This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File:                     MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier:          TFMxlvx6zjRRdmmnjEqgoGE9DcaXqslZa85DgvCg1DQ=
Subject key identifier:   A4:12:55:CF:08:22:2A:82:CD:05:5F:F4:4A:09:11:83:E7:A1:69:9D
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer:       /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial:       019AF12E14140AD10CADC61786EC7918DD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number:          071E
Signing time:             Sat 06 Dec 2025 01:02:00 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:00 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:00 +0000
Files and hashes:         1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: rO1pblJ7DEzjSOpQwFguaF9sxuZNEBgqKtfAaegczmE=)
                          2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:14:14:0a:d1:0c:ad:c6:17:86:ec:79:18:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
        Validity
            Not Before: Dec  6 01:02:00 2025 GMT
            Not After : Dec  7 01:02:00 2025 GMT
        Subject: CN=a41255cf08222a82cd055ff44a091183e7a1699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bf:f0:86:b1:54:ec:99:67:e3:7b:dc:7d:84:
                    61:7c:d8:bd:23:21:3e:2f:27:13:2e:22:b0:5b:74:
                    c2:49:e7:05:c6:c6:4d:eb:6e:bb:2c:9d:11:1e:3e:
                    32:e5:40:5f:f1:4a:ee:e0:01:0e:42:7e:e9:0f:7c:
                    8c:ed:d6:a0:3f:c4:f5:12:6b:a5:7c:7b:16:b8:23:
                    44:16:e0:31:d8:42:28:a9:fb:e7:96:54:c9:20:cd:
                    f2:d1:aa:22:d8:2f:ec:a5:c2:d0:70:d3:d8:3e:60:
                    9a:13:f6:22:be:38:7c:7c:21:da:5d:f6:4f:a9:8b:
                    f9:f0:87:00:22:db:12:a2:36:08:c5:b4:e9:d8:1a:
                    fa:1a:e4:ba:8a:95:fa:3f:5e:32:f9:5f:ed:7b:d8:
                    e5:92:ba:f4:bb:b8:de:f8:46:8e:84:06:88:bd:d7:
                    ea:b8:66:51:28:6a:dd:76:5b:ae:de:7a:ed:39:9d:
                    53:c3:03:b8:66:19:01:80:fe:12:59:6d:ec:6f:d5:
                    02:f1:24:8e:be:25:3b:a2:77:05:e6:db:77:bd:23:
                    cd:a7:1a:b3:d8:3b:c4:d0:77:f7:fd:0a:ce:a6:70:
                    c4:48:10:ac:4d:48:54:96:d7:b2:92:18:83:39:42:
                    bc:94:bc:90:85:1f:d8:c9:58:39:56:53:bb:8b:fc:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:12:55:CF:08:22:2A:82:CD:05:5F:F4:4A:09:11:83:E7:A1:69:9D
            X509v3 Authority Key Identifier:
                keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b5:0e:5b:0b:3f:ef:24:cf:d9:16:95:11:c8:23:23:0c:55:
         75:0e:62:23:68:3a:64:aa:5d:66:8c:8e:97:30:50:53:40:a5:
         3b:16:5d:eb:08:0d:5a:00:46:1a:77:31:1d:60:75:20:82:8e:
         56:db:96:49:54:72:aa:58:c1:9e:32:86:01:bd:c0:8a:d1:96:
         56:fc:0d:9d:5b:c2:95:84:e0:a2:dc:2e:80:60:5b:9c:47:70:
         9f:67:81:05:9b:e1:87:d6:6f:01:49:9a:28:24:b6:59:3b:44:
         cb:b3:08:b9:0f:75:e7:7b:18:7c:52:98:fb:0f:8c:cf:ab:3f:
         e6:4c:4c:0d:4b:f4:d2:b4:4d:7a:0e:c9:d4:a0:8a:80:5c:ad:
         9b:8c:2d:1c:05:24:86:f5:a3:25:4e:ec:51:bd:7e:e5:71:ba:
         cf:fa:b9:ac:e3:63:21:c1:80:f9:7f:e4:46:d1:6a:c5:ab:01:
         34:36:8f:fb:c2:8b:53:05:a8:1e:d4:2b:cd:9e:80:42:f7:33:
         ca:ef:bb:a9:38:90:1a:5f:7a:5d:42:20:b1:a4:97:89:93:1f:
         ee:0f:70:86:b7:c0:91:c6:6e:09:60:7e:d6:08:2a:1e:96:f7:
         e7:9c:40:88:02:ad:a5:49:e4:d0:a6:2f:8a:b7:74:33:02:4f:
         d3:a4:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:55 2025 by rpki-client