This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json) Hash identifier: L7oZ+LJL24a8BhR6wLa5sT9HTELcuX96eZm+Cvku8y4= Subject key identifier: A9:AB:30:E9:A4:F0:9D:A7:32:05:39:F5:5C:C4:D7:B0:B9:1A:12:34 Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Certificate serial: 019AF276F4943681E7AC9055D890D3FB4D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft Manifest number: 1237 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: w6f9tU2GQ4mQMpfJ5l7ta94hb5uibbnQ0SJJ/mtC0n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:94:36:81:e7:ac:90:55:d8:90:d3:fb:4d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=a9ab30e9a4f09da7320539f55cc4d7b0b91a1234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:d9:c1:53:7d:86:91:79:14:ca:ee:f3:33: 1a:14:ce:63:af:d0:f6:a4:91:18:5c:d2:9c:e8:4c: d0:38:2f:47:bb:1e:84:86:f1:0d:b8:73:24:6c:f6: 0f:c0:7e:c1:2f:00:20:01:b3:72:6a:af:4b:b6:96: a9:48:29:30:e4:a7:db:e8:d8:b8:9e:27:d5:a0:74: 7e:e9:c9:d2:96:23:94:a8:af:62:94:6a:37:93:76: 48:fb:6e:ee:d4:fe:13:ea:75:03:79:11:38:16:37: ec:92:98:e2:5f:49:dd:a8:a8:59:36:13:82:3d:47: 34:3b:5e:2a:60:22:de:a5:fa:1f:80:29:09:bf:b3: b5:39:58:48:f0:22:ad:88:15:a7:d5:d1:44:73:59: 51:19:31:1e:9f:c4:50:bf:18:e0:92:50:17:10:39: c4:06:84:55:5a:c9:f8:9b:4a:4d:b7:5c:63:fb:22: 82:8a:96:6d:a0:59:78:f6:17:36:77:7a:e9:42:a1: 2c:b1:93:e4:43:dd:bb:23:34:d1:e4:b0:91:7d:45: d2:c0:12:0d:3d:ad:5e:0d:c5:c7:d6:c1:e0:6d:1b: 45:c9:be:87:83:52:24:a6:00:b5:92:d0:8b:69:5c: bc:4d:bd:46:0c:cc:6d:81:e9:74:34:ad:6e:db:b7: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AB:30:E9:A4:F0:9D:A7:32:05:39:F5:5C:C4:D7:B0:B9:1A:12:34 X509v3 Authority Key Identifier: keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:30:fb:11:fa:08:fe:c5:df:6c:ed:16:37:21:8a:6b:97: c9:6f:e4:35:92:1e:87:87:85:70:04:5e:45:22:30:84:71:dc: 40:d5:e4:1b:39:b3:08:60:c6:dc:18:a7:d8:5e:1e:9f:f0:93: 74:2a:06:c4:bb:70:fe:2c:70:a5:7a:38:0d:02:7a:bd:ca:94: d0:c3:b6:37:33:72:7a:81:a3:1a:73:dd:2d:d7:de:87:b5:c9: 3e:bb:90:ce:1d:bf:a2:cc:9a:8a:44:d2:10:39:46:2c:ec:25: 8c:1a:d8:9d:39:3f:e9:ab:31:58:76:ab:b8:45:39:1e:f6:4b: b1:1d:8e:c0:bb:0c:a7:58:d1:15:88:49:e6:61:7e:1a:42:63: 14:3d:c8:bb:e8:44:a8:57:e0:7d:f1:cb:5f:b7:00:c0:dd:5c: cb:bb:6d:f5:84:39:0d:e1:d0:01:57:8d:76:1c:bb:1b:f8:e6: 3f:f1:a2:86:cc:68:cc:59:b5:8f:aa:3f:59:82:72:8a:89:f7: 37:d1:1b:1c:34:6e:1b:88:91:6b:82:f5:08:eb:88:b3:1a:fa: b7:35:0b:89:ef:f5:0f:4a:65:4d:1d:9c:75:cb:04:9c:43:97: f9:43:5c:7b:21:d0:0d:30:ac:3c:dd:dd:92:ee:25:f2:62:7d: ec:e8:2b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvSUNoHnrJBV2JDT+01FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOWVhOTNjNzllY2M1ZDVjYTkwMzAxYWNkM2E4OTJkNmUy ZTFlNzMwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhhOWFiMzBlOWE0ZjA5ZGE3MzIwNTM5ZjU1Y2M0ZDdiMGI5MWExMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS3ZwVN9hpF5FMru8zMaFM5jr9D2 pJEYXNKc6EzQOC9Hux6EhvENuHMkbPYPwH7BLwAgAbNyaq9LtpapSCkw5Kfb6Ni4 nifVoHR+6cnSliOUqK9ilGo3k3ZI+27u1P4T6nUDeRE4FjfskpjiX0ndqKhZNhOC PUc0O14qYCLepfofgCkJv7O1OVhI8CKtiBWn1dFEc1lRGTEen8RQvxjgklAXEDnE BoRVWsn4m0pNt1xj+yKCipZtoFl49hc2d3rpQqEssZPkQ927IzTR5LCRfUXSwBIN Pa1eDcXH1sHgbRtFyb6Hg1IkpgC1ktCLaVy8Tb1GDMxtgel0NK1u27ePbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmrMOmk8J2nMgU59VzE17C5GhI0MB8GA1UdIwQY MBaAFHqeqTx57MXVypAwGs06iS1uLh5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEt NGNjY2I0Yzc5MThmLzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEtNGNjY2I0Yzc5MThm LzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTIw+xH6 CP7F32ztFjchimuXyW/kNZIeh4eFcAReRSIwhHHcQNXkGzmzCGDG3Bin2F4en/CT dCoGxLtw/ixwpXo4DQJ6vcqU0MO2NzNyeoGjGnPdLdfeh7XJPruQzh2/osyaikTS EDlGLOwljBrYnTk/6asxWHaruEU5HvZLsR2OwLsMp1jRFYhJ5mF+GkJjFD3Iu+hE qFfgffHLX7cAwN1cy7tt9YQ5DeHQAVeNdhy7G/jmP/GihsxozFm1j6o/WYJyion3 N9EbHDRuG4iRa4L1COuIsxr6tzULie/1D0plTR2cdcsEnEOX+UNceyHQDTCsPN3d ku4l8mJ97Ogr+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:18 2025 by rpki-client