This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: g6cRsBM5YKYOLCUi0YCHhnT9wt43YS9UnIHUkbticKI= Subject key identifier: 57:E8:3B:A4:50:F6:A1:B4:55:19:57:BF:64:25:D7:70:44:1F:48:D1 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B405AA5332AE55E01DF0A2C2BB62096F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0764 Signing time: Sun 21 Dec 2025 10:00:40 +0000 Manifest this update: Sun 21 Dec 2025 10:00:40 +0000 Manifest next update: Mon 22 Dec 2025 10:00:40 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: +cHfqehqP/Hjah7XSrejKa02474OC9O2SYDnRnNmQTI=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:a5:33:2a:e5:5e:01:df:0a:2c:2b:b6:20:96:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 21 10:00:40 2025 GMT Not After : Dec 22 10:00:40 2025 GMT Subject: CN=57e83ba450f6a1b4551957bf6425d770441f48d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:e2:50:31:ae:b3:c0:c4:9c:19:e0:47:a9: 70:7f:b9:9a:b6:7b:0c:3f:24:4b:0a:fe:15:80:4e: 2d:fc:39:8d:2b:17:c2:4b:35:08:b1:62:82:75:6f: 43:6f:c8:09:81:c8:6d:b6:c9:ef:83:cc:d0:e2:16: 0f:67:97:0a:bd:f9:66:4e:77:30:70:52:f6:3d:c7: 18:f3:60:eb:55:b9:1d:da:02:d5:43:62:01:dd:a3: f3:49:12:40:a6:04:60:8d:a9:f9:a4:14:64:5b:3c: 07:98:75:6e:ba:9b:64:24:52:71:4d:1b:47:9b:13: ea:54:74:16:1b:54:e2:d2:af:87:89:07:fb:85:81: 7f:2d:70:b2:5e:be:f4:ac:9d:35:c9:9d:b0:50:4d: 78:55:76:fd:e8:da:a8:c2:c8:48:80:d9:f9:37:ae: 7c:79:9e:16:18:a7:78:6e:92:fd:1c:67:d9:c1:5d: 05:3a:70:55:8d:2e:56:04:6d:21:31:d9:a4:28:56: ae:d0:66:65:e0:84:c5:a3:b1:d6:dd:1f:f8:92:93: c8:0e:21:f8:37:87:8f:f1:59:f4:21:36:b9:89:5c: 2b:d9:db:4f:cb:ad:aa:ac:d6:5a:ab:91:5d:71:45: 78:7b:f0:95:43:51:3a:21:dd:58:44:d7:56:f5:43: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:3B:A4:50:F6:A1:B4:55:19:57:BF:64:25:D7:70:44:1F:48:D1 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:82:8d:87:d8:69:7f:49:6e:cc:dd:a2:72:cf:a1:c8:0d:aa: 99:42:d8:62:b0:81:11:cf:42:6a:5c:cc:2f:1a:7e:9f:06:2a: 17:ef:0b:6d:12:a0:f3:7c:75:bd:b3:72:69:da:5a:4f:5a:95: 31:10:a5:b4:cb:80:83:37:d2:c0:11:7c:90:ad:15:d7:f5:59: 9b:e3:7d:93:e6:cd:6a:38:0a:22:0c:98:58:7c:bd:45:d6:68: 3a:1b:8c:98:66:77:b8:60:e1:4c:96:94:d5:50:71:cf:1b:d2: fe:11:0d:c1:07:9b:bb:6e:8d:bf:b7:0f:97:a7:d5:99:ba:a2: d1:4a:65:b3:4e:d8:40:9c:fd:88:28:3d:75:70:5c:7d:86:03: da:9b:0e:c2:1c:a9:5b:92:8d:5e:a9:fe:2b:07:d2:9c:a5:f1: 9d:60:20:dc:e8:db:42:ec:40:df:52:d4:a1:c9:63:33:18:1d: a1:e3:ec:21:2c:02:4b:4a:0c:7d:2c:6d:55:46:8b:34:3e:0b: 77:48:b8:8b:67:2f:37:4a:ed:b9:ed:3c:22:8f:90:07:e4:ce: 5e:44:11:10:88:2c:1a:e8:a2:46:68:d0:16:ba:a4:56:b0:5a: 9b:f2:5e:ba:54:f8:c1:36:79:9c:49:d6:d1:0f:f5:7b:3f:da: 63:45:03:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWqUzKuVeAd8KLCu2IJbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjIxMTAwMDQwWhcNMjUxMjIyMTAwMDQwWjAzMTEwLwYDVQQD Eyg1N2U4M2JhNDUwZjZhMWI0NTUxOTU3YmY2NDI1ZDc3MDQ0MWY0OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIviUDGus8DEnBngR6lwf7matnsM PyRLCv4VgE4t/DmNKxfCSzUIsWKCdW9Db8gJgchttsnvg8zQ4hYPZ5cKvflmTncw cFL2PccY82DrVbkd2gLVQ2IB3aPzSRJApgRgjan5pBRkWzwHmHVuuptkJFJxTRtH mxPqVHQWG1Ti0q+HiQf7hYF/LXCyXr70rJ01yZ2wUE14VXb96NqowshIgNn5N658 eZ4WGKd4bpL9HGfZwV0FOnBVjS5WBG0hMdmkKFau0GZl4ITFo7HW3R/4kpPIDiH4 N4eP8Vn0ITa5iVwr2dtPy62qrNZaq5FdcUV4e/CVQ1E6Id1YRNdW9UOK4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfoO6RQ9qG0VRlXv2Ql13BEH0jRMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloKNh9hp f0luzN2ics+hyA2qmULYYrCBEc9CalzMLxp+nwYqF+8LbRKg83x1vbNyadpaT1qV MRCltMuAgzfSwBF8kK0V1/VZm+N9k+bNajgKIgyYWHy9RdZoOhuMmGZ3uGDhTJaU 1VBxzxvS/hENwQebu26Nv7cPl6fVmbqi0Upls07YQJz9iCg9dXBcfYYD2psOwhyp W5KNXqn+KwfSnKXxnWAg3OjbQuxA31LUocljMxgdoePsISwCS0oMfSxtVUaLND4L d0i4i2cvN0rtue08Io+QB+TOXkQREIgsGuiiRmjQFrqkVrBam/JeulT4wTZ5nEnW 0Q/1ez/aY0UDNw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:36:08 2025 by rpki-client