This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json) Hash identifier: Ha6Ag5rPMy33Jf1s0B1mPuwcEkCuHQAxFJd0AYa79DI= Subject key identifier: 66:BA:1C:99:80:87:BC:68:40:9F:D3:AF:4E:5B:EF:06:63:6B:28:7D Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef Certificate serial: 019AF3C0A01E11F9E3F887A542547E69B4DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft Manifest number: 12A4 Signing time: Sat 06 Dec 2025 13:01:18 +0000 Manifest this update: Sat 06 Dec 2025 13:01:18 +0000 Manifest next update: Sun 07 Dec 2025 13:01:18 +0000 Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: JZwOSS37N91iecCfFblbudZf0s2OY9Z3aFZ4LBQUqFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a0:1e:11:f9:e3:f8:87:a5:42:54:7e:69:b4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef Validity Not Before: Dec 6 13:01:18 2025 GMT Not After : Dec 7 13:01:18 2025 GMT Subject: CN=66ba1c998087bc68409fd3af4e5bef06636b287d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:33:c8:7c:d9:d2:83:2e:10:da:97:17:f5: 05:3a:37:f5:10:d1:65:d8:75:31:d4:f8:96:bd:e8: ff:ec:7c:00:f2:30:e4:6c:1f:8d:73:a7:1e:ac:7f: 88:1d:33:9e:57:3f:75:48:08:7b:27:ab:59:8a:d8: be:0c:04:c4:87:d5:34:7e:c0:6e:56:49:6b:a4:41: 4f:a5:3d:e4:da:c0:28:42:28:8a:70:fa:f8:8e:cb: 43:bf:83:79:db:eb:49:10:02:32:6f:0f:14:dc:23: 94:f4:6c:87:5d:79:ff:28:99:9a:55:05:51:d9:bc: f7:64:84:49:f8:e9:c9:ed:9f:1e:3f:cf:6d:bb:c6: 15:f8:b2:77:c2:79:25:d0:ef:2e:bf:5e:5c:33:d9: 47:a9:a3:87:e2:ad:38:88:ce:55:84:1c:f1:a7:cd: cd:55:09:4e:70:3a:0b:45:0b:9a:32:c6:bd:2b:e6: 37:e1:82:48:83:06:48:12:97:0e:e5:2b:24:53:3b: 4c:e3:79:68:65:3c:61:e2:0a:2a:9b:53:56:fc:e7: 9b:0d:69:a0:6f:f7:45:b3:ac:ca:de:9a:50:7d:0a: 0a:89:e5:06:58:49:49:05:9c:fd:03:db:58:e8:dd: f9:fc:1e:b5:f3:e6:c5:6d:64:46:24:e4:18:2a:c7: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:1C:99:80:87:BC:68:40:9F:D3:AF:4E:5B:EF:06:63:6B:28:7D X509v3 Authority Key Identifier: keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:4e:c3:d5:5f:fc:82:2f:0b:b6:1d:49:8b:37:c9:7a:30: 2f:a3:d1:37:ee:5e:ad:d6:35:49:d7:2c:65:ba:57:13:63:de: aa:31:bd:f6:4e:96:a6:82:c4:bc:c6:44:c5:60:b3:a0:54:1f: 36:fa:e7:91:7f:4c:4e:ab:f0:46:72:c4:e4:e9:8c:37:ca:43: d9:11:2a:6d:c1:c2:1b:f9:d0:de:85:c8:5f:83:01:94:6a:e8: cb:b3:a8:18:42:2a:5c:f1:cb:d3:fd:7c:1e:62:c6:39:b2:8e: db:29:11:2d:d5:43:d7:79:57:22:90:29:de:53:70:e6:1e:6f: 6b:6c:46:17:02:bb:78:e5:50:89:aa:d3:02:18:86:c3:47:3e: a7:92:05:52:f5:2c:05:2c:6f:b4:33:7f:f0:46:3f:bc:c6:4a: 15:2e:0c:d0:6f:4b:62:3e:79:21:b7:aa:38:2f:c6:41:03:75: 57:35:45:21:73:c9:af:43:ac:8a:ab:0f:bd:25:00:c1:4e:15: c9:1d:e3:7b:11:47:1d:cd:22:4a:48:f8:15:dc:93:8c:4a:ce: 81:ce:17:e1:d7:fa:7b:d8:10:78:c7:43:60:6f:d7:0a:7e:88: 6a:f6:bf:5d:4a:47:cd:0f:69:e6:f6:6d:2f:93:08:dc:b8:77: c1:7c:4e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKAeEfnj+IelQlR+abTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZWY5ZWMxYzAzMDdjNjA3M2NlOGFmODNmMDk5NjhjYWI3 YWJiZWYwHhcNMjUxMjA2MTMwMTE4WhcNMjUxMjA3MTMwMTE4WjAzMTEwLwYDVQQD Eyg2NmJhMWM5OTgwODdiYzY4NDA5ZmQzYWY0ZTViZWYwNjYzNmIyODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXAzyHzZ0oMuENqXF/UFOjf1ENFl 2HUx1PiWvej/7HwA8jDkbB+Nc6cerH+IHTOeVz91SAh7J6tZiti+DATEh9U0fsBu VklrpEFPpT3k2sAoQiiKcPr4jstDv4N52+tJEAIybw8U3COU9GyHXXn/KJmaVQVR 2bz3ZIRJ+OnJ7Z8eP89tu8YV+LJ3wnkl0O8uv15cM9lHqaOH4q04iM5VhBzxp83N VQlOcDoLRQuaMsa9K+Y34YJIgwZIEpcO5SskUztM43loZTxh4goqm1NW/OebDWmg b/dFs6zK3ppQfQoKieUGWElJBZz9A9tY6N35/B618+bFbWRGJOQYKseSXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa6HJmAh7xoQJ/Tr05b7wZjayh9MB8GA1UdIwQY MBaAFA3vnsHAMHxgc86K+D8JloyrervvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAt N2M5MzViNWQ5NzJlLzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAtN2M5MzViNWQ5NzJl LzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvdOw9Vf /IIvC7YdSYs3yXowL6PRN+5erdY1SdcsZbpXE2PeqjG99k6WpoLEvMZExWCzoFQf NvrnkX9MTqvwRnLE5OmMN8pD2REqbcHCG/nQ3oXIX4MBlGroy7OoGEIqXPHL0/18 HmLGObKO2ykRLdVD13lXIpAp3lNw5h5va2xGFwK7eOVQiarTAhiGw0c+p5IFUvUs BSxvtDN/8EY/vMZKFS4M0G9LYj55IbeqOC/GQQN1VzVFIXPJr0OsiqsPvSUAwU4V yR3jexFHHc0iSkj4FdyTjErOgc4X4df6e9gQeMdDYG/XCn6Iava/XUpHzQ9p5vZt L5MI3Lh3wXxO2g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:50 2025 by rpki-client