This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json) Hash identifier: 6V/ApuzGmeELQf2g2izFuLVI/EeF0ZvYwvGgjPEQ6/c= Subject key identifier: B6:E9:D2:A9:8C:13:BA:28:6E:88:A7:AA:A1:E8:CB:FD:58:C5:FB:79 Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Certificate serial: 019AF2096CB4EC225A01734246F986292B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft Manifest number: 16E1 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: gjGXwThLnRbYnRw596ggfIHSS1EjUy8Cu3emyWze9xE=) 2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6c:b4:ec:22:5a:01:73:42:46:f9:86:29:2b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=b6e9d2a98c13ba286e88a7aaa1e8cbfd58c5fb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:a9:53:eb:01:42:a6:90:7f:93:b4:56:ef: 46:53:c0:5a:30:6a:c3:96:23:60:f9:c0:99:25:d1: dc:01:36:35:de:ba:ba:7b:f6:16:51:5f:4a:ab:ec: 08:a1:aa:66:35:c1:d9:72:da:7b:7f:01:f6:17:8e: 2d:b1:5e:34:59:72:8b:0f:c3:1d:fe:a1:9a:d5:2e: 1d:b1:51:95:ca:fe:a1:a2:00:c5:fb:a5:0f:0b:1f: 9f:02:3c:9a:2b:3f:e3:d8:27:2d:aa:42:ad:74:05: e5:70:64:e9:c9:bc:02:8e:4a:d9:6e:e2:59:84:07: dd:bd:8e:33:ee:88:3a:ad:e6:55:11:e2:1a:67:93: 4a:97:8e:b0:1e:d3:7d:6f:29:20:7e:ac:eb:91:4f: 5c:be:2b:f9:73:2b:96:8d:d0:82:60:0f:b2:ec:4c: 80:85:65:ca:f1:44:ba:d0:b9:40:4e:e9:b0:d0:56: 3c:5d:0a:bf:f7:2e:99:52:26:55:9a:64:3a:45:eb: 18:69:f2:24:eb:c5:ba:67:3c:9d:78:3f:d2:aa:81: 57:48:82:e2:4d:ec:5b:fb:cd:d6:ce:97:a2:50:02: d5:ee:06:2e:e2:02:dd:3a:ba:87:7c:08:ee:4e:fc: b9:3c:1a:d4:33:4e:6c:06:cd:6b:03:0e:ee:a6:ed: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E9:D2:A9:8C:13:BA:28:6E:88:A7:AA:A1:E8:CB:FD:58:C5:FB:79 X509v3 Authority Key Identifier: keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:59:3c:1a:59:1b:f6:7d:c1:60:8a:3d:3b:e5:a4:d5:55:a8: 97:d9:35:82:d9:fc:bb:e0:47:4c:a8:ab:3b:94:62:20:de:96: f3:6b:a0:c5:09:38:7e:e0:df:6c:07:9e:69:91:42:3d:f8:fa: 4f:4b:80:e3:35:40:30:6e:e0:2f:c4:03:a5:d8:99:50:19:37: b2:68:b0:c8:cb:8a:d4:59:23:a4:d4:e1:1a:7a:c9:58:e7:fc: d8:4b:3e:f6:43:ef:c7:bb:06:c8:bd:0c:d5:c0:9f:82:37:0e: 4e:1e:07:64:64:8f:0d:29:b3:80:ea:a6:d3:6c:8d:c4:fb:1e: 94:06:08:36:65:9b:17:44:c0:cf:e3:dc:eb:02:3e:a1:1e:67: 40:eb:87:ce:7d:5e:10:1a:1c:c9:0a:ec:18:75:89:f0:31:83: 1a:8e:4f:0a:d8:b8:56:17:68:89:82:27:fe:7a:f6:ac:5b:5b: ff:b3:d0:ca:77:25:68:ac:89:f3:47:06:7a:77:de:3e:f4:40: da:96:5e:0d:54:8b:d0:56:92:29:4d:a0:cf:5b:3d:fb:20:75: 73:96:b2:86:42:31:3e:df:82:40:89:59:fc:1c:56:50:b2:80: 0c:20:ce:10:8a:29:10:13:be:51:b3:7a:66:3c:0f:cd:ef:ef: e3:7a:67:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWy07CJaAXNCRvmGKSt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZmUzOTAwZTE0MWMzYjE2OWEzY2NjYjM1NTdiY2NlZjI4 OTVlODUwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhiNmU5ZDJhOThjMTNiYTI4NmU4OGE3YWFhMWU4Y2JmZDU4YzVmYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RCpU+sBQqaQf5O0Vu9GU8BaMGrD liNg+cCZJdHcATY13rq6e/YWUV9Kq+wIoapmNcHZctp7fwH2F44tsV40WXKLD8Md /qGa1S4dsVGVyv6hogDF+6UPCx+fAjyaKz/j2CctqkKtdAXlcGTpybwCjkrZbuJZ hAfdvY4z7og6reZVEeIaZ5NKl46wHtN9bykgfqzrkU9cviv5cyuWjdCCYA+y7EyA hWXK8US60LlATumw0FY8XQq/9y6ZUiZVmmQ6ResYafIk68W6ZzydeD/SqoFXSILi Texb+83WzpeiUALV7gYu4gLdOrqHfAjuTvy5PBrUM05sBs1rAw7upu2JJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbp0qmME7ooboinqqHoy/1Yxft5MB8GA1UdIwQY MBaAFBH+OQDhQcOxaaPMyzVXvM7yiV6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEt Y2UxYThkYzk0MDQ4LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEtY2UxYThkYzk0MDQ4 LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVk8Glkb 9n3BYIo9O+Wk1VWol9k1gtn8u+BHTKirO5RiIN6W82ugxQk4fuDfbAeeaZFCPfj6 T0uA4zVAMG7gL8QDpdiZUBk3smiwyMuK1FkjpNThGnrJWOf82Es+9kPvx7sGyL0M 1cCfgjcOTh4HZGSPDSmzgOqm02yNxPselAYINmWbF0TAz+Pc6wI+oR5nQOuHzn1e EBocyQrsGHWJ8DGDGo5PCti4VhdoiYIn/nr2rFtb/7PQynclaKyJ80cGenfePvRA 2pZeDVSL0FaSKU2gz1s9+yB1c5ayhkIxPt+CQIlZ/BxWULKADCDOEIopEBO+UbN6 ZjwPze/v43pnbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:44 2025 by rpki-client