This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json) Hash identifier: iDvMbJZnYEG/Vg1UEVF9uZ5aI6zT1c94rRqmlNyExV8= Subject key identifier: AE:FF:24:0E:89:D2:CB:32:F5:02:DA:BD:81:3D:B7:8E:3F:83:88:32 Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Certificate serial: 019AF1D20392575E484B71B9E5EF47ACE1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft Manifest number: 1348 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=) 2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: hLWkSUuYMzM2bBfHkUDsJo4G9htmCNy/FBDKMw07reI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:03:92:57:5e:48:4b:71:b9:e5:ef:47:ac:e1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=aeff240e89d2cb32f502dabd813db78e3f838832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:26:ef:99:be:62:c6:a5:b0:8b:c6:c2:13: 75:50:3a:de:48:8d:9e:a1:93:3e:f1:56:dd:69:ba: df:ab:4c:dc:68:a9:da:05:6c:13:4d:70:4a:45:28: 77:5a:bb:fa:78:c2:5e:eb:ed:3c:05:64:b7:43:ba: ea:34:6b:01:94:22:a2:33:dc:f6:d3:f8:ed:0c:f4: fa:2e:21:a3:ac:95:f3:16:0a:97:49:2a:e0:ab:99: fd:56:b9:41:95:59:ef:b6:9f:22:66:14:a5:12:1b: dd:97:88:92:ec:98:dd:90:eb:e2:5b:d3:25:0c:f9: de:40:00:db:b9:46:9e:cf:28:31:6a:7d:88:42:c7: b7:8d:d6:0e:ce:34:46:65:d3:1b:d5:0e:d4:a5:5c: 7c:3a:2f:3f:02:56:9f:55:e3:9d:5a:15:3a:96:dd: dd:96:ab:f2:2c:3c:bf:2c:45:72:48:f5:80:27:5e: 7b:97:60:eb:d9:ca:21:ab:5b:39:34:35:c8:5d:95: f1:a0:9b:5c:6b:7e:ef:ae:ae:9b:b6:20:b4:7b:24: 83:93:1b:08:61:22:f5:ca:ce:0d:ca:2d:24:38:a3: 46:a9:10:f3:7c:cf:2c:24:ba:1f:10:c5:58:6e:3a: ef:bc:9b:37:30:59:f1:bb:7b:7a:99:53:ac:96:4d: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:24:0E:89:D2:CB:32:F5:02:DA:BD:81:3D:B7:8E:3F:83:88:32 X509v3 Authority Key Identifier: keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:17:14:e4:7e:de:98:ca:9c:49:a6:b2:d9:4a:d1:be:33:96: e9:8c:0a:f5:79:68:0c:73:ea:e1:57:6d:b3:30:02:6c:1b:11: e6:9f:e2:78:e9:b6:17:92:a7:d8:a8:02:b9:e7:04:b8:c0:ab: bc:ba:5e:c5:e6:64:f4:1f:db:b9:6d:54:02:55:8e:2b:67:01: 4f:8c:6d:00:4d:12:cc:53:90:e3:f1:6e:c5:33:27:16:d8:0a: 2d:ac:3d:a6:09:76:9e:6b:1a:c9:dd:06:59:98:e7:3f:38:a7: 33:11:56:0f:df:30:a4:ed:de:bb:68:ad:13:bd:99:bc:38:3d: 4c:35:e7:73:35:30:6b:2e:b3:f0:7f:5d:c3:19:ce:41:68:20: a2:39:7f:9e:89:70:76:73:54:c5:e4:64:71:72:cc:c9:4f:d2: e8:a9:0c:38:de:a6:c2:0d:ca:89:b5:15:29:0e:ff:f8:3a:e5: 64:69:81:b5:6c:37:0e:aa:57:b7:e5:d4:fd:cb:fd:9a:68:15: 93:5a:2d:40:87:4c:40:0d:66:85:5e:4e:ee:6c:0a:33:e8:cb: 29:ef:8b:3e:c3:7a:6b:04:b5:53:1e:c9:95:df:ca:50:de:84: 19:41:29:60:cc:0b:4d:e6:11:df:23:ea:0c:44:22:e9:15:a3: 98:20:37:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gOSV15IS3G55e9HrOHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzExZjIwODgzYTYyYmMwNjM5MWJhN2IyNTgyY2U3MmIz ZmU5MWMwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EyhhZWZmMjQwZTg5ZDJjYjMyZjUwMmRhYmQ4MTNkYjc4ZTNmODM4ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cQm75m+YsalsIvGwhN1UDreSI2e oZM+8Vbdabrfq0zcaKnaBWwTTXBKRSh3Wrv6eMJe6+08BWS3Q7rqNGsBlCKiM9z2 0/jtDPT6LiGjrJXzFgqXSSrgq5n9VrlBlVnvtp8iZhSlEhvdl4iS7JjdkOviW9Ml DPneQADbuUaezygxan2IQse3jdYOzjRGZdMb1Q7UpVx8Oi8/AlafVeOdWhU6lt3d lqvyLDy/LEVySPWAJ157l2Dr2cohq1s5NDXIXZXxoJtca37vrq6btiC0eySDkxsI YSL1ys4Nyi0kOKNGqRDzfM8sJLofEMVYbjrvvJs3MFnxu3t6mVOslk30swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7/JA6J0ssy9QLavYE9t44/g4gyMB8GA1UdIwQY MBaAFFdxHyCIOmK8Bjkbp7JYLOcrP+kcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMt NzE0ZDE5NThiNzdiLzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMtNzE0ZDE5NThiNzdi LzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBcU5H7e mMqcSaay2UrRvjOW6YwK9XloDHPq4VdtszACbBsR5p/ieOm2F5Kn2KgCuecEuMCr vLpexeZk9B/buW1UAlWOK2cBT4xtAE0SzFOQ4/FuxTMnFtgKLaw9pgl2nmsayd0G WZjnPzinMxFWD98wpO3eu2itE72ZvDg9TDXnczUway6z8H9dwxnOQWggojl/nolw dnNUxeRkcXLMyU/S6KkMON6mwg3KibUVKQ7/+DrlZGmBtWw3DqpXt+XU/cv9mmgV k1otQIdMQA1mhV5O7mwKM+jLKe+LPsN6awS1Ux7Jld/KUN6EGUEpYMwLTeYR3yPq DEQi6RWjmCA3Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:53 2025 by rpki-client