This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json) Hash identifier: e5lSBBLp+0/Zz9RTApSE7MFiMnW/Fbj5PrHrFmbfSSc= Subject key identifier: F2:A0:07:E2:F7:C1:84:BE:5B:31:64:39:32:8C:EC:81:1C:F1:FD:77 Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019B3D59D6009061BBB336071C03D67C7473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 20:00:56 +0000 Manifest this update: Sat 20 Dec 2025 20:00:56 +0000 Manifest next update: Sun 21 Dec 2025 20:00:56 +0000 Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: NI7sGfWOvzQQMSeUIqECgdLxEANyAu+9MAUV17aaivQ=) 2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d6:00:90:61:bb:b3:36:07:1c:03:d6:7c:74:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Dec 20 20:00:56 2025 GMT Not After : Dec 21 20:00:56 2025 GMT Subject: CN=f2a007e2f7c184be5b316439328cec811cf1fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:a5:2c:f9:be:ca:7d:49:fb:d6:f4:df:e1: 6f:15:33:de:7c:12:fa:d6:87:ae:50:e5:55:aa:82: 3b:d3:ed:f4:8f:c4:4f:ce:a5:69:30:e2:0f:af:4f: 7e:ae:a7:34:7b:e4:59:33:a7:90:b1:49:c4:9e:3b: 13:87:ac:53:98:09:cf:a3:32:bd:fc:65:bb:c7:64: a7:ca:ac:8f:8c:59:2e:06:e0:4f:70:c1:42:a8:da: 91:8b:d6:1b:88:69:91:e9:94:1c:ae:9f:5d:54:73: 39:be:2b:57:2f:e5:79:07:47:23:77:a8:20:d7:37: 28:74:27:be:d6:55:55:89:2e:89:83:00:8a:4e:f1: 13:ee:70:7c:09:64:1b:23:ac:98:40:78:9a:cb:8a: 83:89:7b:b1:17:a2:2a:1a:1a:8d:d2:10:8a:fe:4e: 68:75:69:38:df:df:c1:df:f2:04:08:70:b3:26:c1: 82:62:e6:1a:1e:73:a4:9e:68:3c:3a:55:77:62:bc: 23:9b:cd:5d:dd:98:09:fb:ff:79:88:93:f5:e3:8c: 6c:93:83:71:12:a2:ba:a1:d4:ee:eb:99:b6:67:68: c0:76:f8:b0:60:c6:8e:a8:5b:9a:02:78:37:3d:5a: 9d:99:89:47:98:5e:6e:11:34:bd:66:8e:43:0f:96: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:07:E2:F7:C1:84:BE:5B:31:64:39:32:8C:EC:81:1C:F1:FD:77 X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b1:f4:c8:8f:9b:ba:93:b0:a5:c7:7e:14:37:72:ab:63:56: 39:f0:f4:90:8c:ac:af:64:8e:56:8f:42:d7:e7:36:c9:f5:c9: 75:cc:0a:f1:22:a4:05:d0:52:b3:3a:d4:8c:31:f6:9c:35:fc: ab:b7:7a:6c:7a:fb:6c:98:45:de:ce:5d:40:2e:1a:1c:ee:74: ca:96:47:03:7a:79:53:43:d0:8f:76:b2:43:fe:47:0b:5e:3c: a1:64:d6:a7:da:25:e0:2f:a2:a7:61:a8:b4:7c:8e:fe:db:e1: 39:32:1f:28:d1:e4:01:cc:c0:84:aa:2d:a4:0c:c0:9c:77:ed: 18:77:4e:fc:0c:3c:f8:e9:48:f2:bf:4f:e7:f7:83:a4:0f:b2: 5f:ed:31:7c:ce:f4:50:55:eb:df:82:1e:04:4e:e8:1c:0d:eb: 18:09:02:a8:b4:cc:7f:f9:bf:39:87:a8:83:28:c6:d5:73:05: 26:d4:4c:4b:8f:3f:9a:14:ab:16:e5:3c:bd:7f:3f:9e:06:75: 35:40:7f:84:0f:68:d2:9e:96:d3:c7:4c:52:04:26:67:67:a1: 0e:bf:0a:5a:d1:85:15:7e:78:4c:30:6d:5a:f4:b6:e8:34:6c: 08:1e:37:22:29:c2:80:9e:64:53:f4:f3:ae:1c:91:24:d2:ff: d4:1d:7c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdYAkGG7szYHHAPWfHRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjUxMjIwMjAwMDU2WhcNMjUxMjIxMjAwMDU2WjAzMTEwLwYDVQQD EyhmMmEwMDdlMmY3YzE4NGJlNWIzMTY0MzkzMjhjZWM4MTFjZjFmZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uWlLPm+yn1J+9b03+FvFTPefBL6 1oeuUOVVqoI70+30j8RPzqVpMOIPr09+rqc0e+RZM6eQsUnEnjsTh6xTmAnPozK9 /GW7x2SnyqyPjFkuBuBPcMFCqNqRi9YbiGmR6ZQcrp9dVHM5vitXL+V5B0cjd6gg 1zcodCe+1lVViS6JgwCKTvET7nB8CWQbI6yYQHiay4qDiXuxF6IqGhqN0hCK/k5o dWk439/B3/IECHCzJsGCYuYaHnOknmg8OlV3Yrwjm81d3ZgJ+/95iJP144xsk4Nx EqK6odTu65m2Z2jAdviwYMaOqFuaAng3PVqdmYlHmF5uETS9Zo5DD5YKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKgB+L3wYS+WzFkOTKM7IEc8f13MB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbH0yI+b upOwpcd+FDdyq2NWOfD0kIysr2SOVo9C1+c2yfXJdcwK8SKkBdBSszrUjDH2nDX8 q7d6bHr7bJhF3s5dQC4aHO50ypZHA3p5U0PQj3ayQ/5HC148oWTWp9ol4C+ip2Go tHyO/tvhOTIfKNHkAczAhKotpAzAnHftGHdO/Aw8+OlI8r9P5/eDpA+yX+0xfM70 UFXr34IeBE7oHA3rGAkCqLTMf/m/OYeogyjG1XMFJtRMS48/mhSrFuU8vX8/ngZ1 NUB/hA9o0p6W08dMUgQmZ2ehDr8KWtGFFX54TDBtWvS26DRsCB43IinCgJ5kU/Tz rhyRJNL/1B18yA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:49 2025 by rpki-client