This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json) Hash identifier: s3frKgmldu3XVKsqVNEWVXQ9UhoDLqxNBnt56TUC4Ug= Subject key identifier: 3E:1C:4F:BF:73:E2:14:10:9C:A6:29:DF:51:58:79:98:B3:33:BD:B8 Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62 Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62 Certificate serial: 019AF276F4DFF17C8066D91F8168B2261CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft Manifest number: 122C Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: KGpr+Z/mcOj16G6CTBiShQIYh+2BOzTIy9uNE83rJm8=) 2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:df:f1:7c:80:66:d9:1f:81:68:b2:26:1c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=3e1c4fbf73e214109ca629df51587998b333bdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:b1:6a:54:7c:6f:0c:03:b4:c9:a1:ee:77: 8d:d2:fa:4d:d4:f6:ee:ac:cb:64:8c:71:af:46:24: ed:89:90:a8:97:61:cf:99:d7:cb:38:e9:f4:ed:74: 64:48:7c:1f:c4:55:20:90:8c:fe:f5:32:b6:db:90: 8e:8e:80:02:0e:d6:fe:45:69:15:ef:37:ea:cf:17: 21:fe:2e:1e:0c:39:c7:21:e9:58:af:fd:bd:36:37: aa:ba:04:b7:f4:1f:dd:36:4e:08:a3:ef:32:67:05: 7a:98:7f:dd:bc:24:32:fe:cd:78:66:4a:a0:96:3f: 8c:cd:b5:ec:f9:7a:f7:54:1e:cc:ee:50:22:14:59: cb:5e:71:37:2c:20:63:ed:59:97:0a:3b:18:9d:b4: 61:93:36:58:8c:d4:67:54:82:c3:56:ec:2e:c4:52: db:62:28:8c:66:71:f7:77:01:09:12:15:8d:05:e8: 87:10:64:a0:7d:9f:5a:49:73:5e:b3:20:a8:bf:f5: 8a:de:b6:0f:92:2f:10:46:45:cc:30:8e:9f:21:19: 23:36:3e:1f:60:70:2b:db:76:06:3e:83:87:5e:94: 15:59:4f:91:ab:ad:19:7d:69:e6:d8:d2:31:84:9d: 2d:45:be:13:cc:61:3f:05:ae:b8:41:61:a4:6d:2d: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:4F:BF:73:E2:14:10:9C:A6:29:DF:51:58:79:98:B3:33:BD:B8 X509v3 Authority Key Identifier: keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:91:00:b8:4a:ac:a2:b2:21:df:35:61:83:b2:4c:84:1f:25: 0f:7b:0e:fa:c5:cb:68:28:4e:7c:04:ec:db:ea:7b:bc:9e:e9: e3:bd:51:f6:ae:a2:16:f5:30:27:c7:2a:7b:e2:66:eb:3b:83: e3:80:4a:bf:1f:77:a2:ed:13:c2:67:80:b3:61:d5:21:0c:7b: b0:7f:53:3c:8f:d8:a6:5a:76:3e:a0:48:b0:1a:9e:4d:ac:6a: 39:42:0c:2c:72:bb:d2:88:13:c8:49:34:09:30:3a:d5:84:a4: 0c:c1:93:de:e0:f5:eb:5b:36:84:18:75:32:96:c9:22:10:76: a6:25:43:d4:92:a8:7b:4c:98:ec:83:7f:4a:9a:fe:90:a8:19: bd:32:96:e5:32:44:82:f9:81:06:dd:76:5d:cf:d4:e0:69:f2: 75:fb:ff:94:ec:be:4a:22:2e:ea:dd:2a:28:99:ce:95:70:b2: bb:2b:a6:06:fc:67:69:09:79:db:97:a1:fe:67:69:ca:ce:ff: 19:a8:de:81:a7:81:eb:41:5d:6f:c5:1b:d5:c5:4b:c1:75:76: 1b:8c:55:8b:64:0b:2a:20:55:a7:21:34:be:b7:04:d8:c5:11: ea:d4:2d:44:35:e7:18:75:49:59:fd:86:50:47:54:49:12:d2: 0d:f4:11:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvTf8XyAZtkfgWiyJhzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl MDNmNjIwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EygzZTFjNGZiZjczZTIxNDEwOWNhNjI5ZGY1MTU4Nzk5OGIzMzNiZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteSxalR8bwwDtMmh7neN0vpN1Pbu rMtkjHGvRiTtiZCol2HPmdfLOOn07XRkSHwfxFUgkIz+9TK225COjoACDtb+RWkV 7zfqzxch/i4eDDnHIelYr/29NjequgS39B/dNk4Io+8yZwV6mH/dvCQy/s14Zkqg lj+MzbXs+Xr3VB7M7lAiFFnLXnE3LCBj7VmXCjsYnbRhkzZYjNRnVILDVuwuxFLb YiiMZnH3dwEJEhWNBeiHEGSgfZ9aSXNesyCov/WK3rYPki8QRkXMMI6fIRkjNj4f YHAr23YGPoOHXpQVWU+Rq60ZfWnm2NIxhJ0tRb4TzGE/Ba64QWGkbS0a0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4cT79z4hQQnKYp31FYeZizM724MB8GA1UdIwQY MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt NzY0MzYzYjEzY2QyLzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZEAuEqs orIh3zVhg7JMhB8lD3sO+sXLaChOfATs2+p7vJ7p471R9q6iFvUwJ8cqe+Jm6zuD 44BKvx93ou0TwmeAs2HVIQx7sH9TPI/Yplp2PqBIsBqeTaxqOUIMLHK70ogTyEk0 CTA61YSkDMGT3uD161s2hBh1MpbJIhB2piVD1JKoe0yY7IN/Spr+kKgZvTKW5TJE gvmBBt12Xc/U4Gnydfv/lOy+SiIu6t0qKJnOlXCyuyumBvxnaQl525eh/mdpys7/ GajegaeB60Fdb8Ub1cVLwXV2G4xVi2QLKiBVpyE0vrcE2MUR6tQtRDXnGHVJWf2G UEdUSRLSDfQREQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:04 2025 by rpki-client