This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft File: 0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json) Hash identifier: hwUp6ZkkThJBHpXh0msjbgQZ9HmNyqwQg3ogtJm4fSM= Subject key identifier: 60:21:7B:7E:5B:E4:89:BB:43:A2:A5:DB:69:99:8A:3D:8E:F8:21:E0 Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6 Certificate issuer: /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6 Certificate serial: 019B5976F7C2E9DFCC37499EEB1EEAAE7356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft Manifest number: 1206 Signing time: Fri 26 Dec 2025 07:02:07 +0000 Manifest this update: Fri 26 Dec 2025 07:02:07 +0000 Manifest next update: Sat 27 Dec 2025 07:02:07 +0000 Files and hashes: 1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: D9Utlty3vCu2D8owh/MYQMAyBtqwgiqTPHl1LaYTtvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f7:c2:e9:df:cc:37:49:9e:eb:1e:ea:ae:73:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6 Validity Not Before: Dec 26 07:02:07 2025 GMT Not After : Dec 27 07:02:07 2025 GMT Subject: CN=60217b7e5be489bb43a2a5db69998a3d8ef821e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:20:e7:18:31:a1:59:cc:fd:a2:48:60:f9: 0b:92:c6:8c:60:f2:6c:c0:1f:8b:6b:77:c0:7d:9c: 31:a5:e1:fc:23:07:11:5a:f0:85:11:99:10:bf:21: 8b:4e:60:7a:18:8c:61:7a:86:17:5c:65:f4:0e:ba: 79:56:27:9e:b6:3d:db:5a:88:55:ec:b4:18:bd:7b: 19:b9:06:f2:76:54:f8:03:3c:71:87:9a:a3:31:88: 34:80:9a:c2:39:d6:c2:2d:6b:7c:35:ec:66:11:d9: 1c:65:73:63:8b:19:1f:21:34:75:c5:2c:78:e5:51: 08:dc:0e:81:47:f6:11:dd:12:4a:aa:a7:3b:15:54: 43:46:33:62:c1:bd:66:3f:e9:36:c3:49:3f:65:59: 10:aa:c0:5d:b8:fc:9d:ee:c0:40:62:2f:90:2e:ea: f3:7b:b7:45:d3:f4:ed:e0:7b:88:41:5b:bf:f3:ff: 77:57:3e:76:f5:79:c3:4f:76:09:ed:fb:bb:40:db: 9b:55:44:ba:fb:15:52:cc:96:4c:ed:64:53:4b:30: 35:29:8c:74:ba:73:01:91:37:22:84:55:e8:92:4b: 43:83:34:26:d7:cf:02:d5:ed:b2:f8:c1:ea:f4:02: da:a2:8b:d7:bb:f8:0a:40:ec:bc:62:93:d4:7a:ad: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:21:7B:7E:5B:E4:89:BB:43:A2:A5:DB:69:99:8A:3D:8E:F8:21:E0 X509v3 Authority Key Identifier: keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:43:44:fd:20:de:53:9c:dd:00:87:72:ca:b1:7c:e0:23:98: 71:00:79:03:56:47:e5:f7:4f:21:51:e3:22:9e:93:9d:82:87: 82:25:87:34:56:28:c4:46:61:4c:df:08:52:71:cd:d0:ef:02: 4d:07:0d:91:60:2b:8b:4f:e7:88:da:86:95:d6:42:50:7d:5c: 0e:9c:50:0b:c3:ad:48:e4:ed:34:93:4e:e1:5a:c7:d2:5c:44: da:58:f8:91:86:52:eb:57:aa:56:e6:27:0b:39:29:ab:71:70: 1e:4e:07:d8:c2:1d:0f:74:e1:f7:d0:48:d0:77:a8:e8:fb:48: 93:e8:ae:c1:82:34:1e:dc:32:ca:f7:9f:a2:d3:c4:06:a1:a8: a2:b1:52:82:9f:e2:fd:a0:8f:49:0e:37:06:d3:60:17:36:a2: a0:ff:e2:b7:9c:13:1d:8e:2c:50:95:ec:9d:6d:e6:ea:15:99: 68:cf:f0:29:4b:7c:83:79:9f:86:fe:cc:10:3b:d6:f6:f8:f8: c2:70:e1:18:ae:f7:d9:a3:a9:e9:e2:a2:ff:c3:bc:01:29:bd: 28:25:ec:53:f6:0a:36:fb:ea:87:32:54:4d:f1:29:31:93:0c: 99:4b:87:10:b4:89:d6:fc:66:f6:36:71:e1:e0:56:6b:6d:96: e6:d6:03:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvfC6d/MN0me6x7qrnNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjdhOTE5YTVkMzJjZWEyZmQ0MWM4YTllMTg1MTBiZmZm Y2U4ZDYwHhcNMjUxMjI2MDcwMjA3WhcNMjUxMjI3MDcwMjA3WjAzMTEwLwYDVQQD Eyg2MDIxN2I3ZTViZTQ4OWJiNDNhMmE1ZGI2OTk5OGEzZDhlZjgyMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gwg5xgxoVnM/aJIYPkLksaMYPJs wB+La3fAfZwxpeH8IwcRWvCFEZkQvyGLTmB6GIxheoYXXGX0Drp5Vieetj3bWohV 7LQYvXsZuQbydlT4Azxxh5qjMYg0gJrCOdbCLWt8NexmEdkcZXNjixkfITR1xSx4 5VEI3A6BR/YR3RJKqqc7FVRDRjNiwb1mP+k2w0k/ZVkQqsBduPyd7sBAYi+QLurz e7dF0/Tt4HuIQVu/8/93Vz529XnDT3YJ7fu7QNubVUS6+xVSzJZM7WRTSzA1KYx0 unMBkTcihFXokktDgzQm188C1e2y+MHq9ALaoovXu/gKQOy8YpPUeq02vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAhe35b5Im7Q6Kl22mZij2O+CHgMB8GA1UdIwQY MBaAFNJnqRml0yzqL9Qcip4YUQv//OjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEt OTM3MjI2N2NmOTUxLzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEtOTM3MjI2N2NmOTUx LzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkNE/SDe U5zdAIdyyrF84COYcQB5A1ZH5fdPIVHjIp6TnYKHgiWHNFYoxEZhTN8IUnHN0O8C TQcNkWAri0/niNqGldZCUH1cDpxQC8OtSOTtNJNO4VrH0lxE2lj4kYZS61eqVuYn Czkpq3FwHk4H2MIdD3Th99BI0Heo6PtIk+iuwYI0HtwyyvefotPEBqGoorFSgp/i /aCPSQ43BtNgFzaioP/it5wTHY4sUJXsnW3m6hWZaM/wKUt8g3mfhv7MEDvW9vj4 wnDhGK732aOp6eKi/8O8ASm9KCXsU/YKNvvqhzJUTfEpMZMMmUuHELSJ1vxm9jZx 4eBWa22W5tYD6w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client