This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft File: 0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json) Hash identifier: P+6VAq47fKswzSNMGy4rfTcIdEYqhUPSGxV913G7ZDQ= Subject key identifier: 5D:27:68:D5:02:13:CB:34:E1:D0:20:0D:07:83:AD:EC:F6:D9:22:D3 Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6 Certificate issuer: /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6 Certificate serial: 019AF12DC90B2A4BDEC88944046E7E799DFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft Manifest number: 11D0 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: gFJHv+OcHYg7v7nzp+HQT6V5q+5BcjRQ7mDRnQiXTOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c9:0b:2a:4b:de:c8:89:44:04:6e:7e:79:9d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6 Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=5d2768d50213cb34e1d0200d0783adecf6d922d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:e3:fb:54:2f:7b:34:66:38:9c:14:ca:81: ae:58:94:28:82:85:37:2b:03:8b:a2:50:b9:ce:09: f8:0d:30:49:6e:29:61:b0:ed:29:83:68:98:05:76: d9:54:c3:42:34:3a:79:fc:46:63:62:16:fc:c1:da: 8b:1c:8c:8c:85:0f:a0:3f:70:0a:d9:77:67:cc:00: a3:aa:0a:c1:af:fd:a6:27:66:bd:53:19:a1:2c:1e: 9b:09:0e:22:cd:cc:6b:b6:a8:47:cb:e5:f2:b3:71: 2a:2c:92:02:72:df:0d:74:b7:29:e0:07:6a:26:f8: ab:12:2c:a7:a1:99:1f:4a:88:8b:d2:e7:6e:ff:6a: f2:b2:01:b0:aa:54:c2:0e:9f:39:e4:1a:c5:e4:9c: 39:73:54:b5:42:30:43:b9:98:bb:bc:c0:b2:e2:85: 39:6d:13:a0:f3:09:5d:38:be:66:e2:95:d2:12:99: ce:71:59:de:78:7a:02:32:4b:87:59:52:88:6f:86: f0:84:4a:b3:ee:e4:c9:7f:d6:b7:9e:e1:c0:db:39: fb:5e:e1:81:07:25:7d:74:87:27:39:34:7d:07:d4: f3:f3:e4:81:b0:88:19:f8:c1:5f:c7:90:22:d0:b5: 13:74:38:ca:13:b3:b4:fa:4c:4b:7c:dd:b1:6f:68: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:68:D5:02:13:CB:34:E1:D0:20:0D:07:83:AD:EC:F6:D9:22:D3 X509v3 Authority Key Identifier: keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:14:7d:26:e3:33:43:98:67:a4:f6:04:95:1c:a3:00:20:b6: a7:06:19:d0:48:aa:f2:13:2d:b7:bd:d2:01:55:d9:79:00:6e: a2:a0:9a:66:28:23:bb:18:b8:99:28:ba:30:fd:c2:43:dc:6c: b1:99:37:39:83:bd:ea:47:81:a9:19:7f:53:8d:32:59:70:02: e2:bd:cb:d1:50:7d:0c:6c:4a:ad:8a:80:ac:cc:28:2b:e5:45: 5e:55:3c:ff:c5:5e:24:a6:81:cb:72:07:6e:73:3a:01:b4:69: 39:12:a2:3a:ee:6d:60:3e:2e:39:44:0e:22:1f:8c:ad:ea:2c: f6:56:8e:2d:24:a3:8b:5f:76:05:23:42:a8:25:59:78:b0:c5: 3c:02:80:83:f8:1b:f1:5b:43:9e:f0:5d:31:2a:2e:2e:19:2e: 7b:3e:ba:1b:03:87:a1:ed:49:fa:11:c2:7e:4f:55:ae:38:c5: 49:88:44:36:c4:96:a6:d8:31:7f:6a:8f:cc:1b:c1:69:53:28: 7f:0c:b5:21:8f:57:ef:fe:63:56:7e:28:04:21:39:79:c1:80: a5:90:11:ec:c4:e4:53:aa:da:32:1e:03:46:84:1a:91:64:af: 16:a1:ad:b0:85:4a:15:10:72:65:00:54:fe:5a:4b:39:af:76: e1:73:43:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLckLKkveyIlEBG5+eZ3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjdhOTE5YTVkMzJjZWEyZmQ0MWM4YTllMTg1MTBiZmZm Y2U4ZDYwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD Eyg1ZDI3NjhkNTAyMTNjYjM0ZTFkMDIwMGQwNzgzYWRlY2Y2ZDkyMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8nj+1QvezRmOJwUyoGuWJQogoU3 KwOLolC5zgn4DTBJbilhsO0pg2iYBXbZVMNCNDp5/EZjYhb8wdqLHIyMhQ+gP3AK 2XdnzACjqgrBr/2mJ2a9UxmhLB6bCQ4izcxrtqhHy+Xys3EqLJICct8NdLcp4Adq JvirEiynoZkfSoiL0udu/2rysgGwqlTCDp855BrF5Jw5c1S1QjBDuZi7vMCy4oU5 bROg8wldOL5m4pXSEpnOcVneeHoCMkuHWVKIb4bwhEqz7uTJf9a3nuHA2zn7XuGB ByV9dIcnOTR9B9Tz8+SBsIgZ+MFfx5Ai0LUTdDjKE7O0+kxLfN2xb2jAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0naNUCE8s04dAgDQeDrez22SLTMB8GA1UdIwQY MBaAFNJnqRml0yzqL9Qcip4YUQv//OjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEt OTM3MjI2N2NmOTUxLzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEtOTM3MjI2N2NmOTUx LzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxR9JuMz Q5hnpPYElRyjACC2pwYZ0Eiq8hMtt73SAVXZeQBuoqCaZigjuxi4mSi6MP3CQ9xs sZk3OYO96keBqRl/U40yWXAC4r3L0VB9DGxKrYqArMwoK+VFXlU8/8VeJKaBy3IH bnM6AbRpORKiOu5tYD4uOUQOIh+Mreos9laOLSSji192BSNCqCVZeLDFPAKAg/gb 8VtDnvBdMSouLhkuez66GwOHoe1J+hHCfk9VrjjFSYhENsSWptgxf2qPzBvBaVMo fwy1IY9X7/5jVn4oBCE5ecGApZAR7MTkU6raMh4DRoQakWSvFqGtsIVKFRByZQBU /lpLOa924XND7w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:32 2025 by rpki-client