This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json) Hash identifier: VmDrb/VN7YKoQOi0dcPZCOAIU52xU5PcXvAJNgDvdAY= Subject key identifier: CC:60:0C:BA:D4:14:D4:46:ED:75:46:D5:CC:03:5B:DE:FB:7D:CE:16 Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Certificate serial: 019B3C7F0215855264433A97EB5BC55DB5CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft Manifest number: 1334 Signing time: Sat 20 Dec 2025 16:01:54 +0000 Manifest this update: Sat 20 Dec 2025 16:01:54 +0000 Manifest next update: Sun 21 Dec 2025 16:01:54 +0000 Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=) 2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: JU5MHyw2XDCnw72C/5QB990mk+NpIL3TiPSvI/QAN7I=) 3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:02:15:85:52:64:43:3a:97:eb:5b:c5:5d:b5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Validity Not Before: Dec 20 16:01:54 2025 GMT Not After : Dec 21 16:01:54 2025 GMT Subject: CN=cc600cbad414d446ed7546d5cc035bdefb7dce16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:01:c1:33:ad:30:5f:d1:c4:a4:d5:05:71:f8: 1a:2a:35:61:d0:20:30:c2:60:b7:5a:82:6f:50:54: a2:b8:9c:bb:bd:6a:8e:53:96:80:0f:26:50:78:dc: b8:2f:86:4f:37:8b:a1:44:6f:ab:2d:e4:3c:ca:27: 42:91:e6:bd:66:b2:8a:f0:3e:ea:a1:ce:90:4c:46: aa:75:36:09:6c:d8:15:2e:90:54:ef:18:e9:fb:49: c6:28:1a:d5:e9:ce:d9:f9:3d:89:43:17:ab:34:55: 28:ff:0e:f2:e8:85:dd:b2:21:e7:23:01:91:8c:67: 16:be:4c:28:d3:40:53:90:d9:07:ad:51:fd:d1:b7: 73:6b:2a:13:2c:b3:bc:35:6f:47:1d:17:23:7f:8a: 54:15:88:0b:30:e5:87:eb:8a:58:41:e3:25:a8:b0: 0d:eb:0d:e0:8f:bf:84:d7:b3:7d:0c:16:53:83:03: 59:3b:03:2b:c3:ff:e3:b5:2b:cc:d4:86:e5:fb:94: 87:4f:79:84:d9:58:8f:8d:df:7d:7a:f5:5e:ad:67: 64:3c:25:18:97:81:71:3a:76:d9:94:bf:40:76:d0: d9:5b:11:ef:cc:d2:cb:55:68:c0:f9:38:1c:3f:9e: bd:62:0b:bc:f5:68:b8:5d:11:93:ce:2e:01:0d:86: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:60:0C:BA:D4:14:D4:46:ED:75:46:D5:CC:03:5B:DE:FB:7D:CE:16 X509v3 Authority Key Identifier: keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:dc:2e:7b:6b:ec:0f:21:d4:9a:7f:ed:96:ec:e7:0d:97:51: 82:2e:2f:12:ad:c7:fa:0a:54:f9:88:80:38:de:7b:d9:67:7f: a6:ac:c0:b2:c1:1a:4a:cd:ce:d4:68:58:5f:78:a3:76:59:c5: 9b:4a:86:d2:83:0c:70:62:3f:3e:a0:67:39:de:87:a4:d5:f4: 0f:97:a8:80:47:a7:ed:69:9c:91:b9:1a:df:5f:b5:aa:f0:fb: 9e:3c:99:77:17:64:15:8c:92:c6:b5:41:62:ff:9e:8b:6a:b4: 31:68:be:fa:0a:05:1d:4b:d9:11:1c:ac:bb:b3:57:96:a5:6c: 58:e2:09:52:17:04:cb:14:16:8c:2d:48:75:06:48:0d:1a:60: 21:85:f9:ad:ef:77:57:3b:c3:fe:ce:2f:ad:5a:1e:fe:43:80: a9:4f:e9:88:0e:65:eb:63:e7:95:d4:fb:4b:5d:f5:58:0a:0b: 14:7d:75:dd:fc:89:59:5c:a4:c7:03:51:86:39:71:ea:03:c5: e6:26:66:dc:66:a2:9c:b4:a8:7f:91:d3:cd:55:f2:ec:d6:2a: 91:b1:39:2f:8d:cc:29:60:e4:d6:8e:00:1e:c9:d7:24:a4:8d: c7:fa:85:66:0b:5f:06:fb:ca:1a:6d:22:09:2d:2b:ea:d1:cb: 8a:1c:85:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwIVhVJkQzqX61vFXbXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy NTY5ZDMwHhcNMjUxMjIwMTYwMTU0WhcNMjUxMjIxMTYwMTU0WjAzMTEwLwYDVQQD EyhjYzYwMGNiYWQ0MTRkNDQ2ZWQ3NTQ2ZDVjYzAzNWJkZWZiN2RjZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AHBM60wX9HEpNUFcfgaKjVh0CAw wmC3WoJvUFSiuJy7vWqOU5aADyZQeNy4L4ZPN4uhRG+rLeQ8yidCkea9ZrKK8D7q oc6QTEaqdTYJbNgVLpBU7xjp+0nGKBrV6c7Z+T2JQxerNFUo/w7y6IXdsiHnIwGR jGcWvkwo00BTkNkHrVH90bdzayoTLLO8NW9HHRcjf4pUFYgLMOWH64pYQeMlqLAN 6w3gj7+E17N9DBZTgwNZOwMrw//jtSvM1Ibl+5SHT3mE2ViPjd99evVerWdkPCUY l4FxOnbZlL9AdtDZWxHvzNLLVWjA+TgcP569Ygu89Wi4XRGTzi4BDYaPuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxgDLrUFNRG7XVG1cwDW977fc4WMB8GA1UdIwQY MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9wue2vs DyHUmn/tluznDZdRgi4vEq3H+gpU+YiAON572Wd/pqzAssEaSs3O1GhYX3ijdlnF m0qG0oMMcGI/PqBnOd6HpNX0D5eogEen7Wmckbka31+1qvD7njyZdxdkFYySxrVB Yv+ei2q0MWi++goFHUvZERysu7NXlqVsWOIJUhcEyxQWjC1IdQZIDRpgIYX5re93 VzvD/s4vrVoe/kOAqU/piA5l62PnldT7S131WAoLFH113fyJWVykxwNRhjlx6gPF 5iZm3GainLSof5HTzVXy7NYqkbE5L43MKWDk1o4AHsnXJKSNx/qFZgtfBvvKGm0i CS0r6tHLihyF1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:57:32 2025 by rpki-client