This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: ppCpffigsBAX7yOmX4J4Qqv4kWwCwy+IblQVxlNUxPs= Subject key identifier: 6B:4A:27:DB:06:30:F5:E2:6B:BE:49:38:6B:2D:55:3F:4C:2B:BE:7F Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B48153DAF31714007DF9DD902B023251E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0768 Signing time: Mon 22 Dec 2025 22:01:49 +0000 Manifest this update: Mon 22 Dec 2025 22:01:49 +0000 Manifest next update: Tue 23 Dec 2025 22:01:49 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 3/CNeLFTswvziGT7ECDlnAbqxN9LLN+nYMZQw2gUN04=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:3d:af:31:71:40:07:df:9d:d9:02:b0:23:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 22 22:01:49 2025 GMT Not After : Dec 23 22:01:49 2025 GMT Subject: CN=6b4a27db0630f5e26bbe49386b2d553f4c2bbe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:db:fb:32:01:9c:13:86:05:b7:e0:ff:5a: be:48:7b:1b:69:0c:93:cf:24:10:b9:3f:23:73:9a: 6f:a3:9f:5d:1c:a9:d8:68:fe:e7:fe:30:ce:3c:dd: 3b:45:7a:90:38:f5:8c:88:f5:e0:0b:a5:3a:87:b3: 34:f9:f6:2c:93:3a:dd:c4:ac:30:b2:b0:93:09:4f: ba:17:bc:30:af:b7:20:f0:d5:c8:ef:be:41:cb:13: 17:c4:b5:f0:be:54:eb:d2:f7:f2:95:50:e7:44:af: fb:e9:91:83:1b:3e:7b:ca:8b:56:b1:82:bc:f7:fb: 58:53:c3:f5:79:f1:e4:15:07:0e:55:9c:c1:23:22: b0:d4:46:5d:cf:a0:29:00:63:5b:cb:1c:5f:0c:5b: b9:32:2c:50:41:7f:cd:9c:52:ea:bf:77:40:e7:2d: a7:27:10:9f:dc:32:a0:58:69:f5:67:07:7f:bc:19: 2e:a0:65:67:65:79:fc:e5:18:60:2d:ed:68:81:b0: d1:6d:7e:5d:17:39:35:3e:77:f5:23:1a:20:ca:96: cf:07:a1:bf:ae:10:2a:52:61:07:e9:4d:8d:f8:23: 61:62:0a:69:e0:0f:0e:6a:12:03:16:2c:7f:46:2f: 8a:20:e0:5a:8a:7a:1f:de:a4:b4:09:6b:56:6b:41: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:27:DB:06:30:F5:E2:6B:BE:49:38:6B:2D:55:3F:4C:2B:BE:7F X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:81:1f:99:a7:b6:be:46:83:16:3f:93:62:3e:ab:45:26:b6: 57:fe:3e:d1:af:b0:13:c5:d4:3e:5f:41:be:90:34:39:bd:8e: 7c:0a:a4:26:1a:d4:28:a0:fd:3a:ff:cc:e7:bc:89:08:b9:ff: e3:3c:e7:30:6e:d6:04:ca:42:92:cd:c3:f9:12:f0:cb:f3:7b: 58:51:59:c5:35:9c:91:fd:33:df:0d:6e:0a:53:b8:7e:16:a4: 31:9e:61:e9:29:1e:5c:cf:a6:df:bf:80:f5:42:d0:cf:41:74: 24:35:da:40:4c:43:0b:d8:81:64:e9:f1:2f:ff:ab:d4:78:b7: c1:41:ab:0c:8f:ea:1e:a4:02:c0:93:ec:0e:fa:3a:d5:98:79: 25:1f:43:4c:5a:55:38:2c:e8:89:c2:eb:5a:12:f5:43:ae:dc: ec:a7:9b:2f:01:31:34:77:02:33:b3:2f:4b:c5:47:6d:91:54: e3:5a:d8:7a:9d:1d:d9:ac:e8:f3:c9:b2:7d:4c:b4:c3:ff:5f: 28:a9:cf:54:4b:49:cb:ae:1c:4e:20:a6:70:85:4a:48:7b:d7: 9e:32:96:ea:bc:7f:bd:4d:42:d7:8a:98:ee:d7:a4:b3:1a:22: c9:d8:3c:b8:ae:18:b3:83:36:76:7d:72:04:89:4f:97:aa:3d: bf:6c:bd:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFT2vMXFAB9+d2QKwIyUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjIyMjIwMTQ5WhcNMjUxMjIzMjIwMTQ5WjAzMTEwLwYDVQQD Eyg2YjRhMjdkYjA2MzBmNWUyNmJiZTQ5Mzg2YjJkNTUzZjRjMmJiZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjLb+zIBnBOGBbfg/1q+SHsbaQyT zyQQuT8jc5pvo59dHKnYaP7n/jDOPN07RXqQOPWMiPXgC6U6h7M0+fYskzrdxKww srCTCU+6F7wwr7cg8NXI775ByxMXxLXwvlTr0vfylVDnRK/76ZGDGz57yotWsYK8 9/tYU8P1efHkFQcOVZzBIyKw1EZdz6ApAGNbyxxfDFu5MixQQX/NnFLqv3dA5y2n JxCf3DKgWGn1Zwd/vBkuoGVnZXn85RhgLe1ogbDRbX5dFzk1Pnf1IxogypbPB6G/ rhAqUmEH6U2N+CNhYgpp4A8OahIDFix/Ri+KIOBainof3qS0CWtWa0EO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtKJ9sGMPXia75JOGstVT9MK75/MB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4Efmae2 vkaDFj+TYj6rRSa2V/4+0a+wE8XUPl9BvpA0Ob2OfAqkJhrUKKD9Ov/M57yJCLn/ 4zznMG7WBMpCks3D+RLwy/N7WFFZxTWckf0z3w1uClO4fhakMZ5h6SkeXM+m37+A 9ULQz0F0JDXaQExDC9iBZOnxL/+r1Hi3wUGrDI/qHqQCwJPsDvo61Zh5JR9DTFpV OCzoicLrWhL1Q67c7KebLwExNHcCM7MvS8VHbZFU41rYep0d2azo88myfUy0w/9f KKnPVEtJy64cTiCmcIVKSHvXnjKW6rx/vU1C14qY7teksxoiydg8uK4Ys4M2dn1y BIlPl6o9v2y9wA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:21:21 2025 by rpki-client