This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json) Hash identifier: X0g0nIb87D83Et4Jo9Zueho1IJ2qCdFUHGmnwPWgQcQ= Subject key identifier: AD:13:0D:FF:2D:7E:EE:AA:77:B4:46:74:6E:49:4B:81:3F:AF:9E:C1 Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216 Certificate serial: 019B0EC99F2460C093CA283E7B70046F9056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft Manifest number: 0EF2 Signing time: Thu 11 Dec 2025 19:00:53 +0000 Manifest this update: Thu 11 Dec 2025 19:00:53 +0000 Manifest next update: Fri 12 Dec 2025 19:00:53 +0000 Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=) 2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: zv2DfN3/sO8B+gs6p75kNCirAQRJJ/KTrEAqdKjMIZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:9f:24:60:c0:93:ca:28:3e:7b:70:04:6f:90:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216 Validity Not Before: Dec 11 19:00:53 2025 GMT Not After : Dec 12 19:00:53 2025 GMT Subject: CN=ad130dff2d7eeeaa77b446746e494b813faf9ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:04:1e:33:ab:39:7f:86:4d:d0:a7:b2:1c: 19:65:c3:7c:9e:d4:c2:40:14:3a:ce:9f:63:ab:bf: 83:c9:3b:e7:61:0a:a4:44:0e:3f:b7:4b:8c:6b:bd: 6e:cd:f6:14:59:eb:52:d9:9d:dd:89:e5:f4:e3:29: 35:06:9a:f5:15:1f:0a:a7:97:bb:65:aa:4d:ff:95: 1b:09:e1:f6:33:cd:cf:34:ca:93:6e:03:1d:74:32: c2:7f:fb:b5:de:bd:68:b5:07:a5:d7:65:cf:39:5c: 64:ec:cf:1c:a2:9b:93:a2:da:0c:f2:74:6e:cc:39: f5:2c:6c:fe:11:8f:5d:aa:5e:46:26:b8:03:fc:34: 8f:d1:fa:51:1b:99:ca:27:98:d2:05:22:0f:a9:4a: de:34:29:bd:44:60:05:05:a0:57:3c:0f:b6:e5:26: 0b:e7:88:87:b0:13:ef:85:a2:08:e2:13:8d:2f:9b: a6:5f:a5:fd:fa:c1:7a:ed:86:e6:f7:5f:94:25:ef: 4d:80:bc:11:b2:b6:4e:6f:66:6c:1b:0b:29:23:53: 59:a1:5b:74:66:bb:23:21:7c:ae:10:a7:4c:52:4c: d3:19:f6:2e:32:a3:56:90:6e:1b:58:65:dc:16:68: db:02:f6:fb:16:00:fb:f8:32:dc:a3:89:b4:cb:df: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:0D:FF:2D:7E:EE:AA:77:B4:46:74:6E:49:4B:81:3F:AF:9E:C1 X509v3 Authority Key Identifier: keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d2:0b:80:b9:12:87:1c:07:fe:dd:bf:6a:f4:a3:89:6b:9d: 54:00:d5:18:54:47:c7:22:9a:b5:e5:f2:a0:3e:55:4b:ab:01: b8:3b:7d:e1:63:98:b1:e5:0b:8d:dd:2a:30:24:b7:19:48:56: a9:e7:6a:32:9b:7f:95:4d:20:11:ca:a2:1b:da:85:f5:91:31: e5:f2:72:3e:4d:08:51:73:ef:80:cb:3e:33:4e:c9:3e:fe:1a: 00:20:7b:80:e1:93:91:97:92:23:90:4a:3f:b5:f1:64:16:15: 51:80:2d:47:d7:4c:b7:b7:86:e0:eb:25:c3:8b:d6:7b:c9:57: 84:8a:b5:f5:a8:e8:9e:17:4d:05:e9:3e:b0:5d:3d:1c:3b:b2: 96:15:8e:b8:c5:8e:6a:71:9a:96:f4:09:59:4b:0c:17:49:3d: 05:d6:c0:85:1e:02:c7:66:9e:de:db:d0:61:07:15:a0:5b:30: 89:32:9a:13:66:78:fc:80:01:39:2f:07:75:f3:c3:72:19:c5: 8e:86:25:8c:1d:12:cf:5f:8c:03:70:4e:58:50:a2:4f:05:63: 4b:d0:fc:a1:74:27:a9:29:28:07:5d:25:a0:63:29:2d:b0:7f: 73:09:4b:e4:61:4e:57:12:4e:c6:43:cb:37:53:7a:ee:53:a5: 6c:45:e6:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZ8kYMCTyig+e3AEb5BWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4 YzIyMTYwHhcNMjUxMjExMTkwMDUzWhcNMjUxMjEyMTkwMDUzWjAzMTEwLwYDVQQD EyhhZDEzMGRmZjJkN2VlZWFhNzdiNDQ2NzQ2ZTQ5NGI4MTNmYWY5ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47kEHjOrOX+GTdCnshwZZcN8ntTC QBQ6zp9jq7+DyTvnYQqkRA4/t0uMa71uzfYUWetS2Z3dieX04yk1Bpr1FR8Kp5e7 ZapN/5UbCeH2M83PNMqTbgMddDLCf/u13r1otQel12XPOVxk7M8copuTotoM8nRu zDn1LGz+EY9dql5GJrgD/DSP0fpRG5nKJ5jSBSIPqUreNCm9RGAFBaBXPA+25SYL 54iHsBPvhaII4hONL5umX6X9+sF67Ybm91+UJe9NgLwRsrZOb2ZsGwspI1NZoVt0 ZrsjIXyuEKdMUkzTGfYuMqNWkG4bWGXcFmjbAvb7FgD7+DLco4m0y9+WUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0TDf8tfu6qd7RGdG5JS4E/r57BMB8GA1UdIwQY MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2 LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdILgLkS hxwH/t2/avSjiWudVADVGFRHxyKateXyoD5VS6sBuDt94WOYseULjd0qMCS3GUhW qedqMpt/lU0gEcqiG9qF9ZEx5fJyPk0IUXPvgMs+M07JPv4aACB7gOGTkZeSI5BK P7XxZBYVUYAtR9dMt7eG4Oslw4vWe8lXhIq19ajonhdNBek+sF09HDuylhWOuMWO anGalvQJWUsMF0k9BdbAhR4Cx2ae3tvQYQcVoFswiTKaE2Z4/IABOS8HdfPDchnF joYljB0Sz1+MA3BOWFCiTwVjS9D8oXQnqSkoB10loGMpLbB/cwlL5GFOVxJOxkPL N1N67lOlbEXmcw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:02 2025 by rpki-client