This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json) Hash identifier: NcaWhqEnoTLFNC1gU1Qg1tA73gvgMHDKsfPc0OwKzWw= Subject key identifier: CE:54:EA:1A:05:BF:C4:49:59:E0:AB:DC:25:B6:FC:29:40:A2:90:AD Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea Certificate serial: 019AF12EC5D12EA6AE8A4B07216F91008BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft Manifest number: 0AE5 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: 6WRGTc8Rzk/oYQ9OJ/HO8QrlO6fAB1UXyOUCF+/tL3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c5:d1:2e:a6:ae:8a:4b:07:21:6f:91:00:8b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=ce54ea1a05bfc44959e0abdc25b6fc2940a290ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:57:77:59:e1:71:d7:a0:b7:db:8a:30:32: 78:3a:6f:2f:de:5a:b8:e2:e0:1f:2f:13:9f:e0:17: e7:e5:2c:6c:55:f1:c1:92:c3:0b:fb:cd:0d:ea:f7: 0e:63:33:9a:a3:f6:db:94:c0:54:56:b9:0d:62:67: 06:65:2c:c3:92:d0:4e:36:54:99:cb:9c:eb:9d:01: 9d:10:6a:4e:2b:96:58:50:26:06:b0:d1:48:bc:eb: c5:bf:1b:84:d1:3e:79:26:0e:6d:7f:fd:58:75:36: fc:74:95:68:50:30:06:52:e2:9e:b0:1f:ed:37:ed: 69:8d:71:15:48:34:fc:3a:80:23:29:33:b1:8f:92: 19:ae:a4:b9:27:76:c1:98:f5:bd:c4:4f:59:91:c8: 53:37:3e:d5:e8:59:29:6a:a4:91:8f:2b:db:8e:5d: cf:3e:1f:58:bf:16:ab:87:ff:f9:40:28:e7:93:e6: e6:67:a6:97:45:24:8b:89:f3:a2:63:40:b8:73:83: f6:65:ee:11:f2:d8:77:d0:af:a8:f7:93:83:60:d2: 2c:48:21:eb:a5:79:a6:f1:fb:f6:ad:6a:16:64:e0: f9:2d:a2:6d:39:bf:c0:97:86:57:ee:fa:4a:af:4c: 0c:05:8f:35:dc:3c:3f:c1:d2:49:31:5d:2f:62:27: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:EA:1A:05:BF:C4:49:59:E0:AB:DC:25:B6:FC:29:40:A2:90:AD X509v3 Authority Key Identifier: keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cd:2c:db:36:d9:46:f8:df:e1:37:65:c6:44:ee:35:84:d0: 1e:f8:23:60:2a:a1:4b:06:4a:cb:2a:67:c6:6a:1b:d9:37:ce: 9c:4f:c7:23:20:4c:42:18:8a:74:f5:ac:d5:f2:de:47:34:3c: 96:d8:8e:98:f5:c4:5f:4a:09:4e:f3:06:87:50:5b:8e:71:d8: 77:82:4f:7b:00:0c:86:62:ae:b0:3f:84:3e:0a:4e:42:17:b6: ea:f2:2c:e8:48:24:8f:fb:a5:92:c5:99:0b:b5:cd:1b:3e:79: f4:cd:07:36:d8:ff:89:86:66:f8:a6:0e:27:e3:c1:d4:8d:5d: 03:65:78:c6:a8:03:2b:a4:67:8f:cd:89:76:92:07:83:1c:3c: a2:67:83:9f:da:fc:b3:9e:26:d7:88:ba:73:cf:60:6b:89:57: 85:2b:d5:a9:4a:43:09:15:83:8b:18:f8:76:d0:aa:37:ef:2c: 70:44:2d:51:80:50:b6:06:14:d4:85:17:0d:98:4a:d2:70:98: d3:b1:0a:a5:30:f4:bf:10:c0:ce:a7:49:d3:a5:90:48:fc:07: 2d:8e:6a:1c:49:15:e8:df:37:91:81:93:da:75:b9:73:51:84: 91:ac:d0:27:5f:fe:35:51:47:86:94:0e:73:60:af:13:02:af: cd:d0:6e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsXRLqauiksHIW+RAIvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYmU4MTk5YTE3Y2FjYWE2Y2Q1MmQ3OTQxMjM2ZGE2ZTU2 ZTFiZWEwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EyhjZTU0ZWExYTA1YmZjNDQ5NTllMGFiZGMyNWI2ZmMyOTQwYTI5MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8NXd1nhcdegt9uKMDJ4Om8v3lq4 4uAfLxOf4Bfn5SxsVfHBksML+80N6vcOYzOao/bblMBUVrkNYmcGZSzDktBONlSZ y5zrnQGdEGpOK5ZYUCYGsNFIvOvFvxuE0T55Jg5tf/1YdTb8dJVoUDAGUuKesB/t N+1pjXEVSDT8OoAjKTOxj5IZrqS5J3bBmPW9xE9ZkchTNz7V6FkpaqSRjyvbjl3P Ph9Yvxarh//5QCjnk+bmZ6aXRSSLifOiY0C4c4P2Ze4R8th30K+o95ODYNIsSCHr pXmm8fv2rWoWZOD5LaJtOb/Al4ZX7vpKr0wMBY813Dw/wdJJMV0vYieVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5U6hoFv8RJWeCr3CW2/ClAopCtMB8GA1UdIwQY MBaAFIO+gZmhfKyqbNUteUEjbablbhvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mZjUwZWMtYjEyZC00Nzk4LTg5ZmEt MjJkMWJjZmExZWRhLzEvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mZjUwZWMtYjEyZC00Nzk4LTg5ZmEtMjJkMWJjZmExZWRh LzEvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG80s2zbZ Rvjf4TdlxkTuNYTQHvgjYCqhSwZKyypnxmob2TfOnE/HIyBMQhiKdPWs1fLeRzQ8 ltiOmPXEX0oJTvMGh1BbjnHYd4JPewAMhmKusD+EPgpOQhe26vIs6Egkj/ulksWZ C7XNGz559M0HNtj/iYZm+KYOJ+PB1I1dA2V4xqgDK6Rnj82JdpIHgxw8omeDn9r8 s54m14i6c89ga4lXhSvVqUpDCRWDixj4dtCqN+8scEQtUYBQtgYU1IUXDZhK0nCY 07EKpTD0vxDAzqdJ06WQSPwHLY5qHEkV6N83kYGT2nW5c1GEkazQJ1/+NVFHhpQO c2CvEwKvzdBu8A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client