This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json) Hash identifier: d8q1wWH9/d360WWuGwm5N2PFf82DY4VBOy0Te/6aQVQ= Subject key identifier: 76:91:4F:60:81:E3:32:FD:B7:FB:54:AE:18:62:FB:33:B8:3F:82:EE Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e Certificate serial: 019AF4653CA7A2C7D9147E320DA960D3267E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft Manifest number: 0D21 Signing time: Sat 06 Dec 2025 16:01:06 +0000 Manifest this update: Sat 06 Dec 2025 16:01:06 +0000 Manifest next update: Sun 07 Dec 2025 16:01:06 +0000 Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: G32RciutRicp4gZOpSQjcBff/hK0saMTqychKNcL2lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3c:a7:a2:c7:d9:14:7e:32:0d:a9:60:d3:26:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e Validity Not Before: Dec 6 16:01:06 2025 GMT Not After : Dec 7 16:01:06 2025 GMT Subject: CN=76914f6081e332fdb7fb54ae1862fb33b83f82ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:98:16:23:82:df:c7:47:e5:45:a3:4a:c8: 79:e6:cf:76:fe:9e:dc:83:cb:7e:a7:4f:00:84:83: 37:d6:df:4b:6d:76:20:a5:b9:a9:e2:6d:bf:3b:76: b6:1f:75:34:95:18:9b:9f:3d:79:8f:c1:e6:b0:c7: 69:ca:15:71:7b:c4:47:9f:ee:9a:64:c2:f5:62:cf: 1e:e8:e2:1f:f7:45:3e:c9:7a:e9:63:77:27:72:1c: d6:84:b5:c8:a6:79:1c:0f:fb:72:dd:3a:6f:11:70: ab:41:89:c2:1a:83:7e:45:91:78:3a:cd:75:f8:a7: 86:19:be:1b:40:92:a0:2a:a2:96:40:a2:a1:05:dd: 3a:f6:90:94:0d:aa:7a:2c:2b:88:b6:b3:92:f6:cf: 9e:2a:14:a5:64:87:9c:1c:4a:e3:bf:eb:92:fe:11: 3c:c7:58:f9:46:81:ca:80:2b:92:f9:9b:26:10:08: 3f:8f:b9:6d:c1:dd:9f:39:aa:05:e8:6c:65:9a:18: 9a:bc:92:35:d5:bc:47:2a:7f:1e:0c:21:25:e7:6e: 97:f2:9d:72:e8:27:30:e6:36:04:a5:cc:03:8c:62: a7:a2:ab:bb:4d:c8:8c:ef:6d:34:ab:4a:e5:95:37: e7:57:fa:ea:21:3d:29:20:8b:0e:86:c3:fc:5e:91: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:91:4F:60:81:E3:32:FD:B7:FB:54:AE:18:62:FB:33:B8:3F:82:EE X509v3 Authority Key Identifier: keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8e:01:e7:a1:5b:c3:8e:a0:f7:79:00:cb:71:79:06:7f:c0: 3f:90:63:a8:ef:e0:a2:78:d2:e8:9e:c0:a1:6c:be:5c:8e:28: 76:49:e0:6e:cc:7d:40:5f:6f:22:97:be:7e:17:3b:98:0b:83: 6f:56:ea:fa:9a:54:63:00:80:a9:81:2a:14:e6:15:7b:e1:24: 1b:d9:7a:ce:1c:e5:b8:2f:9f:bd:30:2b:4c:cb:53:92:a6:07: 0f:08:a5:2b:75:b9:b1:6e:55:72:d3:c8:c6:67:ad:5e:b4:18: bc:12:19:75:ed:3f:a1:39:1c:e2:09:96:ec:af:de:b1:62:e2: 87:99:88:a0:15:25:c5:fc:60:b8:e8:60:eb:64:8f:11:9b:0f: d8:5a:03:bc:19:c6:fb:19:1c:8f:2f:2f:d9:5a:4b:c1:35:d1: db:79:fc:63:23:67:bb:59:69:d8:88:c0:56:ba:35:a1:60:cf: 04:be:a8:25:09:e0:ba:07:39:51:4b:00:91:35:07:6f:d9:42: 71:d9:bf:2c:99:7e:08:6b:61:06:5a:76:23:0c:60:94:14:aa: 6f:50:56:99:5f:26:8e:36:80:2c:96:6a:2f:23:c7:7f:a7:69: 45:61:9e:b1:d7:2e:21:d0:a8:72:70:88:b9:10:8b:fa:27:7b: a8:70:34:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTynosfZFH4yDalg0yZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGM0ZjVmNDRhNjYwNmE3NjE3YTk2Y2VjMTg0OTAwYWNh NmY4MGUwHhcNMjUxMjA2MTYwMTA2WhcNMjUxMjA3MTYwMTA2WjAzMTEwLwYDVQQD Eyg3NjkxNGY2MDgxZTMzMmZkYjdmYjU0YWUxODYyZmIzM2I4M2Y4MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjqYFiOC38dH5UWjSsh55s92/p7c g8t+p08AhIM31t9LbXYgpbmp4m2/O3a2H3U0lRibnz15j8HmsMdpyhVxe8RHn+6a ZML1Ys8e6OIf90U+yXrpY3cnchzWhLXIpnkcD/ty3TpvEXCrQYnCGoN+RZF4Os11 +KeGGb4bQJKgKqKWQKKhBd069pCUDap6LCuItrOS9s+eKhSlZIecHErjv+uS/hE8 x1j5RoHKgCuS+ZsmEAg/j7ltwd2fOaoF6GxlmhiavJI11bxHKn8eDCEl526X8p1y 6Ccw5jYEpcwDjGKnoqu7TciM7200q0rllTfnV/rqIT0pIIsOhsP8XpEjfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaRT2CB4zL9t/tUrhhi+zO4P4LuMB8GA1UdIwQY MBaAFHiMT19EpmBqdhepbOwYSQCspvgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUt YzY2ZTA4NzhkZDI3LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUtYzY2ZTA4NzhkZDI3 LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY4B56Fb w46g93kAy3F5Bn/AP5BjqO/gonjS6J7AoWy+XI4odkngbsx9QF9vIpe+fhc7mAuD b1bq+ppUYwCAqYEqFOYVe+EkG9l6zhzluC+fvTArTMtTkqYHDwilK3W5sW5VctPI xmetXrQYvBIZde0/oTkc4gmW7K/esWLih5mIoBUlxfxguOhg62SPEZsP2FoDvBnG +xkcjy8v2VpLwTXR23n8YyNnu1lp2IjAVro1oWDPBL6oJQngugc5UUsAkTUHb9lC cdm/LJl+CGthBlp2IwxglBSqb1BWmV8mjjaALJZqLyPHf6dpRWGesdcuIdCocnCI uRCL+id7qHA0aA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:36 2025 by rpki-client