This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: 9q8ijIb83scm+PtYzP2aV3wTdQvWsW7OKUCPm5WA3KM= Subject key identifier: BC:85:37:85:B6:52:D5:8C:C0:79:DC:EB:23:BF:C3:02:5C:93:25:50 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019AB173A1CD25F9E51D42CDFF3F25C0F328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 071A Signing time: Sun 23 Nov 2025 16:02:16 +0000 Manifest this update: Sun 23 Nov 2025 16:02:16 +0000 Manifest next update: Mon 24 Nov 2025 16:02:16 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: zDSQMNrYhFGSiUA9vCquwUleNOTXE6w0pWJnrPItWpg=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 16:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:73:a1:cd:25:f9:e5:1d:42:cd:ff:3f:25:c0:f3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Nov 23 16:02:16 2025 GMT Not After : Nov 24 16:02:16 2025 GMT Subject: CN=bc853785b652d58cc079dceb23bfc3025c932550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:4e:86:e0:7e:1e:ba:96:9d:b0:ad:ac:2e: f1:03:5b:bc:a4:9d:ee:dd:d9:8d:6b:ae:db:10:40: 9e:42:c6:6b:fa:5a:6f:91:05:d0:3d:c4:96:4c:9b: d7:3d:7c:01:86:45:03:4e:1e:e9:c8:9b:42:b7:fc: bb:4b:1c:cc:db:4e:b5:1e:da:d4:bc:7f:ee:d1:5f: ee:a6:18:38:e6:75:01:03:94:93:d2:51:b5:0a:a6: 77:d7:a8:2f:d0:0a:cf:5b:f6:9f:57:af:e7:f2:75: 33:1b:7b:5f:c4:8c:49:f6:75:2a:bb:02:ac:13:6a: 3e:fe:ec:70:a6:da:07:ed:b1:0b:09:c7:bb:c1:11: fb:c0:2b:0f:66:51:fc:1f:e7:d5:2a:27:39:3f:f6: 15:54:fe:32:cd:f9:cf:80:ec:d2:b5:f0:81:67:39: 87:82:8c:39:38:9f:fb:78:a3:05:24:b6:39:71:b0: ad:8d:7e:0c:00:06:8b:0b:a3:42:49:4a:b3:0b:ce: f8:f0:b0:c4:69:46:a6:dc:bd:9d:70:4e:91:f6:f6: 6e:60:b7:a1:6b:ac:31:04:2d:ab:f2:6e:34:76:71: 7c:66:06:9b:b8:3e:fe:05:7e:56:c1:77:d4:e5:b6: 97:1a:a9:31:ea:2b:68:91:ef:81:10:91:e5:95:e7: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:37:85:B6:52:D5:8C:C0:79:DC:EB:23:BF:C3:02:5C:93:25:50 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b9:1a:17:99:e8:59:73:c3:38:9b:d5:c5:3f:e1:37:76:a0: 55:b3:78:15:de:25:6f:35:4f:a9:bf:ff:c4:c6:53:15:2f:c0: b0:f6:ef:d2:49:da:2b:70:25:d1:7c:e0:93:17:1b:ae:50:3d: e1:fa:76:9d:b0:ce:8d:79:f2:13:a8:88:05:ef:3f:09:b4:13: a8:d4:51:41:7d:d7:98:e1:7a:c5:86:7a:c6:ed:6c:a9:44:29: 98:6f:b9:f9:c1:d4:1c:da:a1:c6:92:69:8d:d9:6a:ae:fd:77: cb:cf:da:0d:10:e0:89:00:ad:36:b8:90:8f:59:d5:2a:4d:10: 65:b7:bf:50:78:59:c7:fc:86:44:a8:85:0a:7a:a9:b0:d0:97: 10:ff:d9:a1:98:f9:24:13:97:16:9f:05:b4:fe:d5:b2:6c:5e: c3:82:56:fe:07:4c:fa:c1:cf:26:e8:a4:5b:fd:1f:32:63:43: b0:a9:49:e0:e7:b0:dc:50:d5:bb:26:25:5b:28:c7:cd:e2:dc: f8:3e:18:fb:d3:e3:71:7c:60:3c:b7:79:e7:bd:71:8a:4b:67: e3:20:39:76:76:9f:2e:92:44:5c:48:7b:c3:85:84:c4:62:03: 28:7c:fb:b3:19:a7:4f:79:77:fa:eb:ed:09:20:81:c4:38:81: c6:50:d8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqxc6HNJfnlHULN/z8lwPMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMTIzMTYwMjE2WhcNMjUxMTI0MTYwMjE2WjAzMTEwLwYDVQQD EyhiYzg1Mzc4NWI2NTJkNThjYzA3OWRjZWIyM2JmYzMwMjVjOTMyNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxANOhuB+HrqWnbCtrC7xA1u8pJ3u 3dmNa67bEECeQsZr+lpvkQXQPcSWTJvXPXwBhkUDTh7pyJtCt/y7SxzM2061HtrU vH/u0V/uphg45nUBA5ST0lG1CqZ316gv0ArPW/afV6/n8nUzG3tfxIxJ9nUquwKs E2o+/uxwptoH7bELCce7wRH7wCsPZlH8H+fVKic5P/YVVP4yzfnPgOzStfCBZzmH gow5OJ/7eKMFJLY5cbCtjX4MAAaLC6NCSUqzC8748LDEaUam3L2dcE6R9vZuYLeh a6wxBC2r8m40dnF8ZgabuD7+BX5WwXfU5baXGqkx6itoke+BEJHllefm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyFN4W2UtWMwHnc6yO/wwJckyVQMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrkaF5no WXPDOJvVxT/hN3agVbN4Fd4lbzVPqb//xMZTFS/AsPbv0knaK3Al0XzgkxcbrlA9 4fp2nbDOjXnyE6iIBe8/CbQTqNRRQX3XmOF6xYZ6xu1sqUQpmG+5+cHUHNqhxpJp jdlqrv13y8/aDRDgiQCtNriQj1nVKk0QZbe/UHhZx/yGRKiFCnqpsNCXEP/ZoZj5 JBOXFp8FtP7Vsmxew4JW/gdM+sHPJuikW/0fMmNDsKlJ4Oew3FDVuyYlWyjHzeLc +D4Y+9PjcXxgPLd5571xiktn4yA5dnafLpJEXEh7w4WExGIDKHz7sxmnT3l3+uvt CSCBxDiBxlDYVw== -----END CERTIFICATE-----Generated at Mon Nov 24 01:44:12 2025 by rpki-client