This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: pT7Jx6uiO66VgELtUj0bLtatG4BksvqXkVY9kRNoad0= Subject key identifier: 9B:1C:68:DD:02:E7:74:E5:97:60:53:AA:55:6C:3B:A5:A0:42:24:D6 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019AD625377227B51BA69AB316B86613BC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 072D Signing time: Sun 30 Nov 2025 19:02:34 +0000 Manifest this update: Sun 30 Nov 2025 19:02:34 +0000 Manifest next update: Mon 01 Dec 2025 19:02:34 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 8Mr1a9xHK060MPLc+vqAEtz8PXJwDJFcrKQrwmqJjig=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:25:37:72:27:b5:1b:a6:9a:b3:16:b8:66:13:bc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Nov 30 19:02:34 2025 GMT Not After : Dec 1 19:02:34 2025 GMT Subject: CN=9b1c68dd02e774e5976053aa556c3ba5a04224d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:88:68:51:49:7d:85:58:32:36:29:92:d3: de:3b:ba:92:ae:0a:6c:ba:a6:b0:85:be:29:a1:aa: 4c:1f:a3:2a:3c:35:27:18:be:3e:03:c4:03:e8:b2: 17:7c:d8:df:a2:a5:8c:52:e8:42:bd:fa:89:27:42: 3a:0b:09:1b:86:bb:7e:28:db:33:2e:e4:ee:e9:bf: cc:34:dc:91:93:a0:00:8c:78:c3:e2:07:96:78:e7: d0:d6:e0:73:b2:cd:e4:82:f1:bd:57:7b:68:36:8e: af:e4:79:a3:ce:4a:9b:d3:d1:34:c8:37:fe:a4:24: 25:1c:65:30:a9:1b:5f:85:40:1c:69:d6:5b:c4:e0: 62:89:64:a9:40:e1:c3:05:20:95:dc:47:0e:ee:7b: 95:00:8d:46:3d:a8:ab:b4:28:8f:92:71:72:fd:60: ef:77:9b:8a:80:cb:8e:20:f7:de:bf:bd:30:05:76: 24:ef:57:9f:53:83:83:c9:f6:60:9d:b8:19:4c:ba: 75:2c:c8:45:19:5f:83:7d:4d:d8:f5:72:83:9b:37: 40:98:11:1c:86:3a:00:b3:67:6b:51:70:28:1e:f3: 73:0e:f2:49:b5:d6:ba:01:7c:86:70:57:79:31:70: 10:9a:c4:cc:82:3f:4d:0b:06:33:24:ae:62:ae:73: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:68:DD:02:E7:74:E5:97:60:53:AA:55:6C:3B:A5:A0:42:24:D6 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4d:4c:b0:1d:b1:e6:1f:b0:ac:c3:8f:fc:39:30:0d:d7:cf: ef:fa:83:a5:33:e0:e6:bd:42:ba:d4:cc:e5:66:83:14:5c:ad: fd:69:63:05:9f:be:cc:6b:00:88:9e:dd:c5:f9:82:2e:32:5b: 1e:0b:fb:a0:b1:4e:05:a4:de:24:8c:fd:7d:fa:f4:ba:18:d9: 14:8a:de:41:5b:22:4d:be:bf:14:a1:a8:56:9c:bf:2d:33:2f: 66:38:29:3b:8f:a7:17:8f:a2:95:20:d8:7a:c3:74:dc:f7:ba: 09:cf:bb:6c:3e:18:fc:30:68:24:3e:2e:fe:ca:1a:e4:40:6b: 71:32:17:fc:32:e7:9b:39:36:ab:e4:22:23:72:d0:41:c0:3e: 3b:3a:6f:6c:42:9d:16:43:a0:66:ff:ab:da:b0:53:85:3e:75: 7a:76:d4:49:32:0a:81:12:95:95:3c:a9:98:94:6d:0c:b2:c1: a2:d6:af:25:9a:11:3e:ac:7a:6e:3a:0c:7a:3e:51:42:9b:0e: 6d:da:ae:fb:8a:ed:12:71:22:58:3b:96:db:b5:55:d9:65:cf: a1:9e:23:a0:06:e6:cd:62:3f:d1:99:6e:1d:0a:eb:e5:4b:96: d3:3a:22:10:09:05:27:8e:6b:a9:66:51:49:4e:54:e1:cb:2f: da:4c:cd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrWJTdyJ7UbppqzFrhmE7wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMTMwMTkwMjM0WhcNMjUxMjAxMTkwMjM0WjAzMTEwLwYDVQQD Eyg5YjFjNjhkZDAyZTc3NGU1OTc2MDUzYWE1NTZjM2JhNWEwNDIyNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqGIaFFJfYVYMjYpktPeO7qSrgps uqawhb4poapMH6MqPDUnGL4+A8QD6LIXfNjfoqWMUuhCvfqJJ0I6Cwkbhrt+KNsz LuTu6b/MNNyRk6AAjHjD4geWeOfQ1uBzss3kgvG9V3toNo6v5Hmjzkqb09E0yDf+ pCQlHGUwqRtfhUAcadZbxOBiiWSpQOHDBSCV3EcO7nuVAI1GPairtCiPknFy/WDv d5uKgMuOIPfev70wBXYk71efU4ODyfZgnbgZTLp1LMhFGV+DfU3Y9XKDmzdAmBEc hjoAs2drUXAoHvNzDvJJtda6AXyGcFd5MXAQmsTMgj9NCwYzJK5irnN/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJscaN0C53Tll2BTqlVsO6WgQiTWMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU1MsB2x 5h+wrMOP/DkwDdfP7/qDpTPg5r1CutTM5WaDFFyt/WljBZ++zGsAiJ7dxfmCLjJb Hgv7oLFOBaTeJIz9ffr0uhjZFIreQVsiTb6/FKGoVpy/LTMvZjgpO4+nF4+ilSDY esN03Pe6Cc+7bD4Y/DBoJD4u/soa5EBrcTIX/DLnmzk2q+QiI3LQQcA+OzpvbEKd FkOgZv+r2rBThT51enbUSTIKgRKVlTypmJRtDLLBotavJZoRPqx6bjoMej5RQpsO bdqu+4rtEnEiWDuW27VV2WXPoZ4joAbmzWI/0ZluHQrr5UuW0zoiEAkFJ45rqWZR SU5U4csv2kzN9g== -----END CERTIFICATE-----Generated at Mon Dec 1 02:28:44 2025 by rpki-client