This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json) Hash identifier: P9YcOff0z6LXkhxGuC+DPXzeCTNttt5+hy2KJp2hk3w= Subject key identifier: 9E:48:68:CD:C2:8C:D8:48:1B:A0:58:28:1A:74:12:C8:45:B6:A3:32 Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Certificate serial: 019AF19B5A937CF6C14CE4163E0471D27B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: Xd6l60M5Qeb2SIqzTfdknnTF1mNipRSiEX4R0olzI+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5a:93:7c:f6:c1:4c:e4:16:3e:04:71:d2:7b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=9e4868cdc28cd8481ba058281a7412c845b6a332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:f8:44:8c:8c:2d:43:62:c8:de:a9:03:c2: 0d:6b:24:a5:d3:1b:b9:57:95:4d:b1:5f:8c:69:bd: 00:bd:93:a3:88:78:29:27:8d:d4:3c:05:1f:6a:da: 47:fe:8e:44:73:fa:72:e6:93:b2:cc:6d:22:a7:7a: 49:8b:44:e6:cf:34:c2:6a:de:c7:98:eb:03:c7:37: bb:5a:3e:1d:f0:82:1f:d5:54:25:8a:67:9d:e8:23: 8f:b6:76:06:a6:ea:75:16:35:b0:fb:c5:d8:6a:cf: 14:63:4b:c3:8c:3f:81:93:63:df:65:53:ba:5d:d4: bd:79:bc:7a:2b:91:8e:34:54:f0:42:8b:85:9a:65: 31:0d:92:32:2e:24:81:59:70:c5:21:07:76:ef:8c: 21:fe:52:d0:1a:a6:64:37:ce:51:21:e9:e2:70:df: ad:03:44:1c:e3:4c:52:ab:81:cf:27:06:aa:fc:f5: 64:fb:f5:75:34:06:bb:2a:a6:5e:e8:79:e1:ac:7e: 0b:d4:a7:05:48:f0:1c:0a:0d:b0:7a:e9:a6:e6:90: 26:bc:f0:03:af:ea:24:a0:4a:d7:de:4c:3d:ac:4c: 14:3e:3b:ff:ec:68:a0:39:f9:35:a1:6a:48:73:7a: c8:8f:8f:6a:7d:c8:b8:ff:5a:22:50:77:eb:15:b7: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:48:68:CD:C2:8C:D8:48:1B:A0:58:28:1A:74:12:C8:45:B6:A3:32 X509v3 Authority Key Identifier: keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b2:9c:7e:d1:95:c1:bc:c3:a1:74:57:b1:16:61:69:60:1b: f4:f1:79:2f:42:a6:09:b3:0d:a6:b2:df:14:fe:f7:13:15:6c: a9:71:8f:a9:75:5d:ba:c4:1c:ab:5c:70:da:8f:df:1f:ea:1c: 95:c6:8d:19:2f:21:14:9d:f2:3c:8e:40:57:43:e4:24:2c:0a: 03:37:af:03:60:e7:d2:fa:7f:f9:37:15:39:13:8f:be:7a:6a: 8e:b7:47:5e:2e:b3:f0:7b:75:c8:59:65:de:88:23:56:4a:4d: 7d:f5:59:5f:52:61:a8:bc:7c:e5:07:03:9e:aa:88:c9:19:26: 26:2f:98:c7:2d:d3:3f:53:fd:c5:89:fe:ed:31:3a:94:06:bd: 4a:53:d2:60:47:8d:31:b4:cc:5b:45:bd:1f:46:9a:88:80:0e: 39:e0:32:ea:3c:cc:bb:43:7c:bf:b4:48:69:15:a6:21:5b:85: 09:70:bc:78:39:ae:11:1e:f5:5b:6e:03:ac:88:ab:68:c8:dc: 71:14:d7:c8:21:e8:a4:a4:69:ac:1c:2c:e0:5e:c2:c6:bf:b3: 29:0c:16:12:c4:1b:0a:8b:f1:5f:d0:9b:02:09:af:b2:f8:08: 4b:11:4f:86:fa:e4:1c:7c:be:22:51:fe:2a:db:4e:7a:c1:22: 83:9f:8a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1qTfPbBTOQWPgRx0ntzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj MWVhNmIwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD Eyg5ZTQ4NjhjZGMyOGNkODQ4MWJhMDU4MjgxYTc0MTJjODQ1YjZhMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqX4RIyMLUNiyN6pA8INaySl0xu5 V5VNsV+Mab0AvZOjiHgpJ43UPAUfatpH/o5Ec/py5pOyzG0ip3pJi0TmzzTCat7H mOsDxze7Wj4d8IIf1VQlimed6COPtnYGpup1FjWw+8XYas8UY0vDjD+Bk2PfZVO6 XdS9ebx6K5GONFTwQouFmmUxDZIyLiSBWXDFIQd274wh/lLQGqZkN85RIenicN+t A0Qc40xSq4HPJwaq/PVk+/V1NAa7KqZe6HnhrH4L1KcFSPAcCg2weumm5pAmvPAD r+okoErX3kw9rEwUPjv/7GigOfk1oWpIc3rIj49qfci4/1oiUHfrFbfYxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5IaM3CjNhIG6BYKBp0EshFtqMyMB8GA1UdIwQY MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2 LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrKcftGV wbzDoXRXsRZhaWAb9PF5L0KmCbMNprLfFP73ExVsqXGPqXVdusQcq1xw2o/fH+oc lcaNGS8hFJ3yPI5AV0PkJCwKAzevA2Dn0vp/+TcVOROPvnpqjrdHXi6z8Ht1yFll 3ogjVkpNffVZX1JhqLx85QcDnqqIyRkmJi+Yxy3TP1P9xYn+7TE6lAa9SlPSYEeN MbTMW0W9H0aaiIAOOeAy6jzMu0N8v7RIaRWmIVuFCXC8eDmuER71W24DrIiraMjc cRTXyCHopKRprBws4F7Cxr+zKQwWEsQbCovxX9CbAgmvsvgISxFPhvrkHHy+IlH+ KttOesEig5+Krw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:12:08 2025 by rpki-client