This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json) Hash identifier: U++t50dYtwYaNHJv9124gYtGFhnQzd9N9R0bYgSQVDM= Subject key identifier: 29:25:61:A0:25:E6:D7:9A:96:81:D3:F2:58:3D:6E:28:67:55:DF:29 Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea Certificate serial: 019AFCC376E66CDC9264AD74797B4E76577B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft Manifest number: 0510 Signing time: Mon 08 Dec 2025 07:00:59 +0000 Manifest this update: Mon 08 Dec 2025 07:00:59 +0000 Manifest next update: Tue 09 Dec 2025 07:00:59 +0000 Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=) 2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: /HHD1z6YL8EumWiSzi3r3/SVpRsJfgBQGclsxjm0blM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:76:e6:6c:dc:92:64:ad:74:79:7b:4e:76:57:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea Validity Not Before: Dec 8 07:00:59 2025 GMT Not After : Dec 9 07:00:59 2025 GMT Subject: CN=292561a025e6d79a9681d3f2583d6e286755df29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:97:00:58:7e:fd:c5:6f:ad:de:7c:2e:5b: 7e:67:9e:0c:1a:3e:b7:a7:fc:e8:51:31:55:6d:d1: 8a:4d:b3:e5:ae:d4:0c:53:43:57:27:83:79:86:9e: e2:6d:29:7f:50:13:d6:66:9f:15:42:05:88:52:db: ff:be:0a:7a:85:78:ab:09:b5:07:ac:05:ce:d4:29: 31:d3:40:68:d9:30:37:2a:23:f4:32:8b:e2:2a:c1: 11:83:04:35:48:ef:57:3a:f8:ae:49:02:1d:12:27: dc:ca:d2:a6:4f:a6:14:c9:59:ea:6c:6c:d6:db:67: 96:6f:a5:38:ef:e0:68:a4:a0:75:a6:9b:e2:e0:09: 63:62:21:dd:9e:0d:20:53:df:1d:0d:91:b3:54:f9: 9b:09:0a:6b:24:4b:71:b8:c7:6b:4f:f6:19:80:41: 0a:4b:0b:c6:7d:06:19:15:46:e0:64:61:ab:84:dd: a3:0d:3e:12:a3:bb:98:4f:69:7d:82:ab:5a:41:71: 58:aa:07:ef:fd:b4:46:5a:e0:84:58:f6:8d:66:3d: f3:77:ec:7b:07:dd:e2:78:e6:bd:33:ad:47:ae:4a: d9:e2:46:d8:1c:2f:8f:88:35:0a:4a:49:89:05:5c: 41:c0:9a:09:ee:c5:40:87:14:94:ae:12:ba:ef:7a: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:61:A0:25:E6:D7:9A:96:81:D3:F2:58:3D:6E:28:67:55:DF:29 X509v3 Authority Key Identifier: keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:85:32:42:17:a7:bb:75:bf:6d:f6:eb:25:ca:78:9e:0d: 7d:8b:b3:5d:22:5a:08:0f:73:6c:4d:69:3c:76:04:a0:0e:ee: cd:e5:22:dc:ea:47:b9:cf:c2:95:8b:c7:2b:47:7e:10:29:fd: e3:ba:c3:cf:ea:be:39:68:7d:e8:46:67:e1:ef:96:23:9c:7e: 2e:87:15:98:b9:50:de:f6:07:3c:eb:76:86:98:12:9b:4e:aa: 4b:90:cc:e4:d3:bf:40:b3:cd:55:98:d3:5f:2d:67:53:4c:20: e8:8a:c6:83:da:b0:60:92:7e:ba:ba:e4:ac:9e:20:79:a7:08: 4f:f2:f0:4d:ed:cd:23:a3:8a:73:ff:dd:e9:74:81:d3:10:9f: dd:dd:91:ea:83:b5:c8:91:12:92:a0:b3:a1:4f:8d:2c:13:f3: 12:7b:1b:52:51:69:b2:61:8f:95:69:e8:6c:91:53:a5:11:da: b8:50:a7:75:43:36:3a:74:e5:64:28:02:9f:97:1f:ae:55:89: 64:9e:67:1f:a2:6e:2c:99:a8:9e:85:c6:0a:e5:14:95:26:c3: f6:e5:8a:c2:56:eb:ce:bc:3e:07:78:21:ae:a8:9e:42:ee:b9: 42:71:fb:53:38:97:7e:e8:c1:74:2d:d7:bd:87:47:5b:64:14: e8:6a:a2:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w3bmbNySZK10eXtOdld7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh Yzc5ZWEwHhcNMjUxMjA4MDcwMDU5WhcNMjUxMjA5MDcwMDU5WjAzMTEwLwYDVQQD EygyOTI1NjFhMDI1ZTZkNzlhOTY4MWQzZjI1ODNkNmUyODY3NTVkZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktiXAFh+/cVvrd58Llt+Z54MGj63 p/zoUTFVbdGKTbPlrtQMU0NXJ4N5hp7ibSl/UBPWZp8VQgWIUtv/vgp6hXirCbUH rAXO1Ckx00Bo2TA3KiP0MoviKsERgwQ1SO9XOviuSQIdEifcytKmT6YUyVnqbGzW 22eWb6U47+BopKB1ppvi4AljYiHdng0gU98dDZGzVPmbCQprJEtxuMdrT/YZgEEK SwvGfQYZFUbgZGGrhN2jDT4So7uYT2l9gqtaQXFYqgfv/bRGWuCEWPaNZj3zd+x7 B93ieOa9M61HrkrZ4kbYHC+PiDUKSkmJBVxBwJoJ7sVAhxSUrhK673reHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCklYaAl5tealoHT8lg9bihnVd8pMB8GA1UdIwQY MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzOFMkIX p7t1v2326yXKeJ4NfYuzXSJaCA9zbE1pPHYEoA7uzeUi3OpHuc/ClYvHK0d+ECn9 47rDz+q+OWh96EZn4e+WI5x+LocVmLlQ3vYHPOt2hpgSm06qS5DM5NO/QLPNVZjT Xy1nU0wg6IrGg9qwYJJ+urrkrJ4geacIT/LwTe3NI6OKc//d6XSB0xCf3d2R6oO1 yJESkqCzoU+NLBPzEnsbUlFpsmGPlWnobJFTpRHauFCndUM2OnTlZCgCn5cfrlWJ ZJ5nH6JuLJmonoXGCuUUlSbD9uWKwlbrzrw+B3ghrqieQu65QnH7UziXfujBdC3X vYdHW2QU6GqiZg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:52 2025 by rpki-client