This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json) Hash identifier: /24RWhqm7Wf689sJKASwZV8axVNm6ypgG02sjHdWJEk= Subject key identifier: EB:6A:B2:C2:ED:30:05:29:9B:ED:17:10:4B:4B:1B:7E:0B:17:14:0E Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1 Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1 Certificate serial: 019AFCC523C35DA0E9B560E07F0985D23FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft Manifest number: 1763 Signing time: Mon 08 Dec 2025 07:02:49 +0000 Manifest this update: Mon 08 Dec 2025 07:02:49 +0000 Manifest next update: Tue 09 Dec 2025 07:02:49 +0000 Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: SNkhesIfpqWF6mqKS6gFAbdOC8QlDnyIPGRJ2xcshEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c5:23:c3:5d:a0:e9:b5:60:e0:7f:09:85:d2:3f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1 Validity Not Before: Dec 8 07:02:49 2025 GMT Not After : Dec 9 07:02:49 2025 GMT Subject: CN=eb6ab2c2ed3005299bed17104b4b1b7e0b17140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:8f:8d:ae:ca:67:49:77:6b:fb:66:17:e1: a0:47:21:75:cc:a4:8c:fa:26:ec:05:21:8d:ba:b9: b6:df:01:9f:1b:ed:04:6e:8e:2e:5a:24:5a:cb:18: a5:52:a6:da:aa:6a:35:d7:a9:07:26:7f:7c:32:14: 01:b2:bb:c1:c9:6b:9a:07:5e:2b:8a:2d:6a:2b:80: 44:b2:11:0e:d4:c8:cc:f9:d7:c3:b1:fc:50:b3:87: 86:9c:d2:a5:6c:93:4e:98:70:9c:5f:07:1c:a5:d7: ef:c3:29:52:6c:b3:d8:cd:de:b3:0e:b2:e8:27:da: 4d:6a:58:f4:b1:3e:57:3f:51:6d:58:f8:66:26:cf: f4:0e:07:e9:f3:b7:1e:3e:75:36:a2:1e:52:42:34: 48:a4:33:96:b4:ad:b6:74:94:ba:37:b9:de:48:d3: 73:8c:bc:d3:41:13:ad:d4:a5:b5:7d:76:01:6d:0f: 03:8a:ee:7a:f3:10:80:70:3b:2d:57:b9:ed:ea:dc: b8:d3:80:36:f3:c4:fa:5c:c4:ba:3f:fa:a3:f5:24: ab:34:06:ae:de:65:31:90:3b:1e:0c:ac:d6:17:b8: 3b:99:a5:78:16:45:da:4a:c4:40:65:e2:ce:e2:1b: 17:b8:32:c9:e2:f0:ec:07:22:5e:bf:a1:08:e6:30: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:B2:C2:ED:30:05:29:9B:ED:17:10:4B:4B:1B:7E:0B:17:14:0E X509v3 Authority Key Identifier: keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ee:c0:8a:50:ce:32:47:f6:fa:b2:f3:53:c0:f0:1f:ae:11: 71:12:66:11:13:48:9f:90:2f:43:15:26:02:f5:37:ae:aa:93: a3:23:93:ce:39:b4:39:75:bd:00:62:1f:0d:08:ca:90:23:27: 0e:54:9c:80:92:dc:9e:c2:92:92:cb:66:23:db:bf:ce:f7:18: 14:7d:6b:c6:12:e9:07:a5:3a:b6:78:30:44:ee:18:56:1c:08: 91:af:6e:02:25:46:ac:5c:b8:f0:22:a6:18:76:4b:78:c8:98: 1d:48:1a:6d:b1:34:3f:39:1f:4e:26:ff:ab:8d:8e:27:f0:86: df:c0:9c:82:d5:06:32:65:f6:28:fc:30:2f:aa:0d:b7:e3:33: e8:8c:f0:2b:fc:70:cd:6e:c1:16:c1:45:98:e4:c9:92:d8:47: 36:92:32:c7:01:62:51:a0:86:f0:8e:90:9f:64:bd:c3:34:cf: f8:54:92:f5:db:48:98:39:ca:ae:b0:d7:88:b9:93:5f:1a:f9: f2:55:c7:70:3c:8f:76:3d:5d:99:ef:ee:fc:37:f0:21:c9:55: 64:3d:3e:3a:ae:5a:40:0a:c1:fd:ce:9b:5b:1c:89:84:5f:ab: f4:09:0d:0c:79:dd:28:9c:a5:02:4d:ed:b2:da:bb:5f:37:58: 69:1d:e1:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xSPDXaDptWDgfwmF0j/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZWFjNTNmOGVlM2VlNGQxNDNjNzBkZmY2NzM1NTIwMzg1 ZTRjZDEwHhcNMjUxMjA4MDcwMjQ5WhcNMjUxMjA5MDcwMjQ5WjAzMTEwLwYDVQQD EyhlYjZhYjJjMmVkMzAwNTI5OWJlZDE3MTA0YjRiMWI3ZTBiMTcxNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V6Pja7KZ0l3a/tmF+GgRyF1zKSM +ibsBSGNurm23wGfG+0Ebo4uWiRayxilUqbaqmo116kHJn98MhQBsrvByWuaB14r ii1qK4BEshEO1MjM+dfDsfxQs4eGnNKlbJNOmHCcXwccpdfvwylSbLPYzd6zDrLo J9pNalj0sT5XP1FtWPhmJs/0Dgfp87cePnU2oh5SQjRIpDOWtK22dJS6N7neSNNz jLzTQROt1KW1fXYBbQ8Diu568xCAcDstV7nt6ty404A288T6XMS6P/qj9SSrNAau 3mUxkDseDKzWF7g7maV4FkXaSsRAZeLO4hsXuDLJ4vDsByJev6EI5jAlMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtqssLtMAUpm+0XEEtLG34LFxQOMB8GA1UdIwQY MBaAFP/qxT+O4+5NFDxw3/ZzVSA4XkzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hY2U4YmMtYWQ5My00ZDU5LTkyMDkt MDU5NzQyYjM1MmE4LzEvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hY2U4YmMtYWQ5My00ZDU5LTkyMDktMDU5NzQyYjM1MmE4 LzEvXy1yRlA0N2o3azBVUEhEZjluTlZJRGhlVE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke7AilDO Mkf2+rLzU8DwH64RcRJmERNIn5AvQxUmAvU3rqqToyOTzjm0OXW9AGIfDQjKkCMn DlScgJLcnsKSkstmI9u/zvcYFH1rxhLpB6U6tngwRO4YVhwIka9uAiVGrFy48CKm GHZLeMiYHUgabbE0PzkfTib/q42OJ/CG38CcgtUGMmX2KPwwL6oNt+Mz6IzwK/xw zW7BFsFFmOTJkthHNpIyxwFiUaCG8I6Qn2S9wzTP+FSS9dtImDnKrrDXiLmTXxr5 8lXHcDyPdj1dme/u/DfwIclVZD0+Oq5aQArB/c6bWxyJhF+r9AkNDHndKJylAk3t stq7XzdYaR3hfA== -----END CERTIFICATE-----Generated at Mon Dec 8 10:27:58 2025 by rpki-client