This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json) Hash identifier: MhzswM9Z+JNAE1XRwqte+jpJEfPzs49bNslbT9FcY4Y= Subject key identifier: C6:02:9E:2D:9E:AE:00:B3:82:09:0B:86:FD:D4:34:CE:91:6E:B5:D9 Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156 Certificate serial: 019AF1D1EF60932603350D2B6D748E403692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: 4GRwsMuPJOQr59R18rEuFMeedb5cnw6Ty7fB4YZlw+k=) 2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ef:60:93:26:03:35:0d:2b:6d:74:8e:40:36:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=c6029e2d9eae00b382090b86fdd434ce916eb5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:13:e6:7c:82:b3:dd:c3:cb:9e:25:d6:ec: 9d:91:9b:c6:86:42:bd:92:c5:fb:05:7a:7a:c0:29: 5a:f5:48:73:79:fb:24:0d:a6:87:cb:a9:d5:f1:ff: a1:21:fe:76:23:2e:e3:20:af:d8:ac:28:f3:75:e0: 4d:be:01:07:db:2b:d7:f9:53:ba:a1:ae:1f:c8:b3: 00:2d:cf:f3:1a:72:bd:24:05:91:07:41:90:2c:47: f9:09:8c:8f:06:43:81:5d:33:ff:76:c3:e1:39:a8: c2:03:c8:ec:9e:d8:df:39:23:ff:88:86:f7:22:ca: 4f:07:a5:2b:b5:ee:e9:97:10:c0:94:66:be:64:5c: c1:da:21:3f:10:92:d9:3e:43:73:04:c0:cb:37:44: 64:29:52:c5:28:24:b9:98:09:59:8b:f5:27:b0:81: 37:41:ce:21:39:af:6b:b7:03:aa:61:23:bb:f1:da: 3e:2c:5e:01:c7:b5:7d:1c:50:0c:1c:7e:94:6d:a7: 37:e9:e2:98:0b:f4:5a:63:a7:94:55:4e:4c:19:ec: 0c:de:f3:41:58:01:54:f8:0d:16:7d:a4:fb:68:2a: 01:33:85:34:30:90:6f:72:79:07:2a:08:48:5e:7d: ac:ad:d7:37:92:ae:e5:d8:e7:10:dd:3b:c9:ba:6e: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:9E:2D:9E:AE:00:B3:82:09:0B:86:FD:D4:34:CE:91:6E:B5:D9 X509v3 Authority Key Identifier: keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:40:22:bd:6f:dd:ee:f4:e4:da:e4:f3:8a:d6:23:b6:77:48: 0d:24:ed:92:df:f8:27:cd:ab:61:a7:ed:ff:af:f2:67:ad:fb: 31:4b:80:f4:26:97:c5:b8:16:d0:4b:73:00:89:b0:cd:00:db: c4:02:f9:f0:7d:68:47:78:c4:76:cf:15:f0:71:8a:ab:a4:cd: 7e:5b:f5:f7:96:bb:90:ac:50:5f:c2:34:41:03:f3:f9:78:3b: d1:20:4b:c7:da:e4:7d:f5:43:7b:16:cd:06:cc:2b:44:47:e4: 22:0d:20:53:9b:e4:02:10:48:bf:af:14:a7:2e:b1:19:c4:22: 87:2f:dd:0c:09:db:27:06:d9:21:36:17:9d:6a:86:9b:33:ab: c5:24:95:ad:d2:2b:54:5c:e3:94:1e:7d:fc:c7:97:f3:1f:5b: 4a:af:d0:5c:a8:c7:5a:ac:4f:3e:f3:e2:c0:9c:5e:06:9e:0c: 5e:00:b1:ac:10:6e:9a:75:b4:60:0a:ae:f3:b4:2b:c2:d9:48: d3:6a:83:da:0e:be:b0:a2:e7:12:a9:ec:fb:11:bb:2a:8a:39: 78:5d:82:89:bc:01:8f:a4:fe:02:b2:0b:14:44:33:6d:36:cb: 9f:ba:ab:db:49:74:f3:bf:9f:b5:d1:d7:dc:33:73:81:08:61: 3f:6b:c4:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e9gkyYDNQ0rbXSOQDaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3 OTkxNTYwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EyhjNjAyOWUyZDllYWUwMGIzODIwOTBiODZmZGQ0MzRjZTkxNmViNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AAT5nyCs93Dy54l1uydkZvGhkK9 ksX7BXp6wCla9UhzefskDaaHy6nV8f+hIf52Iy7jIK/YrCjzdeBNvgEH2yvX+VO6 oa4fyLMALc/zGnK9JAWRB0GQLEf5CYyPBkOBXTP/dsPhOajCA8jsntjfOSP/iIb3 IspPB6Urte7plxDAlGa+ZFzB2iE/EJLZPkNzBMDLN0RkKVLFKCS5mAlZi/UnsIE3 Qc4hOa9rtwOqYSO78do+LF4Bx7V9HFAMHH6Ubac36eKYC/RaY6eUVU5MGewM3vNB WAFU+A0WfaT7aCoBM4U0MJBvcnkHKghIXn2srdc3kq7l2OcQ3TvJum673wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYCni2ergCzggkLhv3UNM6RbrXZMB8GA1UdIwQY MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt ZmNmZjllODQ3Y2EyLzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUAivW/d 7vTk2uTzitYjtndIDSTtkt/4J82rYaft/6/yZ637MUuA9CaXxbgW0EtzAImwzQDb xAL58H1oR3jEds8V8HGKq6TNflv195a7kKxQX8I0QQPz+Xg70SBLx9rkffVDexbN BswrREfkIg0gU5vkAhBIv68Upy6xGcQihy/dDAnbJwbZITYXnWqGmzOrxSSVrdIr VFzjlB59/MeX8x9bSq/QXKjHWqxPPvPiwJxeBp4MXgCxrBBumnW0YAqu87QrwtlI 02qD2g6+sKLnEqns+xG7Koo5eF2CibwBj6T+ArILFEQzbTbLn7qr20l087+ftdHX 3DNzgQhhP2vEXA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:13 2025 by rpki-client