This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json) Hash identifier: 17FeadIN8l2vR/tqgr4t4x3ddqPSjkkU9QjW+G1dlvM= Subject key identifier: EB:9A:7B:26:FC:4F:F5:EC:6E:6E:5C:5C:40:53:8E:CE:09:AE:98:29 Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1 Certificate serial: 019B76A494CFAE9FBF462D48F8B2A8968FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 23:00:56 +0000 Manifest this update: Wed 31 Dec 2025 23:00:56 +0000 Manifest next update: Thu 01 Jan 2026 23:00:56 +0000 Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=) 2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: VdNnraLwEpDBlncrE4sRnKpRx23ZRXNcVGMTTUopvco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:94:cf:ae:9f:bf:46:2d:48:f8:b2:a8:96:8f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1 Validity Not Before: Dec 31 23:00:56 2025 GMT Not After : Jan 1 23:00:56 2026 GMT Subject: CN=eb9a7b26fc4ff5ec6e6e5c5c40538ece09ae9829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:c8:03:d2:c9:f4:e8:36:01:47:74:f7:a6: 02:7d:0c:e7:c5:5c:d7:db:e3:ad:bd:f9:bc:b9:6f: a2:3c:b4:2b:22:bc:b7:e2:34:7a:64:bb:b0:a9:23: 7a:8b:d1:42:18:df:36:49:fc:76:26:27:81:2f:1c: 84:04:44:08:ec:5b:86:d0:f6:7f:ed:85:22:f1:5c: ed:3d:ca:16:87:ea:05:c8:2e:ea:94:4b:b7:3e:30: 77:6a:ef:79:74:91:23:f6:de:10:ac:b8:15:8a:8f: 1c:48:fc:da:89:c1:58:96:65:9e:f7:a3:40:0a:50: 5c:82:a8:ff:11:b8:11:da:8c:5f:52:44:a7:39:44: 1d:7c:2b:98:19:cb:20:15:63:2a:04:e7:d2:9b:86: f7:d9:64:76:e3:e7:34:6e:0a:38:88:20:82:30:4d: 13:61:af:a8:95:ea:12:ea:f0:00:cc:6c:67:1a:07: 4b:4c:bb:75:53:9e:4e:3a:42:62:36:48:b6:2c:03: 9d:53:c7:cc:f9:bd:cb:5b:e8:e1:db:de:3e:87:32: 19:cf:c5:d2:d7:97:d6:a1:e6:a7:37:f6:56:a9:c7: b2:63:5e:b1:63:98:ed:7e:49:2a:83:62:fa:9f:a9: 93:98:39:50:81:74:ee:bd:8b:99:be:d9:89:8f:ca: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9A:7B:26:FC:4F:F5:EC:6E:6E:5C:5C:40:53:8E:CE:09:AE:98:29 X509v3 Authority Key Identifier: keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:62:31:84:b3:6e:ce:20:5a:c5:b7:1d:37:45:fe:0c:3a:7b: ad:a3:17:61:9f:ea:b4:4f:72:10:9d:bb:63:8b:b0:af:6b:04: 7a:55:97:21:be:41:c8:57:c6:f4:b4:28:12:9f:43:17:7f:4d: 0e:92:2f:59:e9:1e:b8:0f:12:bc:07:0b:af:33:b2:99:62:74: 1c:3f:29:99:8f:fa:4c:49:1b:06:00:d2:c6:53:75:48:c4:1b: dc:58:ff:1f:d0:4d:8b:4f:ae:2b:cc:03:cf:22:d4:06:8c:c7: 76:ef:f2:2b:3b:1b:43:ee:17:80:40:6c:3c:1d:a2:c2:5b:d0: 8c:8f:0a:05:32:9f:7f:8d:d6:b5:8d:48:d7:25:ec:c4:e9:14: cd:59:1a:e2:0c:76:79:1b:bd:88:fb:49:aa:d6:33:8d:d4:19: ce:d1:75:fb:10:7d:db:da:de:b6:63:9a:b6:c7:01:45:02:fb: e7:10:88:47:0b:35:d8:b8:ac:b1:00:41:50:9b:bc:29:85:05: d3:0d:8d:bb:dc:cd:75:a8:70:a4:0a:38:b4:89:27:1c:63:33: d0:53:5b:37:d6:1f:39:29:70:ff:22:17:5a:cf:5b:77:b1:b3: 40:7e:3f:64:41:74:de:07:fa:54:99:bf:e3:2c:59:17:9f:2e: 33:01:d7:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pJTPrp+/Ri1I+LKolo/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4 OTRkZjEwHhcNMjUxMjMxMjMwMDU2WhcNMjYwMTAxMjMwMDU2WjAzMTEwLwYDVQQD EyhlYjlhN2IyNmZjNGZmNWVjNmU2ZTVjNWM0MDUzOGVjZTA5YWU5ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXIA9LJ9Og2AUd096YCfQznxVzX 2+Otvfm8uW+iPLQrIry34jR6ZLuwqSN6i9FCGN82Sfx2JieBLxyEBEQI7FuG0PZ/ 7YUi8VztPcoWh+oFyC7qlEu3PjB3au95dJEj9t4QrLgVio8cSPzaicFYlmWe96NA ClBcgqj/EbgR2oxfUkSnOUQdfCuYGcsgFWMqBOfSm4b32WR24+c0bgo4iCCCME0T Ya+oleoS6vAAzGxnGgdLTLt1U55OOkJiNki2LAOdU8fM+b3LW+jh294+hzIZz8XS 15fWoeanN/ZWqceyY16xY5jtfkkqg2L6n6mTmDlQgXTuvYuZvtmJj8r9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuaeyb8T/Xsbm5cXEBTjs4JrpgpMB8GA1UdIwQY MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4 LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmIxhLNu ziBaxbcdN0X+DDp7raMXYZ/qtE9yEJ27Y4uwr2sEelWXIb5ByFfG9LQoEp9DF39N DpIvWekeuA8SvAcLrzOymWJ0HD8pmY/6TEkbBgDSxlN1SMQb3Fj/H9BNi0+uK8wD zyLUBozHdu/yKzsbQ+4XgEBsPB2iwlvQjI8KBTKff43WtY1I1yXsxOkUzVka4gx2 eRu9iPtJqtYzjdQZztF1+xB929retmOatscBRQL75xCIRws12LissQBBUJu8KYUF 0w2Nu9zNdahwpAo4tIknHGMz0FNbN9YfOSlw/yIXWs9bd7GzQH4/ZEF03gf6VJm/ 4yxZF58uMwHXyA== -----END CERTIFICATE-----Generated at Thu Jan 1 06:20:08 2026 by rpki-client