This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: qEgxTsE7jh/hY5dycspGVgn/pruyiMiqjnMUgz6B/x4= Subject key identifier: 36:AF:77:95:FB:69:99:3A:A5:4E:77:81:0D:82:97:0A:A6:BD:F1:78 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019AF1641E9C1C5D863AB394CB1EA9AB6F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: 1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa (hash: 7uA8FM0km6XoivNJ8PKPfmfodgId3foqoFN3CW/tSgA=) 2: 4Lq99be2nl-lvDOLaKTBj-4e2tg.roa (hash: sqHWC3KRb5cu/NuRG74MJnGwzFNFZn52bM6N2UIFS+I=) 3: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=) 4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: uhhvlsvrTuornWlL+Wih3o5i9/Bddrr3+JnRXZ8x+1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1e:9c:1c:5d:86:3a:b3:94:cb:1e:a9:ab:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=36af7795fb69993aa54e77810d82970aa6bdf178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:f0:8b:b9:d8:b1:38:c9:31:4d:3d:6b:6d: de:95:2b:c2:5f:0c:38:8a:f5:ac:67:b7:2b:9a:f9: 5c:75:64:4b:0c:3c:85:a1:9a:e4:da:a4:3f:e1:c3: 0e:68:c2:aa:41:b8:0f:24:a0:2f:af:31:46:70:ed: b1:59:aa:fa:0d:dc:b0:b7:cd:83:44:ba:df:7c:e8: 8b:b9:c3:9a:0c:54:4b:dc:54:df:22:c2:00:d7:d2: 71:c4:d7:07:7e:6e:b2:ed:72:65:70:d4:59:dc:33: 2d:2f:8b:c0:a7:84:1e:67:0b:f2:6e:76:b0:61:68: eb:88:1a:7e:f1:fa:b3:96:69:5b:2b:5e:ac:61:5e: 99:3e:89:8b:79:72:53:f2:f7:5e:03:a9:f1:d4:bb: 78:f7:84:3a:51:f9:5b:4c:fd:00:5f:d2:57:07:4c: 28:7b:4a:cf:5b:55:3c:16:cb:19:1b:58:89:dc:dd: 08:12:47:19:6e:c5:80:b2:f5:8e:a5:1b:69:d5:e0: 2d:18:2f:83:52:3d:6f:82:c5:14:07:df:f8:ad:2e: 73:65:2c:37:ad:1c:a8:da:00:ee:60:af:0d:90:f8: 6a:08:97:e8:e0:26:d3:16:ee:78:ce:58:f0:60:d1: 06:6a:5a:11:27:e5:a8:66:fe:2d:34:51:41:31:c0: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AF:77:95:FB:69:99:3A:A5:4E:77:81:0D:82:97:0A:A6:BD:F1:78 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8b:39:4b:08:71:bd:bc:5c:8e:e8:2f:f3:6b:d1:2f:67:d8: 94:2f:7d:4b:d0:e5:bf:1d:21:12:78:c1:74:f3:b2:97:c9:e8: 2f:32:df:36:52:fe:33:c9:cd:16:5f:79:58:2a:42:a7:9d:ef: 1b:fc:e0:9e:4a:86:df:79:ce:8c:bd:51:b4:96:f9:62:82:db: 8a:07:6c:3f:ce:53:44:74:db:6d:f4:db:00:68:aa:a6:6b:ce: dd:f6:d0:ae:81:aa:f8:86:50:d2:7b:76:35:d3:9d:58:66:87: 89:9b:2d:52:24:b7:b4:1d:f1:da:c6:a6:f1:71:0a:73:2a:18: 9f:2b:40:c0:61:b3:83:44:46:de:67:b7:42:b2:11:5f:01:ee: 7e:2d:d9:fb:b5:46:8e:4d:b3:8b:be:fb:85:a1:85:0d:3c:1c: d4:79:d7:a7:22:9e:7d:0a:7f:13:7d:f0:7b:af:55:53:19:8f: 8e:b7:ed:6e:80:09:af:31:64:ee:af:b3:5a:67:ff:68:e1:d5: 8f:f7:c7:f9:1a:44:24:5a:8a:0f:23:27:ab:48:f3:64:a5:13: 37:19:d4:82:4a:5e:13:f6:d8:e6:13:6d:d4:70:a5:90:fd:f4: db:b0:35:7e:2d:66:22:08:6a:61:5d:44:d9:59:f1:8e:4b:c0: 66:77:40:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB6cHF2GOrOUyx6pq28AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD EygzNmFmNzc5NWZiNjk5OTNhYTU0ZTc3ODEwZDgyOTcwYWE2YmRmMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpPwi7nYsTjJMU09a23elSvCXww4 ivWsZ7crmvlcdWRLDDyFoZrk2qQ/4cMOaMKqQbgPJKAvrzFGcO2xWar6Ddywt82D RLrffOiLucOaDFRL3FTfIsIA19JxxNcHfm6y7XJlcNRZ3DMtL4vAp4QeZwvybnaw YWjriBp+8fqzlmlbK16sYV6ZPomLeXJT8vdeA6nx1Lt494Q6UflbTP0AX9JXB0wo e0rPW1U8FssZG1iJ3N0IEkcZbsWAsvWOpRtp1eAtGC+DUj1vgsUUB9/4rS5zZSw3 rRyo2gDuYK8NkPhqCJfo4CbTFu54zljwYNEGaloRJ+WoZv4tNFFBMcBfNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDavd5X7aZk6pU53gQ2ClwqmvfF4MB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYs5Swhx vbxcjugv82vRL2fYlC99S9Dlvx0hEnjBdPOyl8noLzLfNlL+M8nNFl95WCpCp53v G/zgnkqG33nOjL1RtJb5YoLbigdsP85TRHTbbfTbAGiqpmvO3fbQroGq+IZQ0nt2 NdOdWGaHiZstUiS3tB3x2sam8XEKcyoYnytAwGGzg0RG3me3QrIRXwHufi3Z+7VG jk2zi777haGFDTwc1HnXpyKefQp/E33we69VUxmPjrftboAJrzFk7q+zWmf/aOHV j/fH+RpEJFqKDyMnq0jzZKUTNxnUgkpeE/bY5hNt1HClkP3027A1fi1mIghqYV1E 2VnxjkvAZndANw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:49 2025 by rpki-client