This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json) Hash identifier: IDdVPUZMAiH6K58UMnaKexz0b7jeXAbyBwOiBAi4RB4= Subject key identifier: 11:34:59:FB:FD:0A:6B:31:6B:14:0E:C3:24:59:1F:02:61:70:1D:37 Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Certificate serial: 019B292E69F0A9D11A084D68F10FDFB423EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 22:01:06 +0000 Manifest this update: Tue 16 Dec 2025 22:01:06 +0000 Manifest next update: Wed 17 Dec 2025 22:01:06 +0000 Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: t4NM3PI11JPiKw2fSnd80mMaIKXWe+T6EyPQEgV3elc=) 2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:69:f0:a9:d1:1a:08:4d:68:f1:0f:df:b4:23:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Validity Not Before: Dec 16 22:01:06 2025 GMT Not After : Dec 17 22:01:06 2025 GMT Subject: CN=113459fbfd0a6b316b140ec324591f0261701d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:94:87:07:1f:cb:8d:7f:8f:e2:a3:2b:a3: 6a:77:b1:a9:8e:71:6f:ea:24:52:e5:cd:32:8c:36: 40:42:2a:3a:a1:df:ee:15:b5:ba:4d:94:f0:be:92: a0:4e:e2:13:0d:fd:0b:4a:99:07:f1:5f:60:86:cf: 90:5c:9f:a0:b0:83:fd:d6:27:0e:16:fb:c3:c8:d2: 5d:62:50:33:e6:dd:91:57:7f:82:7c:de:ed:f0:c3: 8e:3e:36:41:89:38:90:10:17:9b:c4:c1:06:b3:0b: 70:32:81:8c:52:76:72:58:c7:ef:2a:a8:92:7b:e7: 5d:67:1c:aa:db:15:4d:64:da:4a:d7:fe:8a:3b:8e: eb:d4:e2:d8:56:40:15:7e:4e:15:09:63:8e:0e:ea: b8:03:2d:4c:9f:fd:0d:2e:f4:fd:5b:21:6a:3e:27: 7d:ad:87:7e:53:59:ec:1d:53:84:73:a0:4a:18:c4: 0d:e8:66:a9:63:d6:a3:d9:2c:14:a3:3e:76:9c:36: eb:14:c8:69:ac:71:ef:51:fd:fd:97:4a:57:ce:b4: 09:ea:ac:e0:26:54:6e:94:1c:ea:11:d9:2e:49:d1: e3:af:4e:3e:d6:3c:ad:8b:7a:9b:ff:f1:d3:9c:89: 66:7e:0d:79:df:58:09:7d:3b:28:73:da:c7:56:f0: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:59:FB:FD:0A:6B:31:6B:14:0E:C3:24:59:1F:02:61:70:1D:37 X509v3 Authority Key Identifier: keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:27:61:ce:18:eb:93:67:e8:36:2a:ae:a3:9a:75:ea:7b:fc: 2f:aa:2d:bb:ca:6d:f9:d2:52:51:4a:9b:a1:de:2e:75:c6:56: 07:e2:36:b9:6d:c4:ef:71:9e:d3:dc:eb:49:80:6a:92:af:bb: d3:bb:41:b3:0e:b2:9b:cb:cc:92:07:31:1d:99:74:12:d9:5c: a3:69:02:fe:de:76:2f:85:02:b2:9a:9e:20:3b:ae:97:6a:aa: 95:6d:eb:a6:e0:f2:1c:f7:0f:77:aa:08:28:45:3a:31:3f:8f: 64:c8:25:91:bd:5e:fa:f9:ac:76:d2:56:22:9a:95:d7:4a:9a: d3:02:e6:42:ad:72:56:08:c8:12:87:e9:13:ac:39:fa:2b:61: 57:d0:ad:66:e9:8f:43:14:de:bd:ae:c8:b6:bc:4e:8b:93:80: 89:6b:05:6c:64:77:d3:29:ba:2e:3c:35:dd:49:d7:a5:c2:3e: 1b:7b:48:71:f9:5e:6e:60:6c:3e:53:a5:ed:7f:42:92:0a:16: c9:fb:49:f6:0f:9d:e2:f9:cc:dd:f7:2a:93:35:84:fc:8e:62: a8:35:f7:7f:25:fa:f5:ae:24:19:42:5a:ef:8b:53:b1:86:c8: c9:01:d6:3b:e0:e2:ad:9d:91:af:48:07:44:36:fd:c2:14:20: 76:ca:df:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLmnwqdEaCE1o8Q/ftCPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj YzY0YTkwHhcNMjUxMjE2MjIwMTA2WhcNMjUxMjE3MjIwMTA2WjAzMTEwLwYDVQQD EygxMTM0NTlmYmZkMGE2YjMxNmIxNDBlYzMyNDU5MWYwMjYxNzAxZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QmUhwcfy41/j+KjK6Nqd7GpjnFv 6iRS5c0yjDZAQio6od/uFbW6TZTwvpKgTuITDf0LSpkH8V9ghs+QXJ+gsIP91icO FvvDyNJdYlAz5t2RV3+CfN7t8MOOPjZBiTiQEBebxMEGswtwMoGMUnZyWMfvKqiS e+ddZxyq2xVNZNpK1/6KO47r1OLYVkAVfk4VCWOODuq4Ay1Mn/0NLvT9WyFqPid9 rYd+U1nsHVOEc6BKGMQN6GapY9aj2SwUoz52nDbrFMhprHHvUf39l0pXzrQJ6qzg JlRulBzqEdkuSdHjr04+1jyti3qb//HTnIlmfg1531gJfTsoc9rHVvDygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE0Wfv9CmsxaxQOwyRZHwJhcB03MB8GA1UdIwQY MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALydhzhjr k2foNiquo5p16nv8L6otu8pt+dJSUUqbod4udcZWB+I2uW3E73Ge09zrSYBqkq+7 07tBsw6ym8vMkgcxHZl0Etlco2kC/t52L4UCspqeIDuul2qqlW3rpuDyHPcPd6oI KEU6MT+PZMglkb1e+vmsdtJWIpqV10qa0wLmQq1yVgjIEofpE6w5+ithV9CtZumP QxTeva7ItrxOi5OAiWsFbGR30ym6Ljw13UnXpcI+G3tIcflebmBsPlOl7X9CkgoW yftJ9g+d4vnM3fcqkzWE/I5iqDX3fyX69a4kGUJa74tTsYbIyQHWO+DirZ2Rr0gH RDb9whQgdsrfBA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:29:12 2025 by rpki-client