This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: dtZ1CY56mYlWuiF1z/JexU/QMmTqIDLT8HXMuuzi61I= Subject key identifier: A0:19:52:7F:B2:FD:4D:9E:DA:FE:C9:A6:44:73:82:62:9D:D6:DC:3B Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B59773F2826FD0175DCA0BC687CEF9082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0771 Signing time: Fri 26 Dec 2025 07:02:25 +0000 Manifest this update: Fri 26 Dec 2025 07:02:25 +0000 Manifest next update: Sat 27 Dec 2025 07:02:25 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: szGaRx1S9yRiDHaCSmPjX0wRVS3KxRPYhHI0J59Tz/A=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:3f:28:26:fd:01:75:dc:a0:bc:68:7c:ef:90:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 26 07:02:25 2025 GMT Not After : Dec 27 07:02:25 2025 GMT Subject: CN=a019527fb2fd4d9edafec9a6447382629dd6dc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:e9:8d:37:af:72:63:a7:03:f0:1f:bb:4e: 6c:ab:c6:af:84:2c:84:b5:93:e1:2c:be:7c:16:1f: d1:77:63:69:95:ab:02:ad:b8:46:ed:fe:fe:9e:e6: 0f:c5:48:78:40:18:b9:a0:d4:d6:0e:60:b6:75:bc: 4d:26:ec:ef:72:04:9d:42:f8:77:ee:f3:2f:48:d3: 7a:c6:42:9c:f5:8f:eb:08:d7:7a:90:36:23:c1:4c: 1d:2e:ba:7c:6f:c4:bc:9c:1b:06:62:c1:6c:d8:55: 2c:a8:01:cf:4f:8f:3d:8e:e1:60:94:12:f3:eb:57: de:f5:b3:99:7f:b5:ee:4a:e7:00:2f:eb:57:d6:c5: 88:8f:c7:c8:ff:02:9a:3f:38:7a:c8:7e:bf:8b:44: e5:b5:33:c5:33:db:44:ea:83:b4:fa:02:1b:7b:c4: 0e:46:9b:de:53:fa:f4:cf:fc:3d:73:00:1c:60:dd: 2a:39:16:42:0c:88:f3:29:f1:14:59:74:25:03:86: f0:11:25:2e:ed:02:05:0e:b5:85:49:55:83:98:d1: e4:ae:f6:24:79:89:34:38:6a:1d:7a:5a:17:6e:65: 58:d1:05:7d:57:52:42:ac:ba:0e:cb:8d:fd:70:2f: cb:68:f3:b6:1d:41:6b:ee:a7:61:1e:50:41:aa:1e: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:52:7F:B2:FD:4D:9E:DA:FE:C9:A6:44:73:82:62:9D:D6:DC:3B X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:37:ab:18:b0:05:f1:57:44:ed:cd:67:09:9f:5a:82:7c:81: 52:aa:74:c9:bb:95:c1:29:e4:44:a7:86:36:fe:1d:c4:02:d0: 20:75:88:e5:59:de:d0:a8:da:eb:65:ca:09:f0:c1:17:85:6d: d5:69:0c:35:da:76:73:45:cf:01:dd:1a:e1:f1:6a:38:5c:93: 4a:45:c5:80:f6:83:79:76:75:64:46:f6:5e:82:c5:ec:e6:ad: 10:92:10:72:e6:7f:7f:9b:67:56:10:d4:58:79:0d:ae:71:7b: e5:3b:2b:de:9b:8d:42:84:1b:53:a2:90:88:ec:58:ff:0e:b9: d9:9f:59:10:99:7b:c9:85:e7:96:55:db:e9:17:56:de:3d:fa: 3d:f4:6e:bc:ec:ad:49:9a:e8:51:51:49:68:a3:e7:92:eb:c5: 66:35:7d:1a:19:70:79:45:d0:82:a1:e4:5f:b3:8e:a3:d7:65: 5d:2d:20:29:e1:ba:ba:e0:a3:b1:a1:7d:6e:b9:76:87:0c:0c: ec:ae:f3:8f:93:b1:7b:ee:29:3e:70:fe:37:8a:ee:2c:41:b8: 66:fe:e7:58:87:e0:9a:c0:bd:63:93:ac:3d:77:48:1f:77:ce: 1e:a3:27:33:16:65:c2:19:c2:b3:60:47:c0:6a:3a:f4:3e:e0: b1:6e:e4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdz8oJv0BddygvGh875CCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjI2MDcwMjI1WhcNMjUxMjI3MDcwMjI1WjAzMTEwLwYDVQQD EyhhMDE5NTI3ZmIyZmQ0ZDllZGFmZWM5YTY0NDczODI2MjlkZDZkYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7XpjTevcmOnA/Afu05sq8avhCyE tZPhLL58Fh/Rd2NplasCrbhG7f7+nuYPxUh4QBi5oNTWDmC2dbxNJuzvcgSdQvh3 7vMvSNN6xkKc9Y/rCNd6kDYjwUwdLrp8b8S8nBsGYsFs2FUsqAHPT489juFglBLz 61fe9bOZf7XuSucAL+tX1sWIj8fI/wKaPzh6yH6/i0TltTPFM9tE6oO0+gIbe8QO RpveU/r0z/w9cwAcYN0qORZCDIjzKfEUWXQlA4bwESUu7QIFDrWFSVWDmNHkrvYk eYk0OGodeloXbmVY0QV9V1JCrLoOy439cC/LaPO2HUFr7qdhHlBBqh5RXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAZUn+y/U2e2v7JpkRzgmKd1tw7MB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzerGLAF 8VdE7c1nCZ9agnyBUqp0ybuVwSnkRKeGNv4dxALQIHWI5Vne0Kja62XKCfDBF4Vt 1WkMNdp2c0XPAd0a4fFqOFyTSkXFgPaDeXZ1ZEb2XoLF7OatEJIQcuZ/f5tnVhDU WHkNrnF75Tsr3puNQoQbU6KQiOxY/w652Z9ZEJl7yYXnllXb6RdW3j36PfRuvOyt SZroUVFJaKPnkuvFZjV9GhlweUXQgqHkX7OOo9dlXS0gKeG6uuCjsaF9brl2hwwM 7K7zj5Oxe+4pPnD+N4ruLEG4Zv7nWIfgmsC9Y5OsPXdIH3fOHqMnMxZlwhnCs2BH wGo69D7gsW7kkQ== -----END CERTIFICATE-----Generated at Fri Dec 26 10:12:19 2025 by rpki-client