This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json) Hash identifier: T/LGzQ9rafBEpeIuQWRx8kqh91qYTWSW6aig+8gI9Q8= Subject key identifier: 31:DB:88:B0:C5:1B:14:B4:04:82:AA:3F:41:C0:65:85:59:DE:4E:0B Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4 Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4 Certificate serial: 019AF389D369E194A2BC2AD5B12802823D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft Manifest number: 014B Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: iUxow4w9oDtdxq1cHeNwyg2B1zhQs4NQ2js1IOvWBHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d3:69:e1:94:a2:bc:2a:d5:b1:28:02:82:3d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4 Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=31db88b0c51b14b40482aa3f41c0658559de4e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:0e:a5:b8:b2:de:9b:f7:9b:d2:7e:b1:23: a7:1e:dd:05:05:77:b2:36:4b:67:6b:97:c8:3d:72: f0:7b:69:24:06:9a:89:14:47:fb:eb:4e:c2:97:75: 59:4d:0c:d7:e9:be:57:8b:5f:27:de:de:ea:87:5d: a0:10:cc:1b:d0:56:a6:fe:e5:c5:db:37:40:94:d1: 88:e9:9f:97:0f:ee:32:ae:21:45:c4:5d:29:f6:cb: ac:6d:bc:c7:c4:c5:5b:7d:4f:34:57:d0:5f:38:a0: cd:ee:26:43:ba:0e:79:e6:b8:55:b5:9e:b8:0d:28: fe:13:22:b2:ef:75:d7:64:c3:3f:85:6c:f8:06:f4: f9:85:53:b0:2c:71:0d:e7:b5:1f:ad:4d:3a:bf:65: c8:63:a2:30:54:7d:04:a5:02:4d:08:8a:7d:d3:33: bc:2c:00:0f:33:61:ed:53:af:07:cf:62:11:95:ac: ac:52:51:47:33:31:81:03:cc:ea:39:b4:ae:33:5f: bd:1a:0c:96:4f:e0:7b:4c:02:7a:05:3d:a3:10:35: d7:56:10:1b:df:98:87:ba:b5:d5:04:05:9f:34:fa: ab:f2:1a:1f:9a:f6:da:c1:22:8b:f6:12:94:02:3b: 99:0c:45:51:7f:a2:a1:7d:c3:30:25:88:7e:2b:63: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DB:88:B0:C5:1B:14:B4:04:82:AA:3F:41:C0:65:85:59:DE:4E:0B X509v3 Authority Key Identifier: keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:56:b3:85:02:4f:a0:c8:07:88:b2:7e:cd:06:29:51:f7:e4: c0:7b:98:bc:ea:c9:34:2c:55:aa:cd:e6:b8:f0:ee:de:d2:46: 7a:5e:15:73:66:57:a2:82:dc:02:65:3f:d9:84:91:a6:46:4d: 41:1f:ed:40:1e:31:4d:7a:44:97:27:75:df:95:bc:c4:13:28: a3:0e:cf:58:f1:37:a7:da:c4:10:89:1e:8b:c2:0b:b6:c5:95: b9:62:ed:82:83:cc:4d:c7:ee:ac:fc:13:25:b0:d6:1d:05:d1: 0e:76:1d:7a:d5:a4:ae:f3:ce:a1:84:7a:ae:6e:a8:d0:45:78: 4e:ec:d7:06:a4:90:52:7b:2e:8c:e0:fc:28:5a:e0:e3:a7:69: 63:07:2e:30:71:c2:21:a4:1d:cd:79:c2:09:1c:d1:a7:b1:e9: 79:ab:f6:22:28:7b:0e:47:6c:1a:a0:3e:9e:d5:4b:c9:11:a0: ec:cf:04:14:cb:9d:ef:50:62:14:b6:d7:dd:b3:ec:6f:fc:e6: 51:98:65:65:a2:e1:53:37:a9:38:cf:1c:80:af:3b:71:fb:4c: ea:d7:13:bc:57:77:86:9d:2f:cc:cf:74:fc:46:4c:91:b3:4b: bf:a6:28:18:c3:4b:ec:7b:9c:b7:65:da:a2:b6:11:da:d1:3f: eb:4b:4f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidNp4ZSivCrVsSgCgj1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2ViNDQ1ZDEyYWM5NTU0N2QwYmI2OTgyNjhjOTQ0YmQ4 YzQ3YTQwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EygzMWRiODhiMGM1MWIxNGI0MDQ4MmFhM2Y0MWMwNjU4NTU5ZGU0ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+oOpbiy3pv3m9J+sSOnHt0FBXey Nktna5fIPXLwe2kkBpqJFEf7607Cl3VZTQzX6b5Xi18n3t7qh12gEMwb0Fam/uXF 2zdAlNGI6Z+XD+4yriFFxF0p9susbbzHxMVbfU80V9BfOKDN7iZDug555rhVtZ64 DSj+EyKy73XXZMM/hWz4BvT5hVOwLHEN57UfrU06v2XIY6IwVH0EpQJNCIp90zO8 LAAPM2HtU68Hz2IRlaysUlFHMzGBA8zqObSuM1+9GgyWT+B7TAJ6BT2jEDXXVhAb 35iHurXVBAWfNPqr8hofmvbawSKL9hKUAjuZDEVRf6KhfcMwJYh+K2O8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHbiLDFGxS0BIKqP0HAZYVZ3k4LMB8GA1UdIwQY MBaAFHl+tEXRKslVR9C7aYJoyUS9jEekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVg2MFJkRXF5VlZIMEx0cGdtakpSTDJNUjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zMjZjMTMtYTEwNS00MDdjLTg0Yzgt NzAzNGQ3MjliOWNiLzEvZVg2MFJkRXF5VlZIMEx0cGdtakpSTDJNUjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zMjZjMTMtYTEwNS00MDdjLTg0YzgtNzAzNGQ3MjliOWNi LzEvZVg2MFJkRXF5VlZIMEx0cGdtakpSTDJNUjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFazhQJP oMgHiLJ+zQYpUffkwHuYvOrJNCxVqs3muPDu3tJGel4Vc2ZXooLcAmU/2YSRpkZN QR/tQB4xTXpElyd135W8xBMoow7PWPE3p9rEEIkei8ILtsWVuWLtgoPMTcfurPwT JbDWHQXRDnYdetWkrvPOoYR6rm6o0EV4TuzXBqSQUnsujOD8KFrg46dpYwcuMHHC IaQdzXnCCRzRp7Hpeav2Iih7DkdsGqA+ntVLyRGg7M8EFMud71BiFLbX3bPsb/zm UZhlZaLhUzepOM8cgK87cftM6tcTvFd3hp0vzM90/EZMkbNLv6YoGMNL7Huct2Xa orYR2tE/60tPiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:21 2025 by rpki-client