This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json) Hash identifier: lWv2nTZnzuWp7gicF2WZkfHFzyZz1tcTl+OwYNj22Qo= Subject key identifier: 6B:54:E5:D9:00:57:F4:4F:20:D7:6C:E1:51:E9:36:09:32:7D:B9:54 Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f Certificate serial: 019AF12E2E0C69006250A6D9CA1625D928DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft Manifest number: 0FA3 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: 2dsSarNOqUHjUKAYypvVv/zn8NkUN0eLQXIGrVy9qgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2e:0c:69:00:62:50:a6:d9:ca:16:25:d9:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=6b54e5d90057f44f20d76ce151e93609327db954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:de:4e:87:b1:a9:73:32:55:00:ba:f2:10: 15:84:ba:86:ea:69:59:4c:50:5f:2c:50:99:ef:cd: 63:c7:67:72:7b:5c:16:66:45:a5:77:07:65:da:77: 82:6c:58:2f:24:02:c0:95:15:4e:34:54:0e:0c:5b: f5:ba:a2:00:8e:81:5c:c3:a0:c6:d8:d5:27:86:52: 60:19:dc:0a:9e:fc:ca:61:1a:85:a2:95:a6:46:5b: f8:f4:c1:e0:1b:8b:7f:64:ad:96:78:96:2d:d8:7b: 7b:94:92:73:35:ff:aa:76:91:a0:12:97:8b:d4:50: 24:80:83:44:a2:9f:c9:60:1e:80:ee:02:fe:78:25: a5:98:35:ab:b2:47:36:11:4b:5e:73:db:13:40:7b: 1b:db:52:7d:24:2a:dc:3b:06:bc:08:0d:0d:18:eb: 55:b1:98:97:74:b9:23:94:b8:ba:cd:58:70:43:3c: 83:8a:8b:58:4e:43:f5:b5:fd:f5:bc:5c:05:18:17: 4f:22:98:ef:88:d3:05:24:e5:29:8f:bb:b0:f5:dc: 7e:2a:a9:d6:bc:3b:7f:0d:4b:26:dc:ef:9e:9b:8e: fa:ea:d8:27:66:87:55:e9:8c:90:52:4a:f2:58:0d: 8e:2f:11:26:e1:a2:b9:f7:52:b3:81:2f:40:58:4e: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:E5:D9:00:57:F4:4F:20:D7:6C:E1:51:E9:36:09:32:7D:B9:54 X509v3 Authority Key Identifier: keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:42:da:51:38:93:76:80:23:2a:bd:8d:39:76:c4:78:44: 5d:d0:40:a4:82:65:e6:bf:60:9a:f8:f1:8c:5a:cb:40:82:f5: 68:85:a3:b8:a7:cb:f8:03:33:7e:b8:0c:9f:98:9a:6a:a2:da: 0a:4c:dc:45:7a:2d:1a:f9:77:7f:ba:0b:27:dc:07:47:9d:c7: 19:d1:10:df:e3:29:48:1e:cc:97:e7:f0:da:e8:94:57:55:cf: af:b9:c5:e9:57:78:72:6f:63:5e:54:75:e5:32:49:dd:c1:3c: 76:70:df:37:ee:3b:fe:6a:f0:e3:14:fd:61:63:14:ae:12:fd: 9f:a0:71:1b:ec:50:38:ff:63:ad:b4:60:ab:43:5b:02:86:71: 01:dd:35:6c:80:8d:fa:13:f7:5b:77:cd:9d:d2:97:20:8c:3e: d2:7a:0e:a7:67:32:4a:5d:fb:15:70:4a:fb:d7:70:e0:58:80: bb:3d:a3:ea:af:5f:7a:30:b0:c6:a0:ae:96:e4:f8:a6:f7:3a: 86:74:e8:9e:48:04:a8:47:dd:a6:0d:03:40:ec:88:8b:ab:a0: 8a:e5:bf:a6:d5:4a:72:43:a4:19:ff:5a:97:2a:fb:c3:98:c3: 33:0e:67:e3:b9:cc:a2:85:38:7c:a4:ca:6c:1d:4e:40:93:ce: 0e:37:98:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi4MaQBiUKbZyhYl2SjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTI4OGY3N2M5OTg1NjRmMjYzNGU3YTJlMWQwMDlkZjJl Zjg4N2YwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD Eyg2YjU0ZTVkOTAwNTdmNDRmMjBkNzZjZTE1MWU5MzYwOTMyN2RiOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlXeToexqXMyVQC68hAVhLqG6mlZ TFBfLFCZ781jx2dye1wWZkWldwdl2neCbFgvJALAlRVONFQODFv1uqIAjoFcw6DG 2NUnhlJgGdwKnvzKYRqFopWmRlv49MHgG4t/ZK2WeJYt2Ht7lJJzNf+qdpGgEpeL 1FAkgINEop/JYB6A7gL+eCWlmDWrskc2EUtec9sTQHsb21J9JCrcOwa8CA0NGOtV sZiXdLkjlLi6zVhwQzyDiotYTkP1tf31vFwFGBdPIpjviNMFJOUpj7uw9dx+KqnW vDt/DUsm3O+em4766tgnZodV6YyQUkryWA2OLxEm4aK591KzgS9AWE71BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtU5dkAV/RPINds4VHpNgkyfblUMB8GA1UdIwQY MBaAFJniiPd8mYVk8mNOei4dAJ3y74h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEt MGY2MGI4NTlhOWYxLzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEtMGY2MGI4NTlhOWYx LzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVtC2lE4 k3aAIyq9jTl2xHhEXdBApIJl5r9gmvjxjFrLQIL1aIWjuKfL+AMzfrgMn5iaaqLa CkzcRXotGvl3f7oLJ9wHR53HGdEQ3+MpSB7Ml+fw2uiUV1XPr7nF6Vd4cm9jXlR1 5TJJ3cE8dnDfN+47/mrw4xT9YWMUrhL9n6BxG+xQOP9jrbRgq0NbAoZxAd01bICN +hP3W3fNndKXIIw+0noOp2cySl37FXBK+9dw4FiAuz2j6q9fejCwxqCuluT4pvc6 hnTonkgEqEfdpg0DQOyIi6ugiuW/ptVKckOkGf9alyr7w5jDMw5n47nMooU4fKTK bB1OQJPODjeYYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:41 2025 by rpki-client