This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json) Hash identifier: wd3Fsq3tIgzWHiyDnuQTgyyrG/gDiVFOERdmnsYzXYw= Subject key identifier: F4:6B:10:60:FB:A1:25:4B:91:FE:F3:87:17:94:C0:44:68:35:C8:22 Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0 Certificate serial: 019B3CEBB1D38BB494C037B785DA105A3654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft Manifest number: 0986 Signing time: Sat 20 Dec 2025 18:00:37 +0000 Manifest this update: Sat 20 Dec 2025 18:00:37 +0000 Manifest next update: Sun 21 Dec 2025 18:00:37 +0000 Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: O9iBiWLNzDOObi6+DK909K4h/OXTbHZLzw2DlfpnHUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b1:d3:8b:b4:94:c0:37:b7:85:da:10:5a:36:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0 Validity Not Before: Dec 20 18:00:37 2025 GMT Not After : Dec 21 18:00:37 2025 GMT Subject: CN=f46b1060fba1254b91fef3871794c0446835c822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:04:00:62:09:ac:39:98:18:d0:0d:68:51: d1:5e:35:0d:7a:6c:a1:e9:d7:40:67:85:2d:da:32: 26:ae:63:41:14:58:6a:45:06:98:8e:6c:ed:db:f9: a8:b5:79:e3:98:8b:20:6f:74:9d:3d:15:a9:66:66: 3c:20:cf:38:fb:cc:b7:37:7a:89:35:13:32:fd:66: 0d:b6:51:68:97:e6:f7:d9:05:87:a0:f1:44:c6:dc: c0:cb:cc:6d:28:3f:c6:25:86:36:a2:f1:82:92:16: 83:fd:6a:79:58:81:dd:e2:bd:73:e3:39:ab:4a:c0: 6b:1b:af:42:56:e7:32:fa:c2:00:1a:46:46:8e:a7: 15:8e:01:24:a7:0a:a6:75:50:ee:bb:8a:74:24:f6: 5f:8e:19:fe:b7:54:d5:5c:e7:2c:37:fd:4d:62:a7: 31:6d:5e:47:89:fb:85:6b:f6:ae:bc:74:2c:9a:b9: 05:b0:ac:69:90:ed:91:52:2c:41:6e:c7:d1:11:b9: 87:d4:fd:72:78:35:54:0f:51:a7:87:e6:b1:a5:cd: 14:e6:41:fe:95:96:63:ef:52:e4:56:c2:cf:c2:59: d9:d2:97:a6:99:e8:0f:33:a9:9d:aa:9a:10:0f:30: 3d:f2:eb:eb:57:8b:5b:66:c3:88:37:6e:b5:ef:72: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6B:10:60:FB:A1:25:4B:91:FE:F3:87:17:94:C0:44:68:35:C8:22 X509v3 Authority Key Identifier: keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6c:0c:62:49:9c:91:81:03:c6:dd:c8:57:69:d4:82:e7:bd: 84:8e:47:80:86:44:b9:ed:75:16:18:fc:7c:a4:83:da:80:e8: 86:9c:53:c7:74:bb:4f:7d:1b:71:98:38:76:2b:85:62:60:3e: 7e:98:40:6f:95:42:c1:60:b2:20:48:bf:a3:77:5a:4d:19:62: 9e:8e:fe:10:ec:08:bd:8f:14:ac:95:7b:49:d0:33:8b:b2:69: bf:1b:92:8c:93:2b:3e:1b:76:80:19:98:2e:f9:d3:f8:6a:a2: 40:59:7a:e1:9a:61:36:32:64:f5:75:36:2e:cf:e1:ff:8e:40: ed:04:99:b2:41:bf:06:fc:8f:ed:77:8e:d2:76:3e:69:87:c6: 58:b9:99:00:aa:ea:b3:91:de:e2:c3:15:32:27:ba:04:22:23: 24:26:d0:fb:e4:97:b6:d6:30:ce:b5:f6:78:99:ec:40:57:ca: dc:94:59:88:a6:85:08:2e:04:09:5d:89:dd:2d:62:d0:b5:93: 23:e6:ee:cd:10:cc:ee:d2:fd:1c:e5:92:f3:6e:0d:4a:94:84: e9:b3:19:a6:3e:82:48:0d:8e:b8:f7:cd:1c:0e:19:c8:3d:00: a4:42:72:c4:a6:d3:9d:0d:c6:3e:bd:52:45:cd:03:09:f9:39: 5b:eb:20:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867HTi7SUwDe3hdoQWjZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYzEzYWFhYTFlNGU4NGViMGMyNWNiOTUwZTI2OWZmM2Rk YmNlZTAwHhcNMjUxMjIwMTgwMDM3WhcNMjUxMjIxMTgwMDM3WjAzMTEwLwYDVQQD EyhmNDZiMTA2MGZiYTEyNTRiOTFmZWYzODcxNzk0YzA0NDY4MzVjODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY8EAGIJrDmYGNANaFHRXjUNemyh 6ddAZ4Ut2jImrmNBFFhqRQaYjmzt2/motXnjmIsgb3SdPRWpZmY8IM84+8y3N3qJ NRMy/WYNtlFol+b32QWHoPFExtzAy8xtKD/GJYY2ovGCkhaD/Wp5WIHd4r1z4zmr SsBrG69CVucy+sIAGkZGjqcVjgEkpwqmdVDuu4p0JPZfjhn+t1TVXOcsN/1NYqcx bV5HifuFa/auvHQsmrkFsKxpkO2RUixBbsfREbmH1P1yeDVUD1Gnh+axpc0U5kH+ lZZj71LkVsLPwlnZ0pemmegPM6mdqpoQDzA98uvrV4tbZsOIN26173IDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRrEGD7oSVLkf7zhxeUwERoNcgiMB8GA1UdIwQY MBaAFPzBOqqh5OhOsMJcuVDiaf89287gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMt M2ZmNjk1MmM1ZWU5LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMtM2ZmNjk1MmM1ZWU5 LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGwMYkmc kYEDxt3IV2nUgue9hI5HgIZEue11Fhj8fKSD2oDohpxTx3S7T30bcZg4diuFYmA+ fphAb5VCwWCyIEi/o3daTRlino7+EOwIvY8UrJV7SdAzi7JpvxuSjJMrPht2gBmY LvnT+GqiQFl64ZphNjJk9XU2Ls/h/45A7QSZskG/BvyP7XeO0nY+aYfGWLmZAKrq s5He4sMVMie6BCIjJCbQ++SXttYwzrX2eJnsQFfK3JRZiKaFCC4ECV2J3S1i0LWT I+buzRDM7tL9HOWS824NSpSE6bMZpj6CSA2OuPfNHA4ZyD0ApEJyxKbTnQ3GPr1S Rc0DCfk5W+sgVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:06 2025 by rpki-client