This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: B/0SgrH8MFRK3c2fm9Erq4UkK/xHdpD0wLdewWoB+lA= Subject key identifier: AF:F2:DF:03:79:21:F7:C4:5E:3C:2B:15:4B:4C:FE:6A:73:2E:F5:E6 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019B326827C6EA3956F8A2C88855F8B6B5C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 17:00:45 +0000 Manifest this update: Thu 18 Dec 2025 17:00:45 +0000 Manifest next update: Fri 19 Dec 2025 17:00:45 +0000 Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: ysYJykdlCwcD5d42Vr7HEjAQUb33XJJwDMm1e3p0NJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:27:c6:ea:39:56:f8:a2:c8:88:55:f8:b6:b5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Dec 18 17:00:45 2025 GMT Not After : Dec 19 17:00:45 2025 GMT Subject: CN=aff2df037921f7c45e3c2b154b4cfe6a732ef5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:90:90:a6:2c:97:66:5e:52:4e:cf:58:71: bd:e3:d3:43:bb:e4:68:97:e5:ad:40:b5:13:3d:81: e5:90:60:31:9c:47:5c:7c:4f:af:29:d3:27:e8:39: 0a:52:c9:62:37:e9:8b:1d:5a:71:2f:5c:54:15:fe: 71:7c:78:34:9b:ea:39:7e:db:a0:a7:61:4a:e6:e6: f7:c4:a4:74:78:cc:ab:ab:2d:f3:df:dd:4a:87:f9: ef:06:38:43:98:05:21:69:98:4f:a8:44:f2:09:76: e3:55:2b:42:7b:c5:8b:e4:86:f8:a7:a7:7d:58:a1: 9b:42:65:71:a1:f2:38:7c:b0:82:0a:01:fa:a9:dd: 90:b4:53:6a:a0:9b:42:11:83:d7:ed:60:de:22:d0: f3:cd:3a:ea:1d:56:17:31:5b:c4:dd:0a:70:6f:05: 25:3c:76:0e:39:03:92:1e:43:b9:ae:28:76:f2:70: bf:8c:c8:70:64:3a:c7:a7:f6:45:00:3d:58:6f:c9: be:ff:24:80:ca:1b:7b:5e:2f:3c:c6:81:15:04:bc: ad:20:bb:fe:a1:54:5e:c1:91:d4:b8:a4:02:c3:18: 78:12:ce:69:89:c4:11:21:eb:ed:c2:74:21:e1:34: 99:9a:91:70:2a:5c:6c:7e:9a:8b:2d:d3:12:ad:95: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F2:DF:03:79:21:F7:C4:5E:3C:2B:15:4B:4C:FE:6A:73:2E:F5:E6 X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:61:23:e8:48:8a:9e:06:9e:bc:34:bf:10:a9:d4:52:a8:96: 74:e5:83:8d:2f:9e:55:fd:ac:af:57:ea:dd:ca:91:80:9f:04: b5:0b:2a:b7:fb:8e:50:8b:b5:15:1b:85:2f:6f:0a:e9:42:b2: a8:7c:52:fe:3b:0a:a4:65:8f:6c:3d:dd:c8:4e:70:1e:da:67: 64:77:3e:ef:4a:18:ef:f6:68:1e:57:70:19:a2:7c:82:43:61: a4:b4:3f:56:fc:32:35:0a:bd:2f:71:77:3e:56:93:12:85:74: f7:b9:0c:45:d2:cb:95:f2:61:f0:f6:b3:9b:3d:6a:da:5b:83: b0:3e:35:1a:c9:4d:c8:aa:98:ed:2d:79:82:b7:98:04:fa:c6: cd:f5:13:cb:33:1e:e0:2c:55:a4:a1:e6:84:4c:fc:c6:b6:0a: ac:70:b5:42:33:d2:72:78:57:05:61:9e:5c:f9:dc:3d:33:94: 05:9e:1d:11:25:5c:35:28:60:a2:b0:b6:82:10:f0:ec:1b:f7: b5:88:3b:db:79:04:9b:ad:6c:ce:77:d2:f4:19:f9:6e:44:53: cb:c8:c9:ae:1c:b8:56:6b:7d:1f:35:db:9b:f0:8f:48:7b:53: 0a:9d:69:d2:0e:db:a5:93:b2:29:0c:22:c3:c0:ab:d6:37:a5: 03:f7:4b:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaCfG6jlW+KLIiFX4trXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjUxMjE4MTcwMDQ1WhcNMjUxMjE5MTcwMDQ1WjAzMTEwLwYDVQQD EyhhZmYyZGYwMzc5MjFmN2M0NWUzYzJiMTU0YjRjZmU2YTczMmVmNWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtqQkKYsl2ZeUk7PWHG949NDu+Ro l+WtQLUTPYHlkGAxnEdcfE+vKdMn6DkKUsliN+mLHVpxL1xUFf5xfHg0m+o5ftug p2FK5ub3xKR0eMyrqy3z391Kh/nvBjhDmAUhaZhPqETyCXbjVStCe8WL5Ib4p6d9 WKGbQmVxofI4fLCCCgH6qd2QtFNqoJtCEYPX7WDeItDzzTrqHVYXMVvE3QpwbwUl PHYOOQOSHkO5rih28nC/jMhwZDrHp/ZFAD1Yb8m+/ySAyht7Xi88xoEVBLytILv+ oVRewZHUuKQCwxh4Es5picQRIevtwnQh4TSZmpFwKlxsfpqLLdMSrZVEVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/y3wN5IffEXjwrFUtM/mpzLvXmMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmEj6EiK ngaevDS/EKnUUqiWdOWDjS+eVf2sr1fq3cqRgJ8EtQsqt/uOUIu1FRuFL28K6UKy qHxS/jsKpGWPbD3dyE5wHtpnZHc+70oY7/ZoHldwGaJ8gkNhpLQ/VvwyNQq9L3F3 PlaTEoV097kMRdLLlfJh8Pazmz1q2luDsD41GslNyKqY7S15greYBPrGzfUTyzMe 4CxVpKHmhEz8xrYKrHC1QjPScnhXBWGeXPncPTOUBZ4dESVcNShgorC2ghDw7Bv3 tYg723kEm61sznfS9Bn5bkRTy8jJrhy4Vmt9HzXbm/CPSHtTCp1p0g7bpZOyKQwi w8Cr1jelA/dLIw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:22 2025 by rpki-client