This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: jj18vEgQi8uLrgWc8UdfzAGetG6g3bFW8PRdlLIp1d4= Subject key identifier: 2C:F8:92:42:C9:95:B3:F5:4A:0B:49:E7:36:64:33:08:2C:E2:9E:14 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B085A8EB288E7EADC06190314F013A29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0747 Signing time: Wed 10 Dec 2025 13:01:51 +0000 Manifest this update: Wed 10 Dec 2025 13:01:51 +0000 Manifest next update: Thu 11 Dec 2025 13:01:51 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: PXN3vfawngR/puslP8hQKc19igejV4TabHVDO8gAHnI=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:8e:b2:88:e7:ea:dc:06:19:03:14:f0:13:a2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 10 13:01:51 2025 GMT Not After : Dec 11 13:01:51 2025 GMT Subject: CN=2cf89242c995b3f54a0b49e7366433082ce29e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:a4:c1:b2:e6:10:89:cd:77:89:44:0e:6e: c1:95:5c:d6:78:6e:07:cc:b2:d0:76:9c:3c:58:1a: d1:cd:41:65:86:57:d6:bb:d4:f0:fe:7c:47:1b:b7: 77:dc:3c:8b:c2:1e:68:02:0b:0e:40:f4:a2:04:f4: b5:a4:7e:e5:fd:0c:eb:c7:0a:b2:0d:20:60:9b:d9: c5:d1:c5:fe:51:57:ca:70:d4:66:41:a1:0e:2b:0c: aa:8c:a5:7e:59:28:a5:44:e4:41:1f:9e:76:19:07: cf:ce:b6:d3:07:c8:6f:05:83:96:80:92:02:9b:86: 76:5e:c7:bf:9b:8d:8c:9a:62:7c:7f:1b:22:79:a5: ad:39:c4:47:64:2b:93:8e:47:c1:d6:2c:d3:04:69: 30:d1:f0:ba:2a:99:c4:63:ea:f5:41:51:37:b5:1b: 72:2c:31:ce:13:2f:69:94:52:d5:86:93:38:4d:b1: 3d:ef:60:2b:25:82:de:07:b8:e3:6d:3b:1b:8c:78: 2d:8c:6c:df:b1:12:36:a4:ab:66:8c:db:1d:f8:93: 13:48:cc:b9:a5:1f:90:93:8d:ce:98:17:f5:70:39: 5f:48:d1:e4:3f:38:8c:76:a6:e1:36:71:ee:f8:88: e9:19:21:f3:6c:98:07:9d:07:3f:53:11:3f:42:f0: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:92:42:C9:95:B3:F5:4A:0B:49:E7:36:64:33:08:2C:E2:9E:14 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:cf:0e:ad:81:0f:ab:c8:44:76:41:a3:73:ac:66:eb:57: e0:0f:af:f7:fe:89:87:a4:72:1b:20:19:57:34:1f:5c:1d:c4: 6b:a8:4b:67:a5:ef:5b:99:da:68:67:6b:68:21:45:9d:dd:2d: da:c6:03:ca:7f:63:a1:9a:a2:54:50:e6:ba:5d:75:67:50:2d: 93:49:48:bc:d2:55:84:60:47:79:50:6a:ce:b4:8e:9d:ee:0a: 6c:3f:75:6a:b7:e5:07:96:d8:62:aa:8a:d6:57:f1:fa:30:be: 00:a4:1e:c4:69:83:47:01:c2:c3:ba:b9:72:fc:4b:5f:59:11: c8:95:23:9a:31:b1:50:1e:a5:b2:4f:24:6f:72:e5:1d:21:9d: da:5f:ca:36:58:3d:df:db:25:df:45:d7:db:a7:f5:98:96:cb: d3:d1:e9:be:d5:e8:04:46:8d:41:55:fc:fa:fb:6b:e2:2a:a5: 33:82:3d:69:82:ab:45:3e:7f:95:c8:d8:3f:8b:d5:ec:83:ea: 04:ae:f5:0e:65:65:e9:28:71:5b:d4:66:86:60:f4:df:21:53: fe:37:ff:69:58:21:97:d2:e2:3b:3f:0e:65:38:51:21:aa:fd: 3d:bc:d0:51:0b:32:29:41:7c:71:ef:c9:69:94:68:a7:d0:c9: 5f:65:8a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWo6yiOfq3AYZAxTwE6KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjEwMTMwMTUxWhcNMjUxMjExMTMwMTUxWjAzMTEwLwYDVQQD EygyY2Y4OTI0MmM5OTViM2Y1NGEwYjQ5ZTczNjY0MzMwODJjZTI5ZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBWkwbLmEInNd4lEDm7BlVzWeG4H zLLQdpw8WBrRzUFlhlfWu9Tw/nxHG7d33DyLwh5oAgsOQPSiBPS1pH7l/Qzrxwqy DSBgm9nF0cX+UVfKcNRmQaEOKwyqjKV+WSilRORBH552GQfPzrbTB8hvBYOWgJIC m4Z2Xse/m42MmmJ8fxsieaWtOcRHZCuTjkfB1izTBGkw0fC6KpnEY+r1QVE3tRty LDHOEy9plFLVhpM4TbE972ArJYLeB7jjbTsbjHgtjGzfsRI2pKtmjNsd+JMTSMy5 pR+Qk43OmBf1cDlfSNHkPziMdqbhNnHu+IjpGSHzbJgHnQc/UxE/QvD+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz4kkLJlbP1SgtJ5zZkMwgs4p4UMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjTPDq2B D6vIRHZBo3OsZutX4A+v9/6Jh6RyGyAZVzQfXB3Ea6hLZ6XvW5naaGdraCFFnd0t 2sYDyn9joZqiVFDmul11Z1Atk0lIvNJVhGBHeVBqzrSOne4KbD91arflB5bYYqqK 1lfx+jC+AKQexGmDRwHCw7q5cvxLX1kRyJUjmjGxUB6lsk8kb3LlHSGd2l/KNlg9 39sl30XX26f1mJbL09HpvtXoBEaNQVX8+vtr4iqlM4I9aYKrRT5/lcjYP4vV7IPq BK71DmVl6ShxW9RmhmD03yFT/jf/aVghl9LiOz8OZThRIar9PbzQUQsyKUF8ce/J aZRop9DJX2WKvg== -----END CERTIFICATE-----Generated at Wed Dec 10 19:03:39 2025 by rpki-client