This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft File: meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json) Hash identifier: Eo/GfUesM+brrzJ18DdOcerybw2GnIynM6HgRVglerI= Subject key identifier: 60:E5:52:1D:12:79:E7:FF:97:27:82:E1:76:9A:7B:C9:27:19:72:4C Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23 Certificate issuer: /CN=99e07a31abfec24909b188463846fdf655872423 Certificate serial: 019B59761DE9736AFE4C464A183FFA54E6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft Manifest number: 1379 Signing time: Fri 26 Dec 2025 07:01:11 +0000 Manifest this update: Fri 26 Dec 2025 07:01:11 +0000 Manifest next update: Sat 27 Dec 2025 07:01:11 +0000 Files and hashes: 1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: m4AVypd/0s1K4AhnhLYNfhIKutyF1ijYDhWFja+p0NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:1d:e9:73:6a:fe:4c:46:4a:18:3f:fa:54:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e07a31abfec24909b188463846fdf655872423 Validity Not Before: Dec 26 07:01:11 2025 GMT Not After : Dec 27 07:01:11 2025 GMT Subject: CN=60e5521d1279e7ff972782e1769a7bc92719724c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:26:95:e6:f5:9a:d5:29:f0:71:8b:9c:e7: 7f:4b:5a:72:4a:e0:4a:41:c6:f4:79:b7:22:6e:02: 71:62:b5:d8:63:91:eb:00:0e:4e:73:5f:6c:aa:fc: 84:ff:43:eb:60:9a:70:79:ff:63:da:5b:51:e1:ee: 17:7e:a5:de:07:c0:1c:8d:e0:f8:70:3f:16:1f:c8: 6c:1c:da:19:10:62:00:e2:d9:89:06:0e:ef:a7:a9: 65:d5:d6:b3:1a:6d:8d:0e:77:8f:fe:95:b7:96:53: fa:83:2b:a7:f7:e9:cb:81:4d:9b:0d:e6:49:d6:7d: 97:07:e9:fb:03:fd:1d:ea:5d:ee:db:f1:44:2f:1f: dd:39:89:36:cf:d7:10:19:6a:54:23:8b:fa:75:7c: 63:5d:f9:f7:2a:89:23:6b:0e:3d:e8:d0:21:3f:62: 71:a5:a2:cc:b5:45:02:e3:1f:a9:75:ce:16:ed:14: ee:dd:41:8b:b7:9d:78:7b:a8:5e:b2:68:f3:f5:09: 89:50:f6:ee:12:92:2b:54:bb:3a:f5:ea:e6:2e:7a: ee:ec:53:1f:3f:31:f1:b5:f2:8d:53:4d:90:f8:48: 3d:dd:9e:58:6c:0f:22:b5:c8:0e:e5:5d:d6:30:ec: aa:d1:ca:f6:9c:1a:bb:eb:87:0a:98:b7:d7:8a:a6: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E5:52:1D:12:79:E7:FF:97:27:82:E1:76:9A:7B:C9:27:19:72:4C X509v3 Authority Key Identifier: keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3d:4e:d0:9a:99:ca:90:68:75:56:62:87:af:01:5e:58:2f: a4:c3:88:e0:63:d2:94:0a:29:c7:ba:5c:9c:4c:4d:29:6d:55: df:33:19:94:f9:f4:7f:15:92:27:04:85:b4:4e:5c:21:c1:5d: 9f:86:a7:54:bf:76:8a:14:a7:1f:64:0a:c3:b0:22:77:6c:ac: dc:4e:bc:f0:96:30:10:ca:6a:e4:be:da:ff:9c:77:a0:2c:21: 5e:ff:85:c5:db:e8:09:17:89:52:52:36:f4:94:f0:d0:10:6d: d9:d7:3c:9c:cb:88:c3:09:86:2a:6f:9a:4b:0f:e5:82:61:c9: 0b:0d:f9:aa:b6:e1:b9:af:c2:b2:98:fc:f4:d1:15:5f:26:a9: 86:f8:28:3b:b2:0e:7b:e3:93:2d:ff:8a:a6:63:81:c7:ad:cd: 00:91:30:9a:d6:e9:30:44:f9:f9:2a:78:a2:68:84:52:8b:fc: 31:76:a1:4a:6d:42:dc:11:f8:27:2b:74:37:ba:4b:a0:d1:10: e2:e7:74:7a:9c:ff:57:fa:21:42:c0:9c:e1:8d:c3:29:d0:d6: bd:b0:82:05:c4:15:a5:80:93:c9:7a:d0:2e:0e:9e:95:04:bc: c0:93:f8:3b:73:23:7b:03:d7:a4:88:c7:c2:18:d8:a0:01:f9: b1:a1:44:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdh3pc2r+TEZKGD/6VOblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTA3YTMxYWJmZWMyNDkwOWIxODg0NjM4NDZmZGY2NTU4 NzI0MjMwHhcNMjUxMjI2MDcwMTExWhcNMjUxMjI3MDcwMTExWjAzMTEwLwYDVQQD Eyg2MGU1NTIxZDEyNzllN2ZmOTcyNzgyZTE3NjlhN2JjOTI3MTk3MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PAmleb1mtUp8HGLnOd/S1pySuBK Qcb0ebcibgJxYrXYY5HrAA5Oc19sqvyE/0PrYJpwef9j2ltR4e4XfqXeB8AcjeD4 cD8WH8hsHNoZEGIA4tmJBg7vp6ll1dazGm2NDneP/pW3llP6gyun9+nLgU2bDeZJ 1n2XB+n7A/0d6l3u2/FELx/dOYk2z9cQGWpUI4v6dXxjXfn3Kokjaw496NAhP2Jx paLMtUUC4x+pdc4W7RTu3UGLt514e6hesmjz9QmJUPbuEpIrVLs69ermLnru7FMf PzHxtfKNU02Q+Eg93Z5YbA8itcgO5V3WMOyq0cr2nBq764cKmLfXiqaxLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDlUh0Seef/lyeC4Xaae8knGXJMMB8GA1UdIwQY MBaAFJngejGr/sJJCbGIRjhG/fZVhyQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQt MjE2MjQ1OGVhY2U1LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQtMjE2MjQ1OGVhY2U1 LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT1O0JqZ ypBodVZih68BXlgvpMOI4GPSlAopx7pcnExNKW1V3zMZlPn0fxWSJwSFtE5cIcFd n4anVL92ihSnH2QKw7Aid2ys3E688JYwEMpq5L7a/5x3oCwhXv+FxdvoCReJUlI2 9JTw0BBt2dc8nMuIwwmGKm+aSw/lgmHJCw35qrbhua/Cspj89NEVXyaphvgoO7IO e+OTLf+KpmOBx63NAJEwmtbpMET5+Sp4omiEUov8MXahSm1C3BH4Jyt0N7pLoNEQ 4ud0epz/V/ohQsCc4Y3DKdDWvbCCBcQVpYCTyXrQLg6elQS8wJP4O3MjewPXpIjH whjYoAH5saFERg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:06 2025 by rpki-client