This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json) Hash identifier: HMoCsDYXmNVxzdvmV4G9SU19SACjZqt4owWLj64B0Qw= Subject key identifier: 21:61:23:23:64:63:57:0E:D7:53:8C:7B:A5:0D:DF:11:24:B0:D7:18 Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019B066AFC77406689E8C699BDB25FFDF1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft Manifest number: 0E3C Signing time: Wed 10 Dec 2025 04:00:33 +0000 Manifest this update: Wed 10 Dec 2025 04:00:33 +0000 Manifest next update: Thu 11 Dec 2025 04:00:33 +0000 Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: bIqzkaaN/7raJ37QR1u945jvwFuzul/6yexgjqfc9G0=) 2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=) 3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=) 4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6a:fc:77:40:66:89:e8:c6:99:bd:b2:5f:fd:f1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Dec 10 04:00:33 2025 GMT Not After : Dec 11 04:00:33 2025 GMT Subject: CN=216123236463570ed7538c7ba50ddf1124b0d718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:b9:33:6d:3c:fd:02:25:fb:9a:bd:cd:35: 93:c1:c9:13:a1:a0:ca:e0:5e:5a:e1:db:60:55:22: cc:ea:b2:24:8a:e4:aa:4f:01:a6:8c:ed:6c:da:4b: d4:e3:46:67:6a:da:ec:a0:1b:e6:e8:8f:f5:c6:71: 95:d9:0d:fd:41:0c:a7:c9:14:e6:8f:f5:69:b3:f0: e0:c6:03:fc:16:dd:49:67:3e:1a:cd:42:b7:79:b0: f7:06:39:78:a6:16:46:cf:b3:56:31:0b:f7:d7:10: 73:76:8e:4a:02:16:6c:34:c6:df:ed:cb:02:f5:4c: b2:2d:f4:13:6f:4e:b2:5c:94:c2:a1:c7:91:bd:da: 0e:5d:bc:49:ae:69:16:a4:95:01:b1:0c:9a:20:69: 8a:d3:33:ce:66:b2:5e:83:04:69:7c:ad:15:db:95: 9a:f4:cf:6e:9e:3e:d3:81:5e:73:0f:03:66:1b:c1: b0:77:49:52:a3:90:77:2a:61:b4:c1:44:5d:2f:ab: c5:8f:e7:19:da:13:ee:be:ff:55:34:e4:1b:4c:f1: 2c:81:5c:05:6c:c5:c7:57:4a:c6:05:3f:be:24:99: a7:76:60:92:24:81:2a:30:aa:40:df:98:03:ac:4d: 78:68:89:8d:61:69:ed:88:0d:8b:9d:27:e9:4d:52: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:23:23:64:63:57:0E:D7:53:8C:7B:A5:0D:DF:11:24:B0:D7:18 X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a0:8d:2e:fb:cf:e0:86:8e:86:91:08:18:08:0e:be:9e:45: 0a:d2:71:86:33:37:31:fa:c2:c1:a5:e1:93:6e:0e:92:41:ef: 69:aa:bd:62:ae:e2:32:e0:96:ae:4e:89:6e:c6:cb:d8:f7:84: 70:92:13:15:16:77:ba:93:fe:a7:5b:4f:5a:b7:02:3a:c7:05: b4:bd:a3:27:29:6c:61:8a:cb:d1:eb:44:33:78:4c:08:ab:19: 3c:bb:f6:1a:9b:bc:92:0c:23:68:90:52:62:33:68:ed:7c:c8: 1a:5f:35:63:c4:2c:c7:5c:d6:34:c6:13:7e:fe:60:41:19:01: 05:07:0a:22:d1:df:e8:a0:2c:92:a4:3b:32:e9:85:6f:90:79: 81:a0:7c:ab:66:41:22:6c:16:48:7e:f8:14:8b:41:f2:3d:c2: 26:c6:d1:e9:b4:40:c5:a9:d1:6e:04:fc:23:fe:70:a4:8c:c8: 8f:50:1b:8c:26:99:b8:1c:c7:b5:56:55:45:4f:bd:d9:e9:b8: 38:14:eb:69:97:48:35:04:83:1e:04:70:d1:87:9c:1c:4d:7e: 18:94:c7:7b:3d:08:c0:21:f0:d1:db:03:4b:03:0a:4a:39:8a: af:e0:0c:a2:59:d9:64:b6:fa:05:df:ec:2e:53:d4:fe:3a:4d: a6:1c:86:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGavx3QGaJ6MaZvbJf/fGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjUxMjEwMDQwMDMzWhcNMjUxMjExMDQwMDMzWjAzMTEwLwYDVQQD EygyMTYxMjMyMzY0NjM1NzBlZDc1MzhjN2JhNTBkZGYxMTI0YjBkNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjS5M208/QIl+5q9zTWTwckToaDK 4F5a4dtgVSLM6rIkiuSqTwGmjO1s2kvU40ZnatrsoBvm6I/1xnGV2Q39QQynyRTm j/Vps/DgxgP8Ft1JZz4azUK3ebD3Bjl4phZGz7NWMQv31xBzdo5KAhZsNMbf7csC 9UyyLfQTb06yXJTCoceRvdoOXbxJrmkWpJUBsQyaIGmK0zPOZrJegwRpfK0V25Wa 9M9unj7TgV5zDwNmG8Gwd0lSo5B3KmG0wURdL6vFj+cZ2hPuvv9VNOQbTPEsgVwF bMXHV0rGBT++JJmndmCSJIEqMKpA35gDrE14aImNYWntiA2LnSfpTVIbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFhIyNkY1cO11OMe6UN3xEksNcYMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6CNLvvP 4IaOhpEIGAgOvp5FCtJxhjM3MfrCwaXhk24OkkHvaaq9Yq7iMuCWrk6JbsbL2PeE cJITFRZ3upP+p1tPWrcCOscFtL2jJylsYYrL0etEM3hMCKsZPLv2Gpu8kgwjaJBS YjNo7XzIGl81Y8Qsx1zWNMYTfv5gQRkBBQcKItHf6KAskqQ7MumFb5B5gaB8q2ZB ImwWSH74FItB8j3CJsbR6bRAxanRbgT8I/5wpIzIj1AbjCaZuBzHtVZVRU+92em4 OBTraZdINQSDHgRw0YecHE1+GJTHez0IwCHw0dsDSwMKSjmKr+AMolnZZLb6Bd/s LlPU/jpNphyGfw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:50:54 2025 by rpki-client