This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft File: mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json) Hash identifier: Bn1aO4EXWP8IRL01uqQsa5aqq/smiTYGwjxFktw1JeI= Subject key identifier: 4A:3F:C7:C7:22:0B:2F:DD:4F:D0:8D:9A:B2:40:6D:50:05:0B:76:94 Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94 Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094 Certificate serial: 019AF1D212080577791D3F7566A287C12EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=) 2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: 27FLxP8ocCUaosXIcQ4imPZRwRGPWy+LFTxKFtFASfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:12:08:05:77:79:1d:3f:75:66:a2:87:c1:2e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=4a3fc7c7220b2fdd4fd08d9ab2406d50050b7694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:5e:ad:b4:44:5d:c4:e7:b2:15:76:1e:3b: 5f:73:09:4e:6d:e3:e5:15:e4:54:cb:41:ec:21:25: 18:f8:c5:67:a2:95:7c:2a:91:8e:57:a6:f5:75:24: 59:f1:d3:b8:e8:6f:8e:64:08:87:02:d1:ec:3d:72: 7d:93:9b:bf:09:3b:fa:f5:31:30:23:b8:88:d7:98: 40:1a:90:06:c0:2a:d6:d8:1e:0b:db:76:b5:85:83: 97:a9:90:1e:81:54:51:88:cb:9c:30:2b:12:81:0c: 2a:89:7c:1a:2b:95:d8:f1:ff:a0:5b:bf:9a:bb:ea: 92:f9:d0:01:54:93:6d:d3:b1:a3:47:bd:10:9d:57: 32:62:aa:9b:e2:60:59:72:e6:4d:f9:fc:92:b5:6c: 28:9b:6b:e4:ed:20:03:24:cf:1d:65:d9:0c:fb:c1: 0e:62:9c:c4:b3:c3:c7:97:8a:30:c1:8e:8d:29:a2: 5b:34:14:e0:8d:b4:91:d8:58:2f:66:8c:f4:67:12: e9:e9:81:7e:9e:b7:41:e0:92:94:63:ff:2f:aa:01: 4b:bc:b9:72:18:6a:3f:db:36:ed:2c:cc:97:3d:54: bc:71:7e:bc:3d:ad:58:50:4e:9f:7f:99:05:97:36: 98:bc:aa:1f:6d:ab:ca:b7:1c:4f:84:ee:93:7c:76: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:C7:C7:22:0B:2F:DD:4F:D0:8D:9A:B2:40:6D:50:05:0B:76:94 X509v3 Authority Key Identifier: keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c3:a5:c7:1f:00:cc:e1:97:d0:a8:a2:a9:50:06:e6:e6:2c: 85:67:96:73:68:8e:78:49:30:f7:7b:18:04:b1:4b:9e:10:ec: b8:67:1b:b5:24:34:00:11:7f:97:0b:07:f9:d8:b0:ff:25:d7: a2:df:e8:51:a8:00:67:0c:64:2b:7f:ed:24:31:76:ba:a0:1d: 31:5f:af:68:a4:44:31:d2:51:a0:05:71:9f:03:fd:18:18:32: 34:24:85:08:66:ad:2c:51:4f:3b:f2:9c:c2:f2:86:1f:55:4c: c7:96:e7:a1:f2:7b:5e:98:2e:90:73:18:1a:29:73:27:41:95: 35:85:61:4b:a1:d8:4c:91:f3:b1:ce:00:5e:70:9c:fc:67:01: ca:6a:ae:dc:73:21:56:e3:a3:90:eb:5f:fa:52:0d:a9:5e:20: 91:5b:4b:43:e4:43:29:ac:89:5a:b2:8a:e1:fc:f4:72:07:75: 71:51:16:0e:2f:0a:c4:e8:f4:f1:2f:5e:d4:b5:41:12:d1:69: 9f:39:f3:d0:3f:f4:d1:39:ef:35:5e:3b:0a:77:c6:b9:f0:b0: be:38:f0:38:aa:1c:af:5f:59:56:20:43:e6:e3:1c:5f:2a:41: be:71:68:07:aa:d0:ac:be:26:f7:45:26:c3:72:16:90:87:3e: cb:ed:6b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hIIBXd5HT91ZqKHwS7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDEzM2IzMWQ5NmIyN2MxYWY4MTgxMTRiMTY5YzlhNTc0 NWUwOTQwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD Eyg0YTNmYzdjNzIyMGIyZmRkNGZkMDhkOWFiMjQwNmQ1MDA1MGI3Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3plerbREXcTnshV2HjtfcwlObePl FeRUy0HsISUY+MVnopV8KpGOV6b1dSRZ8dO46G+OZAiHAtHsPXJ9k5u/CTv69TEw I7iI15hAGpAGwCrW2B4L23a1hYOXqZAegVRRiMucMCsSgQwqiXwaK5XY8f+gW7+a u+qS+dABVJNt07GjR70QnVcyYqqb4mBZcuZN+fyStWwom2vk7SADJM8dZdkM+8EO YpzEs8PHl4owwY6NKaJbNBTgjbSR2FgvZoz0ZxLp6YF+nrdB4JKUY/8vqgFLvLly GGo/2zbtLMyXPVS8cX68Pa1YUE6ff5kFlzaYvKofbavKtxxPhO6TfHYJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo/x8ciCy/dT9CNmrJAbVAFC3aUMB8GA1UdIwQY MBaAFJhBM7MdlrJ8GvgYEUsWnJpXReCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEt NzUwNjlhZTc3MzI2LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEtNzUwNjlhZTc3MzI2 LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsOlxx8A zOGX0KiiqVAG5uYshWeWc2iOeEkw93sYBLFLnhDsuGcbtSQ0ABF/lwsH+diw/yXX ot/oUagAZwxkK3/tJDF2uqAdMV+vaKREMdJRoAVxnwP9GBgyNCSFCGatLFFPO/Kc wvKGH1VMx5bnofJ7XpgukHMYGilzJ0GVNYVhS6HYTJHzsc4AXnCc/GcBymqu3HMh VuOjkOtf+lINqV4gkVtLQ+RDKayJWrKK4fz0cgd1cVEWDi8KxOj08S9e1LVBEtFp nznz0D/00TnvNV47CnfGufCwvjjwOKocr19ZViBD5uMcXypBvnFoB6rQrL4m90Um w3IWkIc+y+1r6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:33 2025 by rpki-client