This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json) Hash identifier: T/9bY8N/sInA4gOB+dv6j495FXGieDMIehXNWkN4u4I= Subject key identifier: E9:88:B9:BD:B9:6F:2C:43:79:25:20:89:E6:C4:0A:AF:0D:A6:DC:E0 Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7 Certificate serial: 019AFF8E0550EEB8F986E121AD48E34EDC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft Manifest number: 0A09 Signing time: Mon 08 Dec 2025 20:01:28 +0000 Manifest this update: Mon 08 Dec 2025 20:01:28 +0000 Manifest next update: Tue 09 Dec 2025 20:01:28 +0000 Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: /tJrZErSt/enWo4X8hrlohIk0pXSFX3mLOeQCQ2rNnM=) 2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=) 3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:8e:05:50:ee:b8:f9:86:e1:21:ad:48:e3:4e:dc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7 Validity Not Before: Dec 8 20:01:28 2025 GMT Not After : Dec 9 20:01:28 2025 GMT Subject: CN=e988b9bdb96f2c4379252089e6c40aaf0da6dce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:c2:c7:59:28:77:e8:9e:b9:63:3d:80:b3: 03:87:a1:28:01:1d:00:b3:3a:1b:fb:d4:3b:6c:9b: ec:db:56:95:0b:94:04:59:8b:73:ac:8b:4f:19:7d: 55:7c:39:2a:86:f0:24:92:f2:7c:eb:8c:b7:6c:91: 37:f5:10:ea:5e:26:2c:79:87:2b:bb:00:1d:be:83: 6b:23:5e:11:3b:bf:54:12:eb:38:f8:20:b4:e7:ac: 36:e8:a7:f3:17:25:76:8b:f8:6d:d1:fe:55:54:d8: 73:44:b0:75:32:52:5d:87:4c:28:82:2a:52:fb:e8: 8d:a4:19:ad:49:55:4f:eb:ff:4c:23:bd:06:a8:92: 6c:6d:03:33:d5:74:73:5f:a6:97:45:f0:76:0f:dc: f5:4a:e6:07:18:f4:f7:03:e2:40:bb:76:cd:c4:f4: 84:cb:16:c8:0e:e5:05:63:31:fe:42:10:45:1f:b5: 6e:60:64:c7:e2:7d:cd:ab:f6:8c:61:6f:69:25:de: 59:99:ea:57:7e:ec:ca:5b:da:b0:f4:c7:15:ec:a6: ff:3d:3a:45:66:6a:ea:81:0a:ba:68:06:ea:b4:6b: f5:93:89:91:87:cd:f8:10:d9:30:af:50:60:17:7b: 08:40:17:ba:f0:a5:5a:7c:df:9b:3e:6f:12:2f:7f: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:B9:BD:B9:6F:2C:43:79:25:20:89:E6:C4:0A:AF:0D:A6:DC:E0 X509v3 Authority Key Identifier: keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:5e:ac:34:5e:9e:52:9d:e6:36:d2:3e:c7:fc:c7:0f:bc:35: 59:34:61:cb:df:c0:b0:08:ed:73:76:08:d4:df:5a:35:14:c3: 11:13:37:d4:27:72:f1:fa:2a:fb:85:c9:ab:77:81:53:1f:6f: 6a:43:77:68:67:b3:f7:e3:77:29:6e:44:09:88:e5:d9:93:5d: fc:e7:03:10:08:5d:29:d9:ed:80:68:48:c2:30:16:c9:b5:43: 82:99:63:e2:9a:45:51:dd:09:fc:ba:94:74:c4:bb:cc:2f:52: fe:29:b5:55:90:c9:07:e4:1a:6f:96:3f:37:60:d1:c8:8d:09: 91:03:55:df:10:0e:6d:9e:5d:ae:ea:6a:92:89:ca:a0:85:d5: 01:92:5a:12:ad:85:25:bb:28:c9:ce:09:cc:22:0f:e8:78:df: be:b7:f0:5a:18:a4:39:ba:20:64:ce:58:f9:be:96:3f:09:f0: d7:54:61:01:0d:b8:ac:15:96:72:ed:5b:f8:63:a7:03:17:87: 12:5d:11:4c:84:cd:4e:fe:95:7d:1e:ce:38:f8:ab:b9:5b:76: fc:5a:38:9e:4b:a6:e6:65:be:f9:e6:7e:71:aa:f2:cf:a3:23: 7c:da:6a:d9:53:05:f7:a0:83:89:55:c1:f7:d9:a1:09:ae:b5: 53:2d:9d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr/jgVQ7rj5huEhrUjjTtwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy MTVhZTcwHhcNMjUxMjA4MjAwMTI4WhcNMjUxMjA5MjAwMTI4WjAzMTEwLwYDVQQD EyhlOTg4YjliZGI5NmYyYzQzNzkyNTIwODllNmM0MGFhZjBkYTZkY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3bCx1kod+ieuWM9gLMDh6EoAR0A szob+9Q7bJvs21aVC5QEWYtzrItPGX1VfDkqhvAkkvJ864y3bJE39RDqXiYseYcr uwAdvoNrI14RO79UEus4+CC056w26KfzFyV2i/ht0f5VVNhzRLB1MlJdh0wogipS ++iNpBmtSVVP6/9MI70GqJJsbQMz1XRzX6aXRfB2D9z1SuYHGPT3A+JAu3bNxPSE yxbIDuUFYzH+QhBFH7VuYGTH4n3Nq/aMYW9pJd5ZmepXfuzKW9qw9McV7Kb/PTpF ZmrqgQq6aAbqtGv1k4mRh834ENkwr1BgF3sIQBe68KVafN+bPm8SL3+2BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmIub25byxDeSUgiebECq8NptzgMB8GA1UdIwQY MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq16sNF6e Up3mNtI+x/zHD7w1WTRhy9/AsAjtc3YI1N9aNRTDERM31Cdy8foq+4XJq3eBUx9v akN3aGez9+N3KW5ECYjl2ZNd/OcDEAhdKdntgGhIwjAWybVDgplj4ppFUd0J/LqU dMS7zC9S/im1VZDJB+Qab5Y/N2DRyI0JkQNV3xAObZ5drupqkonKoIXVAZJaEq2F Jbsoyc4JzCIP6HjfvrfwWhikObogZM5Y+b6WPwnw11RhAQ24rBWWcu1b+GOnAxeH El0RTITNTv6VfR7OOPiruVt2/Fo4nkum5mW++eZ+caryz6MjfNpq2VMF96CDiVXB 99mhCa61Uy2d+g== -----END CERTIFICATE-----Generated at Mon Dec 8 23:54:35 2025 by rpki-client