This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json) Hash identifier: F/56PzARh044S2CH7DvZh1pQFNbSLIOGcRBByiw/BUs= Subject key identifier: 95:3F:FA:CC:66:8B:66:39:59:AA:D0:5F:DA:88:99:10:3C:A7:18:EF Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Certificate serial: 019AF31BEBF85881D04BB4AAD4CD18D9BA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft Manifest number: 174F Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: l8XB3XhndklF3EIA1VOSlshV2iy8yx+gnqnsjpKeoH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:eb:f8:58:81:d0:4b:b4:aa:d4:cd:18:d9:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=953ffacc668b663959aad05fda8899103ca718ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:cb:8f:bb:6a:99:4e:00:2b:b6:cb:ec:c7: 86:48:4c:47:a3:0a:d1:79:e3:6b:be:85:5b:95:de: 35:9c:91:72:c0:e5:6e:04:d7:f4:8b:61:80:f0:07: 78:74:1f:b2:19:cb:3f:31:43:a0:29:51:dd:1b:db: a4:3e:e4:63:bd:16:12:e0:41:21:23:be:98:2a:f9: 57:0a:4e:38:94:4c:a5:cb:a3:2c:3b:a9:ae:34:d9: 9c:f3:7e:c5:09:84:1c:3d:30:8c:02:6d:ca:5d:4b: a6:99:01:12:a4:3b:f6:8b:ca:7a:fa:9b:45:33:b5: b7:65:91:d1:f3:44:13:b1:7e:ef:48:3c:df:01:13: 62:96:8d:3a:63:ae:37:cb:d4:0a:6e:44:85:c7:06: 7c:12:a5:b3:7b:98:91:14:29:5a:98:f8:75:30:ae: e7:52:48:22:db:42:dd:90:23:0f:f8:50:e8:25:af: ea:81:50:3c:d8:a5:9c:92:78:8d:6e:48:1d:2d:07: f3:0b:7d:73:5b:75:eb:2d:f3:5e:b9:6c:92:5c:c9: 94:9d:5b:85:5e:c9:fb:7e:ee:01:f7:a6:23:0b:9e: 71:e8:6f:2f:39:57:0d:f6:f4:6f:48:10:36:d1:89: 1f:1c:3c:bf:30:bb:6d:57:ef:d2:eb:8c:a5:51:b8: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3F:FA:CC:66:8B:66:39:59:AA:D0:5F:DA:88:99:10:3C:A7:18:EF X509v3 Authority Key Identifier: keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8b:db:e5:3f:ac:b0:f3:f7:02:33:15:6c:68:65:93:cb:61: 77:6e:83:59:26:b2:a9:57:e0:9f:34:a6:fb:64:72:46:18:26: af:8f:17:ca:3b:e5:19:47:08:0c:44:41:10:27:1a:16:15:38: 2e:f2:a5:68:38:fa:d0:50:03:f5:02:d8:0b:50:51:6f:ef:99: b2:1d:98:34:1f:d3:1c:89:ac:03:5f:6e:32:3c:04:8f:81:53: 17:81:e8:08:3a:2d:df:8a:53:08:3c:1e:bb:35:64:e8:49:ef: 0f:e3:1d:cf:9a:63:1a:1e:d8:73:7e:71:02:a2:0c:21:7a:58: 20:7b:1e:83:7f:e1:8f:6c:16:bf:7b:f4:df:72:c9:b1:47:c7: f4:d9:71:fd:c4:aa:0b:03:cb:e2:3a:6f:27:9a:e0:87:63:c7: 20:2c:31:b2:58:50:ca:e5:8f:c4:b8:22:2c:8a:7f:37:be:19: 8c:f7:3f:ad:af:4c:e8:20:f4:05:d7:f0:15:41:02:10:41:c6: 6c:6b:87:3d:0b:47:8b:37:53:0c:ae:59:7a:eb:0b:96:69:95: d0:d6:07:57:a4:cf:3f:31:2e:13:a7:a4:7d:0e:58:77:72:32: 74:9c:ab:4e:a1:0c:5a:87:7c:c4:eb:1e:74:0c:94:4c:04:c4: 20:5a:a3:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+v4WIHQS7Sq1M0Y2bpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw YzIyYTAwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD Eyg5NTNmZmFjYzY2OGI2NjM5NTlhYWQwNWZkYTg4OTkxMDNjYTcxOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqzLj7tqmU4AK7bL7MeGSExHowrR eeNrvoVbld41nJFywOVuBNf0i2GA8Ad4dB+yGcs/MUOgKVHdG9ukPuRjvRYS4EEh I76YKvlXCk44lEyly6MsO6muNNmc837FCYQcPTCMAm3KXUummQESpDv2i8p6+ptF M7W3ZZHR80QTsX7vSDzfARNilo06Y643y9QKbkSFxwZ8EqWze5iRFClamPh1MK7n Ukgi20LdkCMP+FDoJa/qgVA82KWckniNbkgdLQfzC31zW3XrLfNeuWySXMmUnVuF Xsn7fu4B96YjC55x6G8vOVcN9vRvSBA20YkfHDy/MLttV+/S64ylUbjm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU/+sxmi2Y5WarQX9qImRA8pxjvMB8GA1UdIwQY MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4vb5T+s sPP3AjMVbGhlk8thd26DWSayqVfgnzSm+2RyRhgmr48XyjvlGUcIDERBECcaFhU4 LvKlaDj60FAD9QLYC1BRb++Zsh2YNB/THImsA19uMjwEj4FTF4HoCDot34pTCDwe uzVk6EnvD+Mdz5pjGh7Yc35xAqIMIXpYIHseg3/hj2wWv3v033LJsUfH9Nlx/cSq CwPL4jpvJ5rgh2PHICwxslhQyuWPxLgiLIp/N74ZjPc/ra9M6CD0BdfwFUECEEHG bGuHPQtHizdTDK5ZeusLlmmV0NYHV6TPPzEuE6ekfQ5Yd3IydJyrTqEMWod8xOse dAyUTATEIFqjRw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:34 2025 by rpki-client