This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: ASpf1P0QFTQrMDgD7lUOGjpqok4mGughWlphddBttt4= Subject key identifier: 7F:D3:08:6D:D3:46:46:F9:25:03:BE:E8:9E:D8:DF:2E:B2:77:D0:25 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019B0DB7265331837B692E697AAA5DEDC6AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:01:05 +0000 Manifest this update: Thu 11 Dec 2025 14:01:05 +0000 Manifest next update: Fri 12 Dec 2025 14:01:05 +0000 Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: o2Dw4dBpJKFt4Cz9OUQu8LLQuDSCX8DtIoywxtYl6C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:26:53:31:83:7b:69:2e:69:7a:aa:5d:ed:c6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Dec 11 14:01:05 2025 GMT Not After : Dec 12 14:01:05 2025 GMT Subject: CN=7fd3086dd34646f92503bee89ed8df2eb277d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:cc:37:fb:7f:66:64:ee:b2:56:2a:49:68: ae:33:cb:ce:e4:97:a7:9b:d9:82:2b:82:fa:ae:a9: f8:f1:5b:d0:2d:0c:80:e8:4d:41:2a:55:4c:d2:8b: aa:61:13:73:e7:9a:33:1f:b9:cd:08:b3:0e:74:f3: 9f:4d:0d:22:7c:d4:ae:46:b1:1e:af:98:94:79:74: dc:4c:4b:c3:0a:31:0f:c5:bb:ab:d2:b0:23:ed:d3: fa:3e:c2:c5:be:b6:ec:9a:ee:2c:4e:60:c9:a8:be: 15:80:3b:2b:d0:44:af:7e:b3:d7:58:e7:66:ed:05: e7:8e:0d:28:e5:fa:9d:1c:c7:b5:30:e5:19:cb:a3: ca:1e:73:06:fa:c4:a3:12:43:32:d5:56:ef:c7:28: 1f:45:a7:3b:24:76:d1:9d:73:34:9f:90:90:20:ba: 13:e2:21:dd:b3:76:43:fc:d3:75:b9:e9:64:b9:60: 00:75:d3:29:fc:25:3f:20:07:eb:67:08:b2:d3:57: 0a:81:1b:5b:e6:b8:2a:c0:ff:a7:6f:9c:f4:eb:db: 66:35:77:50:8d:3c:e7:a5:88:6f:dd:2f:5e:41:f4: 01:19:13:0d:ea:94:04:7b:60:9f:29:a2:ec:94:db: ee:d1:f4:87:82:78:77:99:a2:0d:5e:5d:6a:f2:ef: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:08:6D:D3:46:46:F9:25:03:BE:E8:9E:D8:DF:2E:B2:77:D0:25 X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3b:a0:e9:fa:af:c2:68:c0:76:67:e5:c9:6e:08:90:1f:f8: e4:d5:8e:40:d4:08:a7:da:2d:e8:de:6f:70:f7:69:21:ff:45: 92:87:b8:22:80:e1:49:6a:f0:a6:5a:27:f5:f4:d9:51:aa:22: 3e:7a:78:30:d3:fd:96:d6:a2:17:48:be:a6:43:e1:b7:55:0a: a9:28:24:29:8a:a4:17:a5:a1:a1:7c:ab:f0:b0:92:24:9e:9d: 1f:2f:35:39:8f:dd:5d:23:64:a5:a0:bc:46:8a:8f:e9:57:b2: e7:23:10:15:57:db:2c:0b:96:a7:36:54:93:4e:d4:9f:26:35: 38:20:6a:50:ac:c2:a7:d6:47:c5:1e:06:84:f3:52:01:c8:66: 43:e0:94:20:19:15:df:c4:3d:14:76:b5:66:2c:10:ce:d0:71: 78:c0:c1:58:4e:6c:29:21:2b:49:ac:fc:38:15:59:0c:5f:c6: 09:0e:19:36:cd:b0:55:63:3f:13:09:3a:e5:b8:59:ec:64:87: c1:12:c0:63:15:17:b8:2d:d3:9f:30:db:a8:0c:a8:16:c2:03: b0:72:5a:4c:9b:c3:58:ca:7f:7a:70:b3:0f:04:94:26:aa:52: 0d:20:46:b6:af:e4:b6:d0:0f:a1:57:ef:a9:a8:45:12:fb:8b: 77:59:46:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtyZTMYN7aS5peqpd7cavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjUxMjExMTQwMTA1WhcNMjUxMjEyMTQwMTA1WjAzMTEwLwYDVQQD Eyg3ZmQzMDg2ZGQzNDY0NmY5MjUwM2JlZTg5ZWQ4ZGYyZWIyNzdkMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8DMN/t/ZmTuslYqSWiuM8vO5Jen m9mCK4L6rqn48VvQLQyA6E1BKlVM0ouqYRNz55ozH7nNCLMOdPOfTQ0ifNSuRrEe r5iUeXTcTEvDCjEPxbur0rAj7dP6PsLFvrbsmu4sTmDJqL4VgDsr0ESvfrPXWOdm 7QXnjg0o5fqdHMe1MOUZy6PKHnMG+sSjEkMy1VbvxygfRac7JHbRnXM0n5CQILoT 4iHds3ZD/NN1uelkuWAAddMp/CU/IAfrZwiy01cKgRtb5rgqwP+nb5z069tmNXdQ jTznpYhv3S9eQfQBGRMN6pQEe2CfKaLslNvu0fSHgnh3maINXl1q8u+nMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/TCG3TRkb5JQO+6J7Y3y6yd9AlMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDug6fqv wmjAdmflyW4IkB/45NWOQNQIp9ot6N5vcPdpIf9Fkoe4IoDhSWrwplon9fTZUaoi Pnp4MNP9ltaiF0i+pkPht1UKqSgkKYqkF6WhoXyr8LCSJJ6dHy81OY/dXSNkpaC8 RoqP6Vey5yMQFVfbLAuWpzZUk07UnyY1OCBqUKzCp9ZHxR4GhPNSAchmQ+CUIBkV 38Q9FHa1ZiwQztBxeMDBWE5sKSErSaz8OBVZDF/GCQ4ZNs2wVWM/Ewk65bhZ7GSH wRLAYxUXuC3TnzDbqAyoFsIDsHJaTJvDWMp/enCzDwSUJqpSDSBGtq/kttAPoVfv qahFEvuLd1lGUw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:58:06 2025 by rpki-client