This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json) Hash identifier: iVxTz1W15d+vlapWYG3uvSzW+2pLqXxXM9PmRSEhkTI= Subject key identifier: A4:D6:26:54:A6:0E:27:AD:F0:73:C5:64:60:A8:C6:D5:44:44:EE:F0 Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Certificate serial: 019AF2770EEEB8B4DCD9C00EA408BD4E66D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: efUIQOuLaeuf09U8bmSTybuNiAKqAJe27VqM1jlKs1k=) 2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0e:ee:b8:b4:dc:d9:c0:0e:a4:08:bd:4e:66:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=a4d62654a60e27adf073c56460a8c6d54444eef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:8f:9e:bd:6e:6e:9b:a3:b1:21:6a:b3:38: 7f:56:7d:70:66:3d:88:05:33:4c:e6:38:f8:e6:57: 71:98:18:dd:44:d4:45:6b:e1:1d:92:1a:90:d3:ba: 10:29:9f:88:e0:11:9c:ca:bf:c1:b6:05:b7:ab:38: d3:e6:21:fd:e0:eb:19:b6:56:4d:f8:c0:17:2e:9d: 8f:0f:72:d2:42:3d:b8:8c:96:7b:c5:1a:0b:4b:39: 67:6b:38:94:58:5c:a1:c2:0a:8a:a9:5c:55:86:b1: 61:82:49:77:39:50:47:c6:49:3d:e1:c6:b4:dc:33: 46:60:eb:36:e7:a9:95:d7:a8:66:ee:03:91:7e:6b: d2:f9:0b:15:66:e9:70:68:28:7b:c9:89:46:69:5d: e9:a4:c3:2e:d6:4a:30:22:c3:1e:e0:2e:0d:3f:dc: 5b:9d:66:63:52:73:b8:20:72:af:8b:62:7d:4f:bd: 73:cc:d9:b6:61:ed:3d:08:d2:c1:aa:b1:f1:a0:2c: db:c0:54:a9:d2:87:48:b4:0b:8e:ca:e4:04:de:82: de:77:40:11:87:14:d9:58:41:98:5c:c2:f0:26:1e: 86:a6:0c:f4:3a:09:bf:3d:57:61:d8:a9:b1:57:23: 41:86:55:e7:80:55:93:fc:6f:1a:9c:87:1d:33:ce: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:26:54:A6:0E:27:AD:F0:73:C5:64:60:A8:C6:D5:44:44:EE:F0 X509v3 Authority Key Identifier: keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:90:b9:4a:1d:e5:9d:01:a6:81:7d:8a:08:3c:44:d0:a3:72: 6e:43:12:9d:33:a2:0f:04:ed:df:25:2c:cd:8a:cb:5a:5c:65: dc:09:af:53:46:df:cd:03:4d:ab:92:77:d2:cb:60:a3:e0:cc: c8:6d:19:b8:0e:7f:b9:f1:f0:60:9f:10:5b:98:bf:42:fb:96: 7c:49:4d:b3:1b:76:2e:26:fc:8a:d1:43:d7:bd:b3:9b:14:7b: 5e:84:61:a3:26:19:a1:34:e0:b2:4b:34:82:67:15:99:78:4f: a7:f5:58:c2:4d:21:30:38:f5:74:90:43:80:54:b1:8a:cf:26: 6e:05:5a:f4:38:27:20:c9:ea:92:1c:78:d5:ea:ca:46:fd:79: c7:c7:da:88:08:b5:72:c3:a8:2f:2e:56:65:5d:bd:5c:da:f8: db:5f:0b:89:dc:00:21:86:b7:87:e1:99:60:d1:1c:5d:fc:46: ab:cc:73:de:0b:2f:b7:46:1a:b5:ce:41:0b:6c:e5:21:dc:e9: 80:a6:20:8d:14:d6:fa:aa:0d:6e:f1:25:b3:89:28:d9:17:49: 65:d5:ff:37:f0:da:32:1b:fd:1d:a1:20:f0:4b:eb:80:bf:a3: d3:d5:da:d2:13:81:9a:af:aa:36:87:d6:fa:3c:37:80:49:42: 71:82:8c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydw7uuLTc2cAOpAi9TmbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh ZmMyNDYwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhhNGQ2MjY1NGE2MGUyN2FkZjA3M2M1NjQ2MGE4YzZkNTQ0NDRlZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l6Pnr1ubpujsSFqszh/Vn1wZj2I BTNM5jj45ldxmBjdRNRFa+EdkhqQ07oQKZ+I4BGcyr/BtgW3qzjT5iH94OsZtlZN +MAXLp2PD3LSQj24jJZ7xRoLSzlnaziUWFyhwgqKqVxVhrFhgkl3OVBHxkk94ca0 3DNGYOs256mV16hm7gORfmvS+QsVZulwaCh7yYlGaV3ppMMu1kowIsMe4C4NP9xb nWZjUnO4IHKvi2J9T71zzNm2Ye09CNLBqrHxoCzbwFSp0odItAuOyuQE3oLed0AR hxTZWEGYXMLwJh6Gpgz0Ogm/PVdh2KmxVyNBhlXngFWT/G8anIcdM86ckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTWJlSmDiet8HPFZGCoxtVERO7wMB8GA1UdIwQY MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt NDdlMzA0OTgzMGIwLzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5C5Sh3l nQGmgX2KCDxE0KNybkMSnTOiDwTt3yUszYrLWlxl3AmvU0bfzQNNq5J30stgo+DM yG0ZuA5/ufHwYJ8QW5i/QvuWfElNsxt2Lib8itFD172zmxR7XoRhoyYZoTTgsks0 gmcVmXhPp/VYwk0hMDj1dJBDgFSxis8mbgVa9DgnIMnqkhx41erKRv15x8faiAi1 csOoLy5WZV29XNr4218LidwAIYa3h+GZYNEcXfxGq8xz3gsvt0Yatc5BC2zlIdzp gKYgjRTW+qoNbvEls4ko2RdJZdX/N/DaMhv9HaEg8EvrgL+j09Xa0hOBmq+qNofW +jw3gElCcYKMEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:00 2025 by rpki-client