This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json) Hash identifier: nX+LabpOAX3O4ptcP0XNh5pv9bFSfJmjgFajJcbHHeY= Subject key identifier: 7F:68:A8:0B:D3:E4:37:85:33:D7:B4:56:49:C2:22:A8:F1:FE:08:11 Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58 Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58 Certificate serial: 019AF31C3447D387D09AC3C41840C0D4FE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft Manifest number: 0E33 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: oLNy9vVVBazZRoiWTpC+C8IGLLb8focHGigTfgogeCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:34:47:d3:87:d0:9a:c3:c4:18:40:c0:d4:fe:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58 Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=7f68a80bd3e4378533d7b45649c222a8f1fe0811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:49:c6:d3:5e:63:aa:db:a4:1b:cc:46:83:42: 87:b4:d9:d0:3f:87:86:ae:52:88:29:07:2f:a8:fe: de:7f:1f:64:c9:90:29:5f:3a:0e:96:3a:1f:9c:30: 2e:44:01:83:a6:0c:2e:33:9b:a0:d6:64:39:2a:fb: 9f:0c:a7:32:6e:f7:f3:84:e1:00:87:a6:f6:0a:83: b9:a3:24:b5:26:69:bd:9a:8d:62:9d:0d:67:02:0c: 3e:5f:96:df:f6:10:27:db:32:e3:87:9e:ae:1e:b8: 50:c5:e3:6a:09:75:fb:63:2f:24:2e:eb:1e:31:eb: 59:65:c1:e8:2e:bc:03:c0:49:5e:f6:1b:29:6a:e9: d8:5e:21:b0:29:7c:4c:74:9d:2e:24:b5:09:c7:d5: 62:96:71:49:57:5b:c2:8b:c0:b6:8b:f7:cf:4f:dd: 21:2f:ec:68:d0:05:18:eb:32:a2:a6:da:61:61:8f: 87:4a:20:b0:d8:e5:d1:82:6c:6b:3d:ec:4a:b3:8e: 25:54:65:ff:0c:41:b3:20:76:3b:ef:14:d5:5b:36: 94:ac:e8:48:a4:c2:2f:65:07:ab:9e:79:fa:dc:a7: dc:16:b3:d3:14:62:87:7a:d7:f2:16:44:90:b2:c5: bb:c0:cb:23:0e:3a:e7:f0:8e:9a:90:21:61:b4:85: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:A8:0B:D3:E4:37:85:33:D7:B4:56:49:C2:22:A8:F1:FE:08:11 X509v3 Authority Key Identifier: keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e5:4d:b5:f0:ff:5c:0a:52:9d:38:96:4e:48:bc:c0:a9:02: ed:e4:c2:bf:2a:ce:1c:69:bb:78:ee:5f:1f:7d:39:76:49:91: 03:50:1b:68:5e:27:79:fd:64:61:d4:2a:82:68:2c:36:7f:4e: ea:bc:5e:bb:0b:bb:d1:bb:b3:56:f6:5f:a5:ad:dd:c1:cf:4e: 9d:15:85:38:94:1a:fa:82:67:d2:9e:b3:dc:a0:31:96:d1:95: 89:1f:e4:e8:09:4e:89:9c:8e:63:f2:7b:59:25:b2:39:2d:43: 10:f5:cf:f9:80:2b:af:c1:82:f3:ab:94:d7:2f:cc:55:2f:61: 8e:2f:72:20:04:62:93:30:7c:c5:44:75:cb:dd:77:4d:ec:84: c9:f4:6c:fa:99:bc:de:81:40:05:a4:8d:23:74:56:df:a8:4e: 74:75:77:25:b6:c7:91:ed:97:02:47:46:23:ac:3f:36:a3:ee: 6f:65:76:a9:f4:b9:71:24:51:cf:7f:30:2a:bf:13:5f:b9:03: e1:cd:35:91:33:80:18:c9:8a:1e:79:fc:a2:af:34:1f:0c:c0: 24:6d:41:6e:96:ea:a7:f7:36:0b:66:53:26:cf:5b:ca:03:0e: 55:c6:c2:37:d4:08:74:2c:ba:79:c6:8c:fc:ab:20:2b:e5:c2: e0:8b:ce:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDRH04fQmsPEGEDA1P6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2YzYjlmMjkwOTdiYTViZjc1ZDQ2NDZlMDI1OWY1MWM0 MjFhNTgwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD Eyg3ZjY4YTgwYmQzZTQzNzg1MzNkN2I0NTY0OWMyMjJhOGYxZmUwODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4knG015jqtukG8xGg0KHtNnQP4eG rlKIKQcvqP7efx9kyZApXzoOljofnDAuRAGDpgwuM5ug1mQ5KvufDKcybvfzhOEA h6b2CoO5oyS1Jmm9mo1inQ1nAgw+X5bf9hAn2zLjh56uHrhQxeNqCXX7Yy8kLuse MetZZcHoLrwDwEle9hspaunYXiGwKXxMdJ0uJLUJx9VilnFJV1vCi8C2i/fPT90h L+xo0AUY6zKiptphYY+HSiCw2OXRgmxrPexKs44lVGX/DEGzIHY77xTVWzaUrOhI pMIvZQernnn63KfcFrPTFGKHetfyFkSQssW7wMsjDjrn8I6akCFhtIWwzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9oqAvT5DeFM9e0VknCIqjx/ggRMB8GA1UdIwQY MBaAFHl/O58pCXulv3XUZG4CWfUcQhpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQt YzFhY2YwMTJiOWJjLzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQtYzFhY2YwMTJiOWJj LzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeVNtfD/ XApSnTiWTki8wKkC7eTCvyrOHGm7eO5fH305dkmRA1AbaF4nef1kYdQqgmgsNn9O 6rxeuwu70buzVvZfpa3dwc9OnRWFOJQa+oJn0p6z3KAxltGViR/k6AlOiZyOY/J7 WSWyOS1DEPXP+YArr8GC86uU1y/MVS9hji9yIARikzB8xUR1y913TeyEyfRs+pm8 3oFABaSNI3RW36hOdHV3JbbHke2XAkdGI6w/NqPub2V2qfS5cSRRz38wKr8TX7kD 4c01kTOAGMmKHnn8oq80HwzAJG1Bbpbqp/c2C2ZTJs9bygMOVcbCN9QIdCy6ecaM /KsgK+XC4IvOKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:25 2025 by rpki-client