This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json) Hash identifier: +AJimOG7va0vmOhkAJPn4CNLWstFajlhWAZ/AsYhxyg= Subject key identifier: AB:EC:92:A6:2F:64:86:E1:99:14:16:72:72:68:C9:FE:DE:D8:46:C6 Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Certificate serial: 019AD248B9C692AAEAAC3278BC6E45B211EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft Manifest number: 054B Signing time: Sun 30 Nov 2025 01:02:52 +0000 Manifest this update: Sun 30 Nov 2025 01:02:52 +0000 Manifest next update: Mon 01 Dec 2025 01:02:52 +0000 Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: JbA13t0Rmaiobpp/GN7twj6EYCqd1d/5o6mDnfvwCuQ=) 2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d2:48:b9:c6:92:aa:ea:ac:32:78:bc:6e:45:b2:11:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Validity Not Before: Nov 30 01:02:52 2025 GMT Not After : Dec 1 01:02:52 2025 GMT Subject: CN=abec92a62f6486e1991416727268c9feded846c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:f0:17:af:45:97:a3:99:82:e0:0e:4b:d3: d4:c8:54:3d:00:82:81:ce:ea:4b:f1:ce:70:26:c7: 1d:d6:0e:ec:f3:20:7d:c0:1a:25:64:6a:97:cf:64: c0:b9:a8:36:40:9d:dc:9b:28:a3:46:c4:e0:2e:4b: 12:c5:6c:b2:d8:a9:8f:86:75:97:58:b8:52:4d:9e: 1e:ef:3b:37:80:e0:1d:dd:f4:03:41:b1:82:39:ce: 80:87:90:e8:0c:9a:ad:4e:de:6a:79:80:54:27:f4: 42:86:41:e2:82:b1:d8:9e:dd:c0:98:c3:28:e4:de: 7a:44:d3:ec:c1:29:ae:0e:4c:36:1c:e6:5e:72:eb: a3:9c:f9:fd:7d:5b:ec:f1:22:ab:07:65:f0:1e:26: a2:6d:99:74:f5:97:67:d0:4a:19:53:2f:d8:bb:c4: b5:16:a7:7c:a2:9e:5b:d6:ef:f0:41:56:fe:33:cd: 6d:9a:ab:f6:c0:ec:c8:aa:01:22:a5:d8:69:84:43: fe:c3:17:76:6e:36:15:e3:be:f6:34:58:35:7d:88: 11:60:d6:2c:5b:2d:c9:8a:1d:b8:b1:e4:4d:d8:69: 60:a0:54:29:d2:4c:53:ab:16:36:80:fa:64:11:64: f8:06:c0:f5:b5:19:eb:49:aa:6f:5f:5b:6c:b3:9f: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:92:A6:2F:64:86:E1:99:14:16:72:72:68:C9:FE:DE:D8:46:C6 X509v3 Authority Key Identifier: keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0c:aa:c5:69:8a:d7:20:3b:c4:17:17:a9:13:c9:5e:03:c0: 5c:9e:d0:e7:84:8d:0c:89:9d:a3:c9:82:21:3a:75:00:00:46: 8f:15:1a:88:38:b5:25:a3:de:01:2b:f9:34:2b:1a:e5:64:a5: 51:76:06:cd:9d:86:19:66:92:1c:c9:d6:d7:98:11:30:28:85: b5:bb:07:da:1a:58:18:31:20:ce:ba:67:72:82:93:89:74:c3: 21:38:05:fa:d7:c7:12:c3:30:22:26:21:9a:08:1a:a2:f3:e6: f3:fa:7e:5b:6d:3b:27:05:96:47:e0:c8:f5:72:0a:19:a6:f8: 76:f5:99:25:6a:4e:0d:2b:44:7b:fd:34:54:76:c1:a3:8a:d9: 7e:c9:0b:be:f3:d7:e7:c2:fe:14:45:a6:02:e2:60:ed:38:1f: de:3d:3b:dd:0c:c1:d2:2a:7c:12:2e:fc:22:77:51:7c:ec:a4: 08:72:20:81:f2:27:75:dd:43:ca:3a:b1:72:7d:dd:99:fb:bf: da:70:41:39:d9:a1:63:6f:1b:df:48:75:98:72:4f:b6:db:30: 4c:64:38:55:6d:4e:8a:10:54:43:ea:fe:6e:27:64:38:74:7a: cc:42:2d:67:27:0c:44:12:53:3f:44:c7:2f:0e:e8:6f:0d:64: 64:70:81:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrSSLnGkqrqrDJ4vG5FshHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0 OThiNjkwHhcNMjUxMTMwMDEwMjUyWhcNMjUxMjAxMDEwMjUyWjAzMTEwLwYDVQQD EyhhYmVjOTJhNjJmNjQ4NmUxOTkxNDE2NzI3MjY4YzlmZWRlZDg0NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMjwF69Fl6OZguAOS9PUyFQ9AIKB zupL8c5wJscd1g7s8yB9wBolZGqXz2TAuag2QJ3cmyijRsTgLksSxWyy2KmPhnWX WLhSTZ4e7zs3gOAd3fQDQbGCOc6Ah5DoDJqtTt5qeYBUJ/RChkHigrHYnt3AmMMo 5N56RNPswSmuDkw2HOZecuujnPn9fVvs8SKrB2XwHiaibZl09Zdn0EoZUy/Yu8S1 Fqd8op5b1u/wQVb+M81tmqv2wOzIqgEipdhphEP+wxd2bjYV4772NFg1fYgRYNYs Wy3Jih24seRN2GlgoFQp0kxTqxY2gPpkEWT4BsD1tRnrSapvX1tss5+v6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvskqYvZIbhmRQWcnJoyf7e2EbGMB8GA1UdIwQY MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0 LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAyqxWmK 1yA7xBcXqRPJXgPAXJ7Q54SNDImdo8mCITp1AABGjxUaiDi1JaPeASv5NCsa5WSl UXYGzZ2GGWaSHMnW15gRMCiFtbsH2hpYGDEgzrpncoKTiXTDITgF+tfHEsMwIiYh mggaovPm8/p+W207JwWWR+DI9XIKGab4dvWZJWpODStEe/00VHbBo4rZfskLvvPX 58L+FEWmAuJg7Tgf3j073QzB0ip8Ei78IndRfOykCHIggfIndd1Dyjqxcn3dmfu/ 2nBBOdmhY28b30h1mHJPttswTGQ4VW1OihBUQ+r+bidkOHR6zEItZycMRBJTP0TH Lw7obw1kZHCBng== -----END CERTIFICATE-----Generated at Sun Nov 30 05:14:58 2025 by rpki-client