This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json) Hash identifier: QUOcQErgkSZX0C6Gsa1qWxC8lTcebeAY8sOXXTvWP38= Subject key identifier: F6:88:C6:3C:48:68:0C:9C:A4:F6:FF:62:D6:27:6E:48:01:7C:75:27 Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Certificate serial: 019B5976BB19C8E271372DD274E242BDE16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:51 +0000 Manifest this update: Fri 26 Dec 2025 07:01:51 +0000 Manifest next update: Sat 27 Dec 2025 07:01:51 +0000 Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: 0GFmM+CSMNkBGs/b68EHQcGiSduwHhcVtWhw6ViRCXQ=) 2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:bb:19:c8:e2:71:37:2d:d2:74:e2:42:bd:e1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Validity Not Before: Dec 26 07:01:51 2025 GMT Not After : Dec 27 07:01:51 2025 GMT Subject: CN=f688c63c48680c9ca4f6ff62d6276e48017c7527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:c0:19:8b:f8:c9:37:62:ae:68:aa:f7:35: 19:26:f1:9e:86:22:be:7a:b6:57:c0:43:cc:a0:bb: 3f:2c:e9:43:c4:b7:14:2e:ed:3c:f8:06:66:6f:11: 02:6e:f7:8b:6d:e7:a0:6f:0a:8b:ec:22:c1:6f:58: d0:fe:3f:52:f2:0f:f1:2f:34:a9:8f:68:20:43:f8: 7a:55:83:61:bc:c9:cc:1a:40:1b:6f:14:54:f7:14: 25:62:51:a1:8f:e4:6e:17:28:05:10:5d:ee:4f:b6: ce:2d:80:ba:b0:15:08:29:a0:99:5b:90:5f:75:e3: 69:c7:0e:6d:97:85:68:83:d8:ff:64:9e:77:65:af: 29:3b:be:26:18:b5:df:75:23:44:58:b4:f5:50:30: d7:fc:7b:cd:0e:d9:83:ef:d6:88:19:47:4c:5b:73: b2:80:68:80:6c:96:1e:ff:0d:7e:46:e4:6a:1a:e6: 52:56:0c:8a:c0:93:95:a5:af:2f:41:80:56:23:1f: 6b:bb:e4:64:2f:dc:2d:b4:8c:fe:14:3d:89:93:7f: 14:58:ab:50:43:70:a4:fe:1d:08:d7:99:b0:8f:55: 9b:36:82:25:32:12:03:f9:43:f6:05:44:6b:7e:87: bb:8b:98:66:15:a7:ed:f1:fc:5a:f1:ba:f5:09:23: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:C6:3C:48:68:0C:9C:A4:F6:FF:62:D6:27:6E:48:01:7C:75:27 X509v3 Authority Key Identifier: keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0b:22:2f:6b:ad:76:35:da:f1:04:ae:e2:7a:05:f5:5b:56: 48:e8:e9:9c:68:13:88:30:e9:bc:e3:b7:9f:9a:68:da:7c:d0: cb:ce:ee:4a:a8:5c:af:6b:4b:a5:84:1d:87:79:d2:be:ce:fd: d8:84:95:fb:94:77:57:3b:c1:84:e4:6d:08:45:98:a7:63:42: 23:a8:42:34:f0:ac:bb:9a:b6:74:54:09:60:ff:c6:f3:0e:a1: f0:d0:46:2d:da:1e:e8:a7:fe:2a:da:fc:71:9b:0f:db:d6:81: cd:db:21:64:49:4f:b3:b5:d3:69:7c:3b:85:65:be:be:9b:ff: bc:bc:e2:8c:6f:a0:24:63:44:47:ed:51:04:26:19:2f:b6:76: 2b:dd:7c:7b:9e:09:8f:75:0d:16:66:77:0a:8a:82:90:e3:d4: 39:81:43:c4:0b:e4:7d:36:ec:87:91:3f:91:80:6b:92:06:22: a8:27:fb:ff:6f:5f:dd:22:c1:9b:71:a6:df:13:cf:85:35:d2: 48:cb:c4:a7:dc:fc:2d:68:27:cc:82:6c:06:25:05:08:28:78: 10:87:33:7c:23:61:b2:19:53:f8:24:f7:39:26:83:ed:81:0a: 5d:5c:55:6f:58:32:53:eb:1b:4b:0b:33:8e:ec:68:3e:0a:e1: c4:c1:12:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdrsZyOJxNy3SdOJCveFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj ZjQ2OTgwHhcNMjUxMjI2MDcwMTUxWhcNMjUxMjI3MDcwMTUxWjAzMTEwLwYDVQQD EyhmNjg4YzYzYzQ4NjgwYzljYTRmNmZmNjJkNjI3NmU0ODAxN2M3NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhfAGYv4yTdirmiq9zUZJvGehiK+ erZXwEPMoLs/LOlDxLcULu08+AZmbxECbveLbeegbwqL7CLBb1jQ/j9S8g/xLzSp j2ggQ/h6VYNhvMnMGkAbbxRU9xQlYlGhj+RuFygFEF3uT7bOLYC6sBUIKaCZW5Bf deNpxw5tl4Vog9j/ZJ53Za8pO74mGLXfdSNEWLT1UDDX/HvNDtmD79aIGUdMW3Oy gGiAbJYe/w1+RuRqGuZSVgyKwJOVpa8vQYBWIx9ru+RkL9wttIz+FD2Jk38UWKtQ Q3Ck/h0I15mwj1WbNoIlMhID+UP2BURrfoe7i5hmFaft8fxa8br1CSPGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaIxjxIaAycpPb/YtYnbkgBfHUnMB8GA1UdIwQY MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt ZWFkMWFmODY5MWJhLzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwsiL2ut djXa8QSu4noF9VtWSOjpnGgTiDDpvOO3n5po2nzQy87uSqhcr2tLpYQdh3nSvs79 2ISV+5R3VzvBhORtCEWYp2NCI6hCNPCsu5q2dFQJYP/G8w6h8NBGLdoe6Kf+Ktr8 cZsP29aBzdshZElPs7XTaXw7hWW+vpv/vLzijG+gJGNER+1RBCYZL7Z2K918e54J j3UNFmZ3CoqCkOPUOYFDxAvkfTbsh5E/kYBrkgYiqCf7/29f3SLBm3Gm3xPPhTXS SMvEp9z8LWgnzIJsBiUFCCh4EIczfCNhshlT+CT3OSaD7YEKXVxVb1gyU+sbSwsz juxoPgrhxMESXQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:19 2025 by rpki-client