This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft File: eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json) Hash identifier: TA1RAFRenu7GwtsRJMSyESSRSZNw8+FcsA//zgSJgj0= Subject key identifier: B0:21:70:52:AF:4B:09:AF:82:EB:74:13:75:CB:23:46:9D:2D:8D:39 Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E Certificate issuer: /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e Certificate serial: 019AF464B043CF22CB4D6CDCE053F17B5F4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 16:00:30 +0000 Manifest this update: Sat 06 Dec 2025 16:00:30 +0000 Manifest next update: Sun 07 Dec 2025 16:00:30 +0000 Files and hashes: 1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: wOy6YlUFvztOC2lcnpDmYmmZoF8OsQIAZD7NNKkPQr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:b0:43:cf:22:cb:4d:6c:dc:e0:53:f1:7b:5f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e Validity Not Before: Dec 6 16:00:30 2025 GMT Not After : Dec 7 16:00:30 2025 GMT Subject: CN=b0217052af4b09af82eb741375cb23469d2d8d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:f0:32:4f:f5:1f:03:b2:f4:e6:74:ba:d4: 15:e9:eb:21:96:e6:d6:94:7b:56:35:85:a8:68:0a: f3:8a:63:69:35:af:08:ea:05:94:1e:18:4e:e5:0a: 90:cc:27:cf:4a:ca:d5:7a:aa:7c:b9:6c:0c:78:a0: e9:65:6f:77:dd:87:a7:f4:43:ff:d6:f6:e7:86:3d: 8c:2d:8b:eb:76:52:a0:d0:08:b4:58:43:76:cd:f5: e8:1b:ee:9f:a6:84:3a:80:7d:03:cf:18:d9:97:e6: ef:63:df:c7:ed:81:5d:5a:e9:08:ee:4e:4f:84:c6: db:44:28:b3:7c:c9:89:e8:72:07:43:c6:26:d1:40: c1:9d:c1:c4:6a:7a:32:cf:d5:d4:f0:c4:d3:6e:4c: fd:bf:1b:44:3b:cd:8b:68:ec:3c:81:ba:a3:9f:73: 82:d6:3e:7e:a4:8d:46:f5:ed:9b:a1:7f:3e:f0:e6: 1d:1f:d7:49:2e:bf:59:56:1f:90:31:32:66:35:60: ec:4f:8f:bf:3a:3e:1a:e0:9e:7d:09:26:b7:ca:5f: 22:4b:39:5b:e5:db:d5:f5:d4:9e:b8:b9:94:65:3e: 9e:03:40:cf:08:80:aa:77:95:a0:8b:22:96:69:65: 0c:6f:15:85:94:39:3e:a5:5e:f6:d8:1c:c3:9a:1e: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:70:52:AF:4B:09:AF:82:EB:74:13:75:CB:23:46:9D:2D:8D:39 X509v3 Authority Key Identifier: keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:08:69:12:79:a5:d5:2e:c9:75:c8:ba:4e:60:98:fd:ff:df: a3:68:76:ee:49:d0:2e:d5:31:4c:41:1c:12:cf:9d:13:06:19: bb:81:3b:6f:b5:be:d7:c6:21:ec:12:b6:dc:43:83:05:6e:4c: f4:c7:9c:87:bd:b9:8a:82:59:80:97:08:f4:71:39:b0:e2:4a: dc:bf:4e:69:6c:b1:13:e3:83:7f:25:9d:56:a1:23:b5:b0:0f: 28:9a:8b:2e:fa:0f:6a:8f:de:f2:2a:a1:b2:aa:19:d3:b0:3d: c5:a5:5a:11:8c:7d:ab:6f:45:92:aa:b5:a6:99:9d:9e:50:78: cf:73:f4:dc:2f:dc:2e:06:be:ad:37:0e:07:49:5b:a6:6a:7c: df:67:b9:f1:85:e5:e2:73:46:1f:ba:2b:a9:2b:3b:53:ce:80: 51:ff:8f:96:19:4d:bc:03:15:d8:b4:fa:c3:f4:3b:85:f2:ab: 26:aa:80:e4:8a:fb:8a:2e:ad:51:2c:60:12:59:5b:cd:43:42: 31:54:02:96:e9:73:a0:65:02:7b:43:4d:f4:b2:7c:93:c9:90: 86:84:46:ff:0c:1e:4a:97:55:81:d7:24:ff:f3:f0:21:b6:23: ff:7e:0c:aa:7a:ed:78:76:47:11:90:8c:6c:a7:b4:cf:9c:32: d1:ed:e2:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLBDzyLLTWzc4FPxe19KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NWQ2NThkZTAzYThkY2QwYjZkZjZlNzY2YzcwN2Y0ZmUz ZDE1MmUwHhcNMjUxMjA2MTYwMDMwWhcNMjUxMjA3MTYwMDMwWjAzMTEwLwYDVQQD EyhiMDIxNzA1MmFmNGIwOWFmODJlYjc0MTM3NWNiMjM0NjlkMmQ4ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71XwMk/1HwOy9OZ0utQV6eshlubW lHtWNYWoaArzimNpNa8I6gWUHhhO5QqQzCfPSsrVeqp8uWwMeKDpZW933Yen9EP/ 1vbnhj2MLYvrdlKg0Ai0WEN2zfXoG+6fpoQ6gH0DzxjZl+bvY9/H7YFdWukI7k5P hMbbRCizfMmJ6HIHQ8Ym0UDBncHEanoyz9XU8MTTbkz9vxtEO82LaOw8gbqjn3OC 1j5+pI1G9e2boX8+8OYdH9dJLr9ZVh+QMTJmNWDsT4+/Oj4a4J59CSa3yl8iSzlb 5dvV9dSeuLmUZT6eA0DPCICqd5WgiyKWaWUMbxWFlDk+pV722BzDmh5iDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAhcFKvSwmvgut0E3XLI0adLY05MB8GA1UdIwQY MBaAFHldZY3gOo3NC23252bHB/T+PRUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYt N2I3NTY1MGNiMmNlLzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYtN2I3NTY1MGNiMmNl LzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAhpEnml 1S7Jdci6TmCY/f/fo2h27knQLtUxTEEcEs+dEwYZu4E7b7W+18Yh7BK23EODBW5M 9Mech725ioJZgJcI9HE5sOJK3L9OaWyxE+ODfyWdVqEjtbAPKJqLLvoPao/e8iqh sqoZ07A9xaVaEYx9q29Fkqq1ppmdnlB4z3P03C/cLga+rTcOB0lbpmp832e58YXl 4nNGH7orqSs7U86AUf+PlhlNvAMV2LT6w/Q7hfKrJqqA5Ir7ii6tUSxgEllbzUNC MVQClulzoGUCe0NN9LJ8k8mQhoRG/wweSpdVgdck//PwIbYj/34MqnrteHZHEZCM bKe0z5wy0e3i8Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:09 2025 by rpki-client