This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json) Hash identifier: sGvk/kBU3r9cmA7WTTI9HC0mP25mQARNRC8atcnag2A= Subject key identifier: 54:BB:7D:AD:E8:13:DF:7A:E5:FD:A5:70:77:93:9E:48:15:8C:A6:2A Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216 Certificate serial: 019B41004B498A941C42992756FE0523C8BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft Manifest number: 0F0C Signing time: Sun 21 Dec 2025 13:01:36 +0000 Manifest this update: Sun 21 Dec 2025 13:01:36 +0000 Manifest next update: Mon 22 Dec 2025 13:01:36 +0000 Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=) 2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: wDO0a37aXaynQS3SG0cf7lxJgSbVPygTLTDzy+q15qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:4b:49:8a:94:1c:42:99:27:56:fe:05:23:c8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216 Validity Not Before: Dec 21 13:01:36 2025 GMT Not After : Dec 22 13:01:36 2025 GMT Subject: CN=54bb7dade813df7ae5fda57077939e48158ca62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:e9:3c:58:ca:44:2c:4a:f9:8d:a8:9e:8a: e7:87:f0:38:e9:1e:f3:2f:24:0b:82:c0:83:a1:24: 8b:b6:69:c0:e9:b4:9f:19:46:11:0c:c4:33:14:38: bb:dd:b2:82:f2:fe:81:ff:33:c6:2f:d7:08:6d:3a: ca:da:52:8d:8d:94:86:9b:fe:73:8c:9d:31:4c:ee: 90:46:39:69:00:71:7e:c0:34:b7:01:5a:36:65:41: 99:9a:95:6b:b4:8e:3e:64:dc:4d:eb:2f:fb:55:76: 6d:48:17:6c:da:89:06:ff:79:4a:4e:d1:f3:a7:e1: 0c:48:7b:50:b3:da:0e:9c:65:67:1d:b0:09:72:3f: c0:30:29:9c:0d:85:0a:5c:a6:e1:a7:9b:46:8f:bf: f5:81:b2:71:22:00:c5:49:6b:61:dc:1c:c2:00:ac: 01:6f:75:d3:b2:99:d8:b5:50:d9:b7:e4:9f:6c:0d: 3e:9b:f5:0d:b3:75:26:5b:27:b7:09:24:8d:7b:73: 93:1f:60:94:bc:8c:fb:23:79:bb:53:ee:10:86:75: 41:86:6f:55:d2:73:fa:58:2f:72:e1:71:8c:4b:6a: 08:56:99:b7:22:b8:a5:30:fa:7c:00:50:13:6f:b2: 2c:40:e6:3b:01:05:82:c8:5c:a3:fd:cf:7c:46:25: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:7D:AD:E8:13:DF:7A:E5:FD:A5:70:77:93:9E:48:15:8C:A6:2A X509v3 Authority Key Identifier: keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bb:98:b4:0c:f3:7d:04:bd:34:e3:7e:a3:3e:2a:36:0f:7d: 7c:50:24:b1:ba:26:2a:23:69:72:36:d3:80:bc:5f:6f:0f:17: 8d:15:30:79:2e:ad:b8:2e:36:36:73:f0:09:f5:5e:9b:0b:2d: 40:9d:18:7d:a5:f7:54:78:55:2c:10:a8:cb:bf:e0:23:9e:e2: 42:3a:da:66:19:0e:74:4d:f3:3a:7e:b4:37:3f:be:cd:dd:54: 30:88:5b:5f:a6:28:1c:93:79:9a:29:0e:71:4f:50:7a:84:9a: ff:fd:dc:08:89:37:e1:58:1f:80:1e:d9:99:a1:a3:07:9e:75: 45:5b:5e:8e:8e:79:89:c2:81:49:ac:af:f3:d5:1d:4f:a1:bb: 17:0f:df:38:db:79:6b:a5:45:db:b0:2a:b1:b7:c4:cb:c4:82: 39:58:a0:df:86:cc:58:a0:7f:02:6e:e4:f0:1b:3a:ec:bb:11: a1:b1:2a:9d:20:54:f4:1a:35:5d:d3:1b:3b:f4:ed:61:dd:eb: 10:e5:0b:91:fb:3e:72:75:05:21:d3:5f:47:17:7f:c7:5c:71: d3:f3:ab:7b:b5:cb:01:cd:1c:38:01:85:99:1c:49:86:e0:93: 54:21:83:f3:d7:03:23:f3:32:68:68:d4:5b:2e:44:97:4a:68: 73:0e:e2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEtJipQcQpknVv4FI8i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4 YzIyMTYwHhcNMjUxMjIxMTMwMTM2WhcNMjUxMjIyMTMwMTM2WjAzMTEwLwYDVQQD Eyg1NGJiN2RhZGU4MTNkZjdhZTVmZGE1NzA3NzkzOWU0ODE1OGNhNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznDpPFjKRCxK+Y2onornh/A46R7z LyQLgsCDoSSLtmnA6bSfGUYRDMQzFDi73bKC8v6B/zPGL9cIbTrK2lKNjZSGm/5z jJ0xTO6QRjlpAHF+wDS3AVo2ZUGZmpVrtI4+ZNxN6y/7VXZtSBds2okG/3lKTtHz p+EMSHtQs9oOnGVnHbAJcj/AMCmcDYUKXKbhp5tGj7/1gbJxIgDFSWth3BzCAKwB b3XTspnYtVDZt+SfbA0+m/UNs3UmWye3CSSNe3OTH2CUvIz7I3m7U+4QhnVBhm9V 0nP6WC9y4XGMS2oIVpm3IrilMPp8AFATb7IsQOY7AQWCyFyj/c98RiUZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS7fa3oE9965f2lcHeTnkgVjKYqMB8GA1UdIwQY MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2 LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUruYtAzz fQS9NON+oz4qNg99fFAksbomKiNpcjbTgLxfbw8XjRUweS6tuC42NnPwCfVemwst QJ0YfaX3VHhVLBCoy7/gI57iQjraZhkOdE3zOn60Nz++zd1UMIhbX6YoHJN5mikO cU9QeoSa//3cCIk34VgfgB7ZmaGjB551RVtejo55icKBSayv89UdT6G7Fw/fONt5 a6VF27AqsbfEy8SCOVig34bMWKB/Am7k8Bs67LsRobEqnSBU9Bo1XdMbO/TtYd3r EOULkfs+cnUFIdNfRxd/x1xx0/Ore7XLAc0cOAGFmRxJhuCTVCGD89cDI/MyaGjU Wy5El0pocw7i0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:10:00 2025 by rpki-client