This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json) Hash identifier: Q138QPIgpSc6uBQbCokUsHmGV2cdWpfuqwabamBYIg0= Subject key identifier: CF:3D:37:24:5B:9A:79:D5:6C:B3:12:A1:1B:45:AD:68:9D:0C:57:9E Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03 Certificate serial: 019B37FC944A9F1A2A099EC4F8BB3B317F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft Manifest number: 039F Signing time: Fri 19 Dec 2025 19:00:58 +0000 Manifest this update: Fri 19 Dec 2025 19:00:58 +0000 Manifest next update: Sat 20 Dec 2025 19:00:58 +0000 Files and hashes: 1: 4stdDE5Ol23RnfTsQDEl2PLTvqY.roa (hash: H7ciCHF9IxH4VLrZphwDQeEj42rPy6UE+yWgXUd3mSE=) 2: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=) 3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: +5xQ/tqeeqN0v90k+dh6zApRV/216VaZzYIS/9+xkqw=) 4: YCOxnrJZzRohN18jKfSDMAOgQUI.roa (hash: /PrVwAluwlwegI08mKBtFGWqwyRlaqAj4wNKvuzMcSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:94:4a:9f:1a:2a:09:9e:c4:f8:bb:3b:31:7f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03 Validity Not Before: Dec 19 19:00:58 2025 GMT Not After : Dec 20 19:00:58 2025 GMT Subject: CN=cf3d37245b9a79d56cb312a11b45ad689d0c579e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:85:16:f2:ac:cd:fb:aa:02:90:dd:cc:77: 57:12:88:fb:a6:b1:30:16:99:86:2f:32:50:1b:b2: 1c:28:3a:71:47:3f:6c:2a:3c:53:f3:84:e9:c0:fd: ef:d0:4d:44:14:a8:5b:06:64:60:41:44:75:38:cb: 5e:3f:c0:0c:a6:ae:62:9b:8e:03:a0:fa:5e:a0:1a: 63:ab:ca:52:42:00:39:eb:10:07:de:a4:0c:3d:44: 60:0b:74:70:45:6e:7c:d8:79:3d:5c:2b:68:37:c2: b5:ea:81:33:0b:33:41:e0:92:52:1c:f5:ec:e6:97: 56:23:fd:e3:55:a6:d2:42:79:eb:e4:52:c7:5c:34: 20:bf:b4:28:36:2a:d5:d4:3e:c2:ae:21:62:60:fd: b9:2f:4a:7d:38:aa:bb:17:4f:a6:3d:57:81:0f:37: 1f:39:c3:b5:1d:1b:26:79:b8:dc:f3:b9:f5:c2:51: 79:89:ac:37:40:ef:68:74:d2:7b:79:3e:59:a8:3f: 6b:f4:ce:45:b7:0e:a3:2a:fc:5e:af:22:92:db:a3: e2:34:4b:ad:ba:a5:c8:42:32:d1:e4:a3:78:de:d2: 85:ef:45:3e:25:6d:02:c2:77:56:81:74:01:2c:08: aa:b2:f5:c2:00:d8:31:6d:f5:39:12:dd:0f:a7:3d: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:37:24:5B:9A:79:D5:6C:B3:12:A1:1B:45:AD:68:9D:0C:57:9E X509v3 Authority Key Identifier: keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:3d:74:cc:86:c1:e5:f6:33:5d:d3:7c:d8:46:be:32:da: e1:0a:08:58:2d:a6:90:bc:3c:45:68:78:5b:51:18:7f:48:44: b1:31:63:1e:38:6d:ba:39:01:20:98:01:26:c9:05:8e:97:e9: b8:7a:92:c4:35:73:8c:4f:5c:e5:ac:54:04:8b:af:6e:a0:e9: db:1f:00:9f:94:c3:6d:c1:ca:d7:53:be:2e:32:1e:79:9a:b8: 88:c0:30:c1:63:e3:cb:2e:05:b8:54:44:1b:ff:ef:b1:9e:8f: 00:63:87:22:d3:cf:c0:de:0c:e2:72:d9:c9:b4:49:05:b1:0f: 29:d2:a5:32:34:9d:cd:ec:fa:d5:f4:11:e1:06:6a:59:be:58: 6c:e3:b2:60:b0:ff:99:49:1d:29:ed:8d:c2:8b:04:6e:97:b3: f3:c3:78:2c:6d:2c:a0:59:c6:7b:07:dd:05:1c:a2:4b:53:0f: aa:a4:20:4b:81:ee:44:57:f6:77:e8:af:72:21:40:e8:82:81: a5:d8:fc:09:e5:5e:66:16:9b:d7:63:16:b6:c3:9b:00:80:04: 98:24:ba:a8:ae:26:2b:d5:89:e4:f3:7e:a6:29:2f:83:6f:a0: 83:22:55:7d:18:70:ad:3b:fe:e2:da:12:d3:dc:c4:e6:a5:81: 28:82:30:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/JRKnxoqCZ7E+Ls7MX9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi MjFiMDMwHhcNMjUxMjE5MTkwMDU4WhcNMjUxMjIwMTkwMDU4WjAzMTEwLwYDVQQD EyhjZjNkMzcyNDViOWE3OWQ1NmNiMzEyYTExYjQ1YWQ2ODlkMGM1NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DCFFvKszfuqApDdzHdXEoj7prEw FpmGLzJQG7IcKDpxRz9sKjxT84TpwP3v0E1EFKhbBmRgQUR1OMteP8AMpq5im44D oPpeoBpjq8pSQgA56xAH3qQMPURgC3RwRW582Hk9XCtoN8K16oEzCzNB4JJSHPXs 5pdWI/3jVabSQnnr5FLHXDQgv7QoNirV1D7CriFiYP25L0p9OKq7F0+mPVeBDzcf OcO1HRsmebjc87n1wlF5iaw3QO9odNJ7eT5ZqD9r9M5Ftw6jKvxeryKS26PiNEut uqXIQjLR5KN43tKF70U+JW0CwndWgXQBLAiqsvXCANgxbfU5Et0Ppz29ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM89NyRbmnnVbLMSoRtFrWidDFeeMB8GA1UdIwQY MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt ZDU0NzE4NTUxMmRlLzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7U9dMyG weX2M13TfNhGvjLa4QoIWC2mkLw8RWh4W1EYf0hEsTFjHjhtujkBIJgBJskFjpfp uHqSxDVzjE9c5axUBIuvbqDp2x8An5TDbcHK11O+LjIeeZq4iMAwwWPjyy4FuFRE G//vsZ6PAGOHItPPwN4M4nLZybRJBbEPKdKlMjSdzez61fQR4QZqWb5YbOOyYLD/ mUkdKe2NwosEbpez88N4LG0soFnGewfdBRyiS1MPqqQgS4HuRFf2d+ivciFA6IKB pdj8CeVeZhab12MWtsObAIAEmCS6qK4mK9WJ5PN+pikvg2+ggyJVfRhwrTv+4toS 09zE5qWBKIIwOg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:01 2025 by rpki-client