This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft File: pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json) Hash identifier: If3X2UgVWxMr+YAiSzAeTvqwALhYp9IkL/p6OzSFc/A= Subject key identifier: A9:F9:1A:F0:B9:1B:C8:3F:9D:14:DC:00:C0:DF:F1:24:84:98:E6:45 Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Certificate serial: 019B54186427E17E7C19B82B85BCAA2074FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft Manifest number: 15C8 Signing time: Thu 25 Dec 2025 06:00:43 +0000 Manifest this update: Thu 25 Dec 2025 06:00:43 +0000 Manifest next update: Fri 26 Dec 2025 06:00:43 +0000 Files and hashes: 1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: qpMi+rMSBb5M6EnPOfqO9uOjYYGM1HKvkk/CE3j8igM=) 2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:64:27:e1:7e:7c:19:b8:2b:85:bc:aa:20:74:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Validity Not Before: Dec 25 06:00:43 2025 GMT Not After : Dec 26 06:00:43 2025 GMT Subject: CN=a9f91af0b91bc83f9d14dc00c0dff1248498e645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:68:d5:ba:60:50:9c:20:ef:53:e1:5d:03:b2: c7:65:46:cb:78:53:a3:3b:79:78:24:15:ab:b5:dd: 23:5e:ca:46:9c:6f:0f:7f:d0:a3:17:3f:1c:30:a7: 1e:fe:39:2f:ee:96:f9:a2:54:d3:39:58:43:f1:8f: b3:86:5d:3f:ff:00:82:81:40:ea:8a:36:c4:aa:a4: b5:06:e4:9c:d1:99:2a:d7:e4:37:47:b0:d4:06:5a: 48:1d:06:49:ed:cb:bf:7f:1a:d1:78:32:b4:a5:ee: 66:5a:63:aa:a4:0b:23:c3:5d:5e:31:d8:d2:1a:ce: 3d:26:8f:c3:ed:f0:17:38:c4:3d:9e:07:b5:f0:a3: fc:ed:fd:2b:ba:f1:a4:58:74:d0:7c:90:12:d8:c3: 05:0b:5e:ab:e0:23:4b:a8:f5:32:bf:94:6d:a4:71: 0e:c0:b7:47:83:40:05:da:d2:bc:4e:eb:1e:4f:56: c2:45:09:b8:de:35:9b:0d:db:75:9e:65:35:de:34: d8:40:d6:c7:dc:b5:cd:23:34:d8:d7:4b:56:15:2a: bb:ba:5b:51:77:37:ef:7b:10:c3:46:8a:5d:ed:09: 7f:db:df:a1:bc:e7:da:02:7a:aa:99:28:d4:d0:81: 3f:6b:30:61:c6:ec:c0:f3:ca:e5:48:39:d3:59:ba: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:1A:F0:B9:1B:C8:3F:9D:14:DC:00:C0:DF:F1:24:84:98:E6:45 X509v3 Authority Key Identifier: keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4b:07:4b:60:06:7a:90:e8:52:6c:a7:d9:10:91:ce:9f:3d: c1:72:13:90:9a:fe:96:1f:13:41:ce:d6:0e:13:11:a4:c7:b7: 72:59:1d:49:d2:2a:a1:82:56:31:70:98:b5:fb:cc:80:51:e9: 39:d1:d5:27:e7:7c:cb:9c:84:49:bc:ea:c2:86:3d:53:dd:a5: ae:6f:d9:59:d3:c5:b5:7d:70:79:26:f5:ac:e7:5f:13:d0:e2: 14:7f:e1:b2:e6:76:14:22:fb:0e:5e:74:ab:51:87:98:6a:74: da:3c:cf:e8:e8:43:40:cd:24:d1:fb:a8:e4:f6:99:56:d6:95: f4:f3:7c:27:95:77:a3:4b:c3:6e:99:d0:90:83:43:d1:53:0a: be:9c:88:0b:d4:21:e2:4b:c3:1e:60:b3:ac:ee:f9:1a:9d:34: f4:13:23:aa:4d:13:ea:9e:7d:26:70:1e:0b:7a:b7:f1:9f:67: 9a:63:48:1e:39:9f:8c:01:84:68:41:e2:3e:92:30:cb:95:08: 62:92:ee:bb:8d:f2:93:80:59:5d:cf:db:86:b2:09:4a:c4:c4: b6:bf:31:50:90:b0:9e:85:e4:5c:a8:33:78:29:e8:cf:c5:cf: 04:e7:fb:08:93:be:1a:09:02:ca:15:26:23:05:a8:cf:4e:bb: 76:69:47:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGGQn4X58GbgrhbyqIHT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzdiZmU0MTU2MDRmNjEzNmNlYWEyMTYzNTY0OTViZjZk NWNjNDEwHhcNMjUxMjI1MDYwMDQzWhcNMjUxMjI2MDYwMDQzWjAzMTEwLwYDVQQD EyhhOWY5MWFmMGI5MWJjODNmOWQxNGRjMDBjMGRmZjEyNDg0OThlNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72jVumBQnCDvU+FdA7LHZUbLeFOj O3l4JBWrtd0jXspGnG8Pf9CjFz8cMKce/jkv7pb5olTTOVhD8Y+zhl0//wCCgUDq ijbEqqS1BuSc0Zkq1+Q3R7DUBlpIHQZJ7cu/fxrReDK0pe5mWmOqpAsjw11eMdjS Gs49Jo/D7fAXOMQ9nge18KP87f0ruvGkWHTQfJAS2MMFC16r4CNLqPUyv5RtpHEO wLdHg0AF2tK8TuseT1bCRQm43jWbDdt1nmU13jTYQNbH3LXNIzTY10tWFSq7ultR dzfvexDDRopd7Ql/29+hvOfaAnqqmSjU0IE/azBhxuzA88rlSDnTWbrDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn5GvC5G8g/nRTcAMDf8SSEmOZFMB8GA1UdIwQY MBaAFKTHv+QVYE9hNs6qIWNWSVv21cxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMt YzliMjIwYTRkNmYwLzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMtYzliMjIwYTRkNmYw LzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0sHS2AG epDoUmyn2RCRzp89wXITkJr+lh8TQc7WDhMRpMe3clkdSdIqoYJWMXCYtfvMgFHp OdHVJ+d8y5yESbzqwoY9U92lrm/ZWdPFtX1weSb1rOdfE9DiFH/hsuZ2FCL7Dl50 q1GHmGp02jzP6OhDQM0k0fuo5PaZVtaV9PN8J5V3o0vDbpnQkIND0VMKvpyIC9Qh 4kvDHmCzrO75Gp009BMjqk0T6p59JnAeC3q38Z9nmmNIHjmfjAGEaEHiPpIwy5UI YpLuu43yk4BZXc/bhrIJSsTEtr8xUJCwnoXkXKgzeCnoz8XPBOf7CJO+GgkCyhUm IwWoz067dmlH+A== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:07 2025 by rpki-client