This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json) Hash identifier: zqhPDhfa7VlT+3K5zLroowu4hOthDwp9DacOGSsKwDs= Subject key identifier: 33:CF:1A:C7:8F:10:B5:8A:92:EB:80:C4:25:10:5F:31:0A:01:2A:1D Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Certificate serial: 019B0AB656FD89EA08B96EBEFD9B4F76E4BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 00:01:20 +0000 Manifest this update: Thu 11 Dec 2025 00:01:20 +0000 Manifest next update: Fri 12 Dec 2025 00:01:20 +0000 Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=) 2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: UCK/d59bmtJzNXo8hrhTovIkwv5tc5g3cBLq6o1cMaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b6:56:fd:89:ea:08:b9:6e:be:fd:9b:4f:76:e4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Validity Not Before: Dec 11 00:01:20 2025 GMT Not After : Dec 12 00:01:20 2025 GMT Subject: CN=33cf1ac78f10b58a92eb80c425105f310a012a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:b2:ec:a4:2e:10:38:ea:5b:7f:87:bd:a6: 07:ed:dc:b9:5c:c8:8c:f4:92:2b:2f:18:a6:15:ed: 89:26:aa:39:ed:13:03:02:bc:db:76:2e:41:8a:43: cf:43:1f:15:7b:d1:a0:f0:c9:3e:5f:c6:0c:b0:0c: de:0b:b2:3c:91:d6:b4:fd:00:8f:33:77:62:ef:9c: d1:f2:9f:7c:56:f9:35:54:c4:f5:70:41:f7:df:40: 86:ca:7a:3c:20:d6:10:fb:ad:37:0c:a3:02:3b:4a: 77:12:62:19:65:49:2f:cb:34:f3:57:d2:2c:a6:1f: 30:db:dc:44:6d:3d:a3:3a:82:4c:05:cf:5f:d1:a6: 1d:26:90:41:06:a2:fe:94:69:20:20:5b:e5:08:6c: ec:b7:2c:82:77:4e:52:0f:c5:94:38:af:90:a5:35: 98:5b:b9:2a:c9:81:02:29:d5:24:33:24:8d:77:57: de:53:ca:36:e3:d4:4f:c1:8a:91:a0:c6:df:c7:2f: 3b:bc:c8:d0:6d:20:58:d6:df:bf:4a:6e:aa:40:5a: 4f:7e:a9:b8:bc:e6:06:80:a8:2e:2d:ce:ff:69:0a: 45:fa:1b:4a:4e:21:d2:00:dc:33:23:05:8b:cd:69: 12:20:15:03:50:90:75:5a:30:1d:c1:06:b2:bf:c7: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:1A:C7:8F:10:B5:8A:92:EB:80:C4:25:10:5F:31:0A:01:2A:1D X509v3 Authority Key Identifier: keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:38:29:ff:be:fe:bf:92:4d:4f:76:cd:48:5d:9b:07:74:6b: 61:b1:0a:cb:ea:dd:4e:27:0c:4b:86:79:89:f8:1d:82:e5:14: 5d:bb:b8:9f:f9:00:85:2c:6c:48:14:e2:01:92:99:14:98:12: 26:52:a2:85:bc:e7:a8:e3:13:8f:12:84:b5:43:84:bf:db:bb: a9:d5:a6:6c:71:35:e0:8d:e8:3c:67:45:90:62:1a:8d:c7:83: ec:16:6a:2b:0c:ae:fc:0d:1c:f8:6b:b3:3d:ac:7e:d6:e2:63: 1a:a4:5f:3d:c4:71:49:6e:e8:33:0f:74:14:96:83:7b:63:eb: 53:16:f0:64:6a:0a:52:c9:cf:cf:2a:aa:5d:8c:bf:05:2f:6b: c2:82:be:9f:67:85:f7:e7:1e:54:a0:64:7a:6d:6e:23:12:d5: 8e:c9:0e:7d:ea:36:9e:45:28:47:48:e0:49:8f:95:cb:d9:69: d7:83:22:76:49:d2:35:c3:6e:16:bc:d6:3c:48:a2:91:ea:92: f8:5a:63:bd:3e:fc:7e:39:e6:83:91:62:52:c3:dd:76:50:78: 17:7a:ca:e2:a1:a6:81:77:f9:d2:5f:d8:09:99:d3:a7:d5:9c: 21:d6:88:e5:09:7a:64:d2:af:b5:ba:ae:3b:cb:a5:fc:c6:5c: d2:08:8b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtlb9ieoIuW6+/ZtPduS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0 NTNmNzEwHhcNMjUxMjExMDAwMTIwWhcNMjUxMjEyMDAwMTIwWjAzMTEwLwYDVQQD EygzM2NmMWFjNzhmMTBiNThhOTJlYjgwYzQyNTEwNWYzMTBhMDEyYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Cy7KQuEDjqW3+HvaYH7dy5XMiM 9JIrLximFe2JJqo57RMDArzbdi5BikPPQx8Ve9Gg8Mk+X8YMsAzeC7I8kda0/QCP M3di75zR8p98Vvk1VMT1cEH330CGyno8INYQ+603DKMCO0p3EmIZZUkvyzTzV9Is ph8w29xEbT2jOoJMBc9f0aYdJpBBBqL+lGkgIFvlCGzstyyCd05SD8WUOK+QpTWY W7kqyYECKdUkMySNd1feU8o249RPwYqRoMbfxy87vMjQbSBY1t+/Sm6qQFpPfqm4 vOYGgKguLc7/aQpF+htKTiHSANwzIwWLzWkSIBUDUJB1WjAdwQayv8dnvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPPGsePELWKkuuAxCUQXzEKASodMB8GA1UdIwQY MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTgp/77+ v5JNT3bNSF2bB3RrYbEKy+rdTicMS4Z5ifgdguUUXbu4n/kAhSxsSBTiAZKZFJgS JlKihbznqOMTjxKEtUOEv9u7qdWmbHE14I3oPGdFkGIajceD7BZqKwyu/A0c+Guz Pax+1uJjGqRfPcRxSW7oMw90FJaDe2PrUxbwZGoKUsnPzyqqXYy/BS9rwoK+n2eF 9+ceVKBkem1uIxLVjskOfeo2nkUoR0jgSY+Vy9lp14MidknSNcNuFrzWPEiikeqS +FpjvT78fjnmg5FiUsPddlB4F3rK4qGmgXf50l/YCZnTp9WcIdaI5Ql6ZNKvtbqu O8ul/MZc0giLZA== -----END CERTIFICATE-----Generated at Thu Dec 11 05:16:27 2025 by rpki-client