This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft File: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json) Hash identifier: Yt6s30ksfVtxiAbPvoCCQ2pwkPlXPXc0/rotjMhCZ5c= Subject key identifier: FE:45:A8:2F:5A:2A:D6:1B:25:9A:E8:76:B3:39:24:F5:19:EB:32:99 Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 Certificate issuer: /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Certificate serial: 019AF1D236E42DAD0E6DFF69393A45256861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: MhE1AlqVLu+FgBxWmnwtxBUCKOroJZR+wQFX0K3O414=) 2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:36:e4:2d:ad:0e:6d:ff:69:39:3a:45:25:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=fe45a82f5a2ad61b259ae876b33924f519eb3299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:6a:98:54:1e:c0:36:89:0e:b6:c2:d5:27: 04:a7:08:a8:15:47:de:a4:4f:2a:bf:a0:86:30:4e: 79:50:45:4e:e2:b7:03:0b:92:5f:3d:62:47:57:e9: ee:95:e3:d2:e9:57:bd:01:85:2e:02:08:ed:3c:68: 04:34:28:96:bd:fd:c2:d8:87:88:fa:46:c0:62:ea: f1:c2:02:31:e2:b3:4e:4f:f8:e4:1b:bd:07:b6:da: 6e:03:d7:e4:18:ec:7e:95:e4:39:2b:05:ad:8a:4b: cb:2c:8c:61:94:fb:8f:cc:66:11:4a:2b:84:7c:48: 6b:f0:72:c3:9c:aa:c0:84:4e:43:0d:1b:eb:9b:27: f4:c3:12:8d:94:d7:f4:4d:fd:b6:8f:17:42:de:43: 3b:e0:58:c1:55:58:6a:75:a3:3d:81:4c:27:b7:da: 34:ce:20:5f:d5:5d:d7:fc:a8:21:d6:ae:a6:37:e2: 3f:ba:a9:3a:23:74:21:fa:ea:ad:cf:c6:f9:cd:02: 12:94:c2:0d:42:d2:cf:74:bb:ef:2d:2b:e8:e1:29: e4:bf:73:26:08:2a:41:7f:40:cd:d9:4c:c5:f1:a6: dd:dc:2d:3e:29:ee:8a:d4:5f:ee:1e:ca:6a:b7:88: d6:41:81:fa:7a:87:b5:9f:fc:73:03:22:ad:4c:a5: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:A8:2F:5A:2A:D6:1B:25:9A:E8:76:B3:39:24:F5:19:EB:32:99 X509v3 Authority Key Identifier: keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:36:ab:40:ac:91:56:39:4b:e1:25:06:25:31:e5:95:c6:d0: 7f:15:df:f8:59:a0:b7:f8:ec:42:d9:47:6f:88:5f:b6:1f:a9: dc:74:51:26:88:d8:28:f5:6c:20:f8:08:e6:b5:62:cc:81:09: 0a:ed:bf:ed:75:d4:a9:2d:a9:2a:54:93:ef:4c:1e:22:1f:36: 8f:34:10:cc:0b:e9:49:bd:5b:c6:6c:8f:84:c8:05:f4:38:99: 8c:9e:fb:c1:7a:67:73:63:2f:b6:92:3b:48:b5:dd:ab:d5:ba: b4:cd:82:4b:f3:c6:70:fb:d2:44:47:36:3f:c4:b3:3a:9b:e6: 96:87:79:a9:04:8a:4a:17:d9:09:83:11:d1:a1:ed:07:3b:be: 52:9c:19:2f:4d:cc:a9:61:69:4c:ca:b2:7f:48:89:33:51:89: e4:44:e8:e0:bd:2a:50:ab:80:7f:43:17:d3:ba:0b:b7:5c:c1: 6c:63:6e:7e:c5:6c:e5:f5:8e:da:d4:9f:94:53:5b:4e:7f:3e: 13:70:02:e0:32:8b:c6:3b:7c:63:61:0c:00:94:e0:70:45:49: a5:ad:1e:91:68:4c:cb:fa:31:48:f9:04:3b:6c:c3:0c:eb:c7: 24:49:9c:29:22:be:04:ad:83:1c:bf:d8:c2:77:13:5b:f3:c5: a2:23:d3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jbkLa0Obf9pOTpFJWhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTViYThkNDlhMmRkMWU5MWMzYWFjY2JjZjE0NGYwNDU5 M2YxYjMwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EyhmZTQ1YTgyZjVhMmFkNjFiMjU5YWU4NzZiMzM5MjRmNTE5ZWIzMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsapqmFQewDaJDrbC1ScEpwioFUfe pE8qv6CGME55UEVO4rcDC5JfPWJHV+nulePS6Ve9AYUuAgjtPGgENCiWvf3C2IeI +kbAYurxwgIx4rNOT/jkG70HttpuA9fkGOx+leQ5KwWtikvLLIxhlPuPzGYRSiuE fEhr8HLDnKrAhE5DDRvrmyf0wxKNlNf0Tf22jxdC3kM74FjBVVhqdaM9gUwnt9o0 ziBf1V3X/Kgh1q6mN+I/uqk6I3Qh+uqtz8b5zQISlMINQtLPdLvvLSvo4Snkv3Mm CCpBf0DN2UzF8abd3C0+Ke6K1F/uHspqt4jWQYH6eoe1n/xzAyKtTKWfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5FqC9aKtYbJZrodrM5JPUZ6zKZMB8GA1UdIwQY MBaAFBBVuo1Jot0ekcOqzLzxRPBFk/GzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgt NGVkYWY3N2EwZTVkLzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgtNGVkYWY3N2EwZTVk LzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1TarQKyR VjlL4SUGJTHllcbQfxXf+Fmgt/jsQtlHb4hfth+p3HRRJojYKPVsIPgI5rVizIEJ Cu2/7XXUqS2pKlST70weIh82jzQQzAvpSb1bxmyPhMgF9DiZjJ77wXpnc2MvtpI7 SLXdq9W6tM2CS/PGcPvSREc2P8SzOpvmlod5qQSKShfZCYMR0aHtBzu+UpwZL03M qWFpTMqyf0iJM1GJ5ETo4L0qUKuAf0MX07oLt1zBbGNufsVs5fWO2tSflFNbTn8+ E3AC4DKLxjt8Y2EMAJTgcEVJpa0ekWhMy/oxSPkEO2zDDOvHJEmcKSK+BK2DHL/Y wncTW/PFoiPTuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:42 2025 by rpki-client