This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft File: mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json) Hash identifier: qhse739svI4ZHkrmXffCQEfhw3vnd6Og/ssTgOWXGfU= Subject key identifier: 24:84:0A:9E:9F:D1:78:0B:4E:05:DB:43:AB:64:98:CB:87:50:75:44 Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41 Certificate issuer: /CN=98418cc6550dfdb1899969a6027e435a1b0b1341 Certificate serial: 019AF31C5EFA7FBD9FEE32A3C16EB5BEAC40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft Manifest number: 0D6B Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: Sj80T0ZscSHQioJGKuWyuIDWdMY.roa (hash: WY9jZ6uCG8EibKZZR1R4Ju7ioSD/EDvW46cJnpe1OBA=) 2: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: Z1V7aACHEvItZpGhuO7p8EhpIFcTwaBOFx+5mn2NM8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5e:fa:7f:bd:9f:ee:32:a3:c1:6e:b5:be:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=24840a9e9fd1780b4e05db43ab6498cb87507544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:f4:40:10:77:2c:68:07:5a:7b:0d:de:89: 4b:b7:7d:f3:44:c9:81:79:c6:6d:c2:df:43:bf:cf: b9:ca:02:aa:73:4d:72:8a:33:0e:01:bb:70:35:74: 07:e9:5e:f6:a5:e0:ad:9d:dc:2e:8d:34:8d:3f:1c: 0e:c9:17:c5:6b:ab:b9:59:6a:04:00:b2:13:0b:0b: e0:3e:a2:fe:23:38:c4:a2:1a:a0:ce:9c:78:ca:29: f0:73:49:26:66:07:d4:b2:75:47:27:11:d6:04:47: 9a:e6:7f:15:99:ce:33:b4:3b:76:9a:37:56:8b:26: 94:86:4b:f9:3b:b3:bb:40:4f:24:d2:7e:4e:09:45: ce:a9:00:9d:ca:ef:4b:73:ab:b0:74:84:e9:b9:46: 4a:ed:83:15:1f:39:c5:0a:f5:1e:03:63:cc:0f:2f: a1:37:14:20:ca:87:85:2a:fa:92:87:74:f1:f6:84: ef:69:33:f5:57:9e:8c:89:2d:e7:cd:a7:5f:8c:4f: 44:7e:6d:a1:ed:e5:e0:51:35:9d:73:9d:97:a2:be: 47:99:8f:fe:ae:aa:98:cd:19:ba:93:e8:8d:52:9e: 75:c8:40:b7:5c:07:59:f5:fd:f1:31:21:5b:e4:20: 4a:21:12:b6:50:7b:ae:a5:e4:cd:61:4b:65:d2:4d: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:84:0A:9E:9F:D1:78:0B:4E:05:DB:43:AB:64:98:CB:87:50:75:44 X509v3 Authority Key Identifier: keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:57:c9:26:90:02:09:1f:68:a8:79:d7:4f:fe:de:82:c7:47: db:72:7b:37:56:35:63:4b:2d:73:08:0c:11:51:5e:1d:d0:37: 33:f0:22:fa:a5:7e:72:42:10:92:ec:f6:a0:a6:67:61:86:34: 53:66:14:84:74:fe:13:ef:12:0e:85:c0:2a:64:ab:b3:ef:3b: 06:3f:7b:65:a1:5c:1a:3b:4f:09:66:0a:df:09:e3:23:32:77: ac:0f:2d:21:af:51:a4:cc:40:8a:ee:cd:38:7a:78:56:e7:3b: fe:25:98:65:0c:6d:09:3a:78:8a:74:95:90:59:72:3c:f4:1f: 61:0a:e9:c2:3e:d2:c5:91:e3:c5:e3:2f:84:5f:9f:41:27:d3: 1a:97:b5:76:8a:bd:f2:fa:57:c0:00:5b:8f:58:c0:9d:70:37: 3e:45:d8:c1:a7:74:d7:81:c9:61:7b:3b:6b:72:7b:41:ad:7e: 8f:95:9b:6f:1b:f5:8b:f3:d7:5f:7f:57:82:05:7f:d1:2d:c8: 5f:2a:8e:58:1f:99:73:3f:05:53:40:51:54:29:10:e7:15:63: c9:ec:26:aa:02:4c:c1:27:29:0f:87:33:bb:00:f8:f9:d7:53: cd:9e:9e:e3:7d:97:51:d4:bb:0d:64:2e:44:4e:56:50:4b:51: c5:49:1b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHF76f72f7jKjwW61vqxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDE4Y2M2NTUwZGZkYjE4OTk5NjlhNjAyN2U0MzVhMWIw YjEzNDEwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EygyNDg0MGE5ZTlmZDE3ODBiNGUwNWRiNDNhYjY0OThjYjg3NTA3NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/0QBB3LGgHWnsN3olLt33zRMmB ecZtwt9Dv8+5ygKqc01yijMOAbtwNXQH6V72peCtndwujTSNPxwOyRfFa6u5WWoE ALITCwvgPqL+IzjEohqgzpx4yinwc0kmZgfUsnVHJxHWBEea5n8Vmc4ztDt2mjdW iyaUhkv5O7O7QE8k0n5OCUXOqQCdyu9Lc6uwdITpuUZK7YMVHznFCvUeA2PMDy+h NxQgyoeFKvqSh3Tx9oTvaTP1V56MiS3nzadfjE9Efm2h7eXgUTWdc52Xor5HmY/+ rqqYzRm6k+iNUp51yEC3XAdZ9f3xMSFb5CBKIRK2UHuupeTNYUtl0k2OMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSECp6f0XgLTgXbQ6tkmMuHUHVEMB8GA1UdIwQY MBaAFJhBjMZVDf2xiZlppgJ+Q1obCxNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMt ZmQ1ZDc5ZWM1YjE3LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMtZmQ1ZDc5ZWM1YjE3 LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1fJJpAC CR9oqHnXT/7egsdH23J7N1Y1Y0stcwgMEVFeHdA3M/Ai+qV+ckIQkuz2oKZnYYY0 U2YUhHT+E+8SDoXAKmSrs+87Bj97ZaFcGjtPCWYK3wnjIzJ3rA8tIa9RpMxAiu7N OHp4Vuc7/iWYZQxtCTp4inSVkFlyPPQfYQrpwj7SxZHjxeMvhF+fQSfTGpe1doq9 8vpXwABbj1jAnXA3PkXYwad014HJYXs7a3J7Qa1+j5Wbbxv1i/PXX39XggV/0S3I XyqOWB+Zcz8FU0BRVCkQ5xVjyewmqgJMwScpD4czuwD4+ddTzZ6e432XUdS7DWQu RE5WUEtRxUkb+g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:43 2025 by rpki-client