This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json) Hash identifier: E22wLkz9QyAW7k837ufyExk7wXVZItdGFHBfgGbcluo= Subject key identifier: 56:57:DD:7D:C2:20:ED:08:95:92:AF:A9:47:B7:61:C5:97:60:72:3A Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Certificate serial: 019AF49C2B28F68367A55AE173589387986F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft Manifest number: 118D Signing time: Sat 06 Dec 2025 17:01:06 +0000 Manifest this update: Sat 06 Dec 2025 17:01:06 +0000 Manifest next update: Sun 07 Dec 2025 17:01:06 +0000 Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: BYO4/kBhBzXV7+Bwf8yUNiWafUkgz0vx1QpERRkFJjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2b:28:f6:83:67:a5:5a:e1:73:58:93:87:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Validity Not Before: Dec 6 17:01:06 2025 GMT Not After : Dec 7 17:01:06 2025 GMT Subject: CN=5657dd7dc220ed089592afa947b761c59760723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:c4:63:77:5f:f5:8e:1e:b3:b4:de:95:cc: 59:34:d3:4b:e1:c0:ea:d7:93:2d:7d:b2:a8:23:db: 87:9a:e7:e3:20:1e:8e:55:be:d6:75:82:40:3d:fc: 2d:df:72:a6:f7:65:ec:97:57:1a:63:9f:a9:a7:93: e0:a6:f3:09:b0:e8:fd:01:47:e1:2a:b5:4e:6d:c0: 58:fb:5b:3d:db:08:05:9b:46:1b:fe:cf:b9:15:68: fe:21:e7:f3:7f:d1:f2:ff:5c:05:7b:f1:08:6a:30: cd:c2:a2:5c:69:fb:58:f0:53:2a:b5:09:d2:07:d5: 89:d0:2d:12:d7:4b:f1:8d:dd:10:57:43:0b:29:78: be:80:af:2c:a0:5d:62:13:19:9b:87:30:92:84:aa: 37:df:f5:03:6a:3e:1d:82:89:43:27:a8:16:f4:ee: 26:b0:4e:62:32:e8:57:44:e6:3b:89:82:af:32:cc: 27:9a:61:04:9c:23:67:dd:9c:0a:ba:60:4d:25:7f: 16:fc:da:79:e6:95:7d:16:f9:c3:38:cb:e2:1f:74: 32:db:fb:dd:68:35:a3:35:3f:3d:85:df:11:66:66: a3:3a:62:80:b1:a6:f0:c1:1c:d5:7a:11:24:62:2f: 32:25:62:7a:8a:02:a9:9e:68:1a:83:2c:fc:4e:8f: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:57:DD:7D:C2:20:ED:08:95:92:AF:A9:47:B7:61:C5:97:60:72:3A X509v3 Authority Key Identifier: keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3e:22:5e:ab:cc:a2:bb:7d:b0:74:c8:27:73:58:3f:62:f6: 0d:e8:ba:fc:b3:c0:0f:b3:b9:51:a3:6c:c0:28:1b:71:85:63: 8d:a0:1e:63:44:13:1e:79:e1:66:5b:3e:29:91:56:f6:76:0f: a8:10:7e:e7:53:e2:b5:6a:fa:5f:8b:0a:5d:de:c7:10:06:1d: 16:fc:ad:93:20:5a:9a:c0:e4:07:13:73:b1:62:26:87:4e:48: 86:57:be:68:e3:1d:92:de:5f:f3:12:c4:0d:67:92:6c:d0:9b: f9:a7:0a:1d:11:9d:1f:f3:49:d3:71:94:8f:4e:2d:ff:37:0e: fb:dd:a6:f0:e4:55:a8:bd:ae:b0:7b:4b:0c:96:d4:4c:68:87: db:c1:53:09:77:0f:c6:ee:23:45:7e:71:e0:00:a4:72:9a:cc: 5c:27:5f:84:78:af:eb:67:56:28:3b:ae:b2:8c:c1:f9:ea:f1: 64:a7:f0:72:fa:c3:be:2b:21:6b:87:48:72:e7:f6:02:3b:7d: 47:82:c0:7d:58:fe:c2:bb:d8:af:5e:40:95:92:37:b4:f4:83: 74:63:15:d6:e3:4c:33:5c:9b:cf:81:34:cc:f2:64:54:af:76: 1c:17:eb:49:ca:5d:95:3e:64:69:c4:f7:95:65:25:d7:ee:59: e1:af:ea:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCso9oNnpVrhc1iTh5hvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm MWJhY2YwHhcNMjUxMjA2MTcwMTA2WhcNMjUxMjA3MTcwMTA2WjAzMTEwLwYDVQQD Eyg1NjU3ZGQ3ZGMyMjBlZDA4OTU5MmFmYTk0N2I3NjFjNTk3NjA3MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUnEY3df9Y4es7TelcxZNNNL4cDq 15MtfbKoI9uHmufjIB6OVb7WdYJAPfwt33Km92Xsl1caY5+pp5PgpvMJsOj9AUfh KrVObcBY+1s92wgFm0Yb/s+5FWj+Iefzf9Hy/1wFe/EIajDNwqJcaftY8FMqtQnS B9WJ0C0S10vxjd0QV0MLKXi+gK8soF1iExmbhzCShKo33/UDaj4dgolDJ6gW9O4m sE5iMuhXROY7iYKvMswnmmEEnCNn3ZwKumBNJX8W/Np55pV9FvnDOMviH3Qy2/vd aDWjNT89hd8RZmajOmKAsabwwRzVehEkYi8yJWJ6igKpnmgagyz8To8vGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZX3X3CIO0IlZKvqUe3YcWXYHI6MB8GA1UdIwQY MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz4iXqvM ort9sHTIJ3NYP2L2Dei6/LPAD7O5UaNswCgbcYVjjaAeY0QTHnnhZls+KZFW9nYP qBB+51PitWr6X4sKXd7HEAYdFvytkyBamsDkBxNzsWImh05Ihle+aOMdkt5f8xLE DWeSbNCb+acKHRGdH/NJ03GUj04t/zcO+92m8ORVqL2usHtLDJbUTGiH28FTCXcP xu4jRX5x4ACkcprMXCdfhHiv62dWKDuusozB+erxZKfwcvrDvisha4dIcuf2Ajt9 R4LAfVj+wrvYr15AlZI3tPSDdGMV1uNMM1ybz4E0zPJkVK92HBfrScpdlT5kacT3 lWUl1+5Z4a/qgw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:28 2025 by rpki-client