This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json) Hash identifier: W84sYAUYk0s0l0evzxDR678L6G/cikuQmST/Rl6SUaY= Subject key identifier: B6:08:DE:C1:C5:14:BB:57:1B:A9:9A:02:BF:2A:B7:AE:AC:47:4E:55 Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Certificate serial: 019AF4D28974C7EC1DB402E9A5CBE7FE52D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 18:00:29 +0000 Manifest this update: Sat 06 Dec 2025 18:00:29 +0000 Manifest next update: Sun 07 Dec 2025 18:00:29 +0000 Files and hashes: 1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: TfGYgq3f5gEpAPV5Y20l64OXwijFCBrSeklfb1d3DfU=) 2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:89:74:c7:ec:1d:b4:02:e9:a5:cb:e7:fe:52:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Validity Not Before: Dec 6 18:00:29 2025 GMT Not After : Dec 7 18:00:29 2025 GMT Subject: CN=b608dec1c514bb571ba99a02bf2ab7aeac474e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:6e:47:45:78:fd:7e:56:f9:82:ef:74:c5: 92:ef:e2:42:a4:5f:ba:fb:16:66:9c:b5:c8:59:6b: a9:0e:6d:2e:9f:2c:2b:fc:de:cc:32:46:c6:b1:ea: 2e:92:1c:3b:89:4b:14:a4:49:b4:3a:e9:05:8e:b4: 98:cc:4c:12:4a:72:3d:f9:0c:15:47:36:4b:e5:c0: 20:19:6c:a3:fc:2f:44:90:e3:61:8c:c2:06:ea:ea: 2f:9a:25:e4:f3:f4:16:03:e0:6f:6e:ab:3b:42:16: 87:16:c7:d9:bb:56:bd:fc:8e:9d:df:f2:6b:4e:f9: 65:9f:53:d3:e2:c6:1f:9f:0f:a7:d4:6c:64:58:ac: 5c:4b:ba:b6:d7:ac:5b:b1:39:de:18:8c:92:9f:85: 53:dd:ba:8e:2e:09:5c:7c:d5:02:e9:c1:36:3b:57: 4c:c0:f8:8d:3d:26:56:52:80:78:b2:6d:46:c4:38: da:65:21:2f:21:53:1d:6d:8d:75:d0:bc:20:eb:c0: 19:4c:b1:68:e6:71:80:cb:23:93:f6:d8:f2:b1:24: 88:68:73:b4:0f:38:ed:69:a7:88:79:46:c9:a0:5c: 86:e7:76:ec:80:42:6c:95:1b:64:da:58:05:0e:fd: c5:d0:91:90:b5:20:7c:ac:00:40:15:da:6f:5f:b3: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:DE:C1:C5:14:BB:57:1B:A9:9A:02:BF:2A:B7:AE:AC:47:4E:55 X509v3 Authority Key Identifier: keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3b:e1:a6:5f:ba:50:b0:4a:a2:a1:34:30:18:c8:b3:4d:4f: ea:08:08:33:09:06:8d:3d:9b:45:25:51:40:5b:7b:92:04:e7: fe:de:fe:8f:6f:ba:d7:c3:3f:05:c8:80:76:3f:9e:23:58:e5: 2a:1d:46:a0:c3:56:cb:e2:5d:fc:7f:49:0d:bc:10:b6:62:68: 8d:fc:6f:6a:4e:37:4e:52:49:25:73:00:9e:0b:d3:6b:ad:8f: 58:52:59:a2:f7:4f:10:84:3d:df:d9:6c:6e:20:23:96:90:f4: 2d:28:42:49:a9:91:dc:3e:a7:38:1c:11:c4:d1:49:e5:b1:79: 6d:b3:24:ce:f9:cf:66:37:a8:1e:bd:ff:40:08:21:8c:0b:ef: 31:d1:c5:77:35:2f:a0:78:33:af:2a:06:31:d1:18:59:e7:fa: 57:82:dd:5f:0a:c6:f6:b9:2e:78:f2:52:b9:46:93:bd:23:50: 6b:56:39:9c:66:22:7a:64:75:7a:2f:62:b0:8a:e8:a9:a2:63: 0b:e5:3c:02:85:b1:d7:b0:f8:97:b8:d6:5c:6f:bc:b5:e5:22: 70:ec:a5:31:69:ec:b2:01:31:1e:71:a7:91:29:1a:b4:e3:3d: 0d:41:71:ad:e4:50:8c:38:ca:cf:f6:e5:12:09:29:b4:d0:4a: b3:d0:f5:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00ol0x+wdtALppcvn/lLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk NTk1NzUwHhcNMjUxMjA2MTgwMDI5WhcNMjUxMjA3MTgwMDI5WjAzMTEwLwYDVQQD EyhiNjA4ZGVjMWM1MTRiYjU3MWJhOTlhMDJiZjJhYjdhZWFjNDc0ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLxuR0V4/X5W+YLvdMWS7+JCpF+6 +xZmnLXIWWupDm0unywr/N7MMkbGseoukhw7iUsUpEm0OukFjrSYzEwSSnI9+QwV RzZL5cAgGWyj/C9EkONhjMIG6uovmiXk8/QWA+Bvbqs7QhaHFsfZu1a9/I6d3/Jr Tvlln1PT4sYfnw+n1GxkWKxcS7q216xbsTneGIySn4VT3bqOLglcfNUC6cE2O1dM wPiNPSZWUoB4sm1GxDjaZSEvIVMdbY110Lwg68AZTLFo5nGAyyOT9tjysSSIaHO0 DzjtaaeIeUbJoFyG53bsgEJslRtk2lgFDv3F0JGQtSB8rABAFdpvX7OxrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYI3sHFFLtXG6maAr8qt66sR05VMB8GA1UdIwQY MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTvhpl+6 ULBKoqE0MBjIs01P6ggIMwkGjT2bRSVRQFt7kgTn/t7+j2+618M/BciAdj+eI1jl Kh1GoMNWy+Jd/H9JDbwQtmJojfxvak43TlJJJXMAngvTa62PWFJZovdPEIQ939ls biAjlpD0LShCSamR3D6nOBwRxNFJ5bF5bbMkzvnPZjeoHr3/QAghjAvvMdHFdzUv oHgzryoGMdEYWef6V4LdXwrG9rkuePJSuUaTvSNQa1Y5nGYiemR1ei9isIroqaJj C+U8AoWx17D4l7jWXG+8teUicOylMWnssgExHnGnkSkatOM9DUFxreRQjDjKz/bl EgkptNBKs9D1IA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:34 2025 by rpki-client