This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json) Hash identifier: bun0W48mtVzw/weZxY4btrNi7ZOF7CRSbzBFioQXCcI= Subject key identifier: 91:94:A7:B5:26:23:52:93:76:1F:E7:E5:85:73:D9:79:C9:80:00:13 Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Certificate serial: 019B3042933995CEEB7411E76D3023F28BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft Manifest number: 1257 Signing time: Thu 18 Dec 2025 07:00:27 +0000 Manifest this update: Thu 18 Dec 2025 07:00:27 +0000 Manifest next update: Fri 19 Dec 2025 07:00:27 +0000 Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: 3Xv8t/l1/CGvkvy3TLw09BbYioWdUSVAeV00e55+irM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:93:39:95:ce:eb:74:11:e7:6d:30:23:f2:8b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Validity Not Before: Dec 18 07:00:27 2025 GMT Not After : Dec 19 07:00:27 2025 GMT Subject: CN=9194a7b526235293761fe7e58573d979c9800013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:d4:42:80:09:17:08:b3:f4:c2:32:56:d6: c8:6f:ef:a0:32:3d:d1:71:64:25:91:95:e6:0e:76: b2:c4:08:65:c1:3b:c7:55:9e:2c:d3:37:02:0a:f9: 2c:76:ed:f6:35:c3:74:07:14:48:1c:7d:74:76:17: 53:72:ba:ad:9f:0b:ec:5d:bc:65:cc:11:c5:e9:e8: 75:6a:73:10:29:9f:f5:cb:cd:58:c6:ba:2d:bd:89: d8:f5:8e:75:c1:e8:88:3c:97:33:86:d1:31:29:6b: 78:0d:04:93:d3:63:8a:f3:cc:a4:5c:c8:cd:23:17: 95:17:8f:4d:29:d6:2f:0f:41:0f:69:92:ea:f6:4c: a9:0b:36:a1:9c:4d:b4:6b:c9:b2:90:f8:83:ed:5d: f2:34:09:92:fc:7d:fe:92:22:17:fb:80:2f:50:7a: 06:59:d7:c8:74:45:3c:c3:d1:32:73:e0:90:af:e5: e7:6e:5e:ae:2e:df:82:7e:5a:d9:4c:65:44:60:6d: f2:2f:59:1f:b5:ba:c6:20:80:61:1e:17:95:74:76: b4:68:40:b1:d6:f1:58:be:63:51:e2:59:a1:1b:58: 10:0a:99:b5:19:9e:7c:c1:1f:94:5d:1f:6f:6e:29: b7:86:f2:10:5a:a3:68:2d:26:51:e6:2a:bf:d9:d4: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:A7:B5:26:23:52:93:76:1F:E7:E5:85:73:D9:79:C9:80:00:13 X509v3 Authority Key Identifier: keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3d:ad:4b:a1:9e:0a:84:b9:f7:e7:f3:2f:e5:d1:6f:7e:0f: 20:86:1f:7e:3f:c0:04:50:33:42:58:f7:73:07:a9:0b:0f:1a: 94:51:b5:6c:07:71:24:27:d0:d2:e8:bf:30:19:8b:20:50:f1: 24:ea:fa:c8:59:cf:e4:61:b7:8a:6a:ec:8a:25:14:7e:06:89: 41:db:c3:26:03:d5:22:75:6f:68:de:32:70:17:50:62:6b:6b: b5:72:46:0f:f1:78:76:df:c4:8e:49:df:02:19:90:92:95:55: bf:46:e7:0e:e6:9f:13:a8:90:70:a7:81:ca:44:fb:fd:41:19: b1:c0:ab:a2:23:2e:9c:df:c7:af:6a:45:b8:81:57:38:a1:fd: 24:8e:71:8d:97:83:d6:f5:63:7c:5b:d5:f2:67:36:60:ec:0e: 4e:5e:d3:67:0f:f1:a2:d6:00:f0:b1:e8:42:4b:f4:a0:08:f6: f4:f6:92:ea:99:97:1a:47:97:e5:a1:f0:fc:97:9e:92:78:9e: 4c:11:99:23:63:95:02:14:d9:a8:0d:c5:2e:3c:3c:49:f8:d6: ed:d8:03:41:7e:f7:ed:fd:9e:b9:86:0a:c5:04:d6:f7:64:86: dd:c1:26:de:a6:b8:88:f7:db:63:5c:37:7b:10:94:14:ba:69: f5:a1:8a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQpM5lc7rdBHnbTAj8ou1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOWVhOTNjNzllY2M1ZDVjYTkwMzAxYWNkM2E4OTJkNmUy ZTFlNzMwHhcNMjUxMjE4MDcwMDI3WhcNMjUxMjE5MDcwMDI3WjAzMTEwLwYDVQQD Eyg5MTk0YTdiNTI2MjM1MjkzNzYxZmU3ZTU4NTczZDk3OWM5ODAwMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5rUQoAJFwiz9MIyVtbIb++gMj3R cWQlkZXmDnayxAhlwTvHVZ4s0zcCCvksdu32NcN0BxRIHH10dhdTcrqtnwvsXbxl zBHF6eh1anMQKZ/1y81YxrotvYnY9Y51weiIPJczhtExKWt4DQST02OK88ykXMjN IxeVF49NKdYvD0EPaZLq9kypCzahnE20a8mykPiD7V3yNAmS/H3+kiIX+4AvUHoG WdfIdEU8w9Eyc+CQr+Xnbl6uLt+CflrZTGVEYG3yL1kftbrGIIBhHheVdHa0aECx 1vFYvmNR4lmhG1gQCpm1GZ58wR+UXR9vbim3hvIQWqNoLSZR5iq/2dRVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGUp7UmI1KTdh/n5YVz2XnJgAATMB8GA1UdIwQY MBaAFHqeqTx57MXVypAwGs06iS1uLh5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEt NGNjY2I0Yzc5MThmLzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEtNGNjY2I0Yzc5MThm LzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND2tS6Ge CoS59+fzL+XRb34PIIYffj/ABFAzQlj3cwepCw8alFG1bAdxJCfQ0ui/MBmLIFDx JOr6yFnP5GG3imrsiiUUfgaJQdvDJgPVInVvaN4ycBdQYmtrtXJGD/F4dt/Ejknf AhmQkpVVv0bnDuafE6iQcKeBykT7/UEZscCroiMunN/Hr2pFuIFXOKH9JI5xjZeD 1vVjfFvV8mc2YOwOTl7TZw/xotYA8LHoQkv0oAj29PaS6pmXGkeX5aHw/Jeeknie TBGZI2OVAhTZqA3FLjw8SfjW7dgDQX737f2euYYKxQTW92SG3cEm3qa4iPfbY1w3 exCUFLpp9aGKMg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:34 2025 by rpki-client