This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json) Hash identifier: M0zfAAH5R0nQdiy2UnXOyOkNkghw/4pG+PHHZDBROKE= Subject key identifier: 1C:32:66:D1:5C:57:63:A1:F9:7B:A2:9C:A0:27:2B:1C:C2:15:62:6F Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Certificate serial: 019B2EF95EF15F07C556C0C7CA57A2769991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft Manifest number: 057B Signing time: Thu 18 Dec 2025 01:00:53 +0000 Manifest this update: Thu 18 Dec 2025 01:00:53 +0000 Manifest next update: Fri 19 Dec 2025 01:00:53 +0000 Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: 22yM1UvOPSaKBXRO4K2EKHB2QmTS+JLdu7R//dnMecw=) 2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:5e:f1:5f:07:c5:56:c0:c7:ca:57:a2:76:99:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Validity Not Before: Dec 18 01:00:53 2025 GMT Not After : Dec 19 01:00:53 2025 GMT Subject: CN=1c3266d15c5763a1f97ba29ca0272b1cc215626f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:a3:a9:49:65:a0:c6:a6:93:73:dd:e1:f8: 51:bf:f4:96:a3:e5:43:7a:e6:1a:4c:b8:3c:21:01: d9:5f:87:a2:e9:e6:11:b9:01:a9:9b:18:b6:1a:50: 2d:a8:11:a7:2a:97:ff:12:a7:dc:5b:f1:86:c3:ec: a2:2e:3c:5a:a1:b0:34:82:b4:ca:cb:60:26:70:b7: 2a:9d:ce:30:45:85:d0:3f:a4:aa:ed:82:da:1f:b5: b4:53:5d:79:76:1b:16:a2:09:ef:1e:5f:1b:11:93: e4:43:ff:99:65:05:60:72:e4:49:a8:3f:97:d6:e5: e6:86:23:de:02:4e:80:8d:a6:14:57:fe:3c:d9:46: 29:7a:9f:b0:ba:df:bd:0a:68:4a:b0:48:b7:96:1b: f6:b4:2b:81:3e:ea:89:c3:9c:b5:7e:97:b8:8d:b4: 8f:7c:f4:bc:9c:45:2a:51:5b:74:97:25:44:ba:d9: 43:ff:f5:22:36:68:0f:73:d4:f7:b9:4e:fe:40:6d: c2:84:f4:cd:f1:c8:7b:cf:3f:87:d1:f9:8e:41:31: a9:63:f9:6a:a5:87:f8:b8:06:4e:80:11:b8:41:7b: 0c:60:a9:00:23:33:04:06:ee:56:e8:50:8f:92:7b: 99:66:c3:a3:80:47:c9:7e:f3:53:e0:30:cf:7d:50: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:32:66:D1:5C:57:63:A1:F9:7B:A2:9C:A0:27:2B:1C:C2:15:62:6F X509v3 Authority Key Identifier: keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:c4:b3:79:98:5e:65:d5:df:a8:be:a3:20:0f:8a:1c:73: 59:35:07:77:eb:f8:cf:1a:c9:70:c0:bf:d1:2a:59:75:f2:d7: 3b:b5:30:03:04:c9:69:59:c5:6a:47:89:c1:3a:9b:27:5b:c5: d2:ff:b7:4f:0b:ca:81:63:30:d3:2a:9c:dc:06:83:b6:a9:ab: 86:76:f6:d9:5e:8c:5f:63:12:ef:ce:11:1b:ff:a3:fd:24:f6: be:ef:2d:4d:4f:c5:c9:60:da:d9:79:b6:b1:da:73:6e:c1:9a: 70:b1:1e:96:ba:c0:dc:40:c4:d2:8e:e1:c6:09:77:7f:16:80: 9a:d5:8f:c0:3c:7c:54:70:e3:d3:87:76:f7:25:b8:fb:e5:0c: 24:af:f0:6b:9f:ea:7b:58:0e:41:cc:3a:1c:92:6a:fa:e6:c0: df:39:bb:56:46:e4:9d:46:3e:c1:fe:12:b7:bc:e5:c0:f3:b0: c1:a0:8d:9a:d6:59:31:db:2e:ce:0b:f5:2f:e5:33:ce:a4:46: b0:91:2c:ef:94:d0:cb:c1:53:51:d6:57:27:36:aa:a8:38:a0: de:cf:d3:a6:fd:12:50:b9:cc:cb:94:00:d5:cd:62:0c:77:66: 0c:a0:06:7a:fb:fc:46:a9:df:1c:ba:a2:7f:62:21:45:a4:2b: 88:a6:26:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+V7xXwfFVsDHyleidpmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0 OThiNjkwHhcNMjUxMjE4MDEwMDUzWhcNMjUxMjE5MDEwMDUzWjAzMTEwLwYDVQQD EygxYzMyNjZkMTVjNTc2M2ExZjk3YmEyOWNhMDI3MmIxY2MyMTU2MjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfyjqUlloMamk3Pd4fhRv/SWo+VD euYaTLg8IQHZX4ei6eYRuQGpmxi2GlAtqBGnKpf/EqfcW/GGw+yiLjxaobA0grTK y2AmcLcqnc4wRYXQP6Sq7YLaH7W0U115dhsWognvHl8bEZPkQ/+ZZQVgcuRJqD+X 1uXmhiPeAk6AjaYUV/482UYpep+wut+9CmhKsEi3lhv2tCuBPuqJw5y1fpe4jbSP fPS8nEUqUVt0lyVEutlD//UiNmgPc9T3uU7+QG3ChPTN8ch7zz+H0fmOQTGpY/lq pYf4uAZOgBG4QXsMYKkAIzMEBu5W6FCPknuZZsOjgEfJfvNT4DDPfVDulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwyZtFcV2Oh+XuinKAnKxzCFWJvMB8GA1UdIwQY MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0 LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK7Es3mY XmXV36i+oyAPihxzWTUHd+v4zxrJcMC/0SpZdfLXO7UwAwTJaVnFakeJwTqbJ1vF 0v+3TwvKgWMw0yqc3AaDtqmrhnb22V6MX2MS784RG/+j/ST2vu8tTU/FyWDa2Xm2 sdpzbsGacLEelrrA3EDE0o7hxgl3fxaAmtWPwDx8VHDj04d29yW4++UMJK/wa5/q e1gOQcw6HJJq+ubA3zm7VkbknUY+wf4St7zlwPOwwaCNmtZZMdsuzgv1L+UzzqRG sJEs75TQy8FTUdZXJzaqqDig3s/Tpv0SULnMy5QA1c1iDHdmDKAGevv8RqnfHLqi f2IhRaQriKYmOQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:37 2025 by rpki-client