This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft File: pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json) Hash identifier: rvth8Wt2U/WTfKgt9OHkepPqBZwtdKGVnUiIr9ZZFjk= Subject key identifier: 7C:08:D0:F4:DF:27:AE:4A:11:E9:5F:32:E4:19:1C:BC:9A:59:A2:C1 Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Certificate serial: 019AF19B395714D28B5E39B3BBEC5550AC6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft Manifest number: 1595 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: vagNihsxZt2sWvKshYii6rKJp8pQoSRiExxC1y84QHs=) 2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:57:14:d2:8b:5e:39:b3:bb:ec:55:50:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=7c08d0f4df27ae4a11e95f32e4191cbc9a59a2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:59:09:21:40:27:60:e0:74:c8:9c:a3:89: 4c:a6:de:43:ce:cb:fe:56:ab:ae:21:d4:df:0e:1f: a0:62:9f:73:f7:6c:87:99:86:7e:b3:71:55:23:eb: f2:5a:d4:c7:4c:34:13:8a:b8:12:80:53:8e:14:43: 19:89:83:5c:90:7c:6f:e0:c2:d3:d2:bc:27:f5:c1: 63:02:71:67:21:29:3c:fd:06:22:8d:66:20:48:a9: b5:6c:91:31:01:cc:a5:6d:73:ed:96:58:da:75:ba: 54:ab:af:3d:29:ad:a0:fb:7d:e3:f2:3e:e1:3e:dd: 8e:aa:28:a1:b9:66:fb:f5:d2:ab:cb:f1:d9:b7:53: a9:24:b4:71:99:b4:6b:16:9e:d9:81:c9:3d:7c:4c: c3:87:5b:29:f7:56:0e:9a:f0:13:1d:75:8b:e5:66: db:e5:de:84:3b:6d:00:0d:2d:cd:4c:dd:d9:77:cd: b9:55:9a:c5:2d:da:4d:3b:d6:54:99:04:9f:fe:21: 0e:20:2c:20:e4:a7:75:e5:06:df:e8:35:51:b3:6e: a1:84:4c:e2:e2:3b:8a:31:3e:a2:fb:c3:37:6b:c2: 9e:f3:15:37:a6:b2:b0:8f:86:01:cc:26:ed:fd:e6: fa:6f:9b:f1:63:ba:06:bd:20:99:f7:42:00:07:00: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:D0:F4:DF:27:AE:4A:11:E9:5F:32:E4:19:1C:BC:9A:59:A2:C1 X509v3 Authority Key Identifier: keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:3b:8f:40:4e:bc:9f:79:cd:a8:85:68:87:e8:95:81:5a: 05:d6:e0:7f:70:16:9a:26:05:f4:0b:c5:c4:cd:ed:3c:18:b0: 97:d1:62:1f:70:48:41:9b:8c:be:1c:93:7d:94:1c:42:36:3b: d7:8b:0f:b3:d3:5e:18:d4:eb:25:10:72:ca:e8:a5:53:30:75: 25:44:3e:9c:d6:37:f0:9e:55:8c:ba:38:22:0c:01:73:f5:f6: 9c:46:d9:bb:8c:67:7a:78:47:5b:d3:88:94:57:6b:e3:d1:32: 4b:20:c3:07:44:e4:bc:57:70:7c:a1:90:59:6f:8f:87:83:c6: a6:5a:d2:de:4f:19:bb:ed:eb:7a:6e:b4:c4:8a:80:21:9d:3f: fc:d0:01:b4:8a:62:a8:a1:51:6f:6c:23:56:fd:a1:1b:5f:2a: 6b:ff:4a:b6:cb:4a:dd:75:f1:4e:e5:02:5a:41:3c:4b:82:63: 1b:71:f0:7f:69:57:f2:7c:c4:da:de:5e:ce:f2:4e:36:7e:bc: 89:80:8a:4f:97:06:60:e3:63:74:7b:1e:aa:e7:66:df:3c:e4: 66:d8:6d:af:89:6a:05:b9:77:70:fb:90:6b:12:5e:5d:8b:77: 5a:b8:c2:36:d6:0b:1c:ff:b2:53:ca:35:76:d0:c2:11:3e:ee: 56:b4:cd:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzlXFNKLXjmzu+xVUKxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzdiZmU0MTU2MDRmNjEzNmNlYWEyMTYzNTY0OTViZjZk NWNjNDEwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg3YzA4ZDBmNGRmMjdhZTRhMTFlOTVmMzJlNDE5MWNiYzlhNTlhMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujJZCSFAJ2DgdMico4lMpt5Dzsv+ VquuIdTfDh+gYp9z92yHmYZ+s3FVI+vyWtTHTDQTirgSgFOOFEMZiYNckHxv4MLT 0rwn9cFjAnFnISk8/QYijWYgSKm1bJExAcylbXPtlljadbpUq689Ka2g+33j8j7h Pt2OqiihuWb79dKry/HZt1OpJLRxmbRrFp7Zgck9fEzDh1sp91YOmvATHXWL5Wbb 5d6EO20ADS3NTN3Zd825VZrFLdpNO9ZUmQSf/iEOICwg5Kd15Qbf6DVRs26hhEzi 4juKMT6i+8M3a8Ke8xU3prKwj4YBzCbt/eb6b5vxY7oGvSCZ90IABwAWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwI0PTfJ65KEelfMuQZHLyaWaLBMB8GA1UdIwQY MBaAFKTHv+QVYE9hNs6qIWNWSVv21cxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMt YzliMjIwYTRkNmYwLzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMtYzliMjIwYTRkNmYw LzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6s7j0BO vJ95zaiFaIfolYFaBdbgf3AWmiYF9AvFxM3tPBiwl9FiH3BIQZuMvhyTfZQcQjY7 14sPs9NeGNTrJRByyuilUzB1JUQ+nNY38J5VjLo4IgwBc/X2nEbZu4xnenhHW9OI lFdr49EySyDDB0TkvFdwfKGQWW+Ph4PGplrS3k8Zu+3rem60xIqAIZ0//NABtIpi qKFRb2wjVv2hG18qa/9KtstK3XXxTuUCWkE8S4JjG3Hwf2lX8nzE2t5ezvJONn68 iYCKT5cGYONjdHsequdm3zzkZthtr4lqBbl3cPuQaxJeXYt3WrjCNtYLHP+yU8o1 dtDCET7uVrTNcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:33 2025 by rpki-client