This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json) Hash identifier: kaR1bsacywdYe4ZRqGnSQJ338KX1EEXkkFcpubAoCSM= Subject key identifier: F3:EF:9E:FA:6B:BB:30:E3:9F:BD:95:C2:73:97:41:33:E6:0F:82:CF Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3 Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3 Certificate serial: 019AF23FDDACF70A1066815F111AC9A217FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft Manifest number: 0F56 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=) 2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: nuWoWauw9UhjjLCZwosk3+2GYmZ8P2alFOxFnY/1bC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dd:ac:f7:0a:10:66:81:5f:11:1a:c9:a2:17:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=f3ef9efa6bbb30e39fbd95c273974133e60f82cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:bb:dd:f6:ec:39:b9:7b:ba:cb:64:d0:03: 8e:ee:21:fe:11:1d:84:72:55:5c:c9:2a:86:c2:cf: 31:60:4c:70:0c:80:fa:59:da:16:09:56:46:eb:01: 75:08:3e:4c:8c:75:dc:8a:07:1f:3f:b6:87:11:77: d1:2d:a0:50:3e:f4:82:91:98:94:ba:34:a3:a0:74: 3f:73:82:5a:92:75:e8:ad:bf:d1:bd:58:ba:79:98: 32:b9:d8:87:a6:11:a1:ab:43:63:f8:2f:2d:70:95: 94:28:32:2a:9b:32:23:07:25:e4:87:9e:24:22:9b: 85:92:c6:e1:56:d7:e3:fb:0f:6e:fe:00:39:dc:c9: e0:5a:e4:ff:01:d3:a4:51:ce:9e:24:3b:04:85:2a: dd:4a:3c:95:18:69:15:f7:a2:95:09:b2:e8:70:e4: 81:11:36:15:96:07:92:3e:96:11:4b:f0:42:6e:3e: 91:66:d2:25:a2:1e:51:f9:d3:d8:69:8d:b7:8f:97: 85:37:17:82:65:20:61:9b:b6:d5:e9:4c:9a:0d:a4: c7:63:3f:5e:ef:e4:81:3f:8e:19:39:6f:d7:d3:55: 51:0a:75:6b:37:14:53:db:00:14:de:8d:f4:5b:b8: e1:8a:f6:b8:ba:c5:20:3e:9d:9e:d3:e7:9f:c4:8c: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:9E:FA:6B:BB:30:E3:9F:BD:95:C2:73:97:41:33:E6:0F:82:CF X509v3 Authority Key Identifier: keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:5e:73:bb:f2:e6:fd:8e:9c:4a:bc:a0:42:ac:b9:a3:07: 88:c7:69:52:b7:7f:8f:ce:8d:32:86:cc:6e:90:ad:11:ab:b2: eb:c7:b3:53:01:fe:48:ae:ae:b4:87:af:a7:45:22:1b:88:de: b7:8a:45:3f:9f:d2:55:cd:9e:8b:fc:42:d6:9b:ae:78:60:52: 6c:37:fa:31:17:ff:ba:ec:2b:94:b2:2b:70:6a:c3:bc:fa:f7: 69:25:f6:38:2e:23:8d:45:e2:11:fb:f9:76:e0:8e:ea:44:b6: 30:d8:03:18:0f:3b:aa:cb:60:0f:55:42:45:0b:be:1e:54:63: 92:70:fa:15:e2:00:0a:0b:5b:1b:46:83:49:e1:ce:4b:06:15: 4e:3a:9a:dc:fd:87:94:4c:ae:49:02:89:9f:14:ee:ee:2e:ff: 3a:9f:25:3e:13:8f:35:76:f4:ff:d9:27:77:14:2f:15:73:dd: 68:0e:d0:90:5a:1d:4c:3c:e8:1d:ac:29:b6:05:97:e5:b7:41: 5e:e1:a1:39:53:ed:e8:57:d6:21:42:cc:c8:2d:52:8b:d3:fa: 07:f1:c1:e1:e5:90:79:60:0f:7e:66:39:bc:12:03:d7:25:6a: 7c:f1:ee:28:c7:2c:58:e9:83:d9:41:e0:b1:f9:b9:eb:fd:95: a3:d1:e8:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP92s9woQZoFfERrJohf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZjJlMzViM2M1NTliNmQ4NDM2NjdjYWQ1ZGFjNjc0ZTAx Yjk2YzMwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhmM2VmOWVmYTZiYmIzMGUzOWZiZDk1YzI3Mzk3NDEzM2U2MGY4MmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8a73fbsObl7ustk0AOO7iH+ER2E clVcySqGws8xYExwDID6WdoWCVZG6wF1CD5MjHXcigcfP7aHEXfRLaBQPvSCkZiU ujSjoHQ/c4JaknXorb/RvVi6eZgyudiHphGhq0Nj+C8tcJWUKDIqmzIjByXkh54k IpuFksbhVtfj+w9u/gA53MngWuT/AdOkUc6eJDsEhSrdSjyVGGkV96KVCbLocOSB ETYVlgeSPpYRS/BCbj6RZtIloh5R+dPYaY23j5eFNxeCZSBhm7bV6UyaDaTHYz9e 7+SBP44ZOW/X01VRCnVrNxRT2wAU3o30W7jhiva4usUgPp2e0+efxIwm3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPvnvpruzDjn72VwnOXQTPmD4LPMB8GA1UdIwQY MBaAFBHy41s8VZtthDZnytXaxnTgG5bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUt MjUwYTllNjcwOGQwLzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQw LzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCFec7vy 5v2OnEq8oEKsuaMHiMdpUrd/j86NMobMbpCtEauy68ezUwH+SK6utIevp0UiG4je t4pFP5/SVc2ei/xC1puueGBSbDf6MRf/uuwrlLIrcGrDvPr3aSX2OC4jjUXiEfv5 duCO6kS2MNgDGA87qstgD1VCRQu+HlRjknD6FeIACgtbG0aDSeHOSwYVTjqa3P2H lEyuSQKJnxTu7i7/Op8lPhOPNXb0/9kndxQvFXPdaA7QkFodTDzoHawptgWX5bdB XuGhOVPt6FfWIULMyC1Si9P6B/HB4eWQeWAPfmY5vBID1yVqfPHuKMcsWOmD2UHg sfm56/2Vo9HoQA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:39 2025 by rpki-client