This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json) Hash identifier: IC2n+8EJE/avLN8FhfP0t1/Rx5QemxY3esqJ5kveae0= Subject key identifier: 47:3C:A4:87:19:D9:3A:D2:BC:A3:F5:92:84:36:D4:99:99:03:FA:09 Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0 Certificate serial: 019B2F66EE0DBB88FABC86B2D186BFF7383F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft Manifest number: 097F Signing time: Thu 18 Dec 2025 03:00:33 +0000 Manifest this update: Thu 18 Dec 2025 03:00:33 +0000 Manifest next update: Fri 19 Dec 2025 03:00:33 +0000 Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: UMu87Bu157lklTlvcvKl8W41Dln3oMXprCewwfkj9Os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:ee:0d:bb:88:fa:bc:86:b2:d1:86:bf:f7:38:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0 Validity Not Before: Dec 18 03:00:33 2025 GMT Not After : Dec 19 03:00:33 2025 GMT Subject: CN=473ca48719d93ad2bca3f5928436d4999903fa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:42:c8:c1:05:27:02:99:e1:0b:f6:0a:48: 64:89:54:af:9e:b3:c9:7d:ba:d9:75:f6:02:ae:b5: 43:6a:99:ee:17:5c:09:86:1c:93:06:34:4b:97:1a: 43:46:0c:28:fa:02:a6:ca:3d:3a:92:75:da:bf:22: d9:94:8b:4e:eb:40:a5:bf:33:e8:43:8e:f4:f9:35: 3f:9a:e4:cd:dd:c6:9d:93:82:e8:74:3e:72:61:f2: 4c:27:34:96:c4:7f:0e:63:4b:53:c9:e5:2f:00:2e: 9d:0a:50:5a:e2:0b:56:63:8d:f9:b8:67:d4:11:e9: 0c:88:f3:47:7d:f3:eb:7d:be:36:cc:78:6e:23:7c: 2e:8c:c9:2e:4c:42:dd:65:8c:ce:3c:dd:7e:5d:95: 4e:59:4e:de:d5:30:30:7c:ac:2a:45:43:02:75:da: 2f:ee:d3:61:68:90:d3:61:5f:e3:cd:88:c9:b4:7a: 62:a2:00:95:a7:43:45:b1:1e:ec:a0:05:b9:53:43: 43:cb:6b:4c:bb:9e:00:65:a2:fc:a6:24:ad:68:92: 3b:4b:83:b6:dc:e9:6f:62:24:74:7f:b2:a1:8b:05: 87:7d:83:e4:6f:f5:ef:c4:c3:8a:c7:6f:dc:d5:3f: 5c:a7:79:ad:22:7e:1a:43:56:13:7c:b8:3f:a9:22: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3C:A4:87:19:D9:3A:D2:BC:A3:F5:92:84:36:D4:99:99:03:FA:09 X509v3 Authority Key Identifier: keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fb:b3:50:6f:42:09:17:bb:6f:fc:90:30:ca:18:2b:e7:10: d3:60:36:e1:8f:c3:29:56:78:61:1f:72:60:21:40:fc:e8:fc: af:7d:ba:e4:ae:45:30:fb:1c:32:9c:c4:95:60:34:30:1d:64: f4:9f:27:bb:f7:d7:24:7f:ac:75:c0:56:e1:41:7b:4b:5a:51: 63:f9:ae:de:ff:3d:0e:70:f5:4e:81:c1:da:72:3b:9a:43:b0: cb:87:62:b6:2b:6b:9a:76:09:53:cb:ab:33:1d:87:68:65:de: 1f:ad:87:65:3b:ba:68:95:94:d6:3a:77:27:7e:3d:10:f6:4a: b5:42:01:e5:d7:5f:e4:af:85:cf:26:00:b7:68:35:bb:73:6a: 15:8c:4e:5f:5d:95:39:0f:51:28:e0:92:ba:d0:73:ca:c0:56: 2a:14:80:90:4c:df:23:41:87:a2:ce:5d:4d:8d:53:c2:c4:d6: 42:4e:2a:76:a3:70:a7:18:57:51:12:cd:94:df:9e:c3:3d:4a: 1a:5a:d7:ed:6c:2f:3b:85:da:4f:5f:5c:8b:cc:8d:ee:ad:07: db:8e:f5:70:6c:02:67:a8:10:e8:36:48:52:3a:35:ac:63:a0: 69:1f:b1:ea:86:94:16:2d:41:eb:e2:9e:1a:0e:ae:ca:d3:84: 3c:2b:ad:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZu4Nu4j6vIay0Ya/9zg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYzEzYWFhYTFlNGU4NGViMGMyNWNiOTUwZTI2OWZmM2Rk YmNlZTAwHhcNMjUxMjE4MDMwMDMzWhcNMjUxMjE5MDMwMDMzWjAzMTEwLwYDVQQD Eyg0NzNjYTQ4NzE5ZDkzYWQyYmNhM2Y1OTI4NDM2ZDQ5OTk5MDNmYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMFCyMEFJwKZ4Qv2CkhkiVSvnrPJ fbrZdfYCrrVDapnuF1wJhhyTBjRLlxpDRgwo+gKmyj06knXavyLZlItO60ClvzPo Q470+TU/muTN3cadk4LodD5yYfJMJzSWxH8OY0tTyeUvAC6dClBa4gtWY435uGfU EekMiPNHffPrfb42zHhuI3wujMkuTELdZYzOPN1+XZVOWU7e1TAwfKwqRUMCddov 7tNhaJDTYV/jzYjJtHpiogCVp0NFsR7soAW5U0NDy2tMu54AZaL8piStaJI7S4O2 3OlvYiR0f7KhiwWHfYPkb/XvxMOKx2/c1T9cp3mtIn4aQ1YTfLg/qSKNYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc8pIcZ2TrSvKP1koQ21JmZA/oJMB8GA1UdIwQY MBaAFPzBOqqh5OhOsMJcuVDiaf89287gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMt M2ZmNjk1MmM1ZWU5LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMtM2ZmNjk1MmM1ZWU5 LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfuzUG9C CRe7b/yQMMoYK+cQ02A24Y/DKVZ4YR9yYCFA/Oj8r3265K5FMPscMpzElWA0MB1k 9J8nu/fXJH+sdcBW4UF7S1pRY/mu3v89DnD1ToHB2nI7mkOwy4dititrmnYJU8ur Mx2HaGXeH62HZTu6aJWU1jp3J349EPZKtUIB5ddf5K+FzyYAt2g1u3NqFYxOX12V OQ9RKOCSutBzysBWKhSAkEzfI0GHos5dTY1TwsTWQk4qdqNwpxhXURLNlN+ewz1K GlrX7WwvO4XaT19ci8yN7q0H2471cGwCZ6gQ6DZIUjo1rGOgaR+x6oaUFi1B6+Ke Gg6uytOEPCutZw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:48 2025 by rpki-client