This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json) Hash identifier: UFBUEAoIwj6fAxzUAMCm7UfmXRyCDmGGGPUMMKJwMo8= Subject key identifier: 43:5A:66:EB:20:13:29:99:5C:8D:B9:0C:3B:DE:25:95:38:66:8A:D3 Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Certificate serial: 019B0AB67CB83D1176DB5F2543896B377D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft Manifest number: 0F2A Signing time: Thu 11 Dec 2025 00:01:30 +0000 Manifest this update: Thu 11 Dec 2025 00:01:30 +0000 Manifest next update: Fri 12 Dec 2025 00:01:30 +0000 Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: KJh6Xzw5XpAJj7kvvsqwFsEq2D8Bhmkhqx/rfM75Nxk=) 2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b6:7c:b8:3d:11:76:db:5f:25:43:89:6b:37:7d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Validity Not Before: Dec 11 00:01:30 2025 GMT Not After : Dec 12 00:01:30 2025 GMT Subject: CN=435a66eb201329995c8db90c3bde259538668ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:e9:6d:bf:4b:74:a1:ed:71:c5:57:bf:a0: 27:55:8d:e0:de:4c:16:2c:97:95:4f:03:a1:a0:2d: ff:48:9a:14:41:94:09:83:a5:64:30:c6:f5:28:87: b9:ec:dc:24:32:3c:d8:0b:b1:b6:bb:6f:17:9a:21: a4:8f:34:61:6f:d5:6b:10:5b:73:c9:21:43:97:27: bb:cc:76:19:1a:56:c4:dc:34:00:5d:c9:31:d3:f1: 91:97:84:1e:cf:ad:43:18:9f:3e:53:d7:91:08:b3: dd:03:bf:04:c1:6c:79:0b:89:62:b6:53:3f:07:ff: 44:5d:0f:78:79:19:e6:bd:43:61:e9:9c:85:e7:ca: e0:5a:5e:f6:14:cf:e5:74:40:dc:28:07:56:6b:a2: da:1c:c2:ae:36:08:14:1e:00:80:57:36:a4:10:0b: 27:c0:dd:7f:b6:71:ea:5a:2d:ad:7f:ac:35:88:45: 51:bf:33:2f:c8:f4:52:e3:32:5e:c4:85:dc:a5:69: 23:63:d6:17:e0:23:44:43:6f:5a:28:03:6e:98:c7: 2b:81:89:55:63:89:2a:3a:6c:14:7f:b9:f1:73:e4: e7:3e:76:dd:3d:54:6f:75:6a:f6:49:19:76:a4:74: c4:38:2a:8b:be:0f:bb:b2:d8:f0:a0:6e:e4:1a:e2: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5A:66:EB:20:13:29:99:5C:8D:B9:0C:3B:DE:25:95:38:66:8A:D3 X509v3 Authority Key Identifier: keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:44:1a:69:95:da:2f:d1:25:06:e0:b2:05:e3:ee:b1:d5:19: ee:ea:5e:9d:65:5f:3f:ed:82:af:53:37:75:10:d5:bd:b7:cf: 41:4d:70:9b:9a:8e:85:d3:cb:62:b3:26:96:97:82:b9:e4:1a: d1:42:ca:60:a9:f6:6f:d0:18:a7:f5:1f:60:7d:37:cc:1f:96: 4b:42:5f:d1:17:1b:00:7e:f1:d4:56:e5:55:bf:02:57:98:dc: 5b:3c:18:8f:9e:ac:3d:32:ce:d0:88:d9:3f:82:bd:ad:84:64: 4c:ca:84:19:60:d9:30:db:ff:18:18:a9:56:fb:01:4a:48:a3: d1:c2:a0:4a:6b:e1:37:f1:2a:e0:7a:fb:18:22:81:ae:e0:3d: 01:c8:1f:d6:e4:8c:ab:90:7b:65:db:e6:b2:8a:90:d0:e3:d5: 14:7f:46:0e:71:88:34:86:ad:4c:64:13:96:7f:f3:36:62:87: 83:72:af:7f:c9:69:98:38:0d:81:9a:b1:0f:9a:8a:b1:d3:e5: be:d3:b3:96:9c:c9:39:73:bf:f6:f2:f6:69:5a:e0:30:e2:cd: 2c:10:d3:94:80:8d:19:62:bf:a9:00:d5:1f:58:17:bc:36:a6: 21:27:09:16:d9:76:4a:fe:89:7c:cc:da:0c:e0:80:bc:2b:d5: d0:5e:90:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtny4PRF2218lQ4lrN30aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl NzVhYjMwHhcNMjUxMjExMDAwMTMwWhcNMjUxMjEyMDAwMTMwWjAzMTEwLwYDVQQD Eyg0MzVhNjZlYjIwMTMyOTk5NWM4ZGI5MGMzYmRlMjU5NTM4NjY4YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwunpbb9LdKHtccVXv6AnVY3g3kwW LJeVTwOhoC3/SJoUQZQJg6VkMMb1KIe57NwkMjzYC7G2u28XmiGkjzRhb9VrEFtz ySFDlye7zHYZGlbE3DQAXckx0/GRl4Qez61DGJ8+U9eRCLPdA78EwWx5C4litlM/ B/9EXQ94eRnmvUNh6ZyF58rgWl72FM/ldEDcKAdWa6LaHMKuNggUHgCAVzakEAsn wN1/tnHqWi2tf6w1iEVRvzMvyPRS4zJexIXcpWkjY9YX4CNEQ29aKANumMcrgYlV Y4kqOmwUf7nxc+TnPnbdPVRvdWr2SRl2pHTEOCqLvg+7stjwoG7kGuJk5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENaZusgEymZXI25DDveJZU4ZorTMB8GA1UdIwQY MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkQaaZXa L9ElBuCyBePusdUZ7upenWVfP+2Cr1M3dRDVvbfPQU1wm5qOhdPLYrMmlpeCueQa 0ULKYKn2b9AYp/UfYH03zB+WS0Jf0RcbAH7x1FblVb8CV5jcWzwYj56sPTLO0IjZ P4K9rYRkTMqEGWDZMNv/GBipVvsBSkij0cKgSmvhN/Eq4Hr7GCKBruA9Acgf1uSM q5B7ZdvmsoqQ0OPVFH9GDnGINIatTGQTln/zNmKHg3Kvf8lpmDgNgZqxD5qKsdPl vtOzlpzJOXO/9vL2aVrgMOLNLBDTlICNGWK/qQDVH1gXvDamIScJFtl2Sv6JfMza DOCAvCvV0F6QpA== -----END CERTIFICATE-----Generated at Thu Dec 11 05:20:22 2025 by rpki-client