This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft File: meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json) Hash identifier: tB87yUjoXB9X1WwjbAtAfLgGlliM9PC2FHPxSbklZFc= Subject key identifier: 15:1C:35:A7:26:40:F2:29:0E:B4:27:70:C0:46:87:E1:ED:69:D6:EA Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23 Certificate issuer: /CN=99e07a31abfec24909b188463846fdf655872423 Certificate serial: 019AF31C32142FDE6CDCE74F6E8992BAA1C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft Manifest number: 1344 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: f94ebHt47RY2OkVxV2QQyDY3j9C8h6ekJNxR2pYvEOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:32:14:2f:de:6c:dc:e7:4f:6e:89:92:ba:a1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e07a31abfec24909b188463846fdf655872423 Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=151c35a72640f2290eb42770c04687e1ed69d6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:dd:39:be:28:56:49:ec:1c:e6:b2:02:90: f2:fd:9e:87:b3:9c:ae:9a:7e:b6:f8:64:2c:6d:ca: 10:7d:52:ae:86:35:0a:f4:b8:4c:d1:86:20:08:05: 42:37:54:87:5c:d3:83:d3:f2:44:50:42:bd:3c:f5: 25:7e:3e:48:c4:31:78:70:bd:d4:21:bc:fe:b5:d6: 03:12:1f:8b:09:21:02:18:d5:64:07:ac:ac:0f:67: 91:02:6a:82:78:a9:1a:68:cf:ac:31:25:6d:48:4b: 84:67:ae:fe:ca:a3:29:c1:33:c9:05:e1:fa:05:d2: 8c:ae:c5:66:44:7f:34:cf:17:17:c2:d7:e4:e1:0d: 2a:3e:fb:9b:e6:1f:92:b6:f8:b9:f4:db:97:6f:41: 71:f2:0f:fb:1d:7e:54:34:5b:c0:ff:c6:55:91:a7: 67:7f:39:dc:2f:80:a5:95:c1:b4:6e:9f:17:21:88: bd:47:16:4d:d3:ab:c7:16:c2:e6:95:d6:b4:4f:8e: 8b:ac:22:e4:06:57:14:ef:5f:da:06:6c:47:9e:9c: e1:45:67:d8:b0:e0:ef:c1:40:b0:8c:e2:69:db:58: 1c:8b:0e:c7:8c:1b:48:7b:91:c1:62:0f:8d:67:92: 42:5a:cd:8f:db:0e:ca:67:77:66:32:ea:89:f4:ae: 36:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:35:A7:26:40:F2:29:0E:B4:27:70:C0:46:87:E1:ED:69:D6:EA X509v3 Authority Key Identifier: keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ca:78:f7:e2:c8:07:d1:23:d3:a6:1f:71:14:b3:73:b8:93: 52:e4:ed:66:89:98:29:3d:f3:ec:b5:81:24:3d:a7:df:ca:d7: dd:1b:a4:08:79:2c:9a:2e:4b:4a:48:96:cf:8c:21:7d:ee:d4: 37:81:4f:f0:1b:7a:e7:c4:95:b5:bf:93:17:9b:d5:0f:35:5e: 3d:cc:b2:4d:56:08:b6:c1:4b:83:bb:0f:9d:bf:ae:4f:26:bc: c6:ad:8e:7f:b0:c5:92:21:2b:17:5d:5a:1f:3d:06:2e:b8:6b: bf:6d:b0:ac:76:4a:38:4e:67:1d:f0:12:41:59:e0:06:e0:e6: 82:78:1a:99:a6:be:27:56:4c:be:0e:0b:59:71:35:0c:83:77: c6:21:a1:29:66:f7:3f:6d:cf:3b:b5:7e:37:e7:ed:ba:d3:6f: 75:b2:a3:31:29:61:fe:44:45:3a:f0:87:a4:31:73:7d:cf:03: 7b:21:1f:a3:ad:50:b6:6f:57:35:32:ae:f0:73:ea:9f:b2:7e: 5b:97:8a:57:be:9b:7b:b1:8a:d8:ee:33:ff:e9:60:26:1c:45: c6:e6:e6:8e:66:6c:3e:f8:de:6c:64:96:77:49:6c:a1:70:72: 0a:33:d4:24:6f:76:6a:c1:fb:c3:92:42:56:1a:59:d3:47:e7: 6b:34:6e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDIUL95s3OdPbomSuqHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTA3YTMxYWJmZWMyNDkwOWIxODg0NjM4NDZmZGY2NTU4 NzI0MjMwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD EygxNTFjMzVhNzI2NDBmMjI5MGViNDI3NzBjMDQ2ODdlMWVkNjlkNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/dOb4oVknsHOayApDy/Z6Hs5yu mn62+GQsbcoQfVKuhjUK9LhM0YYgCAVCN1SHXNOD0/JEUEK9PPUlfj5IxDF4cL3U Ibz+tdYDEh+LCSECGNVkB6ysD2eRAmqCeKkaaM+sMSVtSEuEZ67+yqMpwTPJBeH6 BdKMrsVmRH80zxcXwtfk4Q0qPvub5h+Stvi59NuXb0Fx8g/7HX5UNFvA/8ZVkadn fzncL4CllcG0bp8XIYi9RxZN06vHFsLmlda0T46LrCLkBlcU71/aBmxHnpzhRWfY sODvwUCwjOJp21gciw7HjBtIe5HBYg+NZ5JCWs2P2w7KZ3dmMuqJ9K42LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUcNacmQPIpDrQncMBGh+HtadbqMB8GA1UdIwQY MBaAFJngejGr/sJJCbGIRjhG/fZVhyQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQt MjE2MjQ1OGVhY2U1LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQtMjE2MjQ1OGVhY2U1 LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8p49+LI B9Ej06YfcRSzc7iTUuTtZomYKT3z7LWBJD2n38rX3RukCHksmi5LSkiWz4whfe7U N4FP8Bt658SVtb+TF5vVDzVePcyyTVYItsFLg7sPnb+uTya8xq2Of7DFkiErF11a Hz0GLrhrv22wrHZKOE5nHfASQVngBuDmgngamaa+J1ZMvg4LWXE1DIN3xiGhKWb3 P23PO7V+N+ftutNvdbKjMSlh/kRFOvCHpDFzfc8DeyEfo61Qtm9XNTKu8HPqn7J+ W5eKV76be7GK2O4z/+lgJhxFxubmjmZsPvjebGSWd0lsoXByCjPUJG92asH7w5JC VhpZ00fnazRufg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:06 2025 by rpki-client