This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json) Hash identifier: iQ9rylnMGNi/3LA0IkqCwoUhIA78pFOmH5EAowe0q20= Subject key identifier: 48:4F:7A:7E:25:B0:54:CA:15:CC:C7:98:CC:3A:5E:80:74:92:11:E2 Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c Certificate serial: 019B5A5169A81BE9A722577B5C3D372F64A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft Manifest number: 0C0C Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: ugT8yIHiXIXHo9bduS1vwrOrlgKDYbLoDo20TIUgM1I=) 2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:69:a8:1b:e9:a7:22:57:7b:5c:3d:37:2f:64:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=484f7a7e25b054ca15ccc798cc3a5e80749211e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:97:5c:a5:2c:c5:fc:16:51:a6:ec:57:24: 36:b4:a0:41:6a:0d:61:c1:dd:9b:fb:3c:08:82:09: d7:8f:79:2e:35:8a:3f:11:6f:ea:00:e6:56:c2:f0: 34:8b:2f:59:04:83:c6:e6:9e:8e:e3:06:3a:2f:3d: 43:88:f1:c9:19:1c:7d:42:67:2a:72:a6:5b:63:ba: e5:bb:89:68:43:fb:ba:bd:23:07:db:8f:87:0b:bd: 8a:05:8b:2f:ac:1e:86:81:8e:95:e6:a0:32:4e:c5: 34:23:34:7d:54:c8:87:c4:68:47:2e:3a:24:54:33: 23:11:f5:93:ef:e5:35:a3:9e:db:38:58:d5:1c:be: d4:f9:cd:2e:d7:be:5c:96:fc:ef:5b:b0:df:db:7f: bf:60:52:65:c4:4f:15:f6:6c:ff:73:77:a9:9d:2f: bd:d5:16:f7:24:81:e8:7b:2f:e3:13:ad:8b:51:94: 4f:e6:d3:e5:bb:1b:43:61:12:4a:cc:b9:ad:1b:3d: 8e:96:80:01:6d:9a:68:92:e7:96:58:6d:91:34:57: 3d:64:9b:85:82:bb:f9:3f:9e:24:97:f1:0d:dd:91: 43:a0:d5:75:af:60:ba:80:e0:68:70:80:bb:67:52: b6:b4:12:7e:15:3d:f1:2f:c1:d4:99:53:2c:cb:b1: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:7A:7E:25:B0:54:CA:15:CC:C7:98:CC:3A:5E:80:74:92:11:E2 X509v3 Authority Key Identifier: keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:71:a8:ec:eb:2b:00:c2:11:3a:c0:06:4c:ad:28:5d:0b:55: ec:fd:4c:68:e4:ba:3b:a0:cb:2e:7d:19:0c:e0:88:e1:98:1e: 22:38:4e:15:0c:53:44:8f:7f:2c:1f:cd:8f:4d:7f:08:5b:3b: 4f:62:48:e0:92:4e:e4:d1:c9:9b:98:2f:f0:ae:1e:b1:80:e3: 4b:c4:3f:9f:cc:66:b6:d9:96:03:fc:86:7f:fa:e4:85:c6:17: 27:cf:2c:f6:99:7c:7c:a3:ad:90:4a:e3:7a:21:07:43:42:cc: 57:a0:03:06:5e:56:c2:8b:3e:e6:3d:fd:a9:6d:62:06:dd:41: 84:3e:7d:bc:68:48:f9:2b:7c:f4:db:2b:a6:91:92:ce:37:d1: 11:84:ad:61:6c:11:74:53:e1:a9:16:a5:48:2c:db:98:6a:2d: f5:44:70:f4:9d:12:12:2f:3b:88:0b:ea:b1:85:78:0e:88:cb: be:d8:e7:18:4b:c6:6d:3e:5d:e1:a9:7b:99:07:5b:d4:63:75: 2e:49:4f:7b:e4:f4:5a:98:83:1b:ba:6c:9f:bd:5d:08:61:7e: b9:7c:80:51:be:c1:52:e3:36:f2:c9:22:4c:45:1a:48:2b:45: aa:37:ad:95:17:ed:c8:d9:cd:d7:28:bc:8e:3c:b2:c7:8c:97: 1c:49:6f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWmoG+mnIld7XD03L2SmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTkyNGFkNTliNDU5MzU3YTE5ZWUwYTQ3ZjM3OTUzMGUy ZDI0NGMwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD Eyg0ODRmN2E3ZTI1YjA1NGNhMTVjY2M3OThjYzNhNWU4MDc0OTIxMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOXXKUsxfwWUabsVyQ2tKBBag1h wd2b+zwIggnXj3kuNYo/EW/qAOZWwvA0iy9ZBIPG5p6O4wY6Lz1DiPHJGRx9Qmcq cqZbY7rlu4loQ/u6vSMH24+HC72KBYsvrB6GgY6V5qAyTsU0IzR9VMiHxGhHLjok VDMjEfWT7+U1o57bOFjVHL7U+c0u175clvzvW7Df23+/YFJlxE8V9mz/c3epnS+9 1Rb3JIHoey/jE62LUZRP5tPluxtDYRJKzLmtGz2OloABbZpokueWWG2RNFc9ZJuF grv5P54kl/EN3ZFDoNV1r2C6gOBocIC7Z1K2tBJ+FT3xL8HUmVMsy7H7GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhPen4lsFTKFczHmMw6XoB0khHiMB8GA1UdIwQY MBaAFDOpJK1ZtFk1ehnuCkfzeVMOLSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQt ZWI3N2U5NTcxMTUyLzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQtZWI3N2U5NTcxMTUy LzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnGo7Osr AMIROsAGTK0oXQtV7P1MaOS6O6DLLn0ZDOCI4ZgeIjhOFQxTRI9/LB/Nj01/CFs7 T2JI4JJO5NHJm5gv8K4esYDjS8Q/n8xmttmWA/yGf/rkhcYXJ88s9pl8fKOtkErj eiEHQ0LMV6ADBl5Wwos+5j39qW1iBt1BhD59vGhI+St89NsrppGSzjfREYStYWwR dFPhqRalSCzbmGot9URw9J0SEi87iAvqsYV4DojLvtjnGEvGbT5d4al7mQdb1GN1 LklPe+T0WpiDG7psn71dCGF+uXyAUb7BUuM28skiTEUaSCtFqjetlRftyNnN1yi8 jjyyx4yXHElvlw== -----END CERTIFICATE-----Generated at Fri Dec 26 19:30:50 2025 by rpki-client