This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: 7edsM2ZGaBIW4R0FukDwDz8s8SJabWpWO3eCfqcCgOM= Subject key identifier: 48:AC:74:4E:E5:54:54:9D:DD:59:B5:5C:31:40:A2:E0:E7:63:22:92 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B120340E044B01433518DFCE1FF29B4BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 074C Signing time: Fri 12 Dec 2025 10:02:41 +0000 Manifest this update: Fri 12 Dec 2025 10:02:41 +0000 Manifest next update: Sat 13 Dec 2025 10:02:41 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 8sRBeEivSiFgRLuvNN/LEJGuigzsCFjr2I7W/Eqx+tA=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:40:e0:44:b0:14:33:51:8d:fc:e1:ff:29:b4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 12 10:02:41 2025 GMT Not After : Dec 13 10:02:41 2025 GMT Subject: CN=48ac744ee554549ddd59b55c3140a2e0e7632292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:4c:75:80:4d:0f:08:8e:ee:67:92:74:68: 5c:bb:7f:a6:05:ca:ce:16:78:90:e1:2f:ea:60:96: 3f:c0:1f:f8:c4:60:f1:14:fa:76:26:3c:b0:f0:eb: d0:d9:c1:c5:3a:af:43:24:41:f9:b6:7f:0f:c6:8d: e7:c7:15:11:17:fa:aa:dc:b9:ac:73:a8:dc:19:2c: db:5f:8b:ff:df:e0:fc:dd:b4:cc:6b:b5:4c:15:49: ac:d2:70:aa:6a:40:83:01:70:8f:69:90:ed:0c:7e: 3d:f0:61:4a:0a:9b:bb:08:ff:0b:94:77:f2:86:eb: 84:25:98:75:a7:19:47:77:79:1d:7f:f6:e1:da:ca: 17:71:78:69:0a:62:92:a2:b5:ca:4e:4c:92:f8:3b: a5:a4:0e:b5:e0:35:c7:bc:74:68:83:9a:b9:6a:3c: 5a:7c:25:7b:84:d3:4b:c2:12:3f:9e:41:1b:1b:df: 54:c0:3a:23:a1:a9:c6:af:6b:bc:e5:0d:30:34:c4: 7f:64:6a:16:1a:ef:83:0b:5e:6f:91:ee:2e:f3:6a: 04:cf:60:3f:db:6e:53:29:ae:a9:76:27:c4:db:9e: 4a:28:89:83:55:17:b5:9a:e6:d3:3d:15:01:cc:98: 0e:76:5b:77:51:d7:97:c5:c1:6d:4b:b7:6c:31:c0: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:74:4E:E5:54:54:9D:DD:59:B5:5C:31:40:A2:E0:E7:63:22:92 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7d:bf:dc:15:b2:13:29:96:4e:ee:31:ad:9b:7e:58:62:05: 03:fc:d5:55:44:32:f5:40:fc:8b:2a:21:80:f6:e0:80:a5:ec: 37:a0:43:2f:87:1e:2d:9a:ed:37:3f:d0:3a:aa:ee:bd:fd:fc: e2:f5:3f:07:d7:1e:34:6d:16:24:71:ba:c6:89:47:bb:88:03: 0f:1e:3d:c2:8b:af:96:83:67:0b:ce:9f:b6:78:8e:4d:6a:e4: 17:77:ab:6b:ad:2b:1b:c7:1a:af:15:c9:1c:69:38:63:ca:43: 54:40:fe:31:1d:8a:c3:08:dd:a6:58:e9:01:84:6a:f5:9b:3e: cd:a6:d4:9c:4d:55:3f:54:ab:c3:f9:98:73:67:33:fb:de:0f: 6b:fb:4d:19:b1:12:c3:ef:9b:e7:98:90:67:32:4c:0f:81:76: 70:d9:2a:65:27:a7:09:5d:f2:2e:d5:6a:a8:03:a7:27:1f:bd: 0d:96:7f:92:cd:7c:97:07:57:93:6e:bb:c5:09:59:99:33:6c: ae:c6:be:63:f5:75:33:3e:bc:22:87:6f:36:55:eb:ca:93:ee: 67:fd:aa:71:60:a8:60:d8:d1:4e:dd:d4:e2:3d:28:96:aa:44: bc:13:b9:ca:78:12:1f:09:cd:38:39:2d:76:59:98:b0:07:0b: a4:02:a8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA0DgRLAUM1GN/OH/KbS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjEyMTAwMjQxWhcNMjUxMjEzMTAwMjQxWjAzMTEwLwYDVQQD Eyg0OGFjNzQ0ZWU1NTQ1NDlkZGQ1OWI1NWMzMTQwYTJlMGU3NjMyMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSFMdYBNDwiO7meSdGhcu3+mBcrO FniQ4S/qYJY/wB/4xGDxFPp2Jjyw8OvQ2cHFOq9DJEH5tn8Pxo3nxxURF/qq3Lms c6jcGSzbX4v/3+D83bTMa7VMFUms0nCqakCDAXCPaZDtDH498GFKCpu7CP8LlHfy huuEJZh1pxlHd3kdf/bh2soXcXhpCmKSorXKTkyS+DulpA614DXHvHRog5q5ajxa fCV7hNNLwhI/nkEbG99UwDojoanGr2u85Q0wNMR/ZGoWGu+DC15vke4u82oEz2A/ 225TKa6pdifE255KKImDVRe1mubTPRUBzJgOdlt3UdeXxcFtS7dsMcBJGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEisdE7lVFSd3Vm1XDFAouDnYyKSMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH2/3BWy EymWTu4xrZt+WGIFA/zVVUQy9UD8iyohgPbggKXsN6BDL4ceLZrtNz/QOqruvf38 4vU/B9ceNG0WJHG6xolHu4gDDx49wouvloNnC86ftniOTWrkF3era60rG8carxXJ HGk4Y8pDVED+MR2KwwjdpljpAYRq9Zs+zabUnE1VP1Srw/mYc2cz+94Pa/tNGbES w++b55iQZzJMD4F2cNkqZSenCV3yLtVqqAOnJx+9DZZ/ks18lwdXk267xQlZmTNs rsa+Y/V1Mz68IodvNlXrypPuZ/2qcWCoYNjRTt3U4j0olqpEvBO5yngSHwnNODkt dlmYsAcLpAKo+g== -----END CERTIFICATE-----Generated at Fri Dec 12 12:21:54 2025 by rpki-client