This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json) Hash identifier: PTvwvbcrVzM1PKou+tJ3fXxuERxUnnHTW7/ac0T803M= Subject key identifier: A4:FA:AE:96:C5:0E:4F:0A:E0:2F:E9:33:80:60:63:1D:15:70:C0:44 Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016 Certificate serial: 019B2B1DD6790462BBFD8280E7690AEE8B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft Manifest number: 1202 Signing time: Wed 17 Dec 2025 07:02:14 +0000 Manifest this update: Wed 17 Dec 2025 07:02:14 +0000 Manifest next update: Thu 18 Dec 2025 07:02:14 +0000 Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: Q5oTFbXo0TywoISRRCB1lntUsfE8oUneo+Dc+Y7OuZs=) 2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:d6:79:04:62:bb:fd:82:80:e7:69:0a:ee:8b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016 Validity Not Before: Dec 17 07:02:14 2025 GMT Not After : Dec 18 07:02:14 2025 GMT Subject: CN=a4faae96c50e4f0ae02fe9338060631d1570c044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:d0:cb:52:8b:2e:a7:7a:f9:ad:3c:fc:8c: b4:72:27:9c:ed:bc:fc:93:61:d6:e8:9c:6f:e0:b7: c2:fa:00:5c:2d:6c:f8:7d:aa:75:f8:bc:33:8c:e1: c2:45:86:ae:bd:64:05:6e:0d:ea:94:22:1e:c9:6f: ad:08:3b:5d:ce:7f:25:b3:92:96:51:25:66:4f:21: 96:8b:aa:8e:49:03:7a:ac:ed:21:5e:8a:02:57:c8: b4:57:f1:be:6c:a0:b2:ab:a6:37:39:2c:37:b6:07: 52:ea:77:cd:fa:e7:c7:5f:0e:00:24:58:ef:03:4b: 70:33:dc:7f:b5:ba:50:95:47:09:de:18:6b:00:2e: f3:0f:d9:b3:2f:39:a5:a6:3b:6f:8d:f7:09:a4:f3: e1:c9:70:9b:e9:81:7e:04:86:59:5c:ba:da:8a:73: 3d:4d:52:58:03:fd:d1:be:0c:1d:0e:0c:84:48:66: 17:f6:e1:28:56:ce:41:26:7d:a3:04:2d:38:f3:d0: 74:57:db:9d:da:03:46:55:5b:bd:b6:b7:4e:0f:be: 73:56:1a:19:38:25:1e:68:73:4d:5e:49:4d:d7:02: 0c:93:40:ce:f8:88:71:04:9e:09:d4:7e:2d:5f:41: 63:7c:80:e2:e5:46:5a:5d:14:b4:47:6e:65:5c:08: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:AE:96:C5:0E:4F:0A:E0:2F:E9:33:80:60:63:1D:15:70:C0:44 X509v3 Authority Key Identifier: keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:80:7d:5e:81:c6:4e:3b:d5:c1:7e:19:89:3b:57:54:4e:09: 74:4e:43:fa:bc:83:86:5e:e5:40:e3:85:28:df:a5:1a:14:35: d7:59:91:bb:59:29:a5:b1:2f:70:d9:df:f9:fd:a2:b7:6f:a6: 7c:60:90:d3:27:3f:09:67:90:35:3f:4a:ff:f5:89:54:c1:fb: 00:2b:5f:4e:aa:7d:89:bc:8b:5d:5d:00:59:96:ea:10:42:6f: f2:c4:22:26:b3:89:d4:a2:bb:23:f7:83:06:20:3f:e0:70:e2: 56:04:a6:c1:51:70:96:39:a6:18:a5:44:b6:a7:a1:91:92:2e: d2:ac:97:8b:81:ff:c8:ab:65:e6:26:66:de:0a:6e:3a:81:68: be:77:e2:fb:e4:26:7a:9b:96:f8:b5:6e:eb:e5:f9:52:32:2c: d4:50:14:0c:e6:ba:6d:30:73:3f:dd:bf:20:61:a5:19:f8:f8: f7:79:63:0a:47:51:f0:64:cb:fa:06:69:3e:28:59:01:d9:37: 92:e6:ce:e6:da:8a:54:7f:4b:53:b5:84:c3:93:fb:ce:45:c1: bc:d4:48:ab:b8:62:cb:11:da:ff:34:d4:ab:dc:46:c6:44:b7: 32:dc:cd:bd:f7:03:91:c0:a0:4b:74:97:81:63:ad:4e:76:45: 16:14:ba:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHdZ5BGK7/YKA52kK7osUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNDRlNjBiYjk3MTMyZWE4NDlhNTNmYzU1NGJiYmM2Mzk0 OGIwMTYwHhcNMjUxMjE3MDcwMjE0WhcNMjUxMjE4MDcwMjE0WjAzMTEwLwYDVQQD EyhhNGZhYWU5NmM1MGU0ZjBhZTAyZmU5MzM4MDYwNjMxZDE1NzBjMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDvQy1KLLqd6+a08/Iy0ciec7bz8 k2HW6Jxv4LfC+gBcLWz4fap1+LwzjOHCRYauvWQFbg3qlCIeyW+tCDtdzn8ls5KW USVmTyGWi6qOSQN6rO0hXooCV8i0V/G+bKCyq6Y3OSw3tgdS6nfN+ufHXw4AJFjv A0twM9x/tbpQlUcJ3hhrAC7zD9mzLzmlpjtvjfcJpPPhyXCb6YF+BIZZXLrainM9 TVJYA/3RvgwdDgyESGYX9uEoVs5BJn2jBC0489B0V9ud2gNGVVu9trdOD75zVhoZ OCUeaHNNXklN1wIMk0DO+IhxBJ4J1H4tX0FjfIDi5UZaXRS0R25lXAiD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT6rpbFDk8K4C/pM4BgYx0VcMBEMB8GA1UdIwQY MBaAFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTkt NDMxZjkxZGE0ZTI4LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTktNDMxZjkxZGE0ZTI4 LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIB9XoHG TjvVwX4ZiTtXVE4JdE5D+ryDhl7lQOOFKN+lGhQ111mRu1kppbEvcNnf+f2it2+m fGCQ0yc/CWeQNT9K//WJVMH7ACtfTqp9ibyLXV0AWZbqEEJv8sQiJrOJ1KK7I/eD BiA/4HDiVgSmwVFwljmmGKVEtqehkZIu0qyXi4H/yKtl5iZm3gpuOoFovnfi++Qm epuW+LVu6+X5UjIs1FAUDOa6bTBzP92/IGGlGfj493ljCkdR8GTL+gZpPihZAdk3 kubO5tqKVH9LU7WEw5P7zkXBvNRIq7hiyxHa/zTUq9xGxkS3MtzNvfcDkcCgS3SX gWOtTnZFFhS6dQ== -----END CERTIFICATE-----Generated at Wed Dec 17 11:18:08 2025 by rpki-client