This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json) Hash identifier: RCZ5QbHQ7FhEUC6n5s+SX9IbM1EuhavCmr7LT/IKZbs= Subject key identifier: 0D:D1:41:32:76:3E:5F:6E:EF:4C:3C:CC:DA:EB:2E:17:37:30:1F:A2 Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Certificate serial: 019AF163E9FDAEEF8FC2F29DFC6F80BC2661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft Manifest number: 027E Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: 24xtCHkmHgBHytmuCvuxlQNSdDsStQexc/BCdS60w1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e9:fd:ae:ef:8f:c2:f2:9d:fc:6f:80:bc:26:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=0dd14132763e5f6eef4c3cccdaeb2e1737301fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:e0:a5:db:11:db:e9:11:49:0b:59:42:79: 3f:f8:37:fe:38:b0:96:cc:41:8f:f8:17:f1:e4:6f: 2c:47:ed:ae:21:87:87:2a:28:eb:57:ee:fa:4c:41: b0:98:32:35:c0:4f:25:47:14:b6:45:cd:ad:9c:63: cb:df:a8:3d:49:29:7a:a0:83:25:07:fb:a3:11:97: 20:0a:47:58:04:74:01:8f:c7:c0:18:2f:a0:3e:f0: 35:54:43:4d:0e:6f:d3:95:34:ca:4d:5f:bb:ab:6b: 4a:30:b9:b7:cf:e1:1f:60:40:3e:1c:99:e9:1e:3d: 5b:02:43:39:9f:56:68:7b:6c:25:53:8c:33:0b:02: 02:d3:5d:cf:cf:47:ae:50:55:fd:da:d2:df:9f:c4: bc:8a:68:53:9e:b9:7d:a4:6a:4b:86:ef:88:c5:15: 6a:c7:6b:6f:9a:87:35:81:87:92:de:04:d4:d5:9f: c6:b7:44:0b:ed:a9:29:63:77:22:36:cc:7e:ed:26: 17:30:e9:dd:ad:b3:51:04:6f:4e:41:33:6b:de:01: 0d:6e:95:79:c8:7b:16:23:43:d2:f2:97:1f:fb:f2: ae:18:99:97:e0:a2:09:c5:75:1c:72:01:a6:ee:7c: 91:8f:07:cf:68:f2:b8:90:d8:84:e6:5d:ca:0f:17: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:41:32:76:3E:5F:6E:EF:4C:3C:CC:DA:EB:2E:17:37:30:1F:A2 X509v3 Authority Key Identifier: keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:27:23:69:8a:73:09:ad:2a:74:96:e5:5e:9d:a1:59:57:f4: 15:71:6a:f6:63:63:17:d7:9a:d4:54:ef:37:61:ea:34:e6:0a: 39:30:cb:64:55:f9:40:5a:11:1c:04:a1:f3:4c:bd:d0:97:1b: 48:f7:29:87:2e:4e:46:92:a0:1b:fc:ce:b0:f1:46:1a:4a:a0: 72:6a:9b:c3:28:ae:b4:71:31:fe:39:f0:81:90:77:e6:f8:be: d2:ee:08:46:28:23:0a:4f:16:66:cc:18:73:9f:29:87:2e:93: b2:58:4b:06:0f:b0:2e:93:87:5d:d7:48:c8:2b:d1:12:97:03: 06:df:21:24:76:93:d1:e6:65:f2:97:1a:96:13:53:37:b2:10: cf:34:95:50:bc:f4:4a:fc:2e:a2:9b:bf:bc:f8:f3:16:51:c6: 22:94:81:1d:88:cd:a9:2a:5b:70:4f:a0:13:f5:09:56:46:d0: 5d:af:0e:40:1a:e2:40:b3:3d:2e:f6:4c:82:9b:a4:e8:63:da: cb:21:2c:8c:0b:35:ac:80:ba:f7:78:21:2f:96:9a:38:e6:fd: 52:e0:91:b0:97:02:7b:5f:94:cb:ed:fe:b4:89:ce:f8:43:03: 54:4c:d7:80:45:15:55:d6:8d:f4:20:fb:75:ab:da:14:3b:7e: 9f:1a:78:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+n9ru+PwvKd/G+AvCZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3 OTEyYjkwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EygwZGQxNDEzMjc2M2U1ZjZlZWY0YzNjY2NkYWViMmUxNzM3MzAxZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS/gpdsR2+kRSQtZQnk/+Df+OLCW zEGP+Bfx5G8sR+2uIYeHKijrV+76TEGwmDI1wE8lRxS2Rc2tnGPL36g9SSl6oIMl B/ujEZcgCkdYBHQBj8fAGC+gPvA1VENNDm/TlTTKTV+7q2tKMLm3z+EfYEA+HJnp Hj1bAkM5n1Zoe2wlU4wzCwIC013Pz0euUFX92tLfn8S8imhTnrl9pGpLhu+IxRVq x2tvmoc1gYeS3gTU1Z/Gt0QL7akpY3ciNsx+7SYXMOndrbNRBG9OQTNr3gENbpV5 yHsWI0PS8pcf+/KuGJmX4KIJxXUccgGm7nyRjwfPaPK4kNiE5l3KDxdMRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3RQTJ2Pl9u70w8zNrrLhc3MB+iMB8GA1UdIwQY MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0 LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACycjaYpz Ca0qdJblXp2hWVf0FXFq9mNjF9ea1FTvN2HqNOYKOTDLZFX5QFoRHASh80y90Jcb SPcphy5ORpKgG/zOsPFGGkqgcmqbwyiutHEx/jnwgZB35vi+0u4IRigjCk8WZswY c58phy6TslhLBg+wLpOHXddIyCvREpcDBt8hJHaT0eZl8pcalhNTN7IQzzSVULz0 Svwuopu/vPjzFlHGIpSBHYjNqSpbcE+gE/UJVkbQXa8OQBriQLM9LvZMgpuk6GPa yyEsjAs1rIC693ghL5aaOOb9UuCRsJcCe1+Uy+3+tInO+EMDVEzXgEUVVdaN9CD7 davaFDt+nxp4GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:28 2025 by rpki-client