This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json) Hash identifier: VMcb1tM2kiNumwUeBgk/BwDL4wQjlqoOFM69it8TbFM= Subject key identifier: 33:45:A0:83:7A:DB:83:21:29:74:1F:7C:00:2D:11:25:77:BC:2D:96 Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Certificate serial: 019AF31B9C54A943ED8AF419E100A7748C14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft Manifest number: 055C Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: Bx/8LmJX5XWCljNiCRHAXfRB2vxFfNitH8P4RmgZOr0=) 2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9c:54:a9:43:ed:8a:f4:19:e1:00:a7:74:8c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=3345a0837adb832129741f7c002d112577bc2d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:91:21:85:1e:4c:b9:30:67:9c:75:15:30: 0b:27:b8:db:d6:e5:e6:a2:8d:06:ee:48:e9:f0:68: 4e:ec:23:38:38:1f:6d:fd:e9:2f:36:b7:66:48:a4: d3:a8:75:4d:da:cc:68:fb:fc:da:1a:aa:5b:af:6e: b7:e6:2c:39:b4:a1:31:b3:fa:e3:bb:b2:a2:de:6f: c2:40:67:7c:cd:78:e0:54:cd:cc:d8:70:41:3c:45: 9b:e0:6d:6b:76:dd:18:9d:b7:f9:8c:03:0a:ba:6b: 53:40:f8:c9:5c:95:95:54:ef:28:a6:04:20:43:92: d5:5c:82:e5:98:71:00:89:4d:ec:70:53:1b:f4:7b: 68:77:51:6b:2b:0c:5f:c0:ca:f0:8b:ac:67:cd:d7: a5:18:ac:0a:6a:dc:6a:fd:58:77:e4:b1:14:f5:27: e2:75:68:66:d5:15:23:be:a2:6f:56:9e:4e:64:86: 7d:ec:d8:04:d0:0b:74:f4:05:35:29:0f:47:5a:ae: 76:9c:bf:79:8b:7a:12:37:55:b7:4f:e1:6f:6d:1d: 23:b0:79:d5:b1:d2:75:f0:bc:0d:7b:b5:bb:57:e3: 19:40:b1:12:be:f9:6d:d9:64:f5:43:85:ae:3f:a7: 26:58:35:46:a3:d1:76:45:b9:22:c1:09:82:14:83: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:A0:83:7A:DB:83:21:29:74:1F:7C:00:2D:11:25:77:BC:2D:96 X509v3 Authority Key Identifier: keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f6:dd:80:1f:cd:45:e9:43:f4:6a:de:37:6a:c1:b4:e8:84: 32:2d:c2:66:cb:9a:38:77:6a:c5:f3:5e:5a:fb:63:87:30:3c: eb:a7:29:3e:8f:1e:bf:8d:94:cb:67:3b:e9:5d:11:e3:9c:e2: a3:48:c8:8e:02:7e:77:3c:80:1b:fe:f7:87:ca:f8:10:cd:8d: 6f:dc:9e:c4:bb:d3:08:f9:85:fa:57:8f:d7:64:73:be:1f:4e: f6:99:50:14:90:30:33:5b:7f:7e:fa:3e:a3:c5:50:1b:60:ff: ce:18:ac:f0:5d:4c:24:c9:ce:ca:a6:34:cd:d4:b0:84:68:69: 7d:12:b8:1a:68:3a:e8:56:59:1a:d8:eb:0b:8f:de:db:b9:b6: 65:4e:cd:0e:f8:47:c7:9c:06:5b:07:2d:32:6b:e5:b4:c4:f7: 3c:22:6b:dd:5f:48:03:3f:0c:a2:5b:2d:cd:6b:68:26:28:62: c8:ac:5f:85:a9:a5:8d:13:76:e9:40:75:85:2d:9e:53:51:1d: 22:05:8a:cc:41:f2:e4:fd:6d:b4:e5:2a:65:ab:97:02:f2:bc: 5c:10:3e:c6:5d:21:b5:30:52:6a:7d:66:d2:5e:df:1f:c5:5f: 6f:68:90:d5:60:48:13:e4:3d:2b:fb:e9:15:60:fd:a5:0c:e5: ea:c9:58:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5xUqUPtivQZ4QCndIwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0 OThiNjkwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EygzMzQ1YTA4MzdhZGI4MzIxMjk3NDFmN2MwMDJkMTEyNTc3YmMyZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yaRIYUeTLkwZ5x1FTALJ7jb1uXm oo0G7kjp8GhO7CM4OB9t/ekvNrdmSKTTqHVN2sxo+/zaGqpbr2635iw5tKExs/rj u7Ki3m/CQGd8zXjgVM3M2HBBPEWb4G1rdt0Ynbf5jAMKumtTQPjJXJWVVO8opgQg Q5LVXILlmHEAiU3scFMb9Htod1FrKwxfwMrwi6xnzdelGKwKatxq/Vh35LEU9Sfi dWhm1RUjvqJvVp5OZIZ97NgE0At09AU1KQ9HWq52nL95i3oSN1W3T+FvbR0jsHnV sdJ18LwNe7W7V+MZQLESvvlt2WT1Q4WuP6cmWDVGo9F2RbkiwQmCFIMKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNFoIN624MhKXQffAAtESV3vC2WMB8GA1UdIwQY MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0 LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfbdgB/N RelD9GreN2rBtOiEMi3CZsuaOHdqxfNeWvtjhzA866cpPo8ev42Uy2c76V0R45zi o0jIjgJ+dzyAG/73h8r4EM2Nb9yexLvTCPmF+leP12Rzvh9O9plQFJAwM1t/fvo+ o8VQG2D/zhis8F1MJMnOyqY0zdSwhGhpfRK4Gmg66FZZGtjrC4/e27m2ZU7NDvhH x5wGWwctMmvltMT3PCJr3V9IAz8MolstzWtoJihiyKxfhamljRN26UB1hS2eU1Ed IgWKzEHy5P1ttOUqZauXAvK8XBA+xl0htTBSan1m0l7fH8Vfb2iQ1WBIE+Q9K/vp FWD9pQzl6slYGg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:52 2025 by rpki-client