This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json) Hash identifier: efp1Tt3/TrV4rbx/skBUb6M2yLk0NnBypXLofpJydhg= Subject key identifier: 50:BC:C4:4D:08:2C:97:7C:4C:AD:63:66:DB:EE:33:CD:3D:9C:83:DD Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B424A2B5CD0A729F939D4CD18D050FFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft Manifest number: 0C07 Signing time: Sun 21 Dec 2025 19:01:55 +0000 Manifest this update: Sun 21 Dec 2025 19:01:55 +0000 Manifest next update: Mon 22 Dec 2025 19:01:55 +0000 Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=) 2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: YCa01uwrGnTQL1nBC68YoP/YAf66OiLolLhRp4mj2TM=) 3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=) 4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=) 5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:2b:5c:d0:a7:29:f9:39:d4:cd:18:d0:50:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Dec 21 19:01:55 2025 GMT Not After : Dec 22 19:01:55 2025 GMT Subject: CN=50bcc44d082c977c4cad6366dbee33cd3d9c83dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:03:d5:b9:b7:28:b1:f5:de:b0:54:e2:8e: e9:f9:1e:59:37:d4:3e:c2:f8:b6:b2:b4:e8:2d:bf: 72:b7:99:75:4c:ae:74:6b:f9:4a:7c:01:54:1d:5d: e8:44:35:e8:5b:51:b5:19:ea:77:51:6a:63:65:43: ab:46:20:57:e8:a3:1e:b7:3b:82:7c:f5:40:0c:a7: a9:a7:7b:74:3f:fe:40:6c:84:5a:21:db:8d:24:5c: 38:a4:58:bc:26:f7:f3:37:49:c8:17:79:8e:c9:9a: b8:bb:23:15:11:91:2d:4a:59:0c:af:4f:89:66:ff: 82:ff:97:84:58:2a:b4:59:bf:70:e7:e5:60:76:5d: 72:e5:61:cd:8a:69:36:da:e5:46:b1:0b:be:a5:91: 4e:9d:c7:b5:31:8a:f5:f3:4b:37:60:a3:32:a0:9c: 96:39:f7:31:65:30:89:29:91:da:5d:62:27:3c:e2: 11:79:be:e2:e1:ff:6f:42:07:17:b4:74:9e:11:e3: a1:f2:f5:e5:e7:9b:c6:27:22:de:fa:71:e0:5e:6a: 33:25:27:cc:2a:e9:7a:a3:9d:7f:94:ab:f4:e2:36: 5d:62:48:af:5d:e7:31:e7:8d:c6:99:c1:b0:30:9a: ee:d6:f1:56:34:22:a6:9c:43:b4:86:c5:7b:d9:5a: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:C4:4D:08:2C:97:7C:4C:AD:63:66:DB:EE:33:CD:3D:9C:83:DD X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:92:c9:59:04:c6:42:ae:5a:8e:c9:9d:44:8f:6b:4b:14:50: 8b:c1:6a:e9:f8:63:79:48:0b:c3:52:b7:94:20:de:86:d7:4b: 25:03:1f:b9:4a:29:0d:53:30:db:10:88:13:bb:1f:58:86:09: b2:3a:83:fa:6b:1f:45:65:c2:a1:2d:f5:2b:e1:16:57:85:9f: 96:ce:ee:3e:50:28:14:5e:17:ff:79:c7:e2:34:60:3a:f7:78: e3:c5:e1:8d:b5:b2:7d:62:5e:b7:23:85:6b:7f:87:e4:3e:42: b8:b8:29:d8:99:99:cd:40:8c:89:11:d6:bd:cb:83:81:84:14: 77:2b:bd:56:fa:18:0d:74:8b:7b:23:d4:a9:e0:cb:99:c7:96: 55:26:4a:58:85:dd:4b:3c:cc:ce:3d:7b:82:e9:09:bc:27:17: 28:66:46:42:a7:e7:3f:14:00:59:f1:57:a7:ca:bb:72:02:9c: 9a:93:75:34:83:30:d7:1a:e5:43:80:a7:8e:31:8e:17:6c:7f: fd:8f:6b:15:a2:79:1a:38:88:c5:19:78:53:17:f1:dd:56:c0: fb:2b:8b:fe:c8:35:d2:6e:a1:6a:87:f5:1e:55:88:69:a8:ff: 2e:9f:e8:96:16:e4:f0:26:bc:73:09:48:ae:86:ea:0e:5a:f4: 6b:76:4e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSitc0Kcp+TnUzRjQUP/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjUxMjIxMTkwMTU1WhcNMjUxMjIyMTkwMTU1WjAzMTEwLwYDVQQD Eyg1MGJjYzQ0ZDA4MmM5NzdjNGNhZDYzNjZkYmVlMzNjZDNkOWM4M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaoD1bm3KLH13rBU4o7p+R5ZN9Q+ wvi2srToLb9yt5l1TK50a/lKfAFUHV3oRDXoW1G1Gep3UWpjZUOrRiBX6KMetzuC fPVADKepp3t0P/5AbIRaIduNJFw4pFi8JvfzN0nIF3mOyZq4uyMVEZEtSlkMr0+J Zv+C/5eEWCq0Wb9w5+Vgdl1y5WHNimk22uVGsQu+pZFOnce1MYr180s3YKMyoJyW OfcxZTCJKZHaXWInPOIReb7i4f9vQgcXtHSeEeOh8vXl55vGJyLe+nHgXmozJSfM Kul6o51/lKv04jZdYkivXecx543GmcGwMJru1vFWNCKmnEO0hsV72VonWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC8xE0ILJd8TK1jZtvuM809nIPdMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpLJWQTG Qq5ajsmdRI9rSxRQi8Fq6fhjeUgLw1K3lCDehtdLJQMfuUopDVMw2xCIE7sfWIYJ sjqD+msfRWXCoS31K+EWV4Wfls7uPlAoFF4X/3nH4jRgOvd448XhjbWyfWJetyOF a3+H5D5CuLgp2JmZzUCMiRHWvcuDgYQUdyu9VvoYDXSLeyPUqeDLmceWVSZKWIXd SzzMzj17gukJvCcXKGZGQqfnPxQAWfFXp8q7cgKcmpN1NIMw1xrlQ4CnjjGOF2x/ /Y9rFaJ5GjiIxRl4Uxfx3VbA+yuL/sg10m6haof1HlWIaaj/Lp/olhbk8Ca8cwlI robqDlr0a3ZOXA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:40 2025 by rpki-client