This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json) Hash identifier: FsMrHWag1Zclg2BPqbLbwFaMOlNb3spfT8ME1kVb+qo= Subject key identifier: 8D:90:E4:FF:50:F8:34:6F:83:7F:D7:A5:30:1C:17:8E:71:C8:08:F1 Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea Certificate serial: 019B0E26441E91DF2ECCC6902DF032D1AA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft Manifest number: 0519 Signing time: Thu 11 Dec 2025 16:02:27 +0000 Manifest this update: Thu 11 Dec 2025 16:02:27 +0000 Manifest next update: Fri 12 Dec 2025 16:02:27 +0000 Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=) 2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: m3G75Wir0MxRM0wk0R5EF92HsYYbOckFHvGUV6RFmNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:44:1e:91:df:2e:cc:c6:90:2d:f0:32:d1:aa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea Validity Not Before: Dec 11 16:02:27 2025 GMT Not After : Dec 12 16:02:27 2025 GMT Subject: CN=8d90e4ff50f8346f837fd7a5301c178e71c808f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:68:4e:ba:7f:83:c6:47:af:2a:8d:89:70: 98:06:13:85:df:83:be:85:dd:9a:9a:3a:e9:2b:09: 4d:1b:93:78:3f:ee:34:29:45:4a:45:28:78:ae:5a: 95:8b:90:01:3b:04:1f:94:84:d6:35:5b:bd:eb:89: 1c:be:07:27:ec:ac:55:52:de:56:10:80:00:32:72: 03:1b:41:05:98:55:39:9a:cf:24:7f:8a:3c:e0:3c: 78:37:71:bb:4a:6f:ab:54:14:39:25:dd:ea:9f:9c: a7:17:a6:9d:ed:77:1e:b3:60:12:0f:3e:39:26:7f: e0:e6:66:b0:90:c8:83:e0:88:e0:ec:39:b1:c9:17: c8:bd:42:aa:4d:65:3e:d3:0e:77:7e:d7:68:79:ff: 8e:1d:11:d0:60:a1:2d:c7:2e:bf:df:78:dc:93:ba: ea:df:2e:ec:0c:b0:3c:2f:40:52:ff:70:05:5e:af: 31:5b:c8:12:4f:d8:4d:30:64:c3:63:7a:bf:86:d1: 54:da:37:38:11:0b:01:1b:4e:c0:25:12:b3:8a:bd: 05:b3:19:6c:dd:91:ba:82:95:38:60:b4:79:9c:38: 37:a7:b1:6a:8c:14:2d:6c:5a:92:a0:15:30:63:e9: b2:0e:9d:34:61:37:93:57:34:16:2d:e1:73:46:54: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:90:E4:FF:50:F8:34:6F:83:7F:D7:A5:30:1C:17:8E:71:C8:08:F1 X509v3 Authority Key Identifier: keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:c7:92:4d:30:b2:67:8d:90:f6:c1:e9:3d:86:5e:48:51: 3b:84:42:94:b3:a6:cb:48:72:18:a9:fa:d7:f0:37:ec:a7:e7: 9e:91:12:12:78:1b:2c:00:25:4e:c2:d9:8c:87:15:b7:c1:a5: 57:4d:71:ae:9c:bb:4d:00:57:41:74:16:e4:3c:b9:ec:49:57: 49:cc:04:db:55:55:6a:17:51:1b:78:3b:f6:02:1e:5d:55:34: f4:b8:9f:e0:de:23:54:82:c5:d3:df:96:6a:31:c8:46:5a:ba: e6:3c:f0:92:79:6b:a1:6b:42:79:ff:64:00:96:b2:14:4f:16: 0a:f1:67:39:28:d3:10:f2:b9:82:2e:86:a7:88:75:11:e0:1a: ac:c4:f8:0a:87:31:7e:e8:3d:dc:ef:2c:cc:6d:5c:89:c4:60: fe:02:2d:76:d1:ce:c3:36:38:7c:c0:e0:f5:5c:e7:03:be:1f: 3d:11:70:26:26:4e:70:2a:51:e8:d0:df:d5:42:a2:2d:4c:89: b9:c0:86:90:da:dc:34:13:2e:9a:08:5f:35:3a:e8:de:f4:eb: bf:8e:01:d4:e3:d8:9b:74:db:d7:3a:31:f5:07:c1:27:e7:bf: 64:13:3d:46:12:04:df:57:76:25:c8:ed:ba:00:31:0d:f9:ba: a5:64:5e:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJkQekd8uzMaQLfAy0ap5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh Yzc5ZWEwHhcNMjUxMjExMTYwMjI3WhcNMjUxMjEyMTYwMjI3WjAzMTEwLwYDVQQD Eyg4ZDkwZTRmZjUwZjgzNDZmODM3ZmQ3YTUzMDFjMTc4ZTcxYzgwOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcBoTrp/g8ZHryqNiXCYBhOF34O+ hd2amjrpKwlNG5N4P+40KUVKRSh4rlqVi5ABOwQflITWNVu964kcvgcn7KxVUt5W EIAAMnIDG0EFmFU5ms8kf4o84Dx4N3G7Sm+rVBQ5Jd3qn5ynF6ad7Xces2ASDz45 Jn/g5mawkMiD4Ijg7DmxyRfIvUKqTWU+0w53ftdoef+OHRHQYKEtxy6/33jck7rq 3y7sDLA8L0BS/3AFXq8xW8gST9hNMGTDY3q/htFU2jc4EQsBG07AJRKzir0Fsxls 3ZG6gpU4YLR5nDg3p7FqjBQtbFqSoBUwY+myDp00YTeTVzQWLeFzRlR6IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2Q5P9Q+DRvg3/XpTAcF45xyAjxMB8GA1UdIwQY MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsnHkk0w smeNkPbB6T2GXkhRO4RClLOmy0hyGKn61/A37KfnnpESEngbLAAlTsLZjIcVt8Gl V01xrpy7TQBXQXQW5Dy57ElXScwE21VVahdRG3g79gIeXVU09Lif4N4jVILF09+W ajHIRlq65jzwknlroWtCef9kAJayFE8WCvFnOSjTEPK5gi6Gp4h1EeAarMT4Cocx fug93O8szG1cicRg/gItdtHOwzY4fMDg9VznA74fPRFwJiZOcCpR6NDf1UKiLUyJ ucCGkNrcNBMumghfNTro3vTrv44B1OPYm3Tb1zox9QfBJ+e/ZBM9RhIE31d2Jcjt ugAxDfm6pWRebw== -----END CERTIFICATE-----Generated at Thu Dec 11 21:44:57 2025 by rpki-client