This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft File: mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json) Hash identifier: 2+y+e4jlqClliEr5pskWVwi/biW8S3E7RBK9yMM0qA4= Subject key identifier: 8B:21:68:76:7C:79:E6:7F:A1:27:8F:79:1F:01:FD:60:84:F0:E2:85 Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3 Certificate issuer: /CN=984503d4d18140b92aa8923193101d0f3eafe2c3 Certificate serial: 019AF6536BC5019131EF03828B4C933A7370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft Manifest number: 11BF Signing time: Sun 07 Dec 2025 01:00:53 +0000 Manifest this update: Sun 07 Dec 2025 01:00:53 +0000 Manifest next update: Mon 08 Dec 2025 01:00:53 +0000 Files and hashes: 1: CtjT3jVnXWmD83KR_4TWffaI4JQ.roa (hash: flK9Ib6/h/dfOz32Mluz/WYLhTwywQZxRxjgsE0wek0=) 2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: wpBS7d6iPaYwfdRNV37mCuNe0xzwtIJcpX7JAc9N35A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:6b:c5:01:91:31:ef:03:82:8b:4c:93:3a:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3 Validity Not Before: Dec 7 01:00:53 2025 GMT Not After : Dec 8 01:00:53 2025 GMT Subject: CN=8b2168767c79e67fa1278f791f01fd6084f0e285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:63:d0:00:2d:ce:fb:10:ef:67:f8:a0:a4: 02:8a:ef:db:56:7c:69:50:5b:71:a9:0b:b3:c1:98: 10:29:f5:6f:95:e9:1c:5b:94:83:c9:e4:9b:fe:c6: d0:64:f5:86:fb:08:e1:6a:b5:d1:a3:08:2b:89:b1: 44:61:93:13:84:8c:e6:50:6c:75:47:61:18:5c:8f: ca:e4:ef:60:ba:6e:b6:47:6d:cd:9a:42:23:4a:ac: 1f:e8:ac:39:31:98:4c:fb:f2:53:f1:5c:17:81:fc: 11:b0:08:cc:62:f6:29:3a:03:3a:54:cf:6b:28:4d: 9e:be:67:1e:b0:77:6c:28:1c:fc:a1:5a:12:5c:02: d2:a8:57:6d:f8:18:c2:4e:59:c5:ee:58:07:26:c7: 18:f7:ac:4a:c6:96:13:68:54:4c:4b:c9:d3:56:86: 9e:f7:ad:ca:3c:e6:62:33:44:33:a0:28:b7:8a:34: 48:ec:c4:8b:ac:1e:f7:c3:b2:7e:f7:21:d4:23:dd: 8e:ca:77:76:43:55:5e:fa:37:35:10:76:ba:f2:28: 7a:20:60:2a:cf:8f:61:18:2b:93:82:e7:b1:8d:c0: 72:4e:1f:08:5b:c3:75:ea:ce:d4:d8:1e:ef:55:4e: 36:59:8e:ae:c2:b4:6a:a8:c5:cf:a1:f8:d1:b0:7c: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:21:68:76:7C:79:E6:7F:A1:27:8F:79:1F:01:FD:60:84:F0:E2:85 X509v3 Authority Key Identifier: keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:65:e5:c3:35:d6:b3:1d:44:3a:e1:99:bf:9a:d7:df:0f:31: 50:e0:83:de:12:cb:f3:da:b7:1f:75:3a:db:63:be:79:ec:3a: df:90:b7:d5:c3:63:95:23:da:18:5a:23:27:1c:42:12:0b:b4: 16:00:d0:17:c7:8a:2a:3a:46:d7:e4:be:86:5d:36:03:ad:db: d6:7f:b1:f9:d2:ee:5d:68:c4:33:f6:32:53:19:b6:b0:36:8c: 8f:79:61:3f:3c:82:04:f5:96:0d:91:f3:cf:2d:96:24:1e:38: a3:57:c1:e2:57:c4:f7:b9:0c:f2:ab:e3:4c:03:df:b1:e3:11: dc:12:8d:8e:54:91:2d:68:0a:2e:e8:9f:c1:a1:81:8e:d7:4c: c6:c5:b8:1d:81:ea:9f:a6:4f:51:a0:55:63:6e:39:79:97:38: 60:5a:51:7d:fe:3e:04:3d:25:0a:90:9d:a4:be:00:ad:9d:3d: 51:29:5b:77:d2:28:1b:07:d3:e6:82:78:9c:49:ed:c5:75:13: 72:7d:14:01:d4:cf:8a:6a:b9:ca:08:09:32:97:2b:f6:bb:0d: 8b:25:76:53:fc:4c:01:78:0e:54:b9:3b:2b:2e:e0:5a:57:ff: 3f:4c:35:17:dd:ef:2f:54:54:c9:5e:7a:7d:c9:ea:8f:be:70: 75:26:19:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2vFAZEx7wOCi0yTOnNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDUwM2Q0ZDE4MTQwYjkyYWE4OTIzMTkzMTAxZDBmM2Vh ZmUyYzMwHhcNMjUxMjA3MDEwMDUzWhcNMjUxMjA4MDEwMDUzWjAzMTEwLwYDVQQD Eyg4YjIxNjg3NjdjNzllNjdmYTEyNzhmNzkxZjAxZmQ2MDg0ZjBlMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXdj0AAtzvsQ72f4oKQCiu/bVnxp UFtxqQuzwZgQKfVvlekcW5SDyeSb/sbQZPWG+wjharXRowgribFEYZMThIzmUGx1 R2EYXI/K5O9gum62R23NmkIjSqwf6Kw5MZhM+/JT8VwXgfwRsAjMYvYpOgM6VM9r KE2evmcesHdsKBz8oVoSXALSqFdt+BjCTlnF7lgHJscY96xKxpYTaFRMS8nTVoae 963KPOZiM0QzoCi3ijRI7MSLrB73w7J+9yHUI92Oynd2Q1Ve+jc1EHa68ih6IGAq z49hGCuTguexjcByTh8IW8N16s7U2B7vVU42WY6uwrRqqMXPofjRsHzesQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIshaHZ8eeZ/oSePeR8B/WCE8OKFMB8GA1UdIwQY MBaAFJhFA9TRgUC5KqiSMZMQHQ8+r+LDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzIt NjBmZWVjZWE5YWE0LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzItNjBmZWVjZWE5YWE0 LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGXlwzXW sx1EOuGZv5rX3w8xUOCD3hLL89q3H3U622O+eew635C31cNjlSPaGFojJxxCEgu0 FgDQF8eKKjpG1+S+hl02A63b1n+x+dLuXWjEM/YyUxm2sDaMj3lhPzyCBPWWDZHz zy2WJB44o1fB4lfE97kM8qvjTAPfseMR3BKNjlSRLWgKLuifwaGBjtdMxsW4HYHq n6ZPUaBVY245eZc4YFpRff4+BD0lCpCdpL4ArZ09USlbd9IoGwfT5oJ4nEntxXUT cn0UAdTPimq5yggJMpcr9rsNiyV2U/xMAXgOVLk7Ky7gWlf/P0w1F93vL1RUyV56 fcnqj75wdSYZ2w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:38 2025 by rpki-client