This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft File: MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json) Hash identifier: UURgl62hQ6vECNJA5fbEEE1aGt4V+mdefKi5d8iYLGU= Subject key identifier: AD:97:E3:CA:63:24:27:2B:8C:95:DF:1C:A4:98:18:EA:32:9B:31:00 Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73 Certificate issuer: /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73 Certificate serial: 019B4C2801C854D31F32B9B98545D8B5A3AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft Manifest number: 0984 Signing time: Tue 23 Dec 2025 17:00:48 +0000 Manifest this update: Tue 23 Dec 2025 17:00:48 +0000 Manifest next update: Wed 24 Dec 2025 17:00:48 +0000 Files and hashes: 1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: KrrfUAknjWI2CkOaoRnZ+G0ZWe2ylewjKSpFmksdwoQ=) 2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:01:c8:54:d3:1f:32:b9:b9:85:45:d8:b5:a3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73 Validity Not Before: Dec 23 17:00:48 2025 GMT Not After : Dec 24 17:00:48 2025 GMT Subject: CN=ad97e3ca6324272b8c95df1ca49818ea329b3100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:55:1f:53:96:d1:cd:e6:df:e5:1e:12:b7:c9: 0f:0d:b9:dc:8c:15:7e:37:d5:27:f9:d7:34:12:30: 1a:d4:88:95:b7:0c:78:ba:b1:49:a6:ea:87:79:5e: 0b:f1:d1:b3:ce:48:dd:74:7a:bd:b5:25:12:28:ca: f9:35:50:62:c8:c2:cf:ef:f7:86:2a:bb:f4:23:09: 8b:4e:e0:97:4a:92:f5:6b:0d:66:33:d8:20:9b:15: 92:ef:1b:87:43:c2:6f:2d:55:f6:81:4c:9e:17:a9: 36:84:03:73:7a:df:fe:dd:7e:cf:ac:4b:16:fd:13: 6c:4a:27:4f:b4:8e:84:2c:67:1b:92:55:89:e8:39: 99:05:9c:da:ff:d6:e2:de:14:d9:e3:56:fd:ac:73: b1:4d:d5:59:f5:45:c2:2c:b8:6c:8e:90:de:33:68: a0:23:6f:9b:e5:db:0b:64:9c:e4:97:e3:bb:c4:e5: d4:c2:b4:34:94:5f:29:9b:ab:51:3b:cb:01:13:59: c2:25:31:01:a2:79:d5:07:ab:25:1f:ec:ea:03:de: 65:3a:af:52:60:36:c1:d4:aa:d7:6f:c9:3d:97:82: 3f:ce:7c:93:c6:a2:e6:ab:b8:9b:1a:90:0c:1d:fb: 7f:ff:83:ee:33:38:2f:7b:3d:24:84:34:64:79:af: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:E3:CA:63:24:27:2B:8C:95:DF:1C:A4:98:18:EA:32:9B:31:00 X509v3 Authority Key Identifier: keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5f:f6:bd:06:5e:6a:65:63:df:53:d4:d6:d1:32:88:32:bc: 0a:f6:cf:7f:67:51:68:eb:77:fb:e8:54:6c:45:89:ac:94:03: c2:b9:52:07:45:00:f2:2d:79:94:0d:74:bb:e8:06:fa:64:09: c7:f0:d9:d7:f4:02:57:6f:12:ed:59:1f:7e:29:aa:b0:d0:70: e2:6f:77:1d:b9:61:29:d8:24:d3:30:6c:6e:9e:b4:7b:3f:67: 8e:d4:ea:53:c3:e5:d4:c3:99:47:5f:af:52:97:94:97:5b:e8: ad:3c:04:4d:7c:59:7e:d3:00:7d:ab:09:8a:4f:06:36:0c:07: c7:d2:4d:63:06:85:c8:93:60:c0:89:c3:7b:fd:83:3e:7e:00: 5b:e5:90:3f:80:d6:b4:5b:18:0d:08:73:53:10:f4:54:7e:67: 6d:f7:1b:78:30:ef:25:54:06:b8:04:35:a9:b9:10:68:2d:cc: 37:5d:cd:9f:4c:36:f9:2d:ea:8b:4f:f8:f7:67:b4:e0:20:6a: 57:19:74:91:2b:c3:cd:c7:d9:8a:d8:3a:42:e5:47:b6:ca:61: 10:a5:6e:ee:a1:a3:f8:da:2c:58:f4:dc:77:36:f8:36:eb:14: 47:4a:d5:74:4d:97:06:a5:b6:e5:4a:cd:05:c6:d3:5f:a0:9d: ad:9b:2d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKAHIVNMfMrm5hUXYtaOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTBmOTliY2RjY2Q3ZmZlNzJiZDM1YzM0NGJjZDAzMmZm NzRmNzMwHhcNMjUxMjIzMTcwMDQ4WhcNMjUxMjI0MTcwMDQ4WjAzMTEwLwYDVQQD EyhhZDk3ZTNjYTYzMjQyNzJiOGM5NWRmMWNhNDk4MThlYTMyOWIzMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lUfU5bRzebf5R4St8kPDbncjBV+ N9Un+dc0EjAa1IiVtwx4urFJpuqHeV4L8dGzzkjddHq9tSUSKMr5NVBiyMLP7/eG Krv0IwmLTuCXSpL1aw1mM9ggmxWS7xuHQ8JvLVX2gUyeF6k2hANzet/+3X7PrEsW /RNsSidPtI6ELGcbklWJ6DmZBZza/9bi3hTZ41b9rHOxTdVZ9UXCLLhsjpDeM2ig I2+b5dsLZJzkl+O7xOXUwrQ0lF8pm6tRO8sBE1nCJTEBonnVB6slH+zqA95lOq9S YDbB1KrXb8k9l4I/znyTxqLmq7ibGpAMHft//4PuMzgvez0khDRkea9tdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2X48pjJCcrjJXfHKSYGOoymzEAMB8GA1UdIwQY MBaAFDHg+ZvNzNf/5yvTXDRLzQMv909zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUt ZDVkMzdhYTliNjA0LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUtZDVkMzdhYTliNjA0 LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvl/2vQZe amVj31PU1tEyiDK8CvbPf2dRaOt3++hUbEWJrJQDwrlSB0UA8i15lA10u+gG+mQJ x/DZ1/QCV28S7VkffimqsNBw4m93HblhKdgk0zBsbp60ez9njtTqU8Pl1MOZR1+v UpeUl1vorTwETXxZftMAfasJik8GNgwHx9JNYwaFyJNgwInDe/2DPn4AW+WQP4DW tFsYDQhzUxD0VH5nbfcbeDDvJVQGuAQ1qbkQaC3MN13Nn0w2+S3qi0/492e04CBq Vxl0kSvDzcfZitg6QuVHtsphEKVu7qGj+NosWPTcdzb4NusUR0rVdE2XBqW25UrN BcbTX6CdrZstvg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:57:28 2025 by rpki-client