This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json) Hash identifier: I91mI7xh+W1yVhO0oXBp/1y3FUkLe7c3ISoB2LSp04M= Subject key identifier: 79:95:D1:F8:37:8D:3D:DB:1C:21:EB:D8:09:42:F5:53:9A:6F:72:0D Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f Certificate serial: 019AF31D27622F1AE9713A7E066C4B4A496D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft Manifest number: 0F65 Signing time: Sat 06 Dec 2025 10:02:45 +0000 Manifest this update: Sat 06 Dec 2025 10:02:45 +0000 Manifest next update: Sun 07 Dec 2025 10:02:45 +0000 Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: 8SXIN7345jpworNQO4GyE0PGCY1tNSIHQIe2aBAN/u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:27:62:2f:1a:e9:71:3a:7e:06:6c:4b:4a:49:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f Validity Not Before: Dec 6 10:02:45 2025 GMT Not After : Dec 7 10:02:45 2025 GMT Subject: CN=7995d1f8378d3ddb1c21ebd80942f5539a6f720d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:23:ee:a3:1f:7e:9a:c8:c7:18:6b:38:22: 6c:46:00:7d:f9:62:38:ef:c7:17:00:e8:6f:a9:4c: 8a:df:71:49:3d:7f:f1:0f:95:5b:5a:d6:72:87:39: dd:22:cf:cc:64:fd:65:82:72:85:1b:67:b2:0b:df: 85:e1:68:d9:de:ac:99:09:07:48:e6:ac:30:1d:58: 72:5e:22:21:7f:cb:74:93:d5:28:66:4e:79:08:82: ff:e7:23:e0:26:b5:9d:cd:33:3a:4c:aa:82:39:d0: b0:a3:5c:e7:c5:f0:cc:c8:b8:bf:09:d3:4b:ad:19: 6a:2e:9f:da:2c:0f:2b:18:66:ec:d1:e4:4d:bd:75: ca:31:96:2b:bb:46:02:2d:6e:bf:f2:02:19:11:ee: 3a:77:9b:4e:1d:82:08:5b:a4:81:12:96:47:7a:1f: dc:13:7a:56:fe:3c:c3:9a:28:71:68:63:82:2c:4b: 0a:67:1d:c8:2e:a7:4a:6a:d5:2e:69:d7:33:4f:3a: aa:e8:46:ca:89:a7:ec:33:35:ea:60:57:5a:7c:9b: 94:72:43:74:03:dd:a3:6d:7f:ec:7b:04:a0:f0:0b: d9:d7:8a:cd:70:08:01:e5:af:5a:c3:c1:ee:cf:a9: 74:e9:e7:b6:9d:fe:3f:d1:e5:ef:dd:99:66:ff:da: 95:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:95:D1:F8:37:8D:3D:DB:1C:21:EB:D8:09:42:F5:53:9A:6F:72:0D X509v3 Authority Key Identifier: keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:c7:90:bf:1b:67:30:7f:a8:29:be:3b:30:b5:de:22:46: 17:14:3a:ff:63:a8:16:b9:79:9c:37:f2:1c:c9:cb:9b:20:0a: 83:a1:e0:7a:0b:de:a6:fb:5f:20:97:52:b0:30:45:27:ed:b3: f3:39:bb:69:78:46:3b:7e:47:d9:83:58:1b:0b:cf:53:67:0b: a0:8f:8f:c5:5f:98:b0:0e:51:e9:01:ea:e0:0d:2a:09:48:34: e7:10:9f:95:95:37:a7:d8:2b:68:44:9b:2f:87:af:4b:04:44: 0d:ac:59:23:4e:a1:dc:f0:23:43:69:da:7c:d0:6d:1f:65:28: 70:9e:57:db:aa:ab:6e:69:3a:b5:63:03:be:2f:82:d8:6a:e2: e4:b7:26:1e:79:c6:bb:fd:85:09:8a:7c:82:ec:ee:d0:ee:05: 2b:64:7e:e1:cb:bb:e4:94:a5:3a:79:a1:22:72:30:4d:00:34: b4:bb:c3:aa:75:c7:dd:f5:76:25:f7:01:b6:90:58:2d:42:c0: 07:0e:a1:61:e2:18:2b:cc:91:34:9e:ed:22:92:fe:84:07:15: 79:dc:18:30:15:0b:5a:be:a0:ab:23:04:4c:57:50:59:42:8d: be:9c:f6:bd:4e:56:f7:36:64:e9:de:bc:83:1c:95:40:8e:ba: 32:e3:a5:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSdiLxrpcTp+BmxLSkltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MWVhZWFiNTA4MzkxYTE1Zjk1YzQyOTEzZmEwMDVhMTZj MjNjMGYwHhcNMjUxMjA2MTAwMjQ1WhcNMjUxMjA3MTAwMjQ1WjAzMTEwLwYDVQQD Eyg3OTk1ZDFmODM3OGQzZGRiMWMyMWViZDgwOTQyZjU1MzlhNmY3MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Qj7qMffprIxxhrOCJsRgB9+WI4 78cXAOhvqUyK33FJPX/xD5VbWtZyhzndIs/MZP1lgnKFG2eyC9+F4WjZ3qyZCQdI 5qwwHVhyXiIhf8t0k9UoZk55CIL/5yPgJrWdzTM6TKqCOdCwo1znxfDMyLi/CdNL rRlqLp/aLA8rGGbs0eRNvXXKMZYru0YCLW6/8gIZEe46d5tOHYIIW6SBEpZHeh/c E3pW/jzDmihxaGOCLEsKZx3ILqdKatUuadczTzqq6EbKiafsMzXqYFdafJuUckN0 A92jbX/sewSg8AvZ14rNcAgB5a9aw8Huz6l06ee2nf4/0eXv3Zlm/9qVmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmV0fg3jT3bHCHr2AlC9VOab3INMB8GA1UdIwQY MBaAFLcerqtQg5GhX5XEKRP6AFoWwjwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgt YmVlNGQ2YzBiMDFlLzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgtYmVlNGQ2YzBiMDFl LzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNHHkL8b ZzB/qCm+OzC13iJGFxQ6/2OoFrl5nDfyHMnLmyAKg6HgegvepvtfIJdSsDBFJ+2z 8zm7aXhGO35H2YNYGwvPU2cLoI+PxV+YsA5R6QHq4A0qCUg05xCflZU3p9graESb L4evSwREDaxZI06h3PAjQ2nafNBtH2UocJ5X26qrbmk6tWMDvi+C2Gri5LcmHnnG u/2FCYp8guzu0O4FK2R+4cu75JSlOnmhInIwTQA0tLvDqnXH3fV2JfcBtpBYLULA Bw6hYeIYK8yRNJ7tIpL+hAcVedwYMBULWr6gqyMETFdQWUKNvpz2vU5W9zZk6d68 gxyVQI66MuOlyg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:42 2025 by rpki-client