This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json) Hash identifier: q42vBc5fGzv9Vh3th1/Xn5reFsOzdRnw3lzxKXyQYDI= Subject key identifier: 50:3D:9E:9C:CB:67:45:89:5B:85:C4:CA:EF:79:53:9B:53:79:98:07 Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016 Certificate serial: 019AF12CCA4B07E6447FA020750210FF85C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft Manifest number: 11E4 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: 7oPexOg6Tb5MJYkrUUEA1L+2cDJwpBBBlqk2mQdkk64=) 2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ca:4b:07:e6:44:7f:a0:20:75:02:10:ff:85:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=503d9e9ccb6745895b85c4caef79539b53799807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:a2:a8:af:f2:03:3e:f6:1b:d1:3f:cc:d2: c3:e5:f5:f5:e0:3d:5e:20:c3:b8:c1:9d:31:37:73: 28:fc:94:c7:88:94:fd:c1:5b:f3:86:ce:e7:51:43: 50:82:04:bd:63:59:64:c6:0e:5d:5f:32:d4:4f:5d: 0d:19:a7:d2:44:fd:55:6c:d9:fd:e8:84:ee:ee:d0: b8:0e:98:ef:7d:79:c5:0c:60:d5:19:76:80:45:38: cb:7f:67:43:ff:e5:ca:b1:68:e4:6b:4f:e4:c3:2c: 95:32:d6:30:98:a7:7f:dc:c0:e4:32:3b:2a:54:b8: 8c:3f:53:da:6c:8b:1a:bc:55:ee:1b:a1:05:c8:08: fd:6e:36:b6:6a:da:bb:bf:30:dc:20:fe:db:0f:68: 4a:43:33:3f:04:74:e6:a4:7a:dd:11:00:f3:fa:47: 0b:b2:d5:2f:e4:74:60:15:7d:a2:ec:ec:20:a1:8e: a3:2c:93:09:11:4c:1c:3e:2f:18:f4:de:38:c7:b9: d3:02:f5:e4:57:90:bd:77:0e:40:8b:11:89:59:65: 52:8c:16:77:9f:cd:99:74:01:50:20:d9:ff:f5:4b: d1:e3:29:60:cc:4b:29:75:b0:c4:fe:c8:7a:4d:37: 3a:5b:58:1a:87:75:c1:b7:20:d1:ef:31:2f:76:5b: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3D:9E:9C:CB:67:45:89:5B:85:C4:CA:EF:79:53:9B:53:79:98:07 X509v3 Authority Key Identifier: keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:96:d8:60:56:26:c8:da:33:05:6b:04:d5:49:2d:e8:0c: 4c:5c:db:c0:41:d5:a8:fe:e1:6e:d5:5f:7d:34:18:20:9d:4a: e7:8d:e4:33:be:93:e5:2e:ed:77:78:70:0c:35:7d:4a:f4:a9: 9d:98:f9:11:33:05:24:7b:e4:2b:a8:7b:fb:b9:b3:d7:bd:e1: 64:09:a5:15:f3:5f:92:05:d3:84:a2:ca:c9:d4:a5:29:21:1e: 2f:f5:91:4d:f8:48:90:a5:38:a2:1a:a4:e0:db:fa:a0:65:cf: 64:a7:54:73:46:2e:b7:4e:26:65:86:66:ce:02:8d:13:7f:40: 8b:72:81:31:ff:05:98:aa:3d:9a:8e:8d:3d:28:c5:9b:ae:56: 13:f2:f1:10:45:47:2a:80:05:8c:46:51:e9:4c:c3:8a:84:fd: 15:cc:2e:b4:31:91:14:86:d9:88:8c:b7:a1:a6:b0:69:58:5c: b6:c1:11:bf:1f:41:37:da:35:33:5e:aa:43:a1:d3:ec:f7:90: ed:e2:c3:d0:85:3e:4a:ff:8a:f7:8f:9b:e2:e2:07:d2:01:e0: 8a:98:11:0b:56:b6:02:f5:02:2e:3a:ae:cb:86:dc:eb:13:a8: 5e:22:64:9a:cf:f8:f0:c0:69:db:a1:92:c7:b6:39:d3:b6:bf: 88:d7:20:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMpLB+ZEf6AgdQIQ/4XEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNDRlNjBiYjk3MTMyZWE4NDlhNTNmYzU1NGJiYmM2Mzk0 OGIwMTYwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg1MDNkOWU5Y2NiNjc0NTg5NWI4NWM0Y2FlZjc5NTM5YjUzNzk5ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S6iqK/yAz72G9E/zNLD5fX14D1e IMO4wZ0xN3Mo/JTHiJT9wVvzhs7nUUNQggS9Y1lkxg5dXzLUT10NGafSRP1VbNn9 6ITu7tC4DpjvfXnFDGDVGXaARTjLf2dD/+XKsWjka0/kwyyVMtYwmKd/3MDkMjsq VLiMP1PabIsavFXuG6EFyAj9bja2atq7vzDcIP7bD2hKQzM/BHTmpHrdEQDz+kcL stUv5HRgFX2i7OwgoY6jLJMJEUwcPi8Y9N44x7nTAvXkV5C9dw5AixGJWWVSjBZ3 n82ZdAFQINn/9UvR4ylgzEspdbDE/sh6TTc6W1gah3XBtyDR7zEvdlsGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA9npzLZ0WJW4XEyu95U5tTeZgHMB8GA1UdIwQY MBaAFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTkt NDMxZjkxZGE0ZTI4LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTktNDMxZjkxZGE0ZTI4 LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT02W2GBW JsjaMwVrBNVJLegMTFzbwEHVqP7hbtVffTQYIJ1K543kM76T5S7td3hwDDV9SvSp nZj5ETMFJHvkK6h7+7mz173hZAmlFfNfkgXThKLKydSlKSEeL/WRTfhIkKU4ohqk 4Nv6oGXPZKdUc0Yut04mZYZmzgKNE39Ai3KBMf8FmKo9mo6NPSjFm65WE/LxEEVH KoAFjEZR6UzDioT9FcwutDGRFIbZiIy3oaawaVhctsERvx9BN9o1M16qQ6HT7PeQ 7eLD0IU+Sv+K94+b4uIH0gHgipgRC1a2AvUCLjquy4bc6xOoXiJkms/48MBp26GS x7Y507a/iNcgtA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:12 2025 by rpki-client