This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft File: MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json) Hash identifier: FThzj3RRzCsMHz7bu0+yTcdKTJKPlhcb5iX87hB+Src= Subject key identifier: BC:CE:02:E2:3D:68:D7:8E:03:8D:E9:9B:7F:C4:ED:11:C5:F3:1E:12 Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE Certificate issuer: /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae Certificate serial: 019AF12CCE03ECF6F8B3A060B264A7D41C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: ISUllJw88HAUuw223/EEobUd5R7QvUvCWLujIFwdG+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ce:03:ec:f6:f8:b3:a0:60:b2:64:a7:d4:1c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=bcce02e23d68d78e038de99b7fc4ed11c5f31e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:30:7e:df:fa:8b:c4:9d:44:0f:58:2f:be: fb:ac:89:e2:e2:02:2c:47:a7:21:1c:36:6c:c0:27: 08:92:7d:b4:db:63:da:8d:46:49:cc:79:03:c3:c6: b1:b0:aa:d3:b2:3b:ff:fd:77:14:be:ef:9a:f7:d0: f7:c1:a4:37:e7:88:aa:45:f0:97:9c:d3:9a:95:6a: 3d:f0:6a:ed:00:6e:a5:06:c5:32:2a:bb:41:b9:08: b9:35:4d:e5:fe:ce:5b:f5:1d:e3:c6:a0:f3:71:c6: 9e:78:22:0c:e2:f4:84:e0:6a:7c:0b:c4:8d:18:e8: e0:96:96:6c:bb:ff:d7:85:61:34:e4:f5:5b:4b:bf: 79:b4:46:f3:2f:17:32:9e:8e:d7:dc:2f:77:d4:ed: ae:10:e5:0a:bc:ea:a0:2d:00:de:53:e3:5c:9f:84: 9a:8b:32:6d:b3:48:96:0d:d7:1d:a2:a0:4b:a5:17: b8:02:1e:82:80:a9:00:7a:33:a1:fc:8b:dd:fe:26: 14:21:e8:3e:f7:ba:42:17:60:1b:3f:8b:24:56:2e: c5:38:51:17:30:c1:6f:4e:24:e9:95:9c:d6:52:51: 4d:86:59:a2:fa:f9:84:c1:bb:27:14:9a:28:42:16: 33:ec:5e:7d:e4:42:9f:23:a4:b1:6a:07:10:09:3f: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:02:E2:3D:68:D7:8E:03:8D:E9:9B:7F:C4:ED:11:C5:F3:1E:12 X509v3 Authority Key Identifier: keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2f:2a:85:91:d4:0f:2f:d2:f0:83:09:93:c8:b2:45:c6:d9: f8:35:84:bc:6e:e1:26:de:31:5b:15:8b:e3:1f:bc:11:ea:98: 97:de:39:c8:40:cc:7f:ae:19:f3:57:56:3d:2a:5b:b3:85:2d: e3:1d:13:92:ed:9f:63:93:40:52:3f:18:aa:d0:9b:01:55:7a: 24:4b:24:bd:58:da:66:a4:54:4d:a0:aa:44:56:c8:25:9c:f0: d5:dc:83:eb:26:0e:1b:a5:95:25:ef:ad:bc:49:96:86:08:27: 7a:2e:cf:9f:83:e4:26:1e:90:2a:f4:13:d6:62:57:84:80:5d: 44:a4:56:d3:07:6b:2d:70:57:27:da:37:01:66:50:7a:5d:02: 39:22:36:ba:2b:14:29:d1:63:8d:8e:6f:b4:44:84:84:d4:6b: 11:79:4b:34:0a:43:68:f5:fd:59:e2:59:f7:f8:97:8f:26:f3: 86:dd:c9:b3:49:69:b4:e3:80:62:57:5a:7b:9b:a8:ba:81:87: 9f:74:c3:74:bf:09:d3:b5:24:6b:00:d4:af:7c:22:48:42:a2: 23:ff:8a:21:bd:b1:05:ef:89:d2:1e:ac:76:f1:8e:be:4a:7c: d0:9e:b0:02:e2:3c:4b:cd:fd:ef:7c:2f:4c:fd:50:c7:de:74: f3:c0:ad:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM4D7Pb4s6BgsmSn1BwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGFhMjU4MjI0ZmEzYzY3YmFkMWYyYjlmOWIyOGE2NWQ5 NWZlYWUwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhiY2NlMDJlMjNkNjhkNzhlMDM4ZGU5OWI3ZmM0ZWQxMWM1ZjMxZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5cwft/6i8SdRA9YL777rIni4gIs R6chHDZswCcIkn2022PajUZJzHkDw8axsKrTsjv//XcUvu+a99D3waQ354iqRfCX nNOalWo98GrtAG6lBsUyKrtBuQi5NU3l/s5b9R3jxqDzccaeeCIM4vSE4Gp8C8SN GOjglpZsu//XhWE05PVbS795tEbzLxcyno7X3C931O2uEOUKvOqgLQDeU+Ncn4Sa izJts0iWDdcdoqBLpRe4Ah6CgKkAejOh/Ivd/iYUIeg+97pCF2AbP4skVi7FOFEX MMFvTiTplZzWUlFNhlmi+vmEwbsnFJooQhYz7F595EKfI6SxagcQCT+kyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzOAuI9aNeOA43pm3/E7RHF8x4SMB8GA1UdIwQY MBaAFDBKolgiT6PGe60fK5+bKKZdlf6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgt OTNiYmIxYmEzMTZkLzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgtOTNiYmIxYmEzMTZk LzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi8qhZHU Dy/S8IMJk8iyRcbZ+DWEvG7hJt4xWxWL4x+8EeqYl945yEDMf64Z81dWPSpbs4Ut 4x0Tku2fY5NAUj8YqtCbAVV6JEskvVjaZqRUTaCqRFbIJZzw1dyD6yYOG6WVJe+t vEmWhggnei7Pn4PkJh6QKvQT1mJXhIBdRKRW0wdrLXBXJ9o3AWZQel0COSI2uisU KdFjjY5vtESEhNRrEXlLNApDaPX9WeJZ9/iXjybzht3Js0lptOOAYldae5uouoGH n3TDdL8J07UkawDUr3wiSEKiI/+KIb2xBe+J0h6sdvGOvkp80J6wAuI8S83973wv TP1Qx95088CtUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:31 2025 by rpki-client