This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: L5iSACY8ZCJwcMJoHKlTrrUCmDn9FhQA3+zZEyYVHdA= Subject key identifier: 50:59:24:9B:4D:74:BB:01:C9:AB:D9:67:D5:7F:1C:67:11:49:E1:21 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019B348D4FF7EEF6E642F949FB06B578E506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 03:00:34 +0000 Manifest this update: Fri 19 Dec 2025 03:00:34 +0000 Manifest next update: Sat 20 Dec 2025 03:00:34 +0000 Files and hashes: 1: 1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa (hash: 7uA8FM0km6XoivNJ8PKPfmfodgId3foqoFN3CW/tSgA=) 2: 4Lq99be2nl-lvDOLaKTBj-4e2tg.roa (hash: sqHWC3KRb5cu/NuRG74MJnGwzFNFZn52bM6N2UIFS+I=) 3: 9pyiaYE1JqW-YtrxPqWbwpGrPRI.roa (hash: rfLpfnptUkpz6ETvC4UpqrSnV2DqZLhxaXYjNEmrUcI=) 4: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=) 5: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: nnXxQWiUZmHQh526RUbs8ZmuhABOSzzOfRemGcnClRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:4f:f7:ee:f6:e6:42:f9:49:fb:06:b5:78:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Dec 19 03:00:34 2025 GMT Not After : Dec 20 03:00:34 2025 GMT Subject: CN=5059249b4d74bb01c9abd967d57f1c671149e121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:95:f6:30:9a:dc:f7:31:1f:7f:dc:02:a5: 99:61:72:4b:93:31:75:82:3d:d2:ce:10:97:26:0d: fd:71:34:3e:dc:47:1e:52:f9:12:b2:9b:ef:87:69: 42:ae:7f:75:29:c8:03:e8:0c:bf:d0:04:58:3f:87: aa:a9:9e:a1:21:09:2c:c3:ac:f1:91:9f:bc:89:34: 5e:40:31:36:dd:2f:7b:a3:84:bc:3a:02:24:d1:19: 97:fd:dd:db:2e:05:ee:76:0d:c5:53:c7:16:94:61: 76:46:c3:36:a4:3e:f7:7d:3b:25:b0:ff:b5:65:c6: b6:d8:a8:04:e3:6a:fb:cf:49:02:db:68:68:03:44: 84:f1:8f:75:00:f6:53:8b:56:e2:b7:1d:5d:85:54: ed:b9:4f:28:bd:6d:76:b6:60:ba:c7:3b:44:5f:4a: b7:b7:07:5e:8a:d4:69:c3:17:c0:7c:75:de:7f:00: 47:e8:8c:1f:be:7c:1f:fe:2c:34:2d:de:9c:ee:13: 76:77:42:9a:25:88:24:fd:a7:b2:1b:48:52:18:cf: 22:60:e2:43:22:fe:39:73:b5:c8:5a:1e:a3:c0:cc: 06:09:d4:d0:b9:b1:06:d0:fa:ae:9b:ee:95:a9:70: 24:78:25:2f:f7:8c:fd:7c:a6:5c:54:6c:87:ca:00: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:59:24:9B:4D:74:BB:01:C9:AB:D9:67:D5:7F:1C:67:11:49:E1:21 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c5:2c:9d:bd:b8:a7:6b:06:b7:99:c5:ac:36:7b:c9:71:5c: 30:6e:d5:a0:be:e9:26:b1:d7:18:c8:9e:ea:b6:ac:0c:09:6d: 60:1c:ad:af:bb:3e:ad:7d:97:1d:d1:7e:86:4e:5d:79:34:38: 96:b1:89:71:17:b7:c5:08:b5:a6:c9:02:fe:e5:8f:5d:4e:30: 91:3c:32:9f:cc:b7:2d:12:f3:ac:7a:5f:33:c7:b9:19:c1:71: c9:38:d4:60:23:88:00:73:50:d0:0f:a5:12:9f:73:ce:16:d2: 55:eb:ab:ff:1d:10:b2:30:5a:7c:ec:24:8e:b5:50:e9:3f:1a: b4:2c:29:70:37:5e:e9:59:82:94:30:be:45:b9:cf:db:53:2e: 6b:d1:78:04:80:4b:8e:3e:b8:c5:33:b3:9f:e6:9a:0c:7c:6e: d1:6a:fe:de:ec:e1:fa:82:f4:c6:c1:88:60:df:e2:fc:0a:47: b5:c4:b2:ca:05:5c:5b:b8:47:39:14:7d:36:12:2b:66:fb:3c: 00:d7:f5:40:89:28:e2:32:5c:ec:a8:7e:fd:55:05:45:0e:65: 41:30:8d:b5:55:d2:97:00:30:d5:7c:26:86:8b:c0:69:d6:bf: 79:e4:32:3b:5a:70:8f:f0:c0:7f:50:ca:3d:87:40:77:e5:db: ca:64:db:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jU/37vbmQvlJ+wa1eOUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjUxMjE5MDMwMDM0WhcNMjUxMjIwMDMwMDM0WjAzMTEwLwYDVQQD Eyg1MDU5MjQ5YjRkNzRiYjAxYzlhYmQ5NjdkNTdmMWM2NzExNDllMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOWV9jCa3PcxH3/cAqWZYXJLkzF1 gj3SzhCXJg39cTQ+3EceUvkSspvvh2lCrn91KcgD6Ay/0ARYP4eqqZ6hIQksw6zx kZ+8iTReQDE23S97o4S8OgIk0RmX/d3bLgXudg3FU8cWlGF2RsM2pD73fTslsP+1 Zca22KgE42r7z0kC22hoA0SE8Y91APZTi1bitx1dhVTtuU8ovW12tmC6xztEX0q3 twdeitRpwxfAfHXefwBH6Iwfvnwf/iw0Ld6c7hN2d0KaJYgk/aeyG0hSGM8iYOJD Iv45c7XIWh6jwMwGCdTQubEG0Pqum+6VqXAkeCUv94z9fKZcVGyHygDTFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBZJJtNdLsByavZZ9V/HGcRSeEhMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMUsnb24 p2sGt5nFrDZ7yXFcMG7VoL7pJrHXGMie6rasDAltYBytr7s+rX2XHdF+hk5deTQ4 lrGJcRe3xQi1pskC/uWPXU4wkTwyn8y3LRLzrHpfM8e5GcFxyTjUYCOIAHNQ0A+l Ep9zzhbSVeur/x0QsjBafOwkjrVQ6T8atCwpcDde6VmClDC+RbnP21Mua9F4BIBL jj64xTOzn+aaDHxu0Wr+3uzh+oL0xsGIYN/i/ApHtcSyygVcW7hHORR9NhIrZvs8 ANf1QIko4jJc7Kh+/VUFRQ5lQTCNtVXSlwAw1XwmhovAada/eeQyO1pwj/DAf1DK PYdAd+XbymTbXA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:19 2025 by rpki-client