This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json) Hash identifier: xAgwQ6ceJS9Fs1Xrk9Va0jeuf0hYIM74aIoOtBlQzuQ= Subject key identifier: 03:91:08:51:D1:F4:41:CE:45:A3:14:6F:86:29:6B:41:22:D1:7F:96 Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Certificate serial: 019B19BB05BBB8F07E664CD6DAA53B04B854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft Manifest number: 1322 Signing time: Sat 13 Dec 2025 22:00:45 +0000 Manifest this update: Sat 13 Dec 2025 22:00:45 +0000 Manifest next update: Sun 14 Dec 2025 22:00:45 +0000 Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=) 2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: aKGeuafOLLXz7WeDo8Lrcnn5/8Joo3mndLnPuAs4rfU=) 3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:05:bb:b8:f0:7e:66:4c:d6:da:a5:3b:04:b8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Validity Not Before: Dec 13 22:00:45 2025 GMT Not After : Dec 14 22:00:45 2025 GMT Subject: CN=03910851d1f441ce45a3146f86296b4122d17f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d7:ed:87:ba:e0:1b:30:d5:3e:7e:2d:e8:01: 89:87:fb:75:ed:a9:44:b4:4d:93:96:e4:4d:05:1d: cc:9c:48:ce:93:17:68:e0:9d:04:fe:3e:ed:05:cd: d8:5f:f7:8e:3e:f3:e6:4e:3c:5d:9f:64:f5:8e:4d: 1a:15:9c:ed:8f:99:cc:5a:82:ac:e7:84:7c:fc:53: 9a:4f:13:b3:45:72:48:de:2c:9b:3b:00:37:5e:c0: 5a:e1:3c:19:36:85:f6:7d:f6:88:f6:44:be:70:1b: e2:26:ae:94:ad:87:ae:8a:f2:ef:6c:0f:c0:93:9c: a7:79:50:56:a5:a0:14:a8:8b:e2:bb:a0:f2:a1:f3: 39:7f:ea:16:d3:f2:db:44:d2:d2:4e:a0:3e:fe:f1: fa:6e:eb:4d:c5:2c:3e:27:c9:49:2b:63:47:f9:2e: 3d:34:a6:ee:19:48:27:5d:00:77:71:02:02:3f:a5: 23:99:02:65:7a:a2:c6:e5:2a:6a:b6:d3:71:26:05: f9:8e:7e:08:23:86:4a:e8:b4:88:02:9a:cf:56:43: 3b:c1:c9:19:e2:48:2e:38:85:f8:56:5b:20:2a:3e: ce:22:f6:ee:b6:3f:25:1c:69:15:3a:26:3e:93:2f: 1c:8b:d9:5e:3f:66:92:62:03:08:46:4a:a8:03:b1: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:08:51:D1:F4:41:CE:45:A3:14:6F:86:29:6B:41:22:D1:7F:96 X509v3 Authority Key Identifier: keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4a:1e:85:d6:db:ba:57:b6:8b:c3:68:de:11:c0:eb:18:74: 70:5f:59:c9:cf:ae:f6:9c:d5:7a:f6:63:42:39:08:0b:9e:19: 72:3d:c2:8f:f8:ce:f7:fc:2d:9b:a3:9a:f2:20:1e:3f:a8:a7: 46:c7:f6:4e:29:f6:c9:91:18:35:f4:a7:cf:87:62:b9:f6:21: 7f:11:f1:99:b7:3e:d4:28:67:26:98:9a:8c:a1:f6:7f:9b:37: 5e:70:f8:c5:5b:3a:94:73:b2:7b:00:d4:46:18:bf:bf:e5:47: 82:e7:41:df:9a:c1:10:5a:6a:3d:40:3e:eb:38:21:96:77:da: 31:88:31:18:df:4f:04:63:38:56:04:1d:55:8b:b8:7e:80:f6: 6d:fa:39:08:1c:c6:d4:27:ec:72:33:67:06:22:3e:cf:0d:e3: 34:73:7a:24:00:bc:51:9e:a4:c0:98:b6:5f:d2:04:8c:d4:d2: 73:bb:a3:3e:db:eb:ae:64:27:69:71:2e:b8:56:77:47:56:6b: a8:0f:c1:8e:a7:fc:0b:d1:88:9b:f3:50:26:24:f8:98:20:6d: 0d:93:8d:71:91:07:70:66:61:fb:f7:de:f6:ff:22:9a:26:b8: af:3f:dd:a6:5c:49:e8:c5:41:36:16:0c:cf:ea:a9:e8:04:8c: 8e:da:f2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuwW7uPB+ZkzW2qU7BLhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy NTY5ZDMwHhcNMjUxMjEzMjIwMDQ1WhcNMjUxMjE0MjIwMDQ1WjAzMTEwLwYDVQQD EygwMzkxMDg1MWQxZjQ0MWNlNDVhMzE0NmY4NjI5NmI0MTIyZDE3Zjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dfth7rgGzDVPn4t6AGJh/t17alE tE2TluRNBR3MnEjOkxdo4J0E/j7tBc3YX/eOPvPmTjxdn2T1jk0aFZztj5nMWoKs 54R8/FOaTxOzRXJI3iybOwA3XsBa4TwZNoX2ffaI9kS+cBviJq6UrYeuivLvbA/A k5yneVBWpaAUqIviu6DyofM5f+oW0/LbRNLSTqA+/vH6butNxSw+J8lJK2NH+S49 NKbuGUgnXQB3cQICP6UjmQJleqLG5SpqttNxJgX5jn4II4ZK6LSIAprPVkM7wckZ 4kguOIX4VlsgKj7OIvbutj8lHGkVOiY+ky8ci9leP2aSYgMIRkqoA7G1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAORCFHR9EHORaMUb4Ypa0Ei0X+WMB8GA1UdIwQY MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkoehdbb ule2i8No3hHA6xh0cF9Zyc+u9pzVevZjQjkIC54Zcj3Cj/jO9/wtm6Oa8iAeP6in Rsf2Tin2yZEYNfSnz4diufYhfxHxmbc+1ChnJpiajKH2f5s3XnD4xVs6lHOyewDU Rhi/v+VHgudB35rBEFpqPUA+6zghlnfaMYgxGN9PBGM4VgQdVYu4foD2bfo5CBzG 1CfscjNnBiI+zw3jNHN6JAC8UZ6kwJi2X9IEjNTSc7ujPtvrrmQnaXEuuFZ3R1Zr qA/Bjqf8C9GIm/NQJiT4mCBtDZONcZEHcGZh+/fe9v8imia4rz/dplxJ6MVBNhYM z+qp6ASMjtry/g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:16 2025 by rpki-client