This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft File: RE6tbxE5qlv2Y80A_myq4UpiFRI.mft (raw, json) Hash identifier: 3bPxHaRJo07CaklAh8gXnNaKGC/MPM5JGPWCBY9HRWM= Subject key identifier: 43:F8:AD:E3:35:0E:E1:4B:74:B5:F2:1D:FC:F2:99:6B:A1:AF:55:F0 Authority key identifier: 44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12 Certificate issuer: /CN=444ead6f1139aa5bf663cd00fe6caae14a621512 Certificate serial: 019AF389257FC32B1BAC49291551A7589456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft Manifest number: D2 Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: RE6tbxE5qlv2Y80A_myq4UpiFRI.crl (hash: Ip9w3vsd/pmEF61OYNOCDA84gPOIkECS/uWVHK/xK/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:25:7f:c3:2b:1b:ac:49:29:15:51:a7:58:94:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444ead6f1139aa5bf663cd00fe6caae14a621512 Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=43f8ade3350ee14b74b5f21dfcf2996ba1af55f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:5c:77:c3:fa:15:f9:27:64:28:a3:42:09: 66:d9:bc:e6:2e:f8:d3:27:89:79:a8:aa:68:fa:33: 8f:31:8c:6b:fc:9f:15:6a:d8:51:d0:0d:dc:e7:c3: 68:a1:0e:eb:c0:ea:5b:d7:cc:a0:19:31:37:13:ef: 00:36:b4:ec:0b:b3:3e:70:6d:3b:d7:0c:6f:00:f4: 29:77:ca:3e:f9:55:75:58:81:0e:7b:28:bf:52:1d: 64:da:4d:32:37:0d:3e:87:b3:07:90:b8:73:c6:6c: 63:4e:2d:fc:50:45:b2:99:81:da:d5:7e:61:df:a9: 30:03:d5:13:74:23:e1:9b:35:eb:e9:97:30:fc:8f: 58:1e:d1:a8:33:a6:7a:91:e2:99:61:ba:b2:2a:18: fe:63:eb:de:1b:85:17:e4:d8:7d:d5:fc:3f:7f:46: 45:0b:b5:f5:a6:6e:bd:e2:9e:d8:77:3e:0a:2b:ac: d8:93:b6:cb:b4:41:18:93:84:c3:a5:4e:e2:93:33: 2a:44:59:a6:64:8f:e3:26:69:09:79:9c:0c:0b:a1: 31:2a:1c:70:e1:08:5c:34:3e:c4:68:c9:c9:af:21: 64:ea:77:d4:73:6c:7b:ee:f0:38:78:b1:23:b2:31: 48:32:1c:9b:de:82:00:2b:25:5e:88:95:87:9b:79: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F8:AD:E3:35:0E:E1:4B:74:B5:F2:1D:FC:F2:99:6B:A1:AF:55:F0 X509v3 Authority Key Identifier: keyid:44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c2:19:21:a6:8b:9e:01:cd:8f:2b:c6:25:fa:0a:02:e9:61: 49:37:8c:07:d9:12:aa:41:9f:14:14:a1:6d:16:76:64:a9:3d: 34:1d:e1:3c:00:d1:d0:62:02:bc:00:8a:19:cd:b9:59:7f:d1: 4f:2c:01:67:af:95:8f:c3:90:0b:e6:69:d6:6c:f9:e4:ba:2b: ba:fc:d6:e6:5a:10:f0:3b:b7:aa:b1:17:05:13:41:3f:c0:60: 46:70:01:c1:13:d0:01:60:6f:f8:e6:e0:03:33:94:3a:d5:3f: 57:12:7f:1a:ba:d5:31:d8:a1:ae:17:ee:e2:f1:e5:08:e3:66: d9:aa:69:99:e4:bd:e6:1f:55:c9:40:ee:7d:26:1b:56:c2:b4: 42:e0:b6:93:12:6a:e5:1e:d8:35:c8:a4:a2:bf:08:0c:f7:59: 44:cb:99:36:31:8b:f5:40:12:04:47:a4:bc:be:f4:91:ca:b8: 5c:a7:96:b3:cb:d5:62:01:f7:32:8b:7d:0e:3f:c8:6e:62:87: 4c:ef:ee:6b:70:cd:16:6a:8b:f2:5c:8a:76:d9:3e:16:9d:c1: f2:46:03:37:e0:1f:ac:ca:cc:c2:53:74:fb:6b:23:df:b1:4f: 03:51:5c:70:41:68:80:d0:0a:8b:6f:a8:40:10:27:96:a8:67: 0e:02:7d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSV/wysbrEkpFVGnWJRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NGVhZDZmMTEzOWFhNWJmNjYzY2QwMGZlNmNhYWUxNGE2 MjE1MTIwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD Eyg0M2Y4YWRlMzM1MGVlMTRiNzRiNWYyMWRmY2YyOTk2YmExYWY1NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmctcd8P6FfknZCijQglm2bzmLvjT J4l5qKpo+jOPMYxr/J8VathR0A3c58NooQ7rwOpb18ygGTE3E+8ANrTsC7M+cG07 1wxvAPQpd8o++VV1WIEOeyi/Uh1k2k0yNw0+h7MHkLhzxmxjTi38UEWymYHa1X5h 36kwA9UTdCPhmzXr6Zcw/I9YHtGoM6Z6keKZYbqyKhj+Y+veG4UX5Nh91fw/f0ZF C7X1pm694p7Ydz4KK6zYk7bLtEEYk4TDpU7ikzMqRFmmZI/jJmkJeZwMC6ExKhxw 4QhcND7EaMnJryFk6nfUc2x77vA4eLEjsjFIMhyb3oIAKyVeiJWHm3k6FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP4reM1DuFLdLXyHfzymWuhr1XwMB8GA1UdIwQY MBaAFEROrW8ROapb9mPNAP5squFKYhUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MmU2NDAtYTRlOC00MDliLTkyODUt NGNmNjY1NjNjYTBiLzEvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MmU2NDAtYTRlOC00MDliLTkyODUtNGNmNjY1NjNjYTBi LzEvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMIZIaaL ngHNjyvGJfoKAulhSTeMB9kSqkGfFBShbRZ2ZKk9NB3hPADR0GICvACKGc25WX/R TywBZ6+Vj8OQC+Zp1mz55LoruvzW5loQ8Du3qrEXBRNBP8BgRnABwRPQAWBv+Obg AzOUOtU/VxJ/GrrVMdihrhfu4vHlCONm2appmeS95h9VyUDufSYbVsK0QuC2kxJq 5R7YNcikor8IDPdZRMuZNjGL9UASBEekvL70kcq4XKeWs8vVYgH3Mot9Dj/IbmKH TO/ua3DNFmqL8lyKdtk+Fp3B8kYDN+AfrMrMwlN0+2sj37FPA1FccEFogNAKi2+o QBAnlqhnDgJ9hg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:52 2025 by rpki-client