This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json) Hash identifier: rpVQ0poxb/zx30+YARiq8yQZOjSgA093AMOIFxbXpYk= Subject key identifier: DB:5B:0B:AD:39:C7:E0:5E:4E:20:6A:06:6F:42:5C:C5:19:BB:85:14 Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Certificate serial: 019AF31C98DBB7617E165436114509A78E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: SAIOS0vloOMXKPMT3Z9dz+9iA4nrSWMyodfSOD55mSg=) 2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:98:db:b7:61:7e:16:54:36:11:45:09:a7:8e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=db5b0bad39c7e05e4e206a066f425cc519bb8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:3e:f8:9c:6f:b6:76:2d:9e:a3:27:b8:43: 11:7a:03:57:7a:d2:d8:94:94:69:7b:e8:14:9b:46: bb:9c:35:33:5d:94:13:cf:d0:25:18:d8:c9:ee:62: 71:8a:2f:a9:aa:0c:c3:dd:af:92:20:02:00:23:d7: 14:c5:3d:a4:10:ec:8c:a3:92:b1:94:8e:2e:1d:16: 59:e1:82:df:6b:21:c5:30:b0:a7:1c:28:94:c5:6e: 22:c7:9d:8a:41:a3:f3:a8:5f:9b:56:fd:d2:e3:f8: c7:ae:58:93:96:4a:38:d1:98:4b:62:08:25:85:8c: 14:02:22:ae:62:59:46:ed:c2:37:aa:6c:e3:ce:fe: 34:d8:f0:2f:7b:bc:f3:5d:a0:e5:63:b7:53:2b:65: b9:5c:2c:8d:8c:c2:cf:67:99:e1:eb:44:fd:ce:31: 3e:81:a8:a4:ec:13:ca:c3:23:4e:aa:39:5c:65:f2: 85:06:04:44:d3:5e:bd:c7:55:81:ec:06:78:80:52: 75:a9:9f:f8:11:67:6c:fb:86:26:8d:f7:22:7d:71: cc:b9:79:37:68:df:bd:f1:c0:c4:25:81:87:1e:2c: e6:c9:6a:f4:8e:84:d9:53:27:c5:b0:b8:18:85:a7: e6:dd:fc:82:ec:84:38:1f:8d:eb:40:90:0f:92:7c: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5B:0B:AD:39:C7:E0:5E:4E:20:6A:06:6F:42:5C:C5:19:BB:85:14 X509v3 Authority Key Identifier: keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0f:37:53:87:ec:3a:85:f3:6a:28:9d:c1:33:6e:f8:0d:5b: 17:03:e8:85:a9:eb:70:8b:71:6c:09:d5:52:d2:39:d4:f8:c2: 63:19:79:74:57:c8:4a:a2:34:a6:f5:c7:26:c6:46:d0:d2:7d: b9:bb:a8:80:b0:78:41:d9:5b:48:85:a8:b5:a5:5f:21:8b:84: b7:81:6d:ba:a3:2b:b0:16:59:94:1d:4e:cd:8c:b6:ac:d7:77: e1:04:69:66:70:02:5a:43:db:d9:1e:fe:91:91:87:29:ea:99: ca:31:c8:3b:b3:2b:53:1c:b6:8f:a2:3c:d1:18:2c:fc:93:7d: 28:3e:41:56:b0:63:67:38:c2:d6:b9:9d:8e:99:06:bc:41:23: 9f:b9:b5:0c:f4:cf:1c:40:4e:a7:87:b3:ac:51:de:7c:e9:11: 3b:7c:20:66:76:af:c7:49:1a:aa:d6:2d:df:dc:8b:71:91:c1: 69:58:1b:01:f4:d8:6a:c9:f9:ae:0c:37:71:8e:c1:d9:53:da: e0:18:6d:4b:0f:61:1d:ea:2c:e1:d9:f6:1d:fe:70:9c:30:1a: 3d:c4:46:6f:91:e3:07:da:f5:51:54:65:7a:cc:1b:53:9a:65: 30:eb:af:6e:0b:13:35:9d:a0:08:ca:08:32:32:d6:c9:c7:8f: 99:ab:58:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJjbt2F+FlQ2EUUJp45FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj ZjQ2OTgwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EyhkYjViMGJhZDM5YzdlMDVlNGUyMDZhMDY2ZjQyNWNjNTE5YmI4NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c0++JxvtnYtnqMnuEMRegNXetLY lJRpe+gUm0a7nDUzXZQTz9AlGNjJ7mJxii+pqgzD3a+SIAIAI9cUxT2kEOyMo5Kx lI4uHRZZ4YLfayHFMLCnHCiUxW4ix52KQaPzqF+bVv3S4/jHrliTlko40ZhLYggl hYwUAiKuYllG7cI3qmzjzv402PAve7zzXaDlY7dTK2W5XCyNjMLPZ5nh60T9zjE+ gaik7BPKwyNOqjlcZfKFBgRE0169x1WB7AZ4gFJ1qZ/4EWds+4YmjfcifXHMuXk3 aN+98cDEJYGHHizmyWr0joTZUyfFsLgYhafm3fyC7IQ4H43rQJAPknxnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtbC605x+BeTiBqBm9CXMUZu4UUMB8GA1UdIwQY MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt ZWFkMWFmODY5MWJhLzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ83U4fs OoXzaiidwTNu+A1bFwPohanrcItxbAnVUtI51PjCYxl5dFfISqI0pvXHJsZG0NJ9 ubuogLB4QdlbSIWotaVfIYuEt4FtuqMrsBZZlB1OzYy2rNd34QRpZnACWkPb2R7+ kZGHKeqZyjHIO7MrUxy2j6I80Rgs/JN9KD5BVrBjZzjC1rmdjpkGvEEjn7m1DPTP HEBOp4ezrFHefOkRO3wgZnavx0kaqtYt39yLcZHBaVgbAfTYasn5rgw3cY7B2VPa 4BhtSw9hHeos4dn2Hf5wnDAaPcRGb5HjB9r1UVRleswbU5plMOuvbgsTNZ2gCMoI MjLWycePmatY1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:30 2025 by rpki-client