This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
File:                     1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft (raw, json)
Hash identifier:          yFeXnqGATd2CiqvU8LdBAq1N4S4YB05tbj1DlrFixxk=
Subject key identifier:   F4:8C:60:B8:A9:E3:34:13:95:7E:DD:70:52:8D:DE:97:79:8A:74:9E
Authority key identifier: F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
Certificate issuer:       /CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Certificate serial:       019AF19BA97BD2C05B6B7B4EEB05150F1788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
Manifest number:          01BC
Signing time:             Sat 06 Dec 2025 03:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:41 +0000
Files and hashes:         1: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl (hash: RNmsaVwOpf250Mmgeq9GKcXs88bA6mr8GfRan9Q45n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:a9:7b:d2:c0:5b:6b:7b:4e:eb:05:15:0f:17:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
        Validity
            Not Before: Dec  6 03:01:41 2025 GMT
            Not After : Dec  7 03:01:41 2025 GMT
        Subject: CN=f48c60b8a9e33413957edd70528dde97798a749e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:ce:97:45:1e:fe:a5:c9:36:4a:4e:25:3a:
                    eb:c2:8e:1f:c2:4d:84:77:89:60:83:a5:6b:9d:08:
                    77:ed:6d:c4:13:fb:f1:51:68:e5:4b:e2:a1:75:f2:
                    84:22:6b:6b:13:13:8a:22:fb:18:4d:5b:40:d4:6f:
                    dd:ea:a8:34:1b:ad:eb:24:91:ef:83:2c:56:2c:55:
                    0d:3a:61:3c:3a:c6:f2:e6:65:11:a3:a6:fc:ea:83:
                    0b:75:92:c0:10:e4:6d:f0:38:11:fc:a7:bd:d8:c6:
                    46:20:bd:e9:6a:56:12:07:8c:36:27:1e:95:e2:26:
                    d9:74:fe:bd:c9:44:53:1e:d2:73:94:94:87:3f:b1:
                    50:b7:8f:f0:66:34:85:c2:57:4d:63:17:42:7d:96:
                    2e:f1:92:9d:d6:f2:99:7a:70:38:28:69:71:cd:a3:
                    00:44:a4:da:46:ac:15:45:6c:48:fe:8c:04:3c:d6:
                    45:7d:83:df:83:33:8d:b1:7e:8b:5f:12:0e:01:71:
                    ff:dd:83:8f:83:06:73:23:e9:63:1a:f3:cf:0c:f9:
                    cb:9d:38:95:15:69:25:78:12:29:82:3c:4d:4d:5f:
                    ea:dd:15:a9:78:6c:16:d1:aa:63:6b:57:c3:b8:a1:
                    bc:99:be:96:e9:f6:45:2c:85:34:ef:21:54:47:05:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8C:60:B8:A9:E3:34:13:95:7E:DD:70:52:8D:DE:97:79:8A:74:9E
            X509v3 Authority Key Identifier:
                keyid:F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:f6:b7:0c:ef:75:b1:0e:5b:5f:69:0b:56:4c:f7:8f:5a:
         66:78:ff:79:8e:11:37:fb:0b:92:0f:b0:f0:88:fd:8a:83:04:
         00:fd:89:4d:2f:ee:18:35:d0:d1:d7:29:a1:a2:3c:a2:b5:95:
         ae:f4:6c:11:f0:0f:79:c3:0e:44:9e:19:63:d3:f5:d9:35:60:
         f9:02:66:10:a8:e7:bf:f2:0a:20:7c:e3:d8:82:2e:f4:76:53:
         4f:6f:ef:cf:c3:1e:aa:a2:89:e3:db:97:ff:90:ee:0b:7d:27:
         4d:fc:51:af:8f:fe:48:71:da:fb:1a:d2:d2:96:17:8d:f1:9d:
         f0:0f:9f:48:32:63:9e:4f:42:4e:30:a7:95:17:37:98:0e:88:
         b3:a2:08:14:a4:b5:aa:52:cf:20:b5:3b:5c:2a:d4:10:aa:81:
         29:2a:17:f4:97:39:3a:3b:fc:1d:5c:f9:6e:fb:5f:c4:f8:fc:
         cd:e2:93:d6:9a:3e:66:83:a6:e6:77:db:08:04:51:1b:fd:14:
         34:56:29:67:c8:7a:09:ac:b1:d0:47:a3:76:9f:92:56:a8:b5:
         be:ff:f8:f4:35:14:70:fb:58:f1:80:99:29:5b:81:de:ee:32:
         9c:b8:5b:46:12:12:65:6f:ea:c0:e3:b0:7c:ef:d8:20:d2:9a:
         6b:c9:6a:2c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZrxm6l70sBba3tO6wUVDxeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzExZTg3ZTFhOTUzMTJiNmM1OWE1ZmNiZDg5NzY0NmI0
YTRmODEwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD
EyhmNDhjNjBiOGE5ZTMzNDEzOTU3ZWRkNzA1MjhkZGU5Nzc5OGE3NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDOl0Ue/qXJNkpOJTrrwo4fwk2E
d4lgg6VrnQh37W3EE/vxUWjlS+KhdfKEImtrExOKIvsYTVtA1G/d6qg0G63rJJHv
gyxWLFUNOmE8Osby5mURo6b86oMLdZLAEORt8DgR/Ke92MZGIL3palYSB4w2Jx6V
4ibZdP69yURTHtJzlJSHP7FQt4/wZjSFwldNYxdCfZYu8ZKd1vKZenA4KGlxzaMA
RKTaRqwVRWxI/owEPNZFfYPfgzONsX6LXxIOAXH/3YOPgwZzI+ljGvPPDPnLnTiV
FWkleBIpgjxNTV/q3RWpeGwW0apja1fDuKG8mb6W6fZFLIU07yFURwW9FwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPSMYLip4zQTlX7dcFKN3pd5inSeMB8GA1UdIwQY
MBaAFPjBHofhqVMStsWaX8vYl2RrSk+BMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NRWVoLUdwVXhLMnhacGZ5OWlYWkd0S1Q0RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYWRjNjg5LThiYTUtNGQxMi1hZDcx
LWM2YTRmMDBkNjUwYS8xLzEtTUVlaC1HcFV4SzJ4WnBmeTlpWFpHdEtUNEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IwL2FkYzY4OS04YmE1LTRkMTItYWQ3MS1jNmE0ZjAwZDY1
MGEvMS8xLU1FZWgtR3BVeEsyeFpwZnk5aVhaR3RLVDRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8T2
twzvdbEOW19pC1ZM949aZnj/eY4RN/sLkg+w8Ij9ioMEAP2JTS/uGDXQ0dcpoaI8
orWVrvRsEfAPecMORJ4ZY9P12TVg+QJmEKjnv/IKIHzj2IIu9HZTT2/vz8MeqqKJ
49uX/5DuC30nTfxRr4/+SHHa+xrS0pYXjfGd8A+fSDJjnk9CTjCnlRc3mA6Is6II
FKS1qlLPILU7XCrUEKqBKSoX9Jc5Ojv8HVz5bvtfxPj8zeKT1po+ZoOm5nfbCARR
G/0UNFYpZ8h6Cayx0Eejdp+SVqi1vv/49DUUcPtY8YCZKVuB3u4ynLhbRhISZW/q
wOOwfO/YINKaa8lqLA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:49 2025 by rpki-client