This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json) Hash identifier: dHNJwmRWwSg6WHCv63b7L2EyVIY0WkihgxBySg5Awhs= Subject key identifier: DA:83:AF:36:81:3C:2A:5A:9C:BC:6C:C7:FD:2C:52:90:37:16:E0:A7 Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216 Certificate serial: 019B202B1BD08EFE4B1CC012E67012CE5EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft Manifest number: 0EFB Signing time: Mon 15 Dec 2025 04:00:54 +0000 Manifest this update: Mon 15 Dec 2025 04:00:54 +0000 Manifest next update: Tue 16 Dec 2025 04:00:54 +0000 Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=) 2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: x/v7ZlTZUJ7ayEMa3EXinzjYQEJvXb9u4gkVHGON/Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:1b:d0:8e:fe:4b:1c:c0:12:e6:70:12:ce:5e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216 Validity Not Before: Dec 15 04:00:54 2025 GMT Not After : Dec 16 04:00:54 2025 GMT Subject: CN=da83af36813c2a5a9cbc6cc7fd2c52903716e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:c3:c8:42:0f:1e:f1:f0:d8:91:f2:82:23: d8:37:8c:f8:86:cf:49:20:86:cd:e1:33:63:76:10: af:09:46:a9:07:af:d4:58:6c:86:71:1f:07:f7:cf: dc:ac:b1:1b:cd:80:80:bc:be:76:ee:98:7b:c6:68: 87:d1:d4:71:45:fb:a1:d8:14:c4:04:80:43:75:de: a2:f4:99:e1:4d:1f:68:c1:dd:11:a4:b8:62:23:e7: 73:28:ff:29:e1:37:44:ce:cf:fc:fe:04:f0:f4:ce: 61:6c:49:de:42:a0:eb:f2:b3:64:87:db:d4:07:3c: d3:f8:c2:17:78:2d:bf:24:28:d1:5a:13:d1:22:b5: ec:3b:52:82:5f:6f:72:27:00:e2:93:b4:04:7b:49: e4:58:57:b8:a3:52:38:17:dc:2e:87:31:dd:7b:e7: e5:9f:e5:f7:bc:a6:8f:7f:80:d3:06:16:cd:5f:73: d4:47:64:6f:fc:5f:a2:9b:2f:9f:b9:03:2e:f7:b0: ea:31:bf:35:c0:fe:cc:b9:82:43:47:72:1c:30:b4: 8d:f8:9b:15:69:b5:63:d5:ef:28:c1:2c:4c:ec:5a: f6:69:7b:c7:7f:36:94:35:b1:f7:00:e4:77:c8:61: 1b:62:13:bf:9c:6e:0c:03:47:10:6b:a7:8a:20:e3: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:83:AF:36:81:3C:2A:5A:9C:BC:6C:C7:FD:2C:52:90:37:16:E0:A7 X509v3 Authority Key Identifier: keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ac:e4:a2:5d:5c:38:b0:41:8e:db:b7:10:91:49:90:47:54: 8f:09:82:e2:66:d0:29:b5:a1:bc:ec:6a:23:7e:36:28:0b:2e: 04:f3:23:82:f0:a7:37:c0:a3:2e:a8:eb:e0:72:45:e6:04:1e: 64:9e:c6:64:f1:c3:4d:37:4f:58:e4:e8:23:ef:76:1c:f9:5c: 4e:82:be:b1:85:3d:3b:a8:04:c9:ba:a3:60:8a:45:a8:8b:f3: d5:f9:0d:01:f3:62:4b:3d:c2:8e:95:58:31:6f:2d:dd:41:28: a8:65:61:f9:7b:44:b7:ea:5c:c5:6e:da:ca:c0:4c:8e:5a:dc: 64:3d:02:cc:b4:d8:50:41:cb:a2:14:18:f7:a0:1f:f1:a2:95: ec:64:76:ff:b9:06:ba:23:47:05:84:89:c5:12:4a:f7:62:63: aa:2f:42:96:20:b6:c4:c7:f6:dd:55:ee:52:f8:42:e1:a9:79: 35:1b:a0:34:07:b9:e4:1f:57:fa:07:be:0b:0f:e1:eb:d5:53: a0:92:bb:a3:72:28:c7:b9:c0:9f:d0:46:1f:15:b6:98:10:95: 22:ba:cc:0b:c7:81:46:0f:0c:70:16:55:58:5c:fa:b5:a7:55: 54:ee:c0:b1:14:79:d8:2c:dc:57:f8:2b:2a:b7:09:e8:c8:28: a0:97:9f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKxvQjv5LHMAS5nASzl70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4 YzIyMTYwHhcNMjUxMjE1MDQwMDU0WhcNMjUxMjE2MDQwMDU0WjAzMTEwLwYDVQQD EyhkYTgzYWYzNjgxM2MyYTVhOWNiYzZjYzdmZDJjNTI5MDM3MTZlMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jDyEIPHvHw2JHygiPYN4z4hs9J IIbN4TNjdhCvCUapB6/UWGyGcR8H98/crLEbzYCAvL527ph7xmiH0dRxRfuh2BTE BIBDdd6i9JnhTR9owd0RpLhiI+dzKP8p4TdEzs/8/gTw9M5hbEneQqDr8rNkh9vU BzzT+MIXeC2/JCjRWhPRIrXsO1KCX29yJwDik7QEe0nkWFe4o1I4F9wuhzHde+fl n+X3vKaPf4DTBhbNX3PUR2Rv/F+imy+fuQMu97DqMb81wP7MuYJDR3IcMLSN+JsV abVj1e8owSxM7Fr2aXvHfzaUNbH3AOR3yGEbYhO/nG4MA0cQa6eKIOOxbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqDrzaBPCpanLxsx/0sUpA3FuCnMB8GA1UdIwQY MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2 LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKzkol1c OLBBjtu3EJFJkEdUjwmC4mbQKbWhvOxqI342KAsuBPMjgvCnN8CjLqjr4HJF5gQe ZJ7GZPHDTTdPWOToI+92HPlcToK+sYU9O6gEybqjYIpFqIvz1fkNAfNiSz3CjpVY MW8t3UEoqGVh+XtEt+pcxW7aysBMjlrcZD0CzLTYUEHLohQY96Af8aKV7GR2/7kG uiNHBYSJxRJK92Jjqi9CliC2xMf23VXuUvhC4al5NRugNAe55B9X+ge+Cw/h69VT oJK7o3Iox7nAn9BGHxW2mBCVIrrMC8eBRg8McBZVWFz6tadVVO7AsRR52CzcV/gr KrcJ6MgooJef+Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:36:06 2025 by rpki-client