This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json) Hash identifier: esD6AedO51cCiB1XPicXNx2ZIgvN89WBsyMJnYEoNpw= Subject key identifier: 7A:DF:8F:74:7D:36:AD:8F:25:8B:ED:49:A0:39:E1:18:23:76:D4:3C Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Certificate serial: 019B43249E4167C6AB1B41BC459B63D61DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 23:00:31 +0000 Manifest this update: Sun 21 Dec 2025 23:00:31 +0000 Manifest next update: Mon 22 Dec 2025 23:00:31 +0000 Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=) 2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: RLTjm3EqOAeB9OIDcOQRqkfzeqjZHVYRBLXhVZ9jluQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:9e:41:67:c6:ab:1b:41:bc:45:9b:63:d6:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Validity Not Before: Dec 21 23:00:31 2025 GMT Not After : Dec 22 23:00:31 2025 GMT Subject: CN=7adf8f747d36ad8f258bed49a039e1182376d43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:46:44:bb:0e:82:f4:74:c0:9a:df:b8:98: 51:e2:2f:eb:55:5e:57:1d:3c:10:e0:54:03:4e:80: 9d:85:5b:60:9f:07:da:3b:20:f7:3c:d9:6c:1f:40: 59:ce:37:85:1e:fb:77:40:e3:85:78:8a:e0:84:11: fa:dc:b9:d5:48:b7:9a:72:c7:49:30:72:fe:e3:d9: 28:ec:8f:08:2a:39:e7:1a:aa:2b:c3:ee:eb:78:6b: 75:8f:31:93:4b:10:f5:f2:83:3b:46:1a:41:b0:71: 7a:d9:ba:70:21:e5:67:2f:fd:6b:5f:4c:15:66:8b: a4:a4:cd:e6:a3:eb:85:53:d0:c5:42:bd:1f:2e:d1: eb:65:b4:c3:61:88:d6:a1:ec:1a:a5:bc:f2:9d:31: 89:34:37:06:e2:8b:73:22:1a:03:b9:ce:d5:72:a5: 8f:0b:ff:10:df:a2:fa:fb:85:4c:7b:4c:8e:2e:ef: 9a:89:31:78:4a:0a:16:3e:5f:2c:33:97:ba:a1:ed: 39:6a:91:c8:47:ca:8d:8b:b8:0e:50:89:73:54:8f: 35:7b:aa:e5:9f:ba:3e:b7:e7:42:76:c8:55:dc:9a: e3:55:cb:2e:3d:b3:b6:37:6e:20:34:f0:ac:88:20: c8:95:85:e5:be:88:c1:c0:75:7f:ab:89:ee:c9:9f: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:8F:74:7D:36:AD:8F:25:8B:ED:49:A0:39:E1:18:23:76:D4:3C X509v3 Authority Key Identifier: keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:eb:d7:a4:41:51:10:94:7f:c0:87:a1:5d:9b:52:13:42:91: 60:0d:79:3f:4a:7a:78:b1:aa:77:20:0b:fd:67:51:aa:13:d6: 84:72:4d:3f:11:86:b7:ec:ea:40:91:be:b9:80:33:37:b1:54: 24:ca:94:59:49:86:57:d6:aa:48:a0:05:95:f7:9f:f0:40:b5: 0d:89:ca:e1:66:73:7e:dd:3e:75:9a:a0:34:63:fc:c7:89:87: 01:3d:43:f6:6e:8f:24:ef:f8:a8:14:c2:88:09:24:10:9d:e6: b0:31:0c:64:0d:83:d0:6e:71:bf:81:b9:38:72:3c:84:14:f0: cb:db:b9:eb:97:0c:23:4b:33:b5:1d:52:6d:b6:2c:7c:f0:14: d7:e0:b0:31:28:48:4c:18:ab:10:c6:45:19:e1:f5:77:86:e9: 94:1e:5c:c7:f7:93:30:0e:9f:31:48:a2:14:16:0e:38:f1:95: fb:93:4c:fd:6d:d9:9e:95:da:84:fc:ba:31:38:05:a8:b0:d0: 72:2f:6d:36:fe:a5:62:d8:f3:e3:8b:dd:e5:81:17:4b:ae:fd: 6d:f1:81:43:4b:a4:bb:40:55:4d:cd:ac:22:19:cd:a9:8c:a6: 63:01:17:3f:0c:ef:1d:18:db:21:b4:3b:3c:22:da:92:83:0f: 39:80:2d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJJ5BZ8arG0G8RZtj1h3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4 MzRlMGYwHhcNMjUxMjIxMjMwMDMxWhcNMjUxMjIyMjMwMDMxWjAzMTEwLwYDVQQD Eyg3YWRmOGY3NDdkMzZhZDhmMjU4YmVkNDlhMDM5ZTExODIzNzZkNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dVGRLsOgvR0wJrfuJhR4i/rVV5X HTwQ4FQDToCdhVtgnwfaOyD3PNlsH0BZzjeFHvt3QOOFeIrghBH63LnVSLeacsdJ MHL+49ko7I8IKjnnGqorw+7reGt1jzGTSxD18oM7RhpBsHF62bpwIeVnL/1rX0wV ZoukpM3mo+uFU9DFQr0fLtHrZbTDYYjWoewapbzynTGJNDcG4otzIhoDuc7VcqWP C/8Q36L6+4VMe0yOLu+aiTF4SgoWPl8sM5e6oe05apHIR8qNi7gOUIlzVI81e6rl n7o+t+dCdshV3JrjVcsuPbO2N24gNPCsiCDIlYXlvojBwHV/q4nuyZ/BBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrfj3R9Nq2PJYvtSaA54RgjdtQ8MB8GA1UdIwQY MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1 LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHevXpEFR EJR/wIehXZtSE0KRYA15P0p6eLGqdyAL/WdRqhPWhHJNPxGGt+zqQJG+uYAzN7FU JMqUWUmGV9aqSKAFlfef8EC1DYnK4WZzft0+dZqgNGP8x4mHAT1D9m6PJO/4qBTC iAkkEJ3msDEMZA2D0G5xv4G5OHI8hBTwy9u565cMI0sztR1SbbYsfPAU1+CwMShI TBirEMZFGeH1d4bplB5cx/eTMA6fMUiiFBYOOPGV+5NM/W3ZnpXahPy6MTgFqLDQ ci9tNv6lYtjz44vd5YEXS679bfGBQ0uku0BVTc2sIhnNqYymYwEXPwzvHRjbIbQ7 PCLakoMPOYAtwQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:53:49 2025 by rpki-client