp7jRNM6xDeDfuKMFcEj4ZoX+e4GhiUAw5zGnTsy1SmpfE+FMTtKdow4ITUFUVY oBPlkXfsXVhFREcD3jZUOJyVxe43FYynVSA8Pael9sv4Rqk3FNRJXaMoaraPHzXe bP/t/VSOrZTIOGiSK7v3mglIZbiekhkOTPKRb4Nsb+YX7XCSjEit8zVZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdp47qUpZkFeGytRrwhb0jUKU5TMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAak0+U0uX AMZW09I44+fvS8AdOYJrgNw/0jDQ4P4cJQoNJVpUWt5/W18Rfph3rEOIjl2OHL8r hTULQLZV19ImNHWthIYl7i+aw8In2thElc7pSsfrODlF+tgAXL4PcEJVcFdaCGp4 HWT71Vxk1RMR5uTH2rXRRNi9uSUXRZZFhEGWcRy4Xg8NSOq8Ul01VzFo0ShX/QOR nckYoID6+Z2h7DRPZOZIpKdw6TK8k+3ayQ1Gvk8Pn7p3VvqqhBBzeN7zX9zRlqI1 zHWfFjHurDyMGqIM/anz5EHUKSClU2dVcQolGQQMdQ11JnAUbyyTN4CA2jNWkfML E0tffCTDXYa11A== -----END CERTIFICATE-----Generated at Sat Dec 13 22:18:00 2025 by rpki-client