This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json) Hash identifier: M5HVJnQzCsrFUnBUBIS/HMedRm06nqQiqWmmlO5PtUs= Subject key identifier: F1:AA:39:F5:E8:E6:31:83:11:D7:E2:A3:54:05:04:B6:33:CF:B9:1C Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019AF3F76959534C54855D31F8A6703A97E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 14:01:09 +0000 Manifest this update: Sat 06 Dec 2025 14:01:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: VPKv0Rind+4cYT3MSX/D1HCxP8yZw5iFDe69t27TVF4=) 2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:69:59:53:4c:54:85:5d:31:f8:a6:70:3a:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Dec 6 14:01:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=f1aa39f5e8e6318311d7e2a3540504b633cfb91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:ca:1b:1f:9a:07:25:2e:7f:22:ea:f8:c8: e8:5c:b4:2d:93:c4:54:31:2d:65:eb:f4:b4:a9:0f: 2a:23:88:c6:84:c6:70:e2:8d:55:13:e1:4c:c5:8e: 7b:32:e6:98:6c:03:96:4f:cc:e9:f6:51:fd:f7:2c: 72:d9:e3:18:3a:ea:8c:a7:fe:c3:50:7d:af:bc:38: d5:65:46:57:21:3b:bf:2b:62:a1:92:da:48:dd:25: 60:ad:97:d3:6a:ac:d3:fb:44:7a:15:f8:df:f2:bf: 04:f4:df:e8:01:f9:ed:02:ab:6f:07:ca:98:0f:5e: 38:8f:53:9e:c8:5e:38:10:fd:04:af:53:84:0e:47: 2d:a7:29:37:4e:5d:6c:c8:51:9d:77:13:d8:f2:87: ea:46:c5:7f:62:55:5e:5e:92:52:c2:71:7b:14:d0: ff:05:87:c7:b1:b3:cb:14:98:3a:71:6a:6b:a9:81: 94:6e:bb:97:82:b9:15:d0:35:4b:5a:58:4c:a9:c7: 74:11:45:e7:d2:e6:96:7a:b3:bc:1f:02:5d:e7:a8: cc:68:d7:28:68:3c:70:fd:d4:dc:c4:49:1a:ff:10: e0:15:f7:3e:6f:60:3a:55:da:d5:49:9a:98:50:50: da:21:0e:08:18:6e:b1:7e:91:e6:c9:d7:f1:f0:c1: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:39:F5:E8:E6:31:83:11:D7:E2:A3:54:05:04:B6:33:CF:B9:1C X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7b:35:d3:92:32:b6:cb:1d:c3:fe:3f:43:b6:a4:f4:40:2c: 77:55:fa:4f:f2:87:0b:29:c5:e4:85:44:27:e5:33:36:a2:c9: a0:d8:03:b3:05:61:dc:5c:ee:c7:82:1c:19:45:ec:c9:16:de: be:8f:eb:f3:0d:97:cc:2b:f7:78:73:a5:76:4f:aa:2f:df:d8: d3:f7:a1:f4:6f:52:e8:78:30:b9:d7:1e:57:6c:b1:0b:5a:45: cd:8f:f0:80:ee:fe:eb:1a:ae:98:e5:0e:76:9c:ad:5d:5e:f5: ef:e6:2e:b7:27:dc:90:7c:c6:9a:91:4a:77:18:3f:17:fb:ed: 92:6f:93:56:35:3a:89:e4:a4:d4:a4:d2:f8:ab:e8:20:96:21: d1:89:97:95:96:98:17:db:e2:e7:5f:d9:05:bc:8b:5f:ec:75: f3:61:01:34:bb:dd:51:c0:75:95:fc:05:c8:9d:ce:f7:41:33: c7:56:9e:56:40:0e:44:cb:99:70:70:5e:77:ee:5b:04:b0:a1: 25:b4:64:22:bd:e8:0f:57:86:fe:02:19:c8:60:50:87:ba:31: 93:88:01:a3:0f:e5:a4:2e:45:bf:70:2b:31:0e:86:da:b2:d8: b2:7f:29:91:64:5d:aa:c5:5a:90:7d:8a:be:01:f9:6b:67:5d: 77:eb:74:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92lZU0xUhV0x+KZwOpflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjUxMjA2MTQwMTA5WhcNMjUxMjA3MTQwMTA5WjAzMTEwLwYDVQQD EyhmMWFhMzlmNWU4ZTYzMTgzMTFkN2UyYTM1NDA1MDRiNjMzY2ZiOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKjKGx+aByUufyLq+MjoXLQtk8RU MS1l6/S0qQ8qI4jGhMZw4o1VE+FMxY57MuaYbAOWT8zp9lH99yxy2eMYOuqMp/7D UH2vvDjVZUZXITu/K2KhktpI3SVgrZfTaqzT+0R6Ffjf8r8E9N/oAfntAqtvB8qY D144j1OeyF44EP0Er1OEDkctpyk3Tl1syFGddxPY8ofqRsV/YlVeXpJSwnF7FND/ BYfHsbPLFJg6cWprqYGUbruXgrkV0DVLWlhMqcd0EUXn0uaWerO8HwJd56jMaNco aDxw/dTcxEka/xDgFfc+b2A6VdrVSZqYUFDaIQ4IGG6xfpHmydfx8MGfywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGqOfXo5jGDEdfio1QFBLYzz7kcMB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXs105Iy tssdw/4/Q7ak9EAsd1X6T/KHCynF5IVEJ+UzNqLJoNgDswVh3Fzux4IcGUXsyRbe vo/r8w2XzCv3eHOldk+qL9/Y0/eh9G9S6HgwudceV2yxC1pFzY/wgO7+6xqumOUO dpytXV717+YutyfckHzGmpFKdxg/F/vtkm+TVjU6ieSk1KTS+KvoIJYh0YmXlZaY F9vi51/ZBbyLX+x182EBNLvdUcB1lfwFyJ3O90Ezx1aeVkAORMuZcHBed+5bBLCh JbRkIr3oD1eG/gIZyGBQh7oxk4gBow/lpC5Fv3ArMQ6G2rLYsn8pkWRdqsVakH2K vgH5a2ddd+t0Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:31 2025 by rpki-client