This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json) Hash identifier: wTvH0/FBpg+/2PflogUw9QR2IG0lRJDTSkZrxCxKMOg= Subject key identifier: C5:91:E9:2F:2E:0A:A9:B9:02:E5:DA:9A:E3:80:B1:B1:D5:33:20:DC Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3 Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3 Certificate serial: 019AF276FEE6C1E96C1F61524D7D81376E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: szlChFZPD1fN+nb0loEnOPT+hCfHAwV8k/boZE9hULo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fe:e6:c1:e9:6c:1f:61:52:4d:7d:81:37:6e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=c591e92f2e0aa9b902e5da9ae380b1b1d53320dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:55:ee:71:cb:08:12:7e:97:0a:0e:2f:8b: f0:cb:fc:5e:c1:1b:ee:33:ab:52:a1:3e:05:5d:0d: fd:10:c8:8b:b0:6a:66:e9:23:1e:ed:93:94:70:27: 15:a1:38:42:1a:34:be:32:b5:d5:e9:ee:54:c2:3e: 3f:21:9b:98:71:bb:e3:3f:90:6c:9a:eb:e4:5d:bc: e5:b9:d9:4e:0f:e6:44:b1:0e:47:02:99:54:6d:65: 8a:39:7f:f1:50:35:aa:da:dc:14:b4:34:bb:b6:4d: a3:18:6e:44:ab:c7:29:f2:a3:f8:f0:c8:9f:f6:8e: c5:d3:74:4b:fc:ca:f3:e6:f5:c0:5d:aa:54:f5:00: 86:62:94:e0:b6:59:1b:7d:51:b6:b2:53:7b:49:92: b7:20:ce:8d:89:38:be:76:89:ab:23:8a:cd:06:d0: 91:2f:da:04:7f:87:f6:f5:c5:55:cc:41:7a:3a:83: 6b:07:cb:30:4f:24:f7:3a:f0:d2:da:e4:59:cd:5f: 7e:04:ea:d5:54:3f:85:8e:94:65:ba:fc:c1:19:ef: 8f:ee:bf:de:a3:df:50:98:e8:78:52:12:ce:e6:45: 1b:f9:39:84:06:79:eb:7d:73:8f:d6:21:d1:82:30: d9:34:51:03:aa:f1:b2:52:74:91:3d:8e:0f:38:b0: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:E9:2F:2E:0A:A9:B9:02:E5:DA:9A:E3:80:B1:B1:D5:33:20:DC X509v3 Authority Key Identifier: keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:bd:be:c6:84:a0:95:7d:7c:4a:12:e7:be:10:3b:97:10: 86:91:8d:02:90:ae:eb:94:d5:d1:d5:e1:88:30:64:e9:1a:a1: f7:f7:73:4e:52:86:dd:1d:e4:81:d4:c5:28:3e:66:17:59:f0: 9a:d5:dc:04:44:fa:3a:35:09:80:43:cf:58:0e:51:7e:7c:90: a9:3e:9b:38:ab:73:f9:b9:43:43:58:7e:ac:09:f8:fc:41:54: 39:6b:bc:9e:8b:63:28:0a:53:0a:64:09:f1:f6:d1:30:13:02: 6c:33:99:ab:11:47:28:5b:d8:51:88:18:3d:47:e6:d8:a3:94: 09:98:93:2f:6c:89:5b:99:a1:ce:f1:98:f7:69:4e:20:11:0a: 2b:2d:14:d2:e1:04:c6:fd:77:7b:c3:f2:d0:42:04:98:3a:5b: 1a:64:ef:9a:c2:17:ae:92:a2:6e:49:89:13:fa:4f:2a:d3:15: 93:5b:11:44:37:c4:1e:1b:fc:a3:51:37:5b:ca:43:ab:c2:6a: f6:3d:8e:d0:45:0d:26:22:cf:74:63:33:9c:9a:c2:62:7f:80: 48:40:e5:64:a9:f3:fd:98:7c:ee:25:0b:a9:53:4b:d8:6a:2d: e0:79:cb:d0:1a:5c:53:2d:8b:46:fa:3c:b1:9a:d7:a2:aa:a5: 3f:49:90:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv7mwelsH2FSTX2BN24rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZWZiYjJiMTY1MzQyMjgzNzkzN2RkMjdkZTM1NGU2OGY5 ZTAxYTMwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EyhjNTkxZTkyZjJlMGFhOWI5MDJlNWRhOWFlMzgwYjFiMWQ1MzMyMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE9V7nHLCBJ+lwoOL4vwy/xewRvu M6tSoT4FXQ39EMiLsGpm6SMe7ZOUcCcVoThCGjS+MrXV6e5Uwj4/IZuYcbvjP5Bs muvkXbzludlOD+ZEsQ5HAplUbWWKOX/xUDWq2twUtDS7tk2jGG5Eq8cp8qP48Mif 9o7F03RL/Mrz5vXAXapU9QCGYpTgtlkbfVG2slN7SZK3IM6NiTi+domrI4rNBtCR L9oEf4f29cVVzEF6OoNrB8swTyT3OvDS2uRZzV9+BOrVVD+FjpRluvzBGe+P7r/e o99QmOh4UhLO5kUb+TmEBnnrfXOP1iHRgjDZNFEDqvGyUnSRPY4POLBFaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWR6S8uCqm5AuXamuOAsbHVMyDcMB8GA1UdIwQY MBaAFJnvuysWU0IoN5N90n3jVOaPngGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMjZiYmMtZDA2MS00YWYxLTg5NjQt NDFkNzllZmI0OWE5LzEvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMjZiYmMtZDA2MS00YWYxLTg5NjQtNDFkNzllZmI0OWE5 LzEvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZ69vsaE oJV9fEoS574QO5cQhpGNApCu65TV0dXhiDBk6Rqh9/dzTlKG3R3kgdTFKD5mF1nw mtXcBET6OjUJgEPPWA5RfnyQqT6bOKtz+blDQ1h+rAn4/EFUOWu8notjKApTCmQJ 8fbRMBMCbDOZqxFHKFvYUYgYPUfm2KOUCZiTL2yJW5mhzvGY92lOIBEKKy0U0uEE xv13e8Py0EIEmDpbGmTvmsIXrpKibkmJE/pPKtMVk1sRRDfEHhv8o1E3W8pDq8Jq 9j2O0EUNJiLPdGMznJrCYn+ASEDlZKnz/Zh87iULqVNL2Got4HnL0BpcUy2LRvo8 sZrXoqqlP0mQLw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:30 2025 by rpki-client