This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json) Hash identifier: Ol1BKMeXol72qF8C6pYN0vgHZW8OmsVCAdMDQFZxv1w= Subject key identifier: 64:6C:FD:35:0F:4D:82:CB:27:B1:E3:F1:5F:4B:0E:58:94:9C:F9:51 Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6 Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6 Certificate serial: 019B51BC89902198B570848BBE335D222F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft Manifest number: 07B0 Signing time: Wed 24 Dec 2025 19:01:09 +0000 Manifest this update: Wed 24 Dec 2025 19:01:09 +0000 Manifest next update: Thu 25 Dec 2025 19:01:09 +0000 Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: q66byB8V/EuOfoVr1ZxGREuyndXl5ZZX9w826f3o3C0=) 2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:89:90:21:98:b5:70:84:8b:be:33:5d:22:2f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6 Validity Not Before: Dec 24 19:01:09 2025 GMT Not After : Dec 25 19:01:09 2025 GMT Subject: CN=646cfd350f4d82cb27b1e3f15f4b0e58949cf951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8b:b9:10:c3:cc:1f:10:a5:3f:5a:17:60:0a: 3d:db:88:55:39:08:cf:14:dc:64:17:fa:8e:ea:ab: a0:94:7c:ac:2d:92:2c:ae:c8:48:b4:ff:68:f5:44: 73:da:76:0b:c7:0a:7a:c7:1a:3d:73:5f:37:64:cb: 05:aa:fc:7e:91:e3:22:92:82:d5:68:aa:92:6d:6b: a2:92:3a:b2:38:d6:35:50:a1:c8:65:40:ea:bd:41: 29:ea:0d:0e:ed:6a:6d:15:76:97:9a:4b:31:cc:84: a0:f7:2c:30:94:ed:3e:8c:8d:6e:2f:aa:c6:ea:9c: b4:3a:da:12:b8:04:35:34:68:59:50:31:f3:42:00: e6:0a:23:74:9c:31:53:8c:ac:68:63:59:2e:fa:ee: 35:1f:97:9c:7d:f3:a9:ee:d3:1b:83:97:a1:e5:55: 74:67:8f:ba:65:b7:dc:bd:01:2d:64:6a:92:45:7c: 32:26:24:78:ab:3b:21:96:69:75:a7:4a:4a:7b:32: 07:18:29:cd:e2:74:ce:94:27:96:95:cf:85:af:bb: 71:9d:1e:a4:a4:02:c1:2b:e8:a4:2c:c1:55:2b:e2: aa:1a:d8:91:ba:8b:71:d6:6c:25:f8:dc:81:19:53: d8:e5:de:b4:77:79:83:a1:8b:90:68:78:b2:c1:78: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:FD:35:0F:4D:82:CB:27:B1:E3:F1:5F:4B:0E:58:94:9C:F9:51 X509v3 Authority Key Identifier: keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a0:85:36:3a:fb:80:cd:d3:e6:7c:0a:84:21:fb:f7:81:54: c4:7d:90:b2:db:57:0d:ef:ef:14:e0:17:ef:83:7f:08:f1:b2: 21:5e:fc:9d:e1:fa:a4:38:ac:95:b0:63:55:52:ac:ac:3d:77: 29:cc:2a:c3:a7:a4:97:78:11:4a:ef:09:60:67:dc:a9:4f:c9: c4:b3:8b:1f:c1:81:cc:2e:14:82:da:94:f0:76:35:52:75:1e: 69:c3:f6:ff:2a:59:0c:03:05:a9:2b:74:a6:12:2e:b2:7b:e6: cd:6e:42:e8:d3:30:d7:29:9d:ed:fb:ae:4e:fd:aa:e0:70:1f: 0c:b5:c9:4e:96:af:d2:82:e7:b2:fb:3e:db:05:b7:e2:c8:42: 72:09:42:95:6e:73:be:fa:26:f8:39:f9:2b:58:56:7b:2a:97: 49:79:13:c9:b1:cd:a1:e2:c3:98:67:53:f6:9f:05:1e:a9:4c: 94:eb:2d:3d:a5:d8:7c:2b:da:13:46:d0:a5:33:d8:08:50:6c: 6a:a8:fe:67:b2:ef:be:a6:9e:67:ca:53:5d:08:95:d3:8d:15: 91:6a:c0:15:68:cc:b7:6c:69:8d:ad:65:fc:c8:46:2e:fb:23: 37:db:cb:59:b8:fd:33:e0:8f:2f:1e:ca:03:98:19:53:a7:34: 7f:56:3a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvImQIZi1cISLvjNdIi81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTg3ZDU2NGNjYjg2MTFlMTQwYTdiMmJmMjYwYzRhMjIy YjU5ZDYwHhcNMjUxMjI0MTkwMTA5WhcNMjUxMjI1MTkwMTA5WjAzMTEwLwYDVQQD Eyg2NDZjZmQzNTBmNGQ4MmNiMjdiMWUzZjE1ZjRiMGU1ODk0OWNmOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iu5EMPMHxClP1oXYAo924hVOQjP FNxkF/qO6quglHysLZIsrshItP9o9URz2nYLxwp6xxo9c183ZMsFqvx+keMikoLV aKqSbWuikjqyONY1UKHIZUDqvUEp6g0O7WptFXaXmksxzISg9ywwlO0+jI1uL6rG 6py0OtoSuAQ1NGhZUDHzQgDmCiN0nDFTjKxoY1ku+u41H5ecffOp7tMbg5eh5VV0 Z4+6ZbfcvQEtZGqSRXwyJiR4qzshlml1p0pKezIHGCnN4nTOlCeWlc+Fr7txnR6k pALBK+ikLMFVK+KqGtiRuotx1mwl+NyBGVPY5d60d3mDoYuQaHiywXi/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRs/TUPTYLLJ7Hj8V9LDliUnPlRMB8GA1UdIwQY MBaAFJnofVZMy4YR4UCnsr8mDEoiK1nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAt Y2Y1MWQ4ZTRjMTRiLzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAtY2Y1MWQ4ZTRjMTRi LzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqCFNjr7 gM3T5nwKhCH794FUxH2QsttXDe/vFOAX74N/CPGyIV78neH6pDislbBjVVKsrD13 Kcwqw6ekl3gRSu8JYGfcqU/JxLOLH8GBzC4UgtqU8HY1UnUeacP2/ypZDAMFqSt0 phIusnvmzW5C6NMw1ymd7fuuTv2q4HAfDLXJTpav0oLnsvs+2wW34shCcglClW5z vvom+Dn5K1hWeyqXSXkTybHNoeLDmGdT9p8FHqlMlOstPaXYfCvaE0bQpTPYCFBs aqj+Z7LvvqaeZ8pTXQiV040VkWrAFWjMt2xpja1l/MhGLvsjN9vLWbj9M+CPLx7K A5gZU6c0f1Y6Yg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:20:54 2025 by rpki-client