This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          ORLS4YYzCof2cL6wOJJSW60l++1M2qdqR0rJnkVnInY=
Subject key identifier:   25:0C:BE:DE:07:7D:83:AB:AD:4F:38:A5:22:85:42:97:4B:19:2D:E5
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019B3946B7B8BA4F7F22CF3791E94483E8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          0588
Signing time:             Sat 20 Dec 2025 01:01:34 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:34 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:34 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: +ePYIyKHlV3qTjy5TfMLeW0WBw7lstskASl0JgP1Z9Q=)
                          2: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (hash: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:b7:b8:ba:4f:7f:22:cf:37:91:e9:44:83:e8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Dec 20 01:01:34 2025 GMT
            Not After : Dec 21 01:01:34 2025 GMT
        Subject: CN=250cbede077d83abad4f38a5228542974b192de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:8c:3e:b2:e5:1b:c2:e4:f8:32:96:75:43:
                    b5:5f:34:6e:4a:e1:e6:d1:40:20:ac:4f:6f:ce:5d:
                    b6:97:9a:3f:ee:1e:e9:70:f1:bb:6b:a2:b5:78:1b:
                    64:73:c6:69:9d:d3:47:03:ca:7b:5d:78:bf:78:c0:
                    ea:68:e4:f3:84:50:fc:4b:cf:82:b6:7a:3f:09:7d:
                    06:3a:45:03:7c:d0:9d:38:40:e3:33:5c:ac:f9:51:
                    97:f1:7d:b3:4b:d5:c7:85:15:e0:3a:d6:c3:2b:4f:
                    dd:1c:a1:08:4c:e2:4b:b3:f2:1a:56:3d:ae:80:2a:
                    52:13:da:cd:e8:48:6e:69:2b:35:27:75:b3:c9:b2:
                    09:9b:80:c7:32:62:79:79:e7:ed:1f:37:99:4d:69:
                    c4:ab:e6:6b:a4:37:2c:2c:2a:9b:c1:b7:ee:9f:ce:
                    65:83:66:3d:6a:c1:30:37:b1:e9:dd:36:5d:d0:4d:
                    4b:7f:fe:15:22:93:e5:2b:d8:77:24:b6:4b:b8:fc:
                    fc:a1:e7:47:16:21:60:36:a2:ee:ef:c7:02:49:03:
                    b8:c9:59:e6:1a:e1:46:bc:ba:eb:9a:27:43:07:86:
                    2e:b2:d1:37:fc:d3:8b:08:bd:38:bb:e8:e4:ef:53:
                    39:83:d9:99:c1:36:c4:b4:66:87:56:c7:cf:3a:c4:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:BE:DE:07:7D:83:AB:AD:4F:38:A5:22:85:42:97:4B:19:2D:E5
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:2a:d3:e6:94:d0:55:45:a3:01:21:ce:c8:54:e6:bf:3b:
         ed:93:3f:ab:64:89:08:54:42:96:0e:b2:13:1f:8e:e7:21:25:
         16:cc:c6:69:12:9a:7c:cd:a7:0e:c1:f5:80:94:ee:f3:b8:8e:
         48:ea:25:ba:dc:4e:5e:e1:75:29:ec:02:50:2f:a0:3c:ac:d0:
         32:86:7b:36:53:8b:42:02:d1:cc:20:23:6b:6c:6b:75:fd:79:
         65:e5:97:b5:84:22:bf:27:fd:77:f4:c8:fc:b9:84:2c:7d:21:
         45:1b:39:8b:14:5d:85:47:77:e0:8e:c2:4e:83:d8:93:e2:7c:
         b6:29:65:9d:3f:27:0b:45:bb:79:3f:b0:44:3c:41:cb:10:c9:
         58:8a:e5:b6:92:c4:38:14:bb:b0:3d:c3:ab:a4:f6:bd:04:f3:
         85:9b:a6:25:bd:dc:d0:c2:f6:22:e3:59:b8:93:94:41:51:bb:
         a8:59:7b:45:9f:9a:50:f3:9c:dc:39:91:f8:d4:4f:45:fe:c3:
         ef:44:9b:a9:88:f6:01:27:f5:34:e2:4b:8c:80:3b:1e:dc:bf:
         c2:fd:a7:27:c5:b5:f6:89:c5:79:84:99:62:17:17:a3:64:89:
         1e:b6:0b:f8:9e:52:8c:d7:3e:83:3c:6f:ee:d2:12:4d:e5:a2:
         2f:c0:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:53:03 2025 by rpki-client