This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json) Hash identifier: J2fVNOhVAq9bjGdyYCV3LcKIPUtgPK+c2DK1hnZboXg= Subject key identifier: 3B:6C:A0:FD:72:18:CC:06:81:A9:8B:F2:17:D5:51:33:AC:C5:0A:19 Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216 Certificate serial: 019B3D23184D13C77EBF8F16020E996A5364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft Manifest number: 0F0A Signing time: Sat 20 Dec 2025 19:01:08 +0000 Manifest this update: Sat 20 Dec 2025 19:01:08 +0000 Manifest next update: Sun 21 Dec 2025 19:01:08 +0000 Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=) 2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: YUk++fHxFZSe5TPcfiJzWRRzaYzJLItQrqM2IUv9SHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:18:4d:13:c7:7e:bf:8f:16:02:0e:99:6a:53:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216 Validity Not Before: Dec 20 19:01:08 2025 GMT Not After : Dec 21 19:01:08 2025 GMT Subject: CN=3b6ca0fd7218cc0681a98bf217d55133acc50a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:af:9d:07:46:34:7b:f8:14:53:fc:9f:36: 59:01:5d:67:28:13:cc:18:0c:7d:ea:ed:0c:54:d2: ca:2d:b6:e2:fe:5f:99:72:15:12:42:08:18:bd:85: e6:1d:8b:70:d9:98:15:c2:9a:9f:92:34:59:83:62: 04:aa:99:31:76:82:89:1d:5d:a6:4a:d8:53:17:07: ac:17:e9:2d:b9:c2:23:00:1c:b0:22:42:48:9d:a8: a2:c0:0e:34:40:cc:14:54:7a:73:48:68:d4:43:28: 3f:69:48:d7:ab:02:8d:4a:20:f8:61:cc:48:bc:a9: ed:65:76:11:ea:19:e5:5c:0b:5d:81:ad:42:ca:ba: 58:0d:e6:24:0b:7f:a9:72:29:b4:91:74:72:7b:d2: 7d:a4:45:1f:e6:48:4d:86:5b:1c:1f:29:9d:b8:4a: a8:b5:18:c2:a8:46:e9:a4:90:4c:fb:47:20:de:6a: a2:08:c0:bd:56:80:14:6c:75:70:f6:29:d6:cd:1b: c9:14:b9:b2:80:23:e5:22:ca:f2:f1:81:23:36:83: 35:a3:b2:b6:04:6e:2e:40:ed:94:b1:64:ba:11:17: c8:9f:ba:c9:cb:b4:38:e9:9c:f7:3d:0c:ea:27:b7: 83:de:2f:5f:18:0f:93:3f:dc:c8:58:1b:14:bf:12: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:A0:FD:72:18:CC:06:81:A9:8B:F2:17:D5:51:33:AC:C5:0A:19 X509v3 Authority Key Identifier: keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f1:40:89:62:ba:2b:ca:f7:d1:49:99:f5:91:a8:08:8a:09: d9:5a:df:c6:a8:81:78:32:43:cd:3d:f2:64:41:a0:c9:e4:75: 4c:29:99:90:ce:c5:cd:2c:d2:a1:b6:36:ee:14:f8:00:c0:ba: e3:8c:a9:25:84:14:69:f5:2c:d8:3c:a8:3b:bc:36:c0:84:c0: d6:7b:1a:22:a9:f1:c2:bc:7e:d0:89:1f:8d:62:f4:da:f2:ab: ad:7f:76:cf:13:4f:bb:37:64:92:47:c5:bb:d5:75:56:44:5f: ed:d2:f2:ce:9d:49:7f:3a:9a:06:ed:55:6d:97:48:33:ea:35: a6:3f:34:ec:e8:03:cc:f9:c6:a0:05:fa:36:1b:8f:46:c5:39: 56:7e:ad:81:37:e7:e7:2b:10:84:ac:b4:3f:d6:17:f8:52:82: 93:f9:20:0f:52:77:26:d0:3f:e4:bf:67:91:60:9c:e5:a6:07: 8b:c1:27:80:19:66:b3:48:92:36:67:b9:b1:bf:06:bf:3b:67: a6:02:3d:d7:93:a3:b1:24:fa:69:64:8c:82:08:80:6a:dd:0a: 3c:78:29:30:05:a9:4c:e1:3e:ff:ed:d0:7e:bd:b3:f1:4f:3b: a5:de:79:57:d0:5c:21:10:37:fa:1f:0b:5e:c5:fd:0c:ab:0c: 79:13:c6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxhNE8d+v48WAg6ZalNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4 YzIyMTYwHhcNMjUxMjIwMTkwMTA4WhcNMjUxMjIxMTkwMTA4WjAzMTEwLwYDVQQD EygzYjZjYTBmZDcyMThjYzA2ODFhOThiZjIxN2Q1NTEzM2FjYzUwYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTuvnQdGNHv4FFP8nzZZAV1nKBPM GAx96u0MVNLKLbbi/l+ZchUSQggYvYXmHYtw2ZgVwpqfkjRZg2IEqpkxdoKJHV2m SthTFwesF+ktucIjABywIkJInaiiwA40QMwUVHpzSGjUQyg/aUjXqwKNSiD4YcxI vKntZXYR6hnlXAtdga1CyrpYDeYkC3+pcim0kXRye9J9pEUf5khNhlscHymduEqo tRjCqEbppJBM+0cg3mqiCMC9VoAUbHVw9inWzRvJFLmygCPlIsry8YEjNoM1o7K2 BG4uQO2UsWS6ERfIn7rJy7Q46Zz3PQzqJ7eD3i9fGA+TP9zIWBsUvxJwSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtsoP1yGMwGgamL8hfVUTOsxQoZMB8GA1UdIwQY MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2 LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvFAiWK6 K8r30UmZ9ZGoCIoJ2VrfxqiBeDJDzT3yZEGgyeR1TCmZkM7FzSzSobY27hT4AMC6 44ypJYQUafUs2DyoO7w2wITA1nsaIqnxwrx+0IkfjWL02vKrrX92zxNPuzdkkkfF u9V1VkRf7dLyzp1JfzqaBu1VbZdIM+o1pj807OgDzPnGoAX6NhuPRsU5Vn6tgTfn 5ysQhKy0P9YX+FKCk/kgD1J3JtA/5L9nkWCc5aYHi8EngBlms0iSNme5sb8Gvztn pgI915OjsST6aWSMggiAat0KPHgpMAWpTOE+/+3Qfr2z8U87pd55V9BcIRA3+h8L XsX9DKsMeRPG6w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:04 2025 by rpki-client