This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: 1p31KKyWYHMVKM1Y5gjaTmRXQm4Hcj1qUVy5JdGnhhs= Subject key identifier: 09:7A:AF:D9:10:F5:48:C4:63:63:8D:79:1E:5A:C1:B3:02:35:3E:48 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B0290679859B1E96BEEF5B1B075B94ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0744 Signing time: Tue 09 Dec 2025 10:02:56 +0000 Manifest this update: Tue 09 Dec 2025 10:02:56 +0000 Manifest next update: Wed 10 Dec 2025 10:02:56 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: fCEh1tB8uMwR2fz7djfakuAorLQ3aN+kuCegh/pAjR0=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:90:67:98:59:b1:e9:6b:ee:f5:b1:b0:75:b9:4a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 9 10:02:56 2025 GMT Not After : Dec 10 10:02:56 2025 GMT Subject: CN=097aafd910f548c463638d791e5ac1b302353e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:57:c0:bf:30:3d:70:0f:b7:07:c1:e0:24: bd:c7:ed:ef:82:eb:00:91:0a:ae:af:47:69:2a:3f: 62:e1:76:8f:4a:7a:e5:ab:72:5c:ca:4e:45:7b:6f: 8a:86:18:5f:53:a4:2e:eb:53:fc:b9:d0:e2:73:99: b9:04:d2:2e:1d:62:fe:aa:53:04:41:c2:ed:08:09: 82:7a:49:db:f3:df:6f:59:0d:6b:59:a2:18:35:63: 75:5e:e5:c3:67:9e:c7:66:64:c9:66:fa:14:9a:1f: dd:10:a7:bd:22:cf:dd:5b:78:40:b4:e1:c3:af:de: 22:c6:14:b0:f7:76:d7:8a:1f:c5:aa:cc:07:9c:1a: f6:24:09:13:cd:79:e5:7c:ef:c7:5a:6c:2a:5e:49: 47:90:5f:e4:f5:22:20:f6:5a:27:aa:05:fe:e5:35: a5:26:97:7f:a6:91:e6:11:d8:c4:e3:56:99:0c:ac: f2:a2:1c:ce:63:f1:5f:a2:c8:09:2f:40:46:4a:52: 2c:15:5f:cc:fd:85:0e:ae:4b:bb:d2:90:88:42:7a: a0:6e:2c:54:51:b9:a8:8e:9c:f7:6c:96:5e:b1:dd: 96:2a:37:de:17:78:53:5c:db:94:8c:99:42:52:17: 6e:6f:f9:9e:46:bd:c5:b7:fa:8b:9c:d8:4b:6b:39: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:AF:D9:10:F5:48:C4:63:63:8D:79:1E:5A:C1:B3:02:35:3E:48 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f3:40:49:2c:b3:70:ce:6a:ad:cf:51:3a:28:9e:55:9e:81: dc:54:74:56:44:40:d8:ba:93:87:bb:d1:9c:d6:57:84:73:cd: 49:fe:c9:32:94:40:a7:92:c1:21:8b:42:ea:56:c7:47:7c:7a: f0:d9:8c:c8:e7:11:17:7a:87:0d:6e:cb:5a:bd:f1:53:7d:ad: 09:8b:17:52:20:74:91:dc:c0:be:96:55:09:35:f2:55:37:07: 2f:fa:ef:5c:c9:1a:45:a9:9d:f1:15:68:b3:6c:81:5b:a5:2b: c2:9c:08:de:2f:58:07:eb:99:33:53:b7:0d:17:e6:a2:7b:ed: d4:cc:6c:ba:e7:74:24:5e:f3:e7:7f:b1:b2:61:2c:74:fe:2e: 5d:38:50:16:28:9e:9e:a6:35:22:05:9b:42:af:29:7a:f5:2d: c4:28:53:11:ed:45:7a:e4:69:22:dd:2a:c8:ba:8f:01:4f:67: 1e:95:ad:94:b0:db:35:6a:a0:90:1f:96:92:0a:91:cd:72:1d: 64:15:5e:e3:be:d2:10:d4:38:93:52:91:49:a7:c4:49:0f:d5: 55:fc:51:68:10:62:46:d8:87:c6:4d:59:cb:e3:2e:b0:dd:e6: ef:eb:ba:03:4a:78:a0:72:fb:a5:d3:e5:a3:0d:7f:9e:36:90: af:d3:81:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsCkGeYWbHpa+71sbB1uUreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjA5MTAwMjU2WhcNMjUxMjEwMTAwMjU2WjAzMTEwLwYDVQQD EygwOTdhYWZkOTEwZjU0OGM0NjM2MzhkNzkxZTVhYzFiMzAyMzUzZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0chXwL8wPXAPtwfB4CS9x+3vgusA kQqur0dpKj9i4XaPSnrlq3Jcyk5Fe2+KhhhfU6Qu61P8udDic5m5BNIuHWL+qlME QcLtCAmCeknb899vWQ1rWaIYNWN1XuXDZ57HZmTJZvoUmh/dEKe9Is/dW3hAtOHD r94ixhSw93bXih/FqswHnBr2JAkTzXnlfO/HWmwqXklHkF/k9SIg9lonqgX+5TWl Jpd/ppHmEdjE41aZDKzyohzOY/FfosgJL0BGSlIsFV/M/YUOrku70pCIQnqgbixU Ubmojpz3bJZesd2WKjfeF3hTXNuUjJlCUhdub/meRr3Ft/qLnNhLazm4pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl6r9kQ9UjEY2ONeR5awbMCNT5IMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvNASSyz cM5qrc9ROiieVZ6B3FR0VkRA2LqTh7vRnNZXhHPNSf7JMpRAp5LBIYtC6lbHR3x6 8NmMyOcRF3qHDW7LWr3xU32tCYsXUiB0kdzAvpZVCTXyVTcHL/rvXMkaRamd8RVo s2yBW6UrwpwI3i9YB+uZM1O3DRfmonvt1Mxsuud0JF7z53+xsmEsdP4uXThQFiie nqY1IgWbQq8pevUtxChTEe1FeuRpIt0qyLqPAU9nHpWtlLDbNWqgkB+WkgqRzXId ZBVe477SENQ4k1KRSafESQ/VVfxRaBBiRtiHxk1Zy+MusN3m7+u6A0p4oHL7pdPl ow1/njaQr9OBkg== -----END CERTIFICATE-----Generated at Tue Dec 9 16:50:50 2025 by rpki-client