This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json) Hash identifier: CY2be48u7fnUOPGKTnjgLJ+0jssNeWd88vhEIdPSE04= Subject key identifier: F4:2D:F2:16:A3:21:65:81:43:2B:04:00:95:B1:DE:E0:DE:86:CC:AD Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Certificate serial: 019B2174AC26D49EF66E8C2898E64BA91CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft Manifest number: 0CFA Signing time: Mon 15 Dec 2025 10:00:52 +0000 Manifest this update: Mon 15 Dec 2025 10:00:52 +0000 Manifest next update: Tue 16 Dec 2025 10:00:52 +0000 Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: b0h99v6U1U2+ukilCytUMzVunOEzw9K+AjmD8K8HT+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:ac:26:d4:9e:f6:6e:8c:28:98:e6:4b:a9:1c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e Validity Not Before: Dec 15 10:00:52 2025 GMT Not After : Dec 16 10:00:52 2025 GMT Subject: CN=f42df216a3216581432b040095b1dee0de86ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:10:0b:54:f2:86:35:a5:37:44:78:2e:5f: 8f:a8:c3:df:ec:09:1b:7b:f2:b5:58:e2:55:41:56: df:1a:cf:12:39:4c:88:da:2c:b0:32:0d:fd:c8:aa: ab:17:da:bd:43:12:b1:f7:0a:7c:b6:0e:2c:a1:25: 09:40:a0:78:f4:47:9c:02:9d:e5:ca:6f:c6:c1:2a: 91:f7:95:a5:a7:07:7e:ef:96:e4:1e:6e:9c:41:5a: 9d:cc:32:a4:5e:40:71:8a:9a:9b:86:55:22:ef:02: 0e:5f:25:a0:b9:d9:be:79:22:ad:c3:08:3d:eb:7e: 4b:f5:03:5a:42:cf:a0:7f:34:2d:7b:6b:6f:15:de: 12:33:31:79:c8:46:99:2a:03:4c:16:46:d6:a3:20: 72:25:ad:30:44:da:ee:37:43:4e:23:0b:af:7f:a9: aa:cf:c9:f0:e3:61:7f:4c:6c:12:c1:28:f2:6f:7b: 91:a0:49:e1:18:0f:04:77:a9:46:bd:a2:96:58:f5: ff:f8:ac:ad:2d:44:b0:08:47:b4:dd:04:55:4c:2b: ac:89:b8:15:1e:46:af:5c:2e:b0:03:b4:3f:3d:26: f8:f0:85:72:1a:c8:d2:9b:b7:51:47:ff:7f:23:36: e8:77:0c:45:15:a5:ff:b7:1b:99:fb:14:cf:24:54: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:F2:16:A3:21:65:81:43:2B:04:00:95:B1:DE:E0:DE:86:CC:AD X509v3 Authority Key Identifier: keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:e7:ac:db:be:30:dc:f7:cb:c6:d1:bf:5c:da:62:85:72: 22:9a:e2:d9:8c:21:90:69:b8:41:5d:f5:4c:d6:fd:f7:1f:d9: 63:47:da:1c:7f:0e:a3:e2:94:85:05:29:9c:b1:33:34:6d:8c: 11:bf:16:ab:1b:71:96:97:af:ba:cc:eb:cf:e2:ba:d4:98:d0: f8:7a:86:61:bc:69:c5:3a:72:02:11:a5:3b:a9:76:5e:a2:1d: 61:e4:19:7e:00:ad:63:94:e9:33:69:ca:b6:dd:e5:cd:ba:e2: 1d:97:2b:d9:a9:04:98:f7:d3:b7:c1:8b:b2:54:33:e9:bc:a1: 60:a5:57:f3:b0:9a:79:23:07:2c:e2:e6:06:45:3f:3c:1d:e4: dd:c7:16:e3:2d:2c:72:ff:b1:d6:48:f2:3f:5a:ed:56:fe:af: 52:25:2b:cb:3b:2b:c3:03:22:75:5e:82:a1:2c:df:b3:db:cc: 21:cf:70:58:80:d7:58:8b:47:28:68:22:75:bb:0c:08:a4:63: b3:d4:44:a3:11:dc:1f:51:ff:bc:7d:cb:96:74:ea:f1:59:a8: 95:0a:6e:3f:92:db:cd:1b:f6:77:4a:1b:79:ce:c7:61:65:67: 1f:66:04:32:58:79:d8:1b:5b:5d:9a:8e:04:5f:00:20:4f:b1: 44:f4:70:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdKwm1J72bowomOZLqRzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw MzljNGUwHhcNMjUxMjE1MTAwMDUyWhcNMjUxMjE2MTAwMDUyWjAzMTEwLwYDVQQD EyhmNDJkZjIxNmEzMjE2NTgxNDMyYjA0MDA5NWIxZGVlMGRlODZjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy44QC1TyhjWlN0R4Ll+PqMPf7Akb e/K1WOJVQVbfGs8SOUyI2iywMg39yKqrF9q9QxKx9wp8tg4soSUJQKB49EecAp3l ym/GwSqR95Wlpwd+75bkHm6cQVqdzDKkXkBxipqbhlUi7wIOXyWgudm+eSKtwwg9 635L9QNaQs+gfzQte2tvFd4SMzF5yEaZKgNMFkbWoyByJa0wRNruN0NOIwuvf6mq z8nw42F/TGwSwSjyb3uRoEnhGA8Ed6lGvaKWWPX/+KytLUSwCEe03QRVTCusibgV HkavXC6wA7Q/PSb48IVyGsjSm7dRR/9/IzbodwxFFaX/txuZ+xTPJFQPBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQt8hajIWWBQysEAJWx3uDehsytMB8GA1UdIwQY MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbbnrNu+ MNz3y8bRv1zaYoVyIpri2YwhkGm4QV31TNb99x/ZY0faHH8Oo+KUhQUpnLEzNG2M Eb8Wqxtxlpevuszrz+K61JjQ+HqGYbxpxTpyAhGlO6l2XqIdYeQZfgCtY5TpM2nK tt3lzbriHZcr2akEmPfTt8GLslQz6byhYKVX87CaeSMHLOLmBkU/PB3k3ccW4y0s cv+x1kjyP1rtVv6vUiUryzsrwwMidV6CoSzfs9vMIc9wWIDXWItHKGgidbsMCKRj s9REoxHcH1H/vH3LlnTq8VmolQpuP5LbzRv2d0obec7HYWVnH2YEMlh52BtbXZqO BF8AIE+xRPRw8A== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:10 2025 by rpki-client