This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft File: mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json) Hash identifier: SiWPGsBQ7bhVYkplR52jFa6SoEtjK/tDqxYlkPeJk3g= Subject key identifier: 61:7B:2C:24:6C:5E:2F:9B:26:92:60:57:1B:0F:76:7C:E0:EA:F6:42 Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33 Certificate issuer: /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33 Certificate serial: 019AF50B4D8F80710B621E2E89351DAE6560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: CRr5fhROXjnsFgtFUw9n2cpFp3s1noCZSioCm9uP/vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4d:8f:80:71:0b:62:1e:2e:89:35:1d:ae:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33 Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=617b2c246c5e2f9b269260571b0f767ce0eaf642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:23:56:2e:fe:2d:48:52:03:1d:9f:e4:47: 23:c6:66:00:15:ad:7d:26:dd:ff:1c:d5:de:8b:1a: 55:e6:9d:e3:9e:aa:e0:e3:ac:f1:4c:b3:b4:c4:d4: a6:8d:eb:12:d2:3e:ca:2b:27:5b:cb:95:d8:d2:e2: bb:b0:44:4d:48:5a:22:46:a9:ff:89:5d:0f:4a:20: 93:3a:3a:58:5a:07:2d:4b:cd:b0:07:7d:8d:19:39: 43:dd:78:53:68:49:9d:33:08:2a:db:2b:6a:26:fb: 48:5f:9f:09:00:1f:8f:e9:a6:bc:44:df:f0:00:28: 3b:69:02:1b:24:5e:af:e0:75:ff:76:c1:cd:01:4b: f6:b7:6d:79:1a:e6:ba:3d:c8:e8:e4:a3:0f:db:2d: e7:d5:e2:78:8c:e6:97:66:37:ea:76:49:0a:ef:fd: 82:6a:6a:8e:6b:23:94:c7:6b:6d:77:e8:06:50:d0: 08:4c:0f:09:d7:c4:07:56:b1:b2:3d:fa:5d:a9:7a: 80:ca:73:c6:d2:8a:40:5b:67:e3:54:f3:87:0e:e5: 73:f9:f4:67:b0:db:a1:55:f1:91:de:12:23:a2:96: f0:5c:21:eb:a3:90:e8:2a:32:7b:e6:ef:e5:80:4d: c2:0b:80:83:f0:2b:2c:23:0e:a8:ac:dc:44:a2:5a: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:2C:24:6C:5E:2F:9B:26:92:60:57:1B:0F:76:7C:E0:EA:F6:42 X509v3 Authority Key Identifier: keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a5:19:25:6f:55:df:9a:a8:9f:70:53:4e:06:04:62:e0:d3: 3e:f3:ed:a8:2c:36:d2:70:71:26:46:e9:f6:47:31:03:cd:2b: c8:4f:ab:e1:c0:b9:c8:1a:a8:f7:1b:2f:85:dc:7e:83:6f:ca: e3:45:8a:8e:1b:94:c1:02:d6:24:af:0e:24:0b:83:5c:30:b9: 49:29:63:dd:93:6b:da:3f:37:6f:d3:d0:08:0c:c8:d6:b9:00: c8:37:8b:78:a7:58:56:e8:13:53:38:be:bc:b9:72:92:95:d7: 5a:84:0a:62:0b:74:04:30:92:04:2b:05:7e:2b:d6:93:34:3d: ea:80:7d:c1:61:d3:33:aa:30:d3:a2:04:7b:e3:4d:d5:04:9c: 74:df:f1:63:27:b2:37:92:87:2b:c9:47:da:6a:fc:78:06:7c: 2e:f1:4a:b9:32:c5:b5:a8:5f:12:18:a7:fa:37:02:94:bf:a9: f0:eb:ba:97:3c:52:1f:61:ba:d5:33:b4:da:fa:05:ee:7d:5d: 09:4e:78:af:ef:56:f5:27:49:a0:ae:fb:25:c2:e3:59:f0:a4: 3a:e2:44:eb:00:e5:b4:2b:3a:a0:5d:71:5d:42:27:41:ac:34: 8f:ca:07:a7:bb:94:b4:93:0e:31:c6:92:a4:0b:df:d4:f3:cf: 64:b4:d6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C02PgHELYh4uiTUdrmVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDJmNzFkMGMyMzY3ODgyZWY0NzA4YjIwNmI0YjZlMjlh MzdiMzMwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD Eyg2MTdiMmMyNDZjNWUyZjliMjY5MjYwNTcxYjBmNzY3Y2UwZWFmNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor8jVi7+LUhSAx2f5EcjxmYAFa19 Jt3/HNXeixpV5p3jnqrg46zxTLO0xNSmjesS0j7KKydby5XY0uK7sERNSFoiRqn/ iV0PSiCTOjpYWgctS82wB32NGTlD3XhTaEmdMwgq2ytqJvtIX58JAB+P6aa8RN/w ACg7aQIbJF6v4HX/dsHNAUv2t215Gua6Pcjo5KMP2y3n1eJ4jOaXZjfqdkkK7/2C amqOayOUx2ttd+gGUNAITA8J18QHVrGyPfpdqXqAynPG0opAW2fjVPOHDuVz+fRn sNuhVfGR3hIjopbwXCHro5DoKjJ75u/lgE3CC4CD8CssIw6orNxEoloPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF7LCRsXi+bJpJgVxsPdnzg6vZCMB8GA1UdIwQY MBaAFJhC9x0MI2eILvRwiyBrS24po3szMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yNWM5NDctODUzNC00MzQxLWFkNmUt N2RhOGRiYWVhOTRhLzEvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yNWM5NDctODUzNC00MzQxLWFkNmUtN2RhOGRiYWVhOTRh LzEvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqUZJW9V 35qon3BTTgYEYuDTPvPtqCw20nBxJkbp9kcxA80ryE+r4cC5yBqo9xsvhdx+g2/K 40WKjhuUwQLWJK8OJAuDXDC5SSlj3ZNr2j83b9PQCAzI1rkAyDeLeKdYVugTUzi+ vLlykpXXWoQKYgt0BDCSBCsFfivWkzQ96oB9wWHTM6ow06IEe+NN1QScdN/xYyey N5KHK8lH2mr8eAZ8LvFKuTLFtahfEhin+jcClL+p8Ou6lzxSH2G61TO02voF7n1d CU54r+9W9SdJoK77JcLjWfCkOuJE6wDltCs6oF1xXUInQaw0j8oHp7uUtJMOMcaS pAvf1PPPZLTWBQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:59 2025 by rpki-client