This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json) Hash identifier: rMCvTE4Gj0txqj0JZzyK5muegL3qECd/4cJV86MzOX0= Subject key identifier: 78:46:37:6A:65:7C:2B:E4:76:5E:78:C9:08:FA:84:45:8A:D6:F1:6A Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88 Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88 Certificate serial: 019AF1D202A65E6AAE096DA7AB83C9B138ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft Manifest number: 1130 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: nmJwp+W8g3RNJwB8uAEYeu44JwE5VOuuzOmUJZfTeVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:02:a6:5e:6a:ae:09:6d:a7:ab:83:c9:b1:38:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=7846376a657c2be4765e78c908fa84458ad6f16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:78:ae:1a:6e:e9:74:c0:2e:9f:52:a0:2f: e2:3d:d9:05:78:8c:4f:4c:fb:2b:f8:6d:47:53:51: b5:e0:77:95:21:7e:32:d5:eb:63:dd:4e:8e:50:be: db:27:fe:8f:28:dc:9a:4b:56:4a:35:ee:fa:cd:34: 08:a7:d4:20:9c:99:5d:4a:0d:39:be:22:dd:d9:4b: de:db:63:00:75:bf:51:8a:5f:3a:12:d6:da:79:20: 85:32:a9:e7:d9:4a:8a:50:d4:d0:b2:d4:bf:d5:50: 9b:91:55:8e:0d:c0:e5:23:dc:99:58:f4:00:9d:33: 1e:b9:8e:ee:e1:da:08:d2:c3:5f:8a:20:f9:e1:78: cb:ec:5a:cd:da:4b:51:df:85:88:9a:a8:10:10:5f: 44:95:0d:06:25:fa:1c:20:c9:5f:be:94:d8:ed:09: 70:e1:93:71:c3:f6:87:a2:94:06:c1:72:e1:5e:78: eb:1b:8e:44:44:31:b1:ac:4e:0f:2e:9b:1b:cc:9a: 33:7f:5a:a6:8c:b9:6f:53:92:ab:3b:6f:ed:79:2f: 33:39:77:a5:77:49:f9:e4:fe:11:cd:bd:5c:6a:b4: 27:f0:6c:76:7f:e6:94:a0:e6:c4:4d:5d:4f:8d:55: a0:26:d8:d6:d6:13:cf:c2:fb:59:88:12:85:b7:b9: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:37:6A:65:7C:2B:E4:76:5E:78:C9:08:FA:84:45:8A:D6:F1:6A X509v3 Authority Key Identifier: keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7d:3a:c9:95:d7:a6:1f:ac:1e:be:c1:12:73:cf:4f:0c:53: bd:19:6c:69:56:07:13:7a:c0:c2:d5:0f:49:d7:ff:3a:d8:f3: aa:ad:8f:94:35:b1:2b:2e:bf:cd:63:65:8b:5e:93:39:20:7a: 92:6c:ee:f0:1d:e9:f2:f3:7e:7c:a0:e7:9b:86:ce:dc:fe:2c: 82:b6:19:96:b9:41:99:94:53:4c:8a:94:7c:08:a8:99:e5:e6: 51:86:c8:65:fa:e8:d9:f0:0a:9d:a6:52:96:4e:02:bb:ea:33: 1d:51:b4:82:a4:d2:b7:51:1c:b7:29:87:71:03:93:d2:b5:cb: 4f:5b:2c:11:23:3c:30:22:0a:dc:7e:b7:7f:46:ac:ca:00:75: 28:2e:a5:7e:87:cf:a6:b3:dc:62:57:60:6d:4f:0b:d5:45:c0: c3:cc:f0:7c:b4:54:97:74:5e:8d:c8:b9:c1:ef:86:d9:b8:a5: 57:45:35:ef:cf:dd:d3:ab:ee:b4:4c:0e:f4:f8:e2:34:7b:2a: c6:9c:86:8d:59:ca:e5:9a:bf:1b:cc:4c:a5:49:b0:5d:19:b2: 74:11:cd:fe:c1:b9:a8:a6:7b:0e:ae:fb:ea:4c:5e:16:5e:47: 78:db:d9:ba:09:b3:05:dd:45:d6:aa:88:03:90:3c:be:36:6f: 04:59:b8:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gKmXmquCW2nq4PJsTjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj Y2RlODgwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg3ODQ2Mzc2YTY1N2MyYmU0NzY1ZTc4YzkwOGZhODQ0NThhZDZmMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnl4rhpu6XTALp9SoC/iPdkFeIxP TPsr+G1HU1G14HeVIX4y1etj3U6OUL7bJ/6PKNyaS1ZKNe76zTQIp9QgnJldSg05 viLd2Uve22MAdb9Ril86EtbaeSCFMqnn2UqKUNTQstS/1VCbkVWODcDlI9yZWPQA nTMeuY7u4doI0sNfiiD54XjL7FrN2ktR34WImqgQEF9ElQ0GJfocIMlfvpTY7Qlw 4ZNxw/aHopQGwXLhXnjrG45ERDGxrE4PLpsbzJozf1qmjLlvU5KrO2/teS8zOXel d0n55P4Rzb1carQn8Gx2f+aUoObETV1PjVWgJtjW1hPPwvtZiBKFt7mj3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhGN2plfCvkdl54yQj6hEWK1vFqMB8GA1UdIwQY MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3 LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX06yZXX ph+sHr7BEnPPTwxTvRlsaVYHE3rAwtUPSdf/Otjzqq2PlDWxKy6/zWNli16TOSB6 kmzu8B3p8vN+fKDnm4bO3P4sgrYZlrlBmZRTTIqUfAiomeXmUYbIZfro2fAKnaZS lk4Cu+ozHVG0gqTSt1EctymHcQOT0rXLT1ssESM8MCIK3H63f0asygB1KC6lfofP prPcYldgbU8L1UXAw8zwfLRUl3Rejci5we+G2bilV0U178/d06vutEwO9PjiNHsq xpyGjVnK5Zq/G8xMpUmwXRmydBHN/sG5qKZ7Dq776kxeFl5HeNvZugmzBd1F1qqI A5A8vjZvBFm4UQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:48 2025 by rpki-client