This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json) Hash identifier: eGg2rhMg9tXebuTEZ35dpj2toGQEhffByGtOmb2xoiw= Subject key identifier: 08:C7:73:31:47:0F:BD:CB:03:4D:F5:84:BB:57:2D:D4:38:16:42:29 Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f Certificate serial: 019B32D6FCFEC4382DCB35B6AE50F6525166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft Manifest number: 0FC5 Signing time: Thu 18 Dec 2025 19:01:48 +0000 Manifest this update: Thu 18 Dec 2025 19:01:48 +0000 Manifest next update: Fri 19 Dec 2025 19:01:48 +0000 Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: hV/jb7/RQqifsnGjIT7ryWUMw1/xiErGAlRlTlxXm7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:fc:fe:c4:38:2d:cb:35:b6:ae:50:f6:52:51:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f Validity Not Before: Dec 18 19:01:48 2025 GMT Not After : Dec 19 19:01:48 2025 GMT Subject: CN=08c77331470fbdcb034df584bb572dd438164229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:b2:43:e4:07:f2:50:cd:54:42:28:7f:87: 4a:e2:a4:9a:62:92:58:94:9a:5b:e8:bf:d3:7c:f0: d6:cf:d8:77:85:3e:c1:ec:25:b0:0e:27:2f:6b:00: 15:08:1f:dd:6a:40:97:b2:9e:12:f4:53:a6:d4:82: 8e:27:e0:1d:45:83:82:23:23:87:31:4d:81:cc:9b: ed:b7:0a:43:55:93:c9:fc:07:c0:2c:42:b6:db:c2: ae:d9:21:d3:25:93:9c:b8:98:7c:c8:02:a0:38:d9: 52:47:d2:6e:f4:24:69:6e:1f:5b:b5:1c:fd:01:50: bd:7c:e9:42:9c:71:3e:ba:b5:36:ab:b0:cf:2c:ba: 49:3c:6f:28:25:04:71:b1:1b:2f:b4:a5:55:4d:37: d5:93:bd:6c:ae:77:a9:8d:03:4d:5b:b2:7a:78:d6: ee:88:8a:9d:a9:e8:c1:90:8e:0e:2d:9b:56:cc:93: 48:db:66:fb:47:09:8c:a4:91:6e:04:c0:e0:29:f5: e5:11:b4:c5:34:b1:5a:ec:f4:57:d7:51:4d:bf:18: 08:c6:e1:b3:28:f7:5f:a8:14:2e:65:08:16:34:9e: 39:24:b5:df:45:68:6d:3b:54:e4:55:15:cc:c1:3c: 69:67:35:dc:01:a8:0e:8b:5c:44:9c:61:b6:97:e6: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:73:31:47:0F:BD:CB:03:4D:F5:84:BB:57:2D:D4:38:16:42:29 X509v3 Authority Key Identifier: keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:36:a7:cb:4d:b3:4d:e7:9b:cf:a8:11:02:c7:be:84:2f: b4:2e:f6:ad:91:ca:91:38:ef:0e:00:95:5d:1c:98:6b:64:fd: 8a:cd:69:70:da:c9:22:9a:fa:ff:b5:7b:68:bb:db:04:da:05: 4f:7f:06:83:4d:21:4e:26:11:18:57:39:d7:50:64:a8:b0:db: 50:f1:b3:ae:ff:f0:ca:81:66:76:0b:9c:0d:a3:61:59:1f:f4: eb:81:d4:aa:2e:4c:09:a2:db:6a:ef:e9:9e:f3:34:7c:ef:e1: 00:73:70:d1:55:20:74:91:ff:7b:1f:07:80:61:0b:7c:8a:96: 18:7e:04:78:fa:ef:e7:1a:17:db:0d:fa:ae:8f:ed:a4:fe:79: e9:41:df:96:2d:12:a1:93:c2:68:ce:70:96:fd:50:35:94:0f: 3a:47:15:0c:b8:0e:50:7a:1e:98:a1:86:81:39:57:11:a0:13: e5:b6:e4:4a:e4:0d:0a:fa:c8:5d:e0:a4:e5:c5:fe:b2:e2:76: 8b:fe:4b:b8:ca:78:5d:d3:e4:e2:f6:e1:3b:6f:44:72:f5:5f: a4:18:fc:e0:42:cc:73:54:bd:55:61:5f:87:7c:06:2f:96:b6: 40:f5:59:b4:f5:14:eb:f4:0d:db:44:a6:a2:2c:ea:30:c5:63: 90:29:8c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1vz+xDgtyzW2rlD2UlFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTI4OGY3N2M5OTg1NjRmMjYzNGU3YTJlMWQwMDlkZjJl Zjg4N2YwHhcNMjUxMjE4MTkwMTQ4WhcNMjUxMjE5MTkwMTQ4WjAzMTEwLwYDVQQD EygwOGM3NzMzMTQ3MGZiZGNiMDM0ZGY1ODRiYjU3MmRkNDM4MTY0MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK2yQ+QH8lDNVEIof4dK4qSaYpJY lJpb6L/TfPDWz9h3hT7B7CWwDicvawAVCB/dakCXsp4S9FOm1IKOJ+AdRYOCIyOH MU2BzJvttwpDVZPJ/AfALEK228Ku2SHTJZOcuJh8yAKgONlSR9Ju9CRpbh9btRz9 AVC9fOlCnHE+urU2q7DPLLpJPG8oJQRxsRsvtKVVTTfVk71srnepjQNNW7J6eNbu iIqdqejBkI4OLZtWzJNI22b7RwmMpJFuBMDgKfXlEbTFNLFa7PRX11FNvxgIxuGz KPdfqBQuZQgWNJ45JLXfRWhtO1TkVRXMwTxpZzXcAagOi1xEnGG2l+ZtvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjHczFHD73LA031hLtXLdQ4FkIpMB8GA1UdIwQY MBaAFJniiPd8mYVk8mNOei4dAJ3y74h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEt MGY2MGI4NTlhOWYxLzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEtMGY2MGI4NTlhOWYx LzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeo2p8tN s03nm8+oEQLHvoQvtC72rZHKkTjvDgCVXRyYa2T9is1pcNrJIpr6/7V7aLvbBNoF T38Gg00hTiYRGFc511BkqLDbUPGzrv/wyoFmdgucDaNhWR/064HUqi5MCaLbau/p nvM0fO/hAHNw0VUgdJH/ex8HgGELfIqWGH4EePrv5xoX2w36ro/tpP556UHfli0S oZPCaM5wlv1QNZQPOkcVDLgOUHoemKGGgTlXEaAT5bbkSuQNCvrIXeCk5cX+suJ2 i/5LuMp4XdPk4vbhO29EcvVfpBj84ELMc1S9VWFfh3wGL5a2QPVZtPUU6/QN20Sm oizqMMVjkCmMtQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:31 2025 by rpki-client