This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json) Hash identifier: CGpqKm87ptOUpnQBQ0k9dWhPWYsfQpIBIZas9ucCseU= Subject key identifier: D2:99:FB:D5:C2:DD:1A:B0:EB:87:C3:F5:53:9A:7D:A5:D1:12:23:AF Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1 Certificate serial: 019AF1648507C088B9572A77C4C3BFD938DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=) 2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: 2Am6rffi1jj4eLMIa7YkK3ECI6hdCifJ/Md1V2CbgyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:07:c0:88:b9:57:2a:77:c4:c3:bf:d9:38:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1 Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=d299fbd5c2dd1ab0eb87c3f5539a7da5d11223af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:0e:34:e0:36:e6:5f:63:fe:5b:78:1f:57: ba:7e:55:da:a9:b0:b2:9c:0d:46:38:9b:37:bf:a6: 17:a1:4e:47:12:91:a9:93:6c:f3:61:68:93:37:fb: 1a:ff:38:51:e7:b5:69:bb:b8:b8:b0:b1:3f:de:65: 11:6d:55:4e:bc:e5:ed:1d:2f:c5:c9:e4:1f:5e:da: 7d:f8:32:ee:46:5f:4b:fd:9c:89:37:79:e7:11:80: c8:a7:f1:76:ab:31:36:a1:b7:2e:1a:0a:45:2d:7a: 89:a3:98:03:53:d0:91:21:08:d5:07:5a:e6:4c:15: 8b:23:ae:d4:70:af:26:7b:26:5b:41:1a:25:83:10: c5:80:27:9c:8a:a1:09:f8:97:80:1c:21:e6:84:33: 10:dc:1e:cd:ef:f7:6e:3a:4f:e2:ac:70:c2:c4:c1: d2:6f:e8:8b:2e:ed:fa:90:7b:5a:f1:4c:5f:c5:62: 30:3b:bf:1b:f5:4f:d1:66:17:d6:8d:0a:e3:06:dd: ab:21:1c:ce:99:95:fa:3b:31:b2:62:cb:4a:c7:9b: e0:ab:26:52:fa:97:fe:8f:53:70:7b:98:a1:e7:ba: cf:26:7e:f0:f5:08:b1:eb:95:9f:49:1a:5c:c3:81: 92:45:19:36:d1:69:f2:a1:52:75:28:11:c8:27:dc: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:FB:D5:C2:DD:1A:B0:EB:87:C3:F5:53:9A:7D:A5:D1:12:23:AF X509v3 Authority Key Identifier: keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:05:8b:a3:56:54:a9:dc:7e:c1:60:23:4c:10:d5:6f:8c:6d: 75:6c:74:b3:f0:5b:17:6d:cd:1d:41:b1:34:94:b0:de:38:ff: 25:14:13:70:29:ad:b8:49:4c:48:f8:92:39:83:ba:2e:38:73: 58:e1:0b:af:ab:e6:8a:57:e2:17:a3:e6:c6:05:80:44:25:93: 5d:27:ea:a8:e2:e9:77:20:b6:e1:e1:8c:15:b5:27:89:72:11: f5:13:ef:f0:fe:e3:6a:ee:d3:2f:79:34:90:e4:0c:77:97:ca: 35:47:fb:ff:05:38:d8:97:d9:69:a1:5a:76:f2:95:98:5b:49: 7b:c2:c8:fa:f1:12:fe:da:88:71:f3:56:37:a2:dc:38:f6:f9: ad:22:fa:21:4c:d3:b0:70:90:d3:da:7f:6e:07:5a:c8:a1:1b: 92:81:84:d3:b6:fd:75:f3:17:98:72:d1:de:2d:7b:b9:da:36: 24:f9:f6:38:47:c2:5e:1e:63:5b:76:3c:75:63:14:b3:25:fc: 96:5c:04:67:db:f4:51:08:1d:59:67:3e:25:ba:78:dd:d1:40: ab:38:9a:b6:bc:16:97:15:ed:65:9b:03:24:56:da:e8:05:15: 86:ad:87:38:2c:cf:61:d6:9d:41:32:e7:ff:48:66:bc:4c:a2: d5:98:c8:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIUHwIi5Vyp3xMO/2TjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4 OTRkZjEwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD EyhkMjk5ZmJkNWMyZGQxYWIwZWI4N2MzZjU1MzlhN2RhNWQxMTIyM2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2YONOA25l9j/lt4H1e6flXaqbCy nA1GOJs3v6YXoU5HEpGpk2zzYWiTN/sa/zhR57Vpu7i4sLE/3mURbVVOvOXtHS/F yeQfXtp9+DLuRl9L/ZyJN3nnEYDIp/F2qzE2obcuGgpFLXqJo5gDU9CRIQjVB1rm TBWLI67UcK8meyZbQRolgxDFgCeciqEJ+JeAHCHmhDMQ3B7N7/duOk/irHDCxMHS b+iLLu36kHta8UxfxWIwO78b9U/RZhfWjQrjBt2rIRzOmZX6OzGyYstKx5vgqyZS +pf+j1Nwe5ih57rPJn7w9Qix65WfSRpcw4GSRRk20WnyoVJ1KBHIJ9wweQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKZ+9XC3Rqw64fD9VOafaXREiOvMB8GA1UdIwQY MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4 LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAWLo1ZU qdx+wWAjTBDVb4xtdWx0s/BbF23NHUGxNJSw3jj/JRQTcCmtuElMSPiSOYO6Ljhz WOELr6vmilfiF6PmxgWARCWTXSfqqOLpdyC24eGMFbUniXIR9RPv8P7jau7TL3k0 kOQMd5fKNUf7/wU42JfZaaFadvKVmFtJe8LI+vES/tqIcfNWN6LcOPb5rSL6IUzT sHCQ09p/bgdayKEbkoGE07b9dfMXmHLR3i17udo2JPn2OEfCXh5jW3Y8dWMUsyX8 llwEZ9v0UQgdWWc+Jbp43dFAqziatrwWlxXtZZsDJFba6AUVhq2HOCzPYdadQTLn /0hmvEyi1ZjIIg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:33 2025 by rpki-client