This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft File: MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json) Hash identifier: s/minwXgvP09gg/bhSJTCiHyUtSSWfsZZ3xp32LwaXE= Subject key identifier: AE:F0:ED:4C:5D:88:13:90:F0:71:D4:22:C4:41:B9:A2:F0:4E:DA:BD Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73 Certificate issuer: /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73 Certificate serial: 019B34FB5B412D48EEDEEDF9C094D8404624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft Manifest number: 0978 Signing time: Fri 19 Dec 2025 05:00:46 +0000 Manifest this update: Fri 19 Dec 2025 05:00:46 +0000 Manifest next update: Sat 20 Dec 2025 05:00:46 +0000 Files and hashes: 1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: bkj5G+C/v7fODL9F2tA5VluJC4THh6hEgjuXuSoXSng=) 2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5b:41:2d:48:ee:de:ed:f9:c0:94:d8:40:46:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73 Validity Not Before: Dec 19 05:00:46 2025 GMT Not After : Dec 20 05:00:46 2025 GMT Subject: CN=aef0ed4c5d881390f071d422c441b9a2f04edabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:32:39:93:3d:8d:27:ff:db:85:9d:0d:58: b9:b1:c7:c5:02:29:11:c1:94:7f:6f:85:de:9e:a1: ee:3e:5f:9b:05:96:97:98:53:c0:bc:42:8d:a7:ab: 09:48:ec:cf:b8:88:d0:09:cf:f6:ed:f1:31:7b:54: 70:c0:2d:85:c7:f3:af:24:a5:44:ab:ea:9f:c2:65: 31:87:5a:73:ac:05:05:7b:89:c1:6e:51:64:b3:e1: ec:3a:96:4b:38:54:45:ff:43:fe:bf:8c:c1:ce:90: 52:bb:d6:a9:ca:7f:32:26:d2:56:e9:77:f1:d5:92: ab:91:6f:1a:1b:8e:49:3f:9f:10:a0:b7:27:04:ed: 8a:fd:38:ff:77:19:bb:a7:de:66:d1:4c:61:ce:ff: 66:28:7e:b5:a8:6e:23:09:56:46:81:75:2a:ae:89: 72:4f:44:d1:0a:a8:6d:6b:9e:c0:b9:62:08:60:6c: 36:d3:54:a1:f8:fe:41:55:4d:9a:15:7c:45:d5:8f: 7f:ab:55:81:95:eb:37:87:15:3b:b3:d7:ac:ab:a2: df:d2:52:c0:af:d9:4c:44:60:76:3a:32:99:25:38: 8d:0f:19:87:d7:5c:28:b9:9e:2b:6a:d7:d0:ce:b7: df:6d:8d:29:db:ed:dc:21:29:c8:22:d4:72:e0:e1: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:ED:4C:5D:88:13:90:F0:71:D4:22:C4:41:B9:A2:F0:4E:DA:BD X509v3 Authority Key Identifier: keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:65:b8:eb:f6:c4:55:7e:06:e9:61:34:46:c8:a8:46:7f:5e: 3b:e1:89:35:32:7a:05:ff:8f:f4:04:dd:58:ce:29:04:45:e7: 54:7f:c1:a2:bd:57:cc:d5:e9:2b:2c:47:a4:d0:25:d0:30:38: ef:a0:9e:17:ad:f3:e3:d9:89:49:76:55:3b:f0:ad:9c:7c:76: 8a:52:02:e4:bf:e3:f4:5c:9f:4b:21:25:2b:59:59:08:3d:75: cd:f1:02:7c:85:40:57:8d:94:f0:e8:f0:e3:ad:47:fa:98:84: 33:8c:13:16:cd:0e:d6:63:17:27:2b:78:7a:c6:86:fa:18:be: 7b:7d:2d:ae:65:3e:ae:c2:40:51:0f:00:96:56:42:4e:ea:47: c6:39:70:56:02:47:a7:6d:27:32:11:2a:ee:d4:d8:ff:d0:2f: b9:42:72:8d:83:39:26:8a:b9:ea:85:a6:9f:2f:b4:5c:9a:7b: a8:8a:03:60:87:82:88:24:d0:38:0c:09:8c:d3:9c:b5:0d:7d: cd:15:e9:ee:a9:94:e4:8d:c9:65:15:9c:7d:23:1b:cc:71:6e: a6:52:98:78:72:c6:ca:c2:e6:2f:41:1a:2c:cd:73:c3:c3:eb: 06:22:46:1e:1a:20:d1:7d:84:e3:59:ac:3e:c7:9d:ab:97:80: e6:dd:dc:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1tBLUju3u35wJTYQEYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTBmOTliY2RjY2Q3ZmZlNzJiZDM1YzM0NGJjZDAzMmZm NzRmNzMwHhcNMjUxMjE5MDUwMDQ2WhcNMjUxMjIwMDUwMDQ2WjAzMTEwLwYDVQQD EyhhZWYwZWQ0YzVkODgxMzkwZjA3MWQ0MjJjNDQxYjlhMmYwNGVkYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48yOZM9jSf/24WdDVi5scfFAikR wZR/b4XenqHuPl+bBZaXmFPAvEKNp6sJSOzPuIjQCc/27fExe1RwwC2Fx/OvJKVE q+qfwmUxh1pzrAUFe4nBblFks+HsOpZLOFRF/0P+v4zBzpBSu9apyn8yJtJW6Xfx 1ZKrkW8aG45JP58QoLcnBO2K/Tj/dxm7p95m0Uxhzv9mKH61qG4jCVZGgXUqroly T0TRCqhta57AuWIIYGw201Sh+P5BVU2aFXxF1Y9/q1WBles3hxU7s9esq6Lf0lLA r9lMRGB2OjKZJTiNDxmH11wouZ4ratfQzrffbY0p2+3cISnIItRy4OHDpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7w7UxdiBOQ8HHUIsRBuaLwTtq9MB8GA1UdIwQY MBaAFDHg+ZvNzNf/5yvTXDRLzQMv909zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUt ZDVkMzdhYTliNjA0LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUtZDVkMzdhYTliNjA0 LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGW46/bE VX4G6WE0RsioRn9eO+GJNTJ6Bf+P9ATdWM4pBEXnVH/Bor1XzNXpKyxHpNAl0DA4 76CeF63z49mJSXZVO/CtnHx2ilIC5L/j9FyfSyElK1lZCD11zfECfIVAV42U8Ojw 461H+piEM4wTFs0O1mMXJyt4esaG+hi+e30trmU+rsJAUQ8AllZCTupHxjlwVgJH p20nMhEq7tTY/9AvuUJyjYM5Joq56oWmny+0XJp7qIoDYIeCiCTQOAwJjNOctQ19 zRXp7qmU5I3JZRWcfSMbzHFuplKYeHLGysLmL0EaLM1zw8PrBiJGHhog0X2E41ms Psedq5eA5t3c+w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:14 2025 by rpki-client