This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json) Hash identifier: mRMKeNS+4ufKWDMoBGkhwdMLKdIEYAd2w9LP2f1DQD4= Subject key identifier: 59:EB:99:87:E4:D9:15:46:84:82:9F:7F:E4:90:2D:E6:8D:A4:DF:25 Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Certificate serial: 019B40C9414ACC4178480B8EF8319552297B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft Manifest number: 0F46 Signing time: Sun 21 Dec 2025 12:01:29 +0000 Manifest this update: Sun 21 Dec 2025 12:01:29 +0000 Manifest next update: Mon 22 Dec 2025 12:01:29 +0000 Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: YU+QVFzxgBVEMzhOv1IfAb2hy7rmRn1N1bWwMCHAMmg=) 2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:41:4a:cc:41:78:48:0b:8e:f8:31:95:52:29:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3 Validity Not Before: Dec 21 12:01:29 2025 GMT Not After : Dec 22 12:01:29 2025 GMT Subject: CN=59eb9987e4d9154684829f7fe4902de68da4df25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:a4:d5:b7:dc:a0:bc:43:64:a0:cd:4b:c3: 57:c7:21:5c:00:14:1a:c1:9a:9c:f0:9e:1d:d9:04: 42:37:cb:16:64:3e:1e:c7:6b:03:21:fe:7c:1b:c0: 1a:6a:ac:f0:34:b9:b3:56:23:0d:b6:43:dc:e8:9f: ec:ab:e1:d9:9b:55:c9:72:4b:d5:fb:d8:c0:c4:da: 65:ff:3d:fe:b3:44:c1:35:16:e1:fe:8a:e5:83:8b: 62:76:7d:c3:d9:55:85:be:03:8f:21:bf:3d:8a:32: 84:a1:2c:1e:58:af:51:14:01:6d:6c:9c:77:25:7d: 24:e0:80:ec:60:14:8c:c6:1d:e2:f7:a5:7f:13:67: 0a:ee:70:eb:52:d6:10:b3:7f:72:33:b6:d2:94:18: ad:1d:c5:5c:a1:d4:99:fa:50:7f:83:7c:a2:62:18: 26:67:af:f3:f5:80:b9:18:ac:f0:9c:9a:49:9c:d8: 0c:ed:a7:a9:c2:b0:9f:cc:84:e8:22:a5:32:33:38: cc:14:72:91:6a:af:1c:3d:e1:51:3d:37:09:1a:83: 3a:f8:7a:5d:fc:86:d9:87:6e:2f:ee:2f:72:3f:0f: b4:3f:21:fe:23:29:ae:2b:c8:1e:31:13:0c:2c:c4: 1e:7c:25:2b:27:a4:17:34:fd:d3:b5:72:c8:a1:a6: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EB:99:87:E4:D9:15:46:84:82:9F:7F:E4:90:2D:E6:8D:A4:DF:25 X509v3 Authority Key Identifier: keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d8:e0:2f:6f:41:99:01:a3:16:86:95:e2:6f:46:30:e6:89: 63:ee:10:7d:82:96:ef:40:7f:e0:14:1b:cd:b7:af:10:67:1b: 43:70:5e:1e:9a:ac:01:87:52:54:23:70:2c:24:24:dd:ad:72: 2d:1a:e3:95:79:7b:b5:e9:5f:bb:61:d0:32:cb:a2:e7:bc:e2: 47:c0:61:ae:91:fd:5a:62:98:dc:eb:f6:79:0c:f7:ca:6a:64: 4c:8e:ef:85:de:7f:44:32:ab:13:6f:c8:8d:21:ae:97:eb:69: d0:c0:ec:ce:62:7d:3f:0b:77:21:7e:bd:b2:32:85:6f:9a:df: b7:77:fb:cc:86:05:fb:56:14:43:0e:cb:86:04:b4:e6:da:7d: a1:a5:fa:1b:56:13:22:f2:fa:ab:48:cb:76:06:9d:32:1a:62: 66:bc:88:d4:f4:3d:e9:c1:cf:14:7e:06:d5:1b:fd:87:30:b2: bb:1e:27:ee:71:09:12:30:bd:42:99:92:ad:85:1a:ab:a9:56: b3:c2:b0:ee:5b:73:62:eb:73:a2:0f:e5:a4:48:38:24:da:33: 82:5f:4b:19:01:45:88:8a:16:33:a9:e3:71:74:69:3b:53:dd: 36:dc:d1:52:0e:f6:8d:90:98:fc:ff:3d:bc:15:2a:43:f8:48: 8e:5e:05:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyUFKzEF4SAuO+DGVUil7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl NzVhYjMwHhcNMjUxMjIxMTIwMTI5WhcNMjUxMjIyMTIwMTI5WjAzMTEwLwYDVQQD Eyg1OWViOTk4N2U0ZDkxNTQ2ODQ4MjlmN2ZlNDkwMmRlNjhkYTRkZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6uk1bfcoLxDZKDNS8NXxyFcABQa wZqc8J4d2QRCN8sWZD4ex2sDIf58G8AaaqzwNLmzViMNtkPc6J/sq+HZm1XJckvV +9jAxNpl/z3+s0TBNRbh/orlg4tidn3D2VWFvgOPIb89ijKEoSweWK9RFAFtbJx3 JX0k4IDsYBSMxh3i96V/E2cK7nDrUtYQs39yM7bSlBitHcVcodSZ+lB/g3yiYhgm Z6/z9YC5GKzwnJpJnNgM7aepwrCfzIToIqUyMzjMFHKRaq8cPeFRPTcJGoM6+Hpd /IbZh24v7i9yPw+0PyH+IymuK8geMRMMLMQefCUrJ6QXNP3TtXLIoaYiNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnrmYfk2RVGhIKff+SQLeaNpN8lMB8GA1UdIwQY MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtjgL29B mQGjFoaV4m9GMOaJY+4QfYKW70B/4BQbzbevEGcbQ3BeHpqsAYdSVCNwLCQk3a1y LRrjlXl7telfu2HQMsui57ziR8BhrpH9WmKY3Ov2eQz3ympkTI7vhd5/RDKrE2/I jSGul+tp0MDszmJ9Pwt3IX69sjKFb5rft3f7zIYF+1YUQw7LhgS05tp9oaX6G1YT IvL6q0jLdgadMhpiZryI1PQ96cHPFH4G1Rv9hzCyux4n7nEJEjC9QpmSrYUaq6lW s8Kw7ltzYutzog/lpEg4JNozgl9LGQFFiIoWM6njcXRpO1PdNtzRUg72jZCY/P89 vBUqQ/hIjl4FkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:50:44 2025 by rpki-client