This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json) Hash identifier: l2BC3ykhEdbsd24yLeGAcKMzqmSY7vgbGhJ12ZXfpkU= Subject key identifier: 8F:06:B5:31:56:97:F3:8A:E3:5F:1E:D6:3C:CE:CF:CA:8D:B5:A1:E5 Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8 Certificate serial: 019B378EDB007077AD764BAE9D64181BFEA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft Manifest number: 12FE Signing time: Fri 19 Dec 2025 17:01:07 +0000 Manifest this update: Fri 19 Dec 2025 17:01:07 +0000 Manifest next update: Sat 20 Dec 2025 17:01:07 +0000 Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: FzoBehrD5ZsDkmJ1F+USricdYj3yIpxQENkfqbOCK2Q=) 2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:db:00:70:77:ad:76:4b:ae:9d:64:18:1b:fe:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8 Validity Not Before: Dec 19 17:01:07 2025 GMT Not After : Dec 20 17:01:07 2025 GMT Subject: CN=8f06b5315697f38ae35f1ed63ccecfca8db5a1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:21:5c:25:28:0c:66:c6:e9:55:d2:ae:8e: ec:56:83:e5:c7:f6:ab:0c:e2:35:13:a2:6d:b0:19: 9b:d2:eb:98:cc:fe:52:e9:0e:02:67:b1:9e:6a:65: d5:e1:8a:25:2f:35:68:23:a1:db:17:71:cd:99:df: 87:09:67:a5:4c:90:ee:c0:65:d0:c5:5f:02:16:20: 57:7d:36:de:d7:a4:93:c8:4f:f6:f9:e2:71:c0:d1: da:d2:b9:e2:99:b0:f3:36:2e:5d:4b:a9:09:89:4f: bf:4e:9e:2c:02:54:e5:2c:d4:b9:01:df:cf:0e:02: 84:5b:44:9e:61:4f:83:8e:c5:7f:d6:37:d5:99:fb: 5d:b5:bd:ba:cf:95:b3:72:84:0c:e8:64:04:fc:ce: 9d:68:63:cd:61:b5:da:44:b9:f1:6c:d0:86:fc:59: 3d:3f:4d:68:a9:ea:9d:70:5d:2e:7e:ec:17:7f:29: c7:e9:36:9a:33:0e:68:80:e0:f5:b2:d2:4b:f2:20: 55:c1:9c:f1:32:0f:0f:69:0d:1b:62:7e:ec:d1:6e: 80:6d:0f:67:03:3c:98:69:cc:4a:50:e2:b0:ce:ca: b4:a5:57:0f:2f:ae:5d:f3:56:cc:25:46:8d:1e:89: 31:d0:af:3e:b0:11:be:6f:fd:b0:84:6b:bc:c0:05: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:B5:31:56:97:F3:8A:E3:5F:1E:D6:3C:CE:CF:CA:8D:B5:A1:E5 X509v3 Authority Key Identifier: keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:98:63:0a:4f:15:81:58:53:5d:4f:a8:f7:fa:d2:8f:43:ea: d1:8b:99:8b:d4:42:22:e9:c4:de:3b:d7:71:3a:d7:35:38:1f: 25:06:25:59:12:95:5b:9f:d3:51:ea:5c:69:b3:45:99:df:20: be:48:81:39:e7:a0:05:61:4b:81:ed:f0:86:89:b7:a4:9b:7a: 8d:cf:40:cb:63:3f:c3:89:1f:85:4f:9f:a6:93:16:89:fa:73: d1:27:36:a2:3c:49:1f:87:82:9b:c1:70:50:75:4e:93:24:17: 3b:9b:fa:77:16:13:3d:1d:11:e2:91:ab:ca:99:db:73:28:e0: c6:be:76:38:2c:65:18:c7:27:81:03:b5:05:b8:d9:f2:72:d4: ff:0d:34:07:07:f4:99:ad:1e:0c:c7:59:50:ee:e2:65:12:94: f9:52:8f:db:25:8b:c5:c0:3b:57:03:e8:ae:1d:cf:c7:51:a8: 0b:06:5d:f0:4b:1a:23:61:ce:17:fb:cc:f4:c2:84:ef:a4:a7: b2:18:c1:fc:87:c1:25:0a:08:25:a2:af:eb:1b:13:ee:9a:15: 34:a7:78:9e:eb:b1:1d:8c:bb:98:9e:e4:d5:59:20:ea:2c:b1: 3e:c7:1e:a7:df:19:ae:75:46:99:fc:e3:95:a0:6b:67:f8:03: d7:33:df:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtsAcHetdkuunWQYG/6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx OTJkYTgwHhcNMjUxMjE5MTcwMTA3WhcNMjUxMjIwMTcwMTA3WjAzMTEwLwYDVQQD Eyg4ZjA2YjUzMTU2OTdmMzhhZTM1ZjFlZDYzY2NlY2ZjYThkYjVhMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfIhXCUoDGbG6VXSro7sVoPlx/ar DOI1E6JtsBmb0uuYzP5S6Q4CZ7GeamXV4YolLzVoI6HbF3HNmd+HCWelTJDuwGXQ xV8CFiBXfTbe16STyE/2+eJxwNHa0rnimbDzNi5dS6kJiU+/Tp4sAlTlLNS5Ad/P DgKEW0SeYU+DjsV/1jfVmftdtb26z5WzcoQM6GQE/M6daGPNYbXaRLnxbNCG/Fk9 P01oqeqdcF0ufuwXfynH6TaaMw5ogOD1stJL8iBVwZzxMg8PaQ0bYn7s0W6AbQ9n AzyYacxKUOKwzsq0pVcPL65d81bMJUaNHokx0K8+sBG+b/2whGu8wAWI0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8GtTFWl/OK418e1jzOz8qNtaHlMB8GA1UdIwQY MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2phjCk8V gVhTXU+o9/rSj0Pq0YuZi9RCIunE3jvXcTrXNTgfJQYlWRKVW5/TUepcabNFmd8g vkiBOeegBWFLge3whom3pJt6jc9Ay2M/w4kfhU+fppMWifpz0Sc2ojxJH4eCm8Fw UHVOkyQXO5v6dxYTPR0R4pGrypnbcyjgxr52OCxlGMcngQO1BbjZ8nLU/w00Bwf0 ma0eDMdZUO7iZRKU+VKP2yWLxcA7VwPorh3Px1GoCwZd8EsaI2HOF/vM9MKE76Sn shjB/IfBJQoIJaKv6xsT7poVNKd4nuuxHYy7mJ7k1Vkg6iyxPscep98ZrnVGmfzj laBrZ/gD1zPfOA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:27 2025 by rpki-client