This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json) Hash identifier: qDLByyrRdb1vRjz68B5JzQCKrCAztD9bVk1ae+LXJxs= Subject key identifier: DA:93:DD:C6:8D:79:49:65:01:80:64:96:12:CA:C6:35:E4:E7:C3:FD Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac Certificate serial: 019AF2ADCDA385ECB9B70E4AA2A9368B2A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft Manifest number: 0143 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: gpq4dhbTD9Y6/f0oR41AZ3xCx6QKkB9KdsPlITC19e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cd:a3:85:ec:b9:b7:0e:4a:a2:a9:36:8b:2a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=da93ddc68d7949650180649612cac635e4e7c3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:f4:3f:09:60:3a:3e:fa:8d:17:2d:9f:cf: 93:7d:88:8e:a8:14:a1:73:f0:d9:0a:ed:64:a5:4d: 44:84:00:f0:65:16:13:29:a4:45:61:af:a4:ba:8a: c6:99:77:ed:1e:3d:b4:10:2e:e0:6b:19:4c:96:b2: f1:2b:b6:c3:51:6c:30:ab:50:f5:a0:0a:17:4a:8c: 52:98:13:25:0e:61:8d:5b:01:4e:83:dd:7e:3e:8e: 48:c1:72:17:b6:08:00:53:de:54:f4:19:f7:16:bd: fb:f4:c6:dc:d5:86:f2:dc:ad:b4:cb:af:68:9f:44: 2a:44:c2:6b:b4:5f:b9:e0:7e:ff:e7:00:f2:7f:f7: 19:8f:87:b8:bf:f6:de:35:b1:a4:ec:8d:90:41:15: f7:96:69:20:4b:ce:dc:9b:00:66:e8:15:c0:72:8f: 69:74:c8:7f:3a:34:15:77:b4:c3:4e:4c:60:29:80: 31:ec:4b:e3:a9:51:c3:d8:b8:12:56:44:24:12:d2: e5:04:ac:98:bf:3a:68:73:4d:31:39:98:35:75:05: a2:e3:4b:3a:4b:17:f6:c5:73:1e:41:35:f0:91:6e: 1e:42:46:e9:41:6b:4c:2a:37:8e:6b:04:c7:55:09: 51:2b:74:0a:71:86:e1:b1:85:b4:19:cb:97:0e:24: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:DD:C6:8D:79:49:65:01:80:64:96:12:CA:C6:35:E4:E7:C3:FD X509v3 Authority Key Identifier: keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:52:dc:53:41:84:b2:9c:f2:bd:b1:2b:ea:f8:28:45:fc: 2f:db:85:0c:58:f6:23:6d:85:fc:5c:30:f8:87:3f:58:6c:63: 37:48:d0:07:40:73:77:80:e2:7b:88:34:82:4e:e6:bc:61:49: 02:e3:6a:93:27:c4:d2:b5:46:e0:2d:ca:12:9c:63:dd:30:97: 7a:e1:c3:74:c2:d1:d1:38:55:0c:41:c7:68:3c:f6:b9:1e:b3: cb:e5:3c:b7:ce:20:75:e3:3b:c3:16:ee:0c:c0:28:48:21:53: 68:86:60:9e:8b:16:75:0c:aa:b4:c9:e0:e8:b8:ad:a2:65:16: 3d:c5:9d:78:dc:aa:12:30:d9:16:cb:6e:ae:29:2f:23:6a:e9: 96:8e:32:b4:3c:c5:4e:92:ee:1e:88:72:c0:7c:81:d9:8e:01: ec:ad:54:62:14:dc:57:5b:56:58:e3:2c:32:77:62:e0:53:74: 4c:09:9f:fd:8a:31:9f:5a:03:17:eb:78:6d:9b:a5:34:f5:31: a1:5a:60:5c:ab:60:b5:59:93:4f:db:95:55:33:59:cc:21:76: af:40:48:1c:ee:f0:6a:4a:63:17:9b:3f:1e:fd:56:a3:06:f2: 00:17:91:36:8b:42:9f:55:d2:6d:2a:83:f6:ad:30:a6:f0:aa: b8:e1:26:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc2jhey5tw5Koqk2iyoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDY2YWVjNzUyOTI4YjZkNDg2NWI5OWU4NjA4YzRhZWM0 Yjc4YWMwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhkYTkzZGRjNjhkNzk0OTY1MDE4MDY0OTYxMmNhYzYzNWU0ZTdjM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotL0PwlgOj76jRctn8+TfYiOqBSh c/DZCu1kpU1EhADwZRYTKaRFYa+kuorGmXftHj20EC7gaxlMlrLxK7bDUWwwq1D1 oAoXSoxSmBMlDmGNWwFOg91+Po5IwXIXtggAU95U9Bn3Fr379Mbc1Yby3K20y69o n0QqRMJrtF+54H7/5wDyf/cZj4e4v/beNbGk7I2QQRX3lmkgS87cmwBm6BXAco9p dMh/OjQVd7TDTkxgKYAx7EvjqVHD2LgSVkQkEtLlBKyYvzpoc00xOZg1dQWi40s6 Sxf2xXMeQTXwkW4eQkbpQWtMKjeOawTHVQlRK3QKcYbhsYW0GcuXDiTrWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqT3caNeUllAYBklhLKxjXk58P9MB8GA1UdIwQY MBaAFJhGaux1KSi21IZbmehgjErsS3isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hYmYwZjUtM2IwMy00MmE0LWFkZWQt ZmQwYzI3ZmMxMTNhLzEvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hYmYwZjUtM2IwMy00MmE0LWFkZWQtZmQwYzI3ZmMxMTNh LzEvbUVacTdIVXBLTGJVaGx1WjZHQ01TdXhMZUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabVS3FNB hLKc8r2xK+r4KEX8L9uFDFj2I22F/Fww+Ic/WGxjN0jQB0Bzd4Die4g0gk7mvGFJ AuNqkyfE0rVG4C3KEpxj3TCXeuHDdMLR0ThVDEHHaDz2uR6zy+U8t84gdeM7wxbu DMAoSCFTaIZgnosWdQyqtMng6LitomUWPcWdeNyqEjDZFsturikvI2rplo4ytDzF TpLuHohywHyB2Y4B7K1UYhTcV1tWWOMsMndi4FN0TAmf/Yoxn1oDF+t4bZulNPUx oVpgXKtgtVmTT9uVVTNZzCF2r0BIHO7wakpjF5s/Hv1WowbyABeRNotCn1XSbSqD 9q0wpvCquOEmzA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:08 2025 by rpki-client