This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json) Hash identifier: UNXwFJMjUbAZXQ9euhBxYhPdbwV0agV2fYZs4STcVzw= Subject key identifier: EE:69:AD:C6:26:9E:E1:6B:E2:14:96:AF:8B:08:86:D5:BC:0E:F8:38 Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216 Certificate serial: 019AF1D1AB0FBB022C13E433B43D6DEA3269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft Manifest number: 0EE3 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=) 2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: 9GoOacdj1MwnpfPIaZir7+8mmjwx5QSV6KHMxzrZEDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:0f:bb:02:2c:13:e4:33:b4:3d:6d:ea:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=ee69adc6269ee16be21496af8b0886d5bc0ef838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:1c:2e:5c:fc:79:41:69:ea:68:e1:af:95: ed:38:59:8c:02:87:d3:4d:54:38:02:24:98:d0:5c: d9:09:bd:d0:9b:46:65:ea:6e:f8:4b:0f:b3:f2:32: e7:01:dc:45:d3:68:03:54:e9:07:51:e3:ea:bd:c2: 8f:87:82:3f:ee:e2:27:7a:10:b7:67:db:66:4c:0e: 52:d9:a3:53:07:2d:80:cb:93:78:d5:11:22:58:94: 42:b0:bc:8c:41:49:b2:cd:54:8c:93:14:80:d2:ea: 3d:eb:8d:f7:ad:d6:c0:d9:94:4d:51:97:79:0d:28: bc:65:75:83:06:3e:fe:7d:14:cf:06:0a:bc:9a:dc: 2c:36:49:46:3f:4b:fb:06:e7:e6:63:95:ee:32:4f: 08:c6:a5:e6:ef:58:71:ef:bc:47:45:45:b0:0d:0f: 1c:ee:e7:a1:5c:04:61:2e:37:3c:ff:fb:ce:83:bc: 5e:17:65:7f:8b:0f:60:03:92:1d:e1:5b:3d:da:29: e4:62:0d:f0:75:33:a1:c9:d1:27:cd:07:c8:00:1f: c0:3a:f7:19:3d:44:dd:8a:2e:22:76:19:0c:3f:02: 01:4b:ad:a1:c3:ed:e8:0b:8e:d6:02:f6:79:a8:43: 57:66:a4:65:a3:12:b9:81:6e:65:ed:24:2d:f0:90: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:69:AD:C6:26:9E:E1:6B:E2:14:96:AF:8B:08:86:D5:BC:0E:F8:38 X509v3 Authority Key Identifier: keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:59:96:e8:ab:1c:5e:7a:88:01:45:e4:cd:ec:fd:1d:41: c6:21:55:0e:04:00:93:34:00:e8:43:92:2a:55:46:e3:cb:0b: 09:77:4e:66:0a:bb:24:30:ca:8b:8e:de:c3:54:0d:07:32:6f: 53:f9:22:6b:ff:c3:e1:07:71:c7:d0:30:9f:98:45:bc:9e:9b: 32:e8:88:cb:77:9c:27:3e:64:2e:16:da:9c:3d:3c:42:dc:53: 89:a7:56:94:be:4b:9d:51:a9:fa:b4:65:57:55:76:d6:a7:bd: 0d:17:24:c2:22:b0:ad:e5:31:e1:8e:7e:77:83:0c:1a:96:4b: cb:fb:cd:7a:a2:45:5c:78:f7:b6:bd:28:18:2d:c7:00:cf:44: 8f:e9:93:e2:08:f3:0d:2f:af:e0:c7:2b:cd:df:e8:f1:45:64: 95:b4:69:ed:8d:7e:84:8c:3e:b9:82:3a:de:ae:71:80:de:56: c5:79:bb:29:6c:92:aa:67:6a:2d:51:e4:91:9b:af:9f:bb:f2: d6:dd:19:11:b8:df:ae:ff:c0:86:26:8d:76:59:cf:64:d5:0c: dd:aa:02:55:9f:f2:0d:c3:b0:be:9c:a2:a9:10:2d:39:09:2e: 4b:e4:ab:3f:a5:d6:26:9e:bc:43:0d:94:77:6c:37:82:04:63: 70:98:77:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0asPuwIsE+QztD1t6jJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4 YzIyMTYwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhlZTY5YWRjNjI2OWVlMTZiZTIxNDk2YWY4YjA4ODZkNWJjMGVmODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3kcLlz8eUFp6mjhr5XtOFmMAofT TVQ4AiSY0FzZCb3Qm0Zl6m74Sw+z8jLnAdxF02gDVOkHUePqvcKPh4I/7uInehC3 Z9tmTA5S2aNTBy2Ay5N41REiWJRCsLyMQUmyzVSMkxSA0uo96433rdbA2ZRNUZd5 DSi8ZXWDBj7+fRTPBgq8mtwsNklGP0v7BufmY5XuMk8IxqXm71hx77xHRUWwDQ8c 7uehXARhLjc8//vOg7xeF2V/iw9gA5Id4Vs92inkYg3wdTOhydEnzQfIAB/AOvcZ PUTdii4idhkMPwIBS62hw+3oC47WAvZ5qENXZqRloxK5gW5l7SQt8JDkEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5prcYmnuFr4hSWr4sIhtW8Dvg4MB8GA1UdIwQY MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2 LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ5Zluir HF56iAFF5M3s/R1BxiFVDgQAkzQA6EOSKlVG48sLCXdOZgq7JDDKi47ew1QNBzJv U/kia//D4Qdxx9Awn5hFvJ6bMuiIy3ecJz5kLhbanD08QtxTiadWlL5LnVGp+rRl V1V21qe9DRckwiKwreUx4Y5+d4MMGpZLy/vNeqJFXHj3tr0oGC3HAM9Ej+mT4gjz DS+v4Mcrzd/o8UVklbRp7Y1+hIw+uYI63q5xgN5WxXm7KWySqmdqLVHkkZuvn7vy 1t0ZEbjfrv/AhiaNdlnPZNUM3aoCVZ/yDcOwvpyiqRAtOQkuS+SrP6XWJp68Qw2U d2w3ggRjcJh3aw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:11 2025 by rpki-client