This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft File: CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json) Hash identifier: rzdDspk6NSEeQgNG39mx7dXznnqOMTO+HOfKxzACIkw= Subject key identifier: B8:FF:AF:E5:B2:12:7C:7D:B8:8C:84:C6:85:2E:E6:48:EC:47:41:77 Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE Certificate issuer: /CN=08c7b65ba6659e27570773c508558754eb490dde Certificate serial: 019B5A520A96B41FEB6435564C1F2B0B57B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft Manifest number: 0107 Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: wzKiRURW0lXkTH+C9n+iGSEYbhV1lqq4JOd9ykN5UIM=) 2: Ud-XAg37mML14PlGMC-MtLQMglE.roa (hash: 18isVv70Mwq2NQGwUDi88omuA2Y/FqQMJz3QrvT4ZPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0a:96:b4:1f:eb:64:35:56:4c:1f:2b:0b:57:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=b8ffafe5b2127c7db88c84c6852ee648ec474177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:f2:4a:98:4d:71:d8:f3:e7:67:bb:8b:b9: fa:9f:ba:27:5c:af:d0:68:b2:b1:24:da:1d:23:8d: 34:f6:29:23:89:9a:35:84:d9:2e:54:c2:95:2b:b5: 34:58:e0:45:fc:5d:70:dc:f9:ce:a8:2f:8e:d8:d8: e6:06:ea:d7:36:47:ac:d9:9f:de:b3:d9:41:bf:0f: f0:28:6a:dc:70:65:df:d1:86:aa:8d:ba:be:20:93: 4e:e1:5f:76:34:c6:a5:a8:35:3d:09:ec:43:d2:99: 76:78:98:0d:d3:fb:f8:7a:9e:97:3e:bf:52:a0:43: d5:c4:ea:f8:5f:56:49:48:c0:1e:25:80:67:d2:22: b2:b1:4c:81:8f:ba:de:be:7f:1b:d1:54:c2:65:ef: 81:61:10:76:32:c0:4d:17:83:eb:30:80:ec:ad:4a: 64:f9:63:91:87:d8:76:bd:d1:97:7b:90:18:80:d9: a8:71:ff:57:54:48:84:ab:62:94:f9:52:0f:90:11: 61:db:e3:f7:9b:f5:7f:e6:b7:5a:5e:0d:50:dc:7a: 9f:71:84:76:f3:05:59:11:fa:ac:dd:7a:b8:d0:44: f8:a8:41:47:3f:04:5b:c7:c5:33:d5:42:98:90:0e: 60:e6:04:df:66:84:3d:3e:ca:41:e6:85:a4:7f:84: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:AF:E5:B2:12:7C:7D:B8:8C:84:C6:85:2E:E6:48:EC:47:41:77 X509v3 Authority Key Identifier: keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ce:88:c9:37:32:28:0d:66:72:21:3e:5f:96:b3:4c:ff:8e: 6b:f6:d3:41:f8:79:39:43:72:66:a7:21:dd:03:e7:3e:af:e7: 4a:8b:16:36:91:0c:99:36:d2:5f:71:ca:a1:b1:bc:76:15:e2: 16:b1:82:4a:fe:60:e9:f5:58:25:97:21:dd:fe:97:eb:40:0d: 20:d8:b6:60:bf:86:ba:0d:6a:51:e1:e9:33:44:c8:ee:07:69: 78:b0:38:51:57:3e:a9:34:34:17:bc:51:1f:90:b2:5a:42:bf: 7a:a1:29:c6:3d:2a:1d:36:11:3e:26:9f:c8:4b:bf:1a:58:0f: ee:a9:84:ae:66:c6:2d:72:08:c1:dc:d7:8b:d2:ef:4d:49:0b: d1:59:3d:a3:b2:c8:6f:4e:51:bd:46:f9:1d:63:81:50:9d:d4: 37:4d:e8:2a:1d:28:9a:bc:92:46:51:d9:b2:82:22:c9:18:c0: 8b:77:b7:29:11:b2:1c:1f:a7:7e:a9:bd:b6:de:4b:15:4d:77: ad:cf:93:e4:1c:4e:82:e9:6c:19:c5:1d:9a:0a:56:a2:d3:9f: d4:b5:5b:9c:8f:24:a2:9a:3e:86:73:ca:27:4c:59:fc:1d:de: 11:d4:67:70:14:52:7d:ae:5d:88:9d:ec:68:c0:69:c9:10:2d: ae:6a:37:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgqWtB/rZDVWTB8rC1e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YzdiNjViYTY2NTllMjc1NzA3NzNjNTA4NTU4NzU0ZWI0 OTBkZGUwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD EyhiOGZmYWZlNWIyMTI3YzdkYjg4Yzg0YzY4NTJlZTY0OGVjNDc0MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBLySphNcdjz52e7i7n6n7onXK/Q aLKxJNodI4009ikjiZo1hNkuVMKVK7U0WOBF/F1w3PnOqC+O2NjmBurXNkes2Z/e s9lBvw/wKGrccGXf0Yaqjbq+IJNO4V92NMalqDU9CexD0pl2eJgN0/v4ep6XPr9S oEPVxOr4X1ZJSMAeJYBn0iKysUyBj7revn8b0VTCZe+BYRB2MsBNF4PrMIDsrUpk +WORh9h2vdGXe5AYgNmocf9XVEiEq2KU+VIPkBFh2+P3m/V/5rdaXg1Q3HqfcYR2 8wVZEfqs3Xq40ET4qEFHPwRbx8Uz1UKYkA5g5gTfZoQ9PspB5oWkf4RlTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj/r+WyEnx9uIyExoUu5kjsR0F3MB8GA1UdIwQY MBaAFAjHtlumZZ4nVwdzxQhVh1TrSQ3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xNjZiMzMtZjc5ZC00MzA4LWFkMDct NWI3Yjk1NzAwOTllLzEvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xNjZiMzMtZjc5ZC00MzA4LWFkMDctNWI3Yjk1NzAwOTll LzEvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlc6IyTcy KA1mciE+X5azTP+Oa/bTQfh5OUNyZqch3QPnPq/nSosWNpEMmTbSX3HKobG8dhXi FrGCSv5g6fVYJZch3f6X60ANINi2YL+Gug1qUeHpM0TI7gdpeLA4UVc+qTQ0F7xR H5CyWkK/eqEpxj0qHTYRPiafyEu/GlgP7qmErmbGLXIIwdzXi9LvTUkL0Vk9o7LI b05RvUb5HWOBUJ3UN03oKh0omrySRlHZsoIiyRjAi3e3KRGyHB+nfqm9tt5LFU13 rc+T5BxOgulsGcUdmgpWotOf1LVbnI8kopo+hnPKJ0xZ/B3eEdRncBRSfa5diJ3s aMBpyRAtrmo3uQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:21 2025 by rpki-client