This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft File: CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json) Hash identifier: B0aZDXDqehMhmMwsj0b4R/ozTya9GPCVOuUPEUVsXVw= Subject key identifier: F1:B5:B7:FD:64:CD:96:68:6B:8F:BE:9E:B5:54:96:24:70:9C:8F:92 Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE Certificate issuer: /CN=08c7b65ba6659e27570773c508558754eb490dde Certificate serial: 019AF2090E2BEE892DD6E8F0990AAF73B5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft Manifest number: D1 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: hUugHFYUadgjiLALeLQWkyipZPvCqauAp71N0Y/5jBE=) 2: Ud-XAg37mML14PlGMC-MtLQMglE.roa (hash: 18isVv70Mwq2NQGwUDi88omuA2Y/FqQMJz3QrvT4ZPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:2b:ee:89:2d:d6:e8:f0:99:0a:af:73:b5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=f1b5b7fd64cd96686b8fbe9eb5549624709c8f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:16:6e:e5:d1:2f:2c:25:a6:9f:c4:ff:f8: fb:a9:e5:ff:ce:9c:a0:83:28:e8:dc:55:2b:7f:53: ed:d2:37:61:39:38:9d:5d:db:6a:fa:f5:6d:50:a1: fa:79:0f:f4:d9:92:62:78:3b:45:4e:b2:44:41:f3: 1c:50:2c:89:4e:be:e3:02:32:d3:26:2d:d7:a3:c8: ee:81:83:75:9d:6d:aa:7d:b4:0e:de:a4:e8:01:6c: a7:ef:4e:38:40:1e:1a:78:87:08:61:17:9c:d3:26: ce:90:b7:36:2c:d3:b8:e3:fd:a4:16:e8:54:61:f6: 46:ef:eb:4a:64:0f:98:64:a6:36:d2:1a:d9:98:de: e5:22:b3:b6:69:a3:c3:b4:9f:9e:45:56:7b:40:0e: 69:13:b8:1a:a8:b0:b4:3d:b5:85:ce:26:fe:93:9c: df:6a:b1:e1:27:ca:98:d9:38:1d:80:32:47:2e:11: 8d:cd:8d:0d:bc:75:0e:c1:4a:6a:e4:9c:66:01:5b: 2b:eb:fd:c6:89:b4:fb:08:90:bc:2a:bf:15:7d:56: 9c:ec:64:2a:3e:f2:0a:55:7b:23:1b:fa:69:26:6e: a4:a8:31:31:13:f1:59:5f:d0:66:2f:d1:7c:5b:19: d8:61:24:eb:d3:24:84:c2:ad:c6:ab:45:cf:4c:2d: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B5:B7:FD:64:CD:96:68:6B:8F:BE:9E:B5:54:96:24:70:9C:8F:92 X509v3 Authority Key Identifier: keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:14:a8:4c:98:4e:dd:ea:f0:54:56:7e:1a:0f:b6:3c:5b:a4: 70:ba:ce:03:93:fc:7b:24:c3:09:a6:b8:25:07:0a:e9:07:b7: 6a:55:96:7b:f3:a0:c1:46:9e:83:81:7d:eb:11:c1:32:98:7c: 11:e3:1c:78:59:6f:fa:44:85:34:fb:a7:fe:a8:34:97:e6:13: af:ac:39:0d:a0:30:e5:45:61:f1:41:6f:c9:8a:67:41:ae:55: f9:ae:8f:a9:42:58:a1:2d:ac:86:33:d9:2e:d6:17:ca:22:4b: e5:c4:68:13:19:61:21:5e:64:4a:91:13:5b:b7:6a:99:de:44: f1:54:15:d2:66:be:37:c1:1f:d7:b2:ef:ec:6d:b5:9a:e9:4b: fa:5d:f2:0d:77:e9:b2:dc:de:b2:3e:a5:d8:79:9a:2c:ae:60: eb:8f:ae:3b:5e:95:e0:c9:4b:cc:4c:91:bd:a1:5c:61:cd:d2: 5b:ba:99:97:17:0c:8c:98:41:7e:9b:14:0a:0b:49:a4:c3:6b: 49:f2:a6:3f:65:06:96:22:03:c7:f0:fd:20:89:ab:f6:9a:e6: f9:bc:fe:d1:93:f4:5f:b9:d7:79:8e:a4:2c:f6:9a:30:75:65: 97:0d:f9:00:e5:27:66:a9:d2:5a:58:80:e7:3e:39:76:fb:0d: 6e:07:35:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ4r7okt1ujwmQqvc7XWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YzdiNjViYTY2NTllMjc1NzA3NzNjNTA4NTU4NzU0ZWI0 OTBkZGUwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhmMWI1YjdmZDY0Y2Q5NjY4NmI4ZmJlOWViNTU0OTYyNDcwOWM4ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t4WbuXRLywlpp/E//j7qeX/zpyg gyjo3FUrf1Pt0jdhOTidXdtq+vVtUKH6eQ/02ZJieDtFTrJEQfMcUCyJTr7jAjLT Ji3Xo8jugYN1nW2qfbQO3qToAWyn7044QB4aeIcIYRec0ybOkLc2LNO44/2kFuhU YfZG7+tKZA+YZKY20hrZmN7lIrO2aaPDtJ+eRVZ7QA5pE7gaqLC0PbWFzib+k5zf arHhJ8qY2TgdgDJHLhGNzY0NvHUOwUpq5JxmAVsr6/3GibT7CJC8Kr8VfVac7GQq PvIKVXsjG/ppJm6kqDExE/FZX9BmL9F8WxnYYSTr0ySEwq3Gq0XPTC2O0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG1t/1kzZZoa4++nrVUliRwnI+SMB8GA1UdIwQY MBaAFAjHtlumZZ4nVwdzxQhVh1TrSQ3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xNjZiMzMtZjc5ZC00MzA4LWFkMDct NWI3Yjk1NzAwOTllLzEvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xNjZiMzMtZjc5ZC00MzA4LWFkMDctNWI3Yjk1NzAwOTll LzEvQ01lMlc2WmxuaWRYQjNQRkNGV0hWT3RKRGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxSoTJhO 3erwVFZ+Gg+2PFukcLrOA5P8eyTDCaa4JQcK6Qe3alWWe/OgwUaeg4F96xHBMph8 EeMceFlv+kSFNPun/qg0l+YTr6w5DaAw5UVh8UFvyYpnQa5V+a6PqUJYoS2shjPZ LtYXyiJL5cRoExlhIV5kSpETW7dqmd5E8VQV0ma+N8Ef17Lv7G21mulL+l3yDXfp stzesj6l2HmaLK5g64+uO16V4MlLzEyRvaFcYc3SW7qZlxcMjJhBfpsUCgtJpMNr SfKmP2UGliIDx/D9IImr9prm+bz+0ZP0X7nXeY6kLPaaMHVllw35AOUnZqnSWliA 5z45dvsNbgc1kg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:50 2025 by rpki-client