This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json) Hash identifier: LGG6DRU7mWqsTLgr5G5UAaeAtOtThiJ5ZpLWc4LE+dI= Subject key identifier: 6A:39:67:21:B5:0E:0A:1D:B1:DE:EB:F5:0A:EF:01:69:83:CF:DC:C8 Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019B10EEFD676733B00CBD589FE3D0FE5D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft Manifest number: 176E Signing time: Fri 12 Dec 2025 05:00:56 +0000 Manifest this update: Fri 12 Dec 2025 05:00:56 +0000 Manifest next update: Sat 13 Dec 2025 05:00:56 +0000 Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: NDWcb9VRfj1hflAaMQDJiGV9fvWZpgzxfvdrykSTihE=) 2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:fd:67:67:33:b0:0c:bd:58:9f:e3:d0:fe:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Dec 12 05:00:56 2025 GMT Not After : Dec 13 05:00:56 2025 GMT Subject: CN=6a396721b50e0a1db1deebf50aef016983cfdcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:86:35:e1:56:94:a2:82:78:49:a0:a7:fd: 27:4d:60:2c:70:9b:d7:b1:99:10:1c:f7:2a:ea:b4: 92:f3:ec:72:0d:8e:52:dd:35:66:0d:c6:a1:be:e0: 93:16:e6:9b:ca:55:a4:d2:29:b4:55:23:8b:66:d7: 85:db:2f:e7:d9:69:64:0c:8a:2d:5b:05:12:b1:fa: f0:89:c9:88:bc:5c:5f:7a:5b:b0:5e:f6:c0:a2:5e: d2:b3:c7:e9:07:fc:0b:13:bb:9b:f6:d4:56:29:c8: f2:5e:83:27:91:84:11:7c:2f:b1:22:05:13:a9:33: ca:99:74:57:c3:84:b6:1f:1a:d4:1b:8b:fd:6f:56: b2:3a:51:94:f5:64:87:b0:46:0e:ed:91:00:77:a3: 86:43:b2:ef:10:44:d4:82:b0:05:3f:29:7e:84:71: 30:e8:fe:2a:59:01:c8:ce:bf:0a:36:f7:cb:eb:5c: 4a:30:58:80:1b:d5:95:4c:fd:3d:9f:54:7a:f7:b5: ba:6c:dc:05:3a:90:dc:c6:27:c5:1c:a9:78:85:43: a2:bd:90:a0:c7:09:5a:b7:4f:96:2c:c5:33:88:5c: 1c:db:1e:c5:f9:38:f9:e3:77:39:78:3a:a2:94:4f: 83:61:80:bc:00:99:00:e1:a5:bb:4c:f0:20:bf:5f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:67:21:B5:0E:0A:1D:B1:DE:EB:F5:0A:EF:01:69:83:CF:DC:C8 X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5c:ef:d2:5c:d8:aa:f8:9f:85:9a:4f:b6:c0:09:b6:f6:ab: 94:aa:bd:95:f7:cf:a8:86:08:7a:ce:e5:51:66:aa:1f:b9:44: a5:58:13:b7:c8:9b:a4:cf:f0:d8:af:7e:26:be:5c:82:30:bf: a3:5d:7e:c7:1b:1a:f8:85:22:97:65:2b:70:1f:b6:9f:2b:92: 1b:02:15:3f:5e:cb:94:76:a7:cb:d9:e1:0d:c9:6a:8b:14:44: cd:1d:06:cb:e1:35:76:09:46:8b:a8:87:f1:1d:98:91:1c:60: cd:0f:16:6a:5e:8a:c3:b4:48:c5:fa:10:c9:34:a1:0e:1f:8f: eb:96:b9:25:cc:86:17:e1:48:ad:ae:de:3b:a4:23:80:04:a6: b9:9a:b2:40:ed:4e:e6:a7:3d:a9:43:b6:f8:81:11:e9:fa:00: f5:f0:30:80:c9:66:35:cc:c3:27:1d:c6:f4:03:37:27:11:30: 63:0b:9a:aa:d3:35:72:27:1d:f2:c5:9c:93:93:94:45:1d:8f: c7:78:a9:55:0e:a5:46:c5:f1:c3:28:61:46:88:f9:6f:83:dd: d5:e6:2e:53:77:ac:08:6c:7d:5a:9c:39:c0:e7:a2:67:cb:de: 9d:ad:6d:26:45:22:48:76:ad:89:b6:4a:9c:d7:bd:b0:35:e9: f8:58:84:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7v1nZzOwDL1Yn+PQ/l2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjUxMjEyMDUwMDU2WhcNMjUxMjEzMDUwMDU2WjAzMTEwLwYDVQQD Eyg2YTM5NjcyMWI1MGUwYTFkYjFkZWViZjUwYWVmMDE2OTgzY2ZkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19mGNeFWlKKCeEmgp/0nTWAscJvX sZkQHPcq6rSS8+xyDY5S3TVmDcahvuCTFuabylWk0im0VSOLZteF2y/n2WlkDIot WwUSsfrwicmIvFxfeluwXvbAol7Ss8fpB/wLE7ub9tRWKcjyXoMnkYQRfC+xIgUT qTPKmXRXw4S2HxrUG4v9b1ayOlGU9WSHsEYO7ZEAd6OGQ7LvEETUgrAFPyl+hHEw 6P4qWQHIzr8KNvfL61xKMFiAG9WVTP09n1R697W6bNwFOpDcxifFHKl4hUOivZCg xwlat0+WLMUziFwc2x7F+Tj543c5eDqilE+DYYC8AJkA4aW7TPAgv1/nnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo5ZyG1Dgodsd7r9QrvAWmDz9zIMB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVzv0lzY qvifhZpPtsAJtvarlKq9lffPqIYIes7lUWaqH7lEpVgTt8ibpM/w2K9+Jr5cgjC/ o11+xxsa+IUil2UrcB+2nyuSGwIVP17LlHany9nhDclqixREzR0Gy+E1dglGi6iH 8R2YkRxgzQ8Wal6Kw7RIxfoQyTShDh+P65a5JcyGF+FIra7eO6QjgASmuZqyQO1O 5qc9qUO2+IER6foA9fAwgMlmNczDJx3G9AM3JxEwYwuaqtM1cicd8sWck5OURR2P x3ipVQ6lRsXxwyhhRoj5b4Pd1eYuU3esCGx9Wpw5wOeiZ8vena1tJkUiSHatibZK nNe9sDXp+FiEkw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:40:42 2025 by rpki-client