This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft File: b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json) Hash identifier: 2ETd5bR42vaDKKe1PW9JQY4bEUIgMJqjBw+8VNvB228= Subject key identifier: 52:F3:1F:9B:5A:82:3A:DB:C5:BF:BB:36:B2:F9:F2:6D:94:B9:4D:D7 Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12 Certificate issuer: /CN=6ff7891331450dc86283a089bd9470e69c37ed12 Certificate serial: 019AF12D755A0A7463D3413C455055E8B6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft Manifest number: 0330 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: eSdjZOXaz52oLu0HLoeeRNtSFIMEroi8hUVOqpxI8kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:75:5a:0a:74:63:d3:41:3c:45:50:55:e8:b6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=52f31f9b5a823adbc5bfbb36b2f9f26d94b94dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:4c:8e:32:b5:04:ee:f1:9f:b5:a8:2a:ac: e1:13:06:89:7f:22:11:ba:ae:bc:9b:f3:a7:33:f1: 89:2d:9e:4e:54:61:4d:4a:c9:47:62:b3:0d:d4:af: a9:98:6f:1c:44:3a:1f:f3:ce:76:75:b7:fb:b1:c8: bd:aa:fb:ee:9c:07:77:f3:4a:30:8f:92:74:9c:ac: 0a:15:0b:39:9c:1b:05:c6:f8:a3:07:ae:b9:ee:9c: 58:00:bf:1d:6f:02:ff:b1:0e:a6:99:87:29:75:24: c0:3f:d5:14:1b:d3:4b:b9:50:6f:86:57:85:d2:7a: 5a:a5:80:dc:04:0c:77:88:73:23:ca:30:29:23:f3: e5:f7:4e:19:53:f2:72:16:70:9c:24:20:93:f5:78: 60:33:0e:88:3c:08:79:c5:94:f6:99:b2:8f:d7:0a: 34:0d:0c:a0:61:1d:6a:4b:32:b4:49:18:e2:7a:44: de:f8:c3:db:90:a9:30:55:6e:08:12:51:8d:d2:3f: 12:3a:2a:df:e8:a1:c9:a0:4d:51:e8:ac:dd:1b:83: e5:4b:80:35:c6:52:2c:ae:32:71:d2:8b:11:58:cf: 61:e4:9c:48:e8:29:0b:f0:5f:57:06:13:d6:25:3f: 9a:e8:e7:a6:1a:92:15:69:b0:f8:ea:e3:bc:e5:2c: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:1F:9B:5A:82:3A:DB:C5:BF:BB:36:B2:F9:F2:6D:94:B9:4D:D7 X509v3 Authority Key Identifier: keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:66:0c:9b:0d:06:6f:84:3b:24:2e:48:a8:34:78:d4:8d:11: 72:00:8a:1b:8d:a1:50:ff:17:b7:9c:62:68:c4:fa:4d:c8:e1: 02:e6:69:99:dc:d4:b0:53:de:19:ab:4f:bd:2c:2a:44:b5:e9: 5f:38:a8:a6:54:6f:fc:c0:2f:d6:bd:a0:b3:17:f2:23:24:2e: be:50:74:cb:81:8b:f2:8f:aa:72:d9:35:8b:45:95:b0:af:c2: 73:52:cf:3d:2c:d2:2d:8a:5b:c9:be:55:39:bf:5e:64:12:e2: d7:3b:00:b4:6f:11:95:3c:b6:f5:4a:38:db:2e:55:45:83:82: 29:a6:e2:5d:c9:ba:10:4f:e1:e7:b6:2e:19:f6:3d:5a:90:82: 9a:41:13:50:f2:23:a5:ed:93:08:84:02:c0:e1:71:1e:06:70: ad:3b:95:7f:1b:74:e8:25:52:36:de:36:22:5a:23:b7:c8:4e: cf:bf:3e:24:9f:4e:af:77:de:35:74:b7:12:40:0a:2c:b2:33: 8b:21:50:a4:d6:89:f3:13:b6:50:dd:2d:1e:f6:c3:0a:30:48: 14:15:a8:42:bd:a5:50:03:f8:e6:30:81:25:f3:82:f1:99:6f: b8:fa:a9:7d:b4:81:b0:be:d6:eb:dc:09:b7:3b:07:a2:b4:60: 72:30:fd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXVaCnRj00E8RVBV6LakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz N2VkMTIwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD Eyg1MmYzMWY5YjVhODIzYWRiYzViZmJiMzZiMmY5ZjI2ZDk0Yjk0ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRhMjjK1BO7xn7WoKqzhEwaJfyIR uq68m/OnM/GJLZ5OVGFNSslHYrMN1K+pmG8cRDof8852dbf7sci9qvvunAd380ow j5J0nKwKFQs5nBsFxvijB6657pxYAL8dbwL/sQ6mmYcpdSTAP9UUG9NLuVBvhleF 0npapYDcBAx3iHMjyjApI/Pl904ZU/JyFnCcJCCT9XhgMw6IPAh5xZT2mbKP1wo0 DQygYR1qSzK0SRjiekTe+MPbkKkwVW4IElGN0j8SOirf6KHJoE1R6KzdG4PlS4A1 xlIsrjJx0osRWM9h5JxI6CkL8F9XBhPWJT+a6OemGpIVabD46uO85SxVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLzH5tagjrbxb+7NrL58m2UuU3XMB8GA1UdIwQY MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3 LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmYMmw0G b4Q7JC5IqDR41I0RcgCKG42hUP8Xt5xiaMT6TcjhAuZpmdzUsFPeGatPvSwqRLXp XzioplRv/MAv1r2gsxfyIyQuvlB0y4GL8o+qctk1i0WVsK/Cc1LPPSzSLYpbyb5V Ob9eZBLi1zsAtG8RlTy29Uo42y5VRYOCKabiXcm6EE/h57YuGfY9WpCCmkETUPIj pe2TCIQCwOFxHgZwrTuVfxt06CVSNt42Ilojt8hOz78+JJ9Or3feNXS3EkAKLLIz iyFQpNaJ8xO2UN0tHvbDCjBIFBWoQr2lUAP45jCBJfOC8ZlvuPqpfbSBsL7W69wJ tzsHorRgcjD9Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client