This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json) Hash identifier: +0AxzK12GgIwSAgBe4OA1hFF5MaR+lp3fdTEHKccMlc= Subject key identifier: 5A:CD:26:B7:D4:2E:38:98:FA:5A:79:58:30:C4:36:30:7A:14:CB:17 Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Certificate serial: 019B7A49FE9CA31B2ED6010A17B5C0367C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 16:00:28 +0000 Manifest this update: Thu 01 Jan 2026 16:00:28 +0000 Manifest next update: Fri 02 Jan 2026 16:00:28 +0000 Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: Ey4zUUlyukWuMTuXJd9M2mfdv8gc9sg9whPF/XftXmM=) 2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:49:fe:9c:a3:1b:2e:d6:01:0a:17:b5:c0:36:7c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698 Validity Not Before: Jan 1 16:00:28 2026 GMT Not After : Jan 2 16:00:28 2026 GMT Subject: CN=5acd26b7d42e3898fa5a795830c436307a14cb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:3c:f4:ed:e5:0b:6b:4a:eb:9a:5d:cb:a8: 6f:bc:21:52:7a:26:37:98:41:2d:f0:db:ba:d1:78: 5f:e8:93:14:32:ed:ba:76:a1:9d:ec:74:51:53:19: ee:9b:77:a7:c9:b8:18:67:bd:49:d3:8f:c4:02:51: 52:00:d5:18:86:bc:2c:5f:e6:09:a9:b7:1d:77:57: db:a2:27:cf:6e:5d:64:70:33:d6:d1:bd:9c:bc:10: 35:fa:00:14:02:9b:1a:30:cc:29:ba:e9:bc:d6:55: 1a:52:b7:9a:a8:63:09:4e:5e:bb:1a:e5:31:b1:81: 4a:3f:0f:6a:ca:0b:5c:08:47:78:f5:4a:a8:8d:5b: 4c:22:6d:48:6e:f7:72:e6:1b:a3:06:36:b3:e1:13: a7:84:30:22:26:38:c3:de:fd:f9:04:74:fd:ad:8c: 2d:ab:02:f5:d6:f6:09:c7:0c:ed:52:cc:16:1b:47: 77:e8:38:ea:75:d9:bd:8c:a0:72:a7:14:e2:5e:b8: 91:ce:5f:ba:db:3d:bb:b7:2a:5f:5b:0b:7f:1f:ec: ca:10:24:d5:e8:d9:b1:40:4e:fa:8c:b9:da:2f:90: 5e:6c:67:2b:0a:2e:ae:13:c6:27:c0:0f:63:6d:d3: 0e:79:00:f9:bb:82:d2:c7:a1:7b:e4:cb:bf:a3:4d: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:26:B7:D4:2E:38:98:FA:5A:79:58:30:C4:36:30:7A:14:CB:17 X509v3 Authority Key Identifier: keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:59:df:fe:6e:17:f4:be:32:61:df:7e:df:ba:6f:d4:fa:f1: ba:10:a8:6b:1b:15:db:af:bd:84:f9:c1:78:d2:81:6d:ce:b1: b8:32:28:ce:4f:a5:e5:4b:75:4d:c4:cf:3f:bc:95:25:c7:f8: 92:95:81:62:4e:49:95:60:ed:f6:54:42:30:02:ce:ac:73:74: 63:9f:94:1c:df:e2:5d:77:b9:fe:10:38:22:07:c3:ef:c0:69: 15:fe:b3:92:22:60:7c:70:10:96:3a:f3:72:7f:2d:10:ab:4d: f6:05:16:b8:4a:73:d9:63:11:6d:7f:3f:83:2b:03:7a:5f:e6: a9:91:9b:41:49:56:7c:82:d2:3c:52:21:fb:13:4a:f4:93:ad: 48:a4:9d:80:ef:f8:9d:45:c7:b5:67:35:25:40:7b:b9:6a:9e: ee:6f:96:7f:07:84:7e:e4:40:66:d1:4c:b8:13:1d:63:4a:91: 6a:b9:b6:ac:c7:86:15:dc:06:4d:16:79:5e:3f:5d:a5:e1:52: 55:db:64:df:97:97:cd:90:d2:90:be:2b:7f:16:3b:3f:c3:49: d8:76:85:f0:46:69:3b:f6:30:97:ce:50:6a:f0:15:47:77:0e: da:8c:51:48:c6:33:64:87:ea:ef:7e:a6:8c:f8:d7:fc:15:ee: 52:4c:a1:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6Sf6coxsu1gEKF7XANnySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj ZjQ2OTgwHhcNMjYwMTAxMTYwMDI4WhcNMjYwMTAyMTYwMDI4WjAzMTEwLwYDVQQD Eyg1YWNkMjZiN2Q0MmUzODk4ZmE1YTc5NTgzMGM0MzYzMDdhMTRjYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDU89O3lC2tK65pdy6hvvCFSeiY3 mEEt8Nu60Xhf6JMUMu26dqGd7HRRUxnum3enybgYZ71J04/EAlFSANUYhrwsX+YJ qbcdd1fboifPbl1kcDPW0b2cvBA1+gAUApsaMMwpuum81lUaUreaqGMJTl67GuUx sYFKPw9qygtcCEd49UqojVtMIm1Ibvdy5hujBjaz4ROnhDAiJjjD3v35BHT9rYwt qwL11vYJxwztUswWG0d36Djqddm9jKBypxTiXriRzl+62z27typfWwt/H+zKECTV 6NmxQE76jLnaL5BebGcrCi6uE8YnwA9jbdMOeQD5u4LSx6F75Mu/o03DiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrNJrfULjiY+lp5WDDENjB6FMsXMB8GA1UdIwQY MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt ZWFkMWFmODY5MWJhLzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVnf/m4X 9L4yYd9+37pv1PrxuhCoaxsV26+9hPnBeNKBbc6xuDIozk+l5Ut1TcTPP7yVJcf4 kpWBYk5JlWDt9lRCMALOrHN0Y5+UHN/iXXe5/hA4IgfD78BpFf6zkiJgfHAQljrz cn8tEKtN9gUWuEpz2WMRbX8/gysDel/mqZGbQUlWfILSPFIh+xNK9JOtSKSdgO/4 nUXHtWc1JUB7uWqe7m+WfweEfuRAZtFMuBMdY0qRarm2rMeGFdwGTRZ5Xj9dpeFS Vdtk35eXzZDSkL4rfxY7P8NJ2HaF8EZpO/Ywl85QavAVR3cO2oxRSMYzZIfq736m jPjX/BXuUkyhaQ== -----END CERTIFICATE-----Generated at Thu Jan 1 17:35:32 2026 by rpki-client