This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          TzjI6IpiQF5X2zWt85NfR43gRSnnEaeDNahIYVgDvuk=
Subject key identifier:   DD:05:26:8C:46:3F:9E:D6:18:A3:29:DC:FA:C7:E7:A5:5A:D5:BA:13
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019BF8082F37D5782D676B41C082D1BC2F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          05EB
Signing time:             Mon 26 Jan 2026 02:00:44 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:44 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: PhKQRSs+D9BgvVSffdjELqw0gxWps4eff5o3JaXMUWI=)
                          2: yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa (hash: 1lKxwhNATkAVqpc77ycYRa96oFT/1GMPUZCkZLj7654=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:2f:37:d5:78:2d:67:6b:41:c0:82:d1:bc:2f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Jan 26 02:00:44 2026 GMT
            Not After : Jan 27 02:00:44 2026 GMT
        Subject: CN=dd05268c463f9ed618a329dcfac7e7a55ad5ba13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:55:4b:38:12:15:b5:cd:fe:54:41:05:7f:
                    37:fa:6f:bb:c0:af:9e:dd:50:51:cc:d6:c2:75:a3:
                    0e:3b:f6:8c:3d:ab:9e:a9:5d:9c:45:2f:22:e7:86:
                    d0:ad:45:ac:89:f9:5a:3e:ad:99:22:09:8c:97:e0:
                    2a:eb:e8:3b:4f:1b:aa:51:3e:46:54:ec:78:2c:b3:
                    13:37:f8:8a:c4:f3:81:4f:69:8a:5f:3b:0e:4a:fe:
                    c1:a3:b2:39:23:68:f7:f2:99:c2:f5:3f:45:e6:d0:
                    ac:2c:50:f4:cf:d3:62:ba:f9:05:6e:a9:af:49:95:
                    38:e7:6b:da:df:cf:df:ec:5c:a3:c4:6f:b8:87:46:
                    f2:35:db:ce:0a:4e:20:0c:dc:93:65:e9:b4:04:1e:
                    cd:45:6a:a8:df:ef:eb:9a:39:61:6b:c9:d3:e7:54:
                    4d:b9:47:8f:9c:99:19:92:75:a6:93:af:ae:63:1e:
                    88:55:55:54:12:bb:ac:82:c5:3d:51:2d:1f:07:c9:
                    35:ff:0a:d6:ec:ec:8f:fa:e8:3d:ee:07:a3:a4:48:
                    50:ca:9d:09:cf:3a:41:b3:e0:3e:c2:73:c6:7f:ea:
                    77:c8:a8:3a:fe:3f:ff:70:4c:d6:c2:a7:06:aa:7f:
                    8b:65:87:30:d8:34:36:5a:a3:9d:a4:18:22:b6:75:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:05:26:8C:46:3F:9E:D6:18:A3:29:DC:FA:C7:E7:A5:5A:D5:BA:13
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:df:81:51:6f:b4:fa:c3:de:f1:45:3c:ad:f9:ba:64:99:43:
         ad:1f:9c:3c:b1:73:97:da:74:23:7a:43:89:be:02:70:64:db:
         c8:4b:91:5a:d0:d0:dd:43:de:f0:c1:55:97:80:12:01:04:cc:
         53:fb:33:45:27:08:50:95:f6:e3:49:84:57:68:60:58:ae:6a:
         12:97:51:bf:67:6c:d3:be:a8:c4:af:cc:18:60:bf:5b:2c:1d:
         bf:58:1b:10:50:e9:94:a4:72:54:61:b2:6e:e9:84:9d:ea:ef:
         05:2c:a0:be:a6:33:8c:36:cd:cc:d0:d8:49:2f:5b:63:3d:9c:
         80:b6:0b:0e:a8:69:14:23:c8:b1:4c:53:68:32:55:1c:a2:95:
         66:00:dc:02:0f:ea:98:21:c4:cc:c7:1a:a7:8f:30:a2:ab:d1:
         59:d8:80:c6:0f:8f:ad:62:95:95:1c:4c:f4:74:d4:21:eb:cc:
         d4:92:2d:13:8e:50:7f:76:aa:5b:e4:43:46:9b:0b:4a:c3:33:
         d2:6c:d1:1b:c4:e2:ef:ca:8b:74:a3:82:c0:92:5f:40:42:ab:
         f4:c8:bd:97:dd:8c:43:ec:52:5e:79:2b:ed:d0:a2:52:d3:0a:
         7b:65:a1:95:8b:d5:96:f2:6f:09:59:96:25:a0:6e:68:11:17:
         0c:ce:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:26 2026 by rpki-client