This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft File: meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json) Hash identifier: egMKXmrNsbXoORkf0tS26y8CNVe9OEw5tioq0e0t8L0= Subject key identifier: 1F:D6:FD:63:55:54:07:86:D3:3C:20:2E:5F:77:06:E5:CE:00:22:5D Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30 Certificate issuer: /CN=99ea05fe601cb6801af83793e063f79e3940f030 Certificate serial: 019B08FE9A02C9E138FBE54D0D4622986A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft Manifest number: 056F Signing time: Wed 10 Dec 2025 16:01:01 +0000 Manifest this update: Wed 10 Dec 2025 16:01:01 +0000 Manifest next update: Thu 11 Dec 2025 16:01:01 +0000 Files and hashes: 1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: KjLsRq1USF/fGDhoRmm4HHL0O1Pct5gfjKyumVAlOSE=) 2: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (hash: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:9a:02:c9:e1:38:fb:e5:4d:0d:46:22:98:6a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030 Validity Not Before: Dec 10 16:01:01 2025 GMT Not After : Dec 11 16:01:01 2025 GMT Subject: CN=1fd6fd6355540786d33c202e5f7706e5ce00225d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:45:87:0d:10:a5:66:08:33:5b:28:5d:6c: 6f:49:d0:e9:bd:3d:45:a1:98:69:0e:db:88:a5:98: 21:e3:e3:f2:fe:01:90:c6:9a:21:56:14:ae:3c:25: b6:45:1d:f0:ce:6a:66:24:b8:48:af:80:97:29:91: 5d:17:40:43:71:29:2d:e9:2a:6a:29:39:2f:3f:9d: 68:a5:ec:2d:f3:a7:af:af:82:ae:9f:b0:77:8b:59: ac:5c:04:fb:42:c3:fe:b4:59:e1:53:0e:0b:5a:c8: 5f:6d:14:58:1c:98:0f:82:5c:59:73:8b:ac:5c:52: 92:9d:1c:56:bb:c6:4d:de:10:4d:94:71:d7:ab:4b: 3d:74:67:30:6a:9b:d6:1e:14:01:e8:60:17:d6:1d: 58:9b:8f:27:51:14:de:36:22:ff:c3:81:04:95:0a: 26:5a:cb:1f:f4:a8:87:aa:60:f7:af:df:f7:12:95: 71:8d:4e:95:82:2b:e6:75:76:6d:01:3a:b7:90:43: 94:4b:41:e7:ee:44:b1:24:dc:0d:4b:ef:9e:1a:6d: 1d:ca:37:d5:3f:ae:3d:b1:af:ab:23:fe:a5:c1:36: ca:fc:20:5f:9c:b1:1a:d7:9d:ab:f7:4f:b1:a2:66: 53:67:35:db:4a:2a:89:c8:79:08:eb:7e:39:0d:f3: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:FD:63:55:54:07:86:D3:3C:20:2E:5F:77:06:E5:CE:00:22:5D X509v3 Authority Key Identifier: keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:44:e5:72:3f:00:79:77:7d:f3:7a:24:b6:74:03:7f:1c: 02:ab:da:c8:9c:8f:2b:d1:dc:5e:19:c3:1a:79:0c:1e:01:bc: 17:e6:2c:0d:65:f7:de:3b:d4:36:64:53:2f:7c:50:9e:c1:62: ed:c6:0d:44:cd:8e:c8:eb:30:f0:bb:5b:b6:21:e3:7e:92:6a: d4:95:f8:48:ad:ee:e3:44:59:e7:db:76:00:44:8a:93:93:01: 1c:96:f7:86:4e:e2:30:c9:5e:88:0a:bb:3c:c6:1b:52:3e:29: 93:1c:35:4c:f2:e2:3c:43:e8:e0:82:ac:6d:e0:5a:4d:33:8f: af:75:fc:cb:09:c0:e6:ba:46:ab:96:6b:70:20:36:56:b7:85: 19:e0:9d:34:2d:f4:cf:2c:16:02:e0:0f:7c:62:8a:d5:b5:23: 31:55:b6:d1:14:0e:93:b3:a3:b5:ef:a7:48:4f:bf:dd:08:79: 7e:3b:67:79:f4:7d:c2:70:d1:b7:25:91:20:12:ea:64:8e:7b: d0:a6:48:34:ff:0c:f7:3d:24:88:3e:fa:53:f2:6a:5e:78:bf: 22:cf:8c:8d:24:8a:ed:ba:e1:7d:4e:81:dd:83:dd:36:c7:b2: cc:91:d9:59:28:22:48:5f:74:36:4c:43:69:7d:fe:a5:30:9e: f4:48:37:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/poCyeE4++VNDUYimGqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZWEwNWZlNjAxY2I2ODAxYWY4Mzc5M2UwNjNmNzllMzk0 MGYwMzAwHhcNMjUxMjEwMTYwMTAxWhcNMjUxMjExMTYwMTAxWjAzMTEwLwYDVQQD EygxZmQ2ZmQ2MzU1NTQwNzg2ZDMzYzIwMmU1Zjc3MDZlNWNlMDAyMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVZFhw0QpWYIM1soXWxvSdDpvT1F oZhpDtuIpZgh4+Py/gGQxpohVhSuPCW2RR3wzmpmJLhIr4CXKZFdF0BDcSkt6Spq KTkvP51opewt86evr4Kun7B3i1msXAT7QsP+tFnhUw4LWshfbRRYHJgPglxZc4us XFKSnRxWu8ZN3hBNlHHXq0s9dGcwapvWHhQB6GAX1h1Ym48nURTeNiL/w4EElQom Wssf9KiHqmD3r9/3EpVxjU6VgivmdXZtATq3kEOUS0Hn7kSxJNwNS++eGm0dyjfV P649sa+rI/6lwTbK/CBfnLEa152r90+xomZTZzXbSiqJyHkI6345DfPRaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/W/WNVVAeG0zwgLl93BuXOACJdMB8GA1UdIwQY MBaAFJnqBf5gHLaAGvg3k+Bj9545QPAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMt MzdjZmQ0YTY0ZmYxLzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMtMzdjZmQ0YTY0ZmYx LzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW1E5XI/ AHl3ffN6JLZ0A38cAqvayJyPK9HcXhnDGnkMHgG8F+YsDWX33jvUNmRTL3xQnsFi 7cYNRM2OyOsw8LtbtiHjfpJq1JX4SK3u40RZ59t2AESKk5MBHJb3hk7iMMleiAq7 PMYbUj4pkxw1TPLiPEPo4IKsbeBaTTOPr3X8ywnA5rpGq5ZrcCA2VreFGeCdNC30 zywWAuAPfGKK1bUjMVW20RQOk7Ojte+nSE+/3Qh5fjtnefR9wnDRtyWRIBLqZI57 0KZINP8M9z0kiD76U/JqXni/Is+MjSSK7brhfU6B3YPdNseyzJHZWSgiSF90NkxD aX3+pTCe9Eg3vw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:04:12 2025 by rpki-client