This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: yHNzjDXtolRFbVrhwVPx2KQnc/XtqvmIekDbQFJzB1A= Subject key identifier: 12:3B:B9:C1:07:02:4A:18:23:D3:86:C7:ED:91:B0:55:5A:E9:2D:E9 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B2552559816FB7A57F8D729C3C08513FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0756 Signing time: Tue 16 Dec 2025 04:01:51 +0000 Manifest this update: Tue 16 Dec 2025 04:01:51 +0000 Manifest next update: Wed 17 Dec 2025 04:01:51 +0000 Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=) 2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Ww4i4fCUEKAwMPOtiKhWsSsKhnXLhAYTLB3pTnuIRgA=) 3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:55:98:16:fb:7a:57:f8:d7:29:c3:c0:85:13:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Dec 16 04:01:51 2025 GMT Not After : Dec 17 04:01:51 2025 GMT Subject: CN=123bb9c107024a1823d386c7ed91b0555ae92de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:6f:0c:58:7a:fa:85:d6:2d:09:fa:00:45: 0e:9e:cd:2b:fd:d0:8a:b9:a6:67:b7:2d:88:be:6f: 7e:cf:4d:7a:35:8a:e2:3d:04:28:97:1e:ff:6e:5b: 9c:78:8d:f0:f7:e1:9b:0a:a3:78:34:d4:da:0b:18: 38:1d:57:7f:36:4c:35:3a:ae:c2:5a:4d:f9:94:d6: ac:c9:12:8f:d5:e3:26:f2:78:1c:34:6b:5e:51:e9: 4c:1c:cd:bc:9a:22:44:03:a6:e7:92:4e:51:92:7d: 10:c9:b2:cb:c1:2e:5d:19:19:ca:5a:f7:14:d2:e2: e0:00:89:8e:c2:3b:4f:5b:a2:a1:a2:36:cc:55:be: 83:6c:79:82:6b:b2:bf:ca:f0:48:72:7b:38:0d:c0: 1f:3a:28:ba:0d:09:e5:a3:9e:74:7f:cd:e2:cc:d9: fb:b5:5f:d9:e9:05:96:d0:68:a9:cd:13:59:60:a2: 5c:83:9d:ee:00:ec:60:30:22:2a:f8:7e:d2:04:ea: df:cb:a0:17:50:4b:68:5d:bc:c5:7c:6b:e6:46:1a: 55:82:4a:be:01:49:b9:d7:d1:31:30:46:9a:3e:8b: 6b:c5:2b:cd:e6:8a:a5:88:a2:fa:b2:34:52:34:57: 7a:82:85:11:b4:9b:b7:3d:8a:14:f7:74:f8:2b:11: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:B9:C1:07:02:4A:18:23:D3:86:C7:ED:91:B0:55:5A:E9:2D:E9 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a9:0c:14:b9:36:1f:62:fd:bb:7f:d4:0d:39:2b:41:b0:61: e5:da:f6:e3:7e:63:0c:85:e1:b8:75:d1:66:5e:62:b5:61:d0: 9b:2f:e5:43:bc:89:92:cc:08:56:43:cd:15:7b:7c:b7:f3:db: 07:ba:48:c3:a6:dc:58:72:ba:9e:22:76:00:eb:2f:bc:d4:4d: f8:1e:6b:ea:08:c1:59:19:3f:b4:9d:a2:78:67:55:a3:5c:31: fa:fa:e8:1f:c9:7c:92:e3:49:97:35:4e:e0:b5:7b:d1:7f:cd: 0c:2d:6d:0b:32:93:3d:94:2e:63:0a:aa:b0:92:33:7e:8d:77: 2b:f4:03:39:02:3e:6a:82:d3:af:f3:5a:0c:fb:9d:c5:d1:a5: c7:7b:85:3d:76:04:7f:4d:25:71:58:f0:9b:3c:49:be:5c:d0: d9:20:99:cf:97:3c:50:c0:0b:f9:f6:7c:69:c6:fe:ee:f2:07: 89:65:31:e9:3a:88:5c:28:f4:ac:09:cb:99:1c:57:3d:be:4a: 74:f6:f6:81:93:f7:c9:b5:9f:1d:25:f0:11:ff:50:d0:0d:da: 01:41:5b:ce:a6:26:8e:4b:1e:57:c6:19:c0:83:8f:78:12:59: 92:0b:40:9b:bc:34:b9:a2:4d:4e:2f:ff:95:eb:b5:43:ca:9b: ed:63:ba:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUlWYFvt6V/jXKcPAhRP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjUxMjE2MDQwMTUxWhcNMjUxMjE3MDQwMTUxWjAzMTEwLwYDVQQD EygxMjNiYjljMTA3MDI0YTE4MjNkMzg2YzdlZDkxYjA1NTVhZTkyZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHtvDFh6+oXWLQn6AEUOns0r/dCK uaZnty2Ivm9+z016NYriPQQolx7/bluceI3w9+GbCqN4NNTaCxg4HVd/Nkw1Oq7C Wk35lNasyRKP1eMm8ngcNGteUelMHM28miJEA6bnkk5Rkn0QybLLwS5dGRnKWvcU 0uLgAImOwjtPW6KhojbMVb6DbHmCa7K/yvBIcns4DcAfOii6DQnlo550f83izNn7 tV/Z6QWW0GipzRNZYKJcg53uAOxgMCIq+H7SBOrfy6AXUEtoXbzFfGvmRhpVgkq+ AUm519ExMEaaPotrxSvN5oqliKL6sjRSNFd6goURtJu3PYoU93T4KxFOvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI7ucEHAkoYI9OGx+2RsFVa6S3pMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6kMFLk2 H2L9u3/UDTkrQbBh5dr2435jDIXhuHXRZl5itWHQmy/lQ7yJkswIVkPNFXt8t/Pb B7pIw6bcWHK6niJ2AOsvvNRN+B5r6gjBWRk/tJ2ieGdVo1wx+vroH8l8kuNJlzVO 4LV70X/NDC1tCzKTPZQuYwqqsJIzfo13K/QDOQI+aoLTr/NaDPudxdGlx3uFPXYE f00lcVjwmzxJvlzQ2SCZz5c8UMAL+fZ8acb+7vIHiWUx6TqIXCj0rAnLmRxXPb5K dPb2gZP3ybWfHSXwEf9Q0A3aAUFbzqYmjkseV8YZwIOPeBJZkgtAm7w0uaJNTi// leu1Q8qb7WO65w== -----END CERTIFICATE-----Generated at Tue Dec 16 10:57:10 2025 by rpki-client