This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json) Hash identifier: CXoqcXDDuKJ15thrfjpNNJRa2BHbH+KH0vfzNnfP3Z4= Subject key identifier: 07:20:4D:A4:87:B0:DB:64:17:B8:6B:E5:18:AC:48:AD:2A:C5:3F:1B Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019B378EAB12A7E8D45BF5BDAFA8ED3A7F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 17:00:55 +0000 Manifest this update: Fri 19 Dec 2025 17:00:55 +0000 Manifest next update: Sat 20 Dec 2025 17:00:55 +0000 Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: otd5sHxBe97kGVk8D50YWXzFfs7bvZyea1PAwjtspks=) 2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:ab:12:a7:e8:d4:5b:f5:bd:af:a8:ed:3a:7f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Dec 19 17:00:55 2025 GMT Not After : Dec 20 17:00:55 2025 GMT Subject: CN=07204da487b0db6417b86be518ac48ad2ac53f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:f3:d8:65:45:b3:14:ab:79:b2:a5:55:da: bb:35:46:f4:1f:dd:4f:f9:01:f7:26:a7:7e:b4:7d: fe:41:7a:44:f3:7b:0d:17:e7:ad:13:c3:0d:9b:b6: e3:2c:7e:b3:00:aa:c1:d9:43:3b:e0:ee:95:7c:f2: 44:b3:81:56:2d:53:22:9c:b4:c4:00:16:ed:05:94: 65:d9:57:61:3e:ec:7d:12:78:59:3b:89:c1:77:c0: ea:32:84:9a:27:96:b5:6c:89:4e:96:89:1b:31:82: 09:49:3d:a7:cc:39:83:8a:d3:56:45:15:24:e4:b8: 59:24:15:09:df:09:e8:6b:0b:da:8c:df:8f:86:c4: 07:d0:07:b1:0d:c9:7e:ae:61:37:ac:b7:6c:e4:6e: 30:09:bd:b2:a4:4d:56:17:2e:2b:a9:9b:18:0c:dd: e8:f4:ce:06:e5:ba:47:16:61:fc:d6:74:59:cb:c3: 30:79:c3:20:e6:ce:74:89:9f:d6:7d:c6:21:0c:f7: 54:3d:ac:02:ab:77:8c:26:ff:7c:39:04:ef:35:db: e4:18:8e:51:39:e8:2b:01:da:af:1d:ac:9b:5c:82: 92:82:d7:02:5f:18:aa:64:5c:5d:98:a3:9b:31:d3: e5:91:e7:81:37:13:fb:39:d4:ab:64:ce:c6:94:3e: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:4D:A4:87:B0:DB:64:17:B8:6B:E5:18:AC:48:AD:2A:C5:3F:1B X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:89:ac:ca:13:ef:1d:d1:ab:23:3c:c4:11:75:8a:4f:2a:b6: fc:32:ea:45:c3:f9:9c:16:0b:e4:10:f3:5e:d7:89:10:f8:00: 0f:03:a3:d4:3f:df:d2:16:9e:4b:59:b1:94:2f:24:f6:a6:97: 73:45:fc:4f:5c:8c:f9:36:98:ed:28:b0:8e:1e:91:e0:c0:5a: de:23:f5:63:8d:03:f1:4d:9a:15:88:f2:df:97:a2:33:f1:45: 75:2c:53:7a:c6:5f:43:aa:ac:ee:12:4a:9b:fd:19:67:d7:d1: 32:ee:5a:f8:c0:53:83:57:30:94:e4:0a:bb:81:71:d1:59:c6: af:f2:f5:32:43:ec:a0:90:e7:ea:20:8f:b0:78:ca:90:f2:0e: c2:ab:c9:dd:66:3c:cc:61:f6:15:e6:89:dc:1b:82:a7:3b:05: 85:5a:71:ac:77:8d:7a:6b:a4:f0:d5:bc:a7:11:9f:30:b1:dd: 2a:bb:07:f1:58:6e:b0:4b:a2:59:74:cf:40:c8:ce:f3:fe:b5: 02:6e:9d:bb:3f:92:11:10:70:4d:f4:c3:f1:00:4d:18:b3:c5: b5:94:40:dc:bb:1e:43:57:14:88:88:b7:fb:cd:5b:0e:c5:93: 4c:31:b9:63:a9:2d:da:3d:e6:90:77:51:52:31:32:de:bd:91: 46:37:52:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jqsSp+jUW/W9r6jtOn9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjUxMjE5MTcwMDU1WhcNMjUxMjIwMTcwMDU1WjAzMTEwLwYDVQQD EygwNzIwNGRhNDg3YjBkYjY0MTdiODZiZTUxOGFjNDhhZDJhYzUzZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOXz2GVFsxSrebKlVdq7NUb0H91P +QH3Jqd+tH3+QXpE83sNF+etE8MNm7bjLH6zAKrB2UM74O6VfPJEs4FWLVMinLTE ABbtBZRl2VdhPux9EnhZO4nBd8DqMoSaJ5a1bIlOlokbMYIJST2nzDmDitNWRRUk 5LhZJBUJ3wnoawvajN+PhsQH0AexDcl+rmE3rLds5G4wCb2ypE1WFy4rqZsYDN3o 9M4G5bpHFmH81nRZy8MwecMg5s50iZ/WfcYhDPdUPawCq3eMJv98OQTvNdvkGI5R OegrAdqvHaybXIKSgtcCXxiqZFxdmKObMdPlkeeBNxP7OdSrZM7GlD4KTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcgTaSHsNtkF7hr5RisSK0qxT8bMB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARomsyhPv HdGrIzzEEXWKTyq2/DLqRcP5nBYL5BDzXteJEPgADwOj1D/f0haeS1mxlC8k9qaX c0X8T1yM+TaY7Siwjh6R4MBa3iP1Y40D8U2aFYjy35eiM/FFdSxTesZfQ6qs7hJK m/0ZZ9fRMu5a+MBTg1cwlOQKu4Fx0VnGr/L1MkPsoJDn6iCPsHjKkPIOwqvJ3WY8 zGH2FeaJ3BuCpzsFhVpxrHeNemuk8NW8pxGfMLHdKrsH8VhusEuiWXTPQMjO8/61 Am6duz+SERBwTfTD8QBNGLPFtZRA3LseQ1cUiIi3+81bDsWTTDG5Y6kt2j3mkHdR UjEy3r2RRjdSRg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:21 2025 by rpki-client