This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft File: e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json) Hash identifier: H1SmKxGeAQg2s3LgkYUMrU/CeiISUWmrrLis/07byys= Subject key identifier: E1:A1:FB:4D:1A:28:64:91:40:70:65:6D:DF:00:E5:F7:11:60:9F:F4 Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56 Certificate issuer: /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56 Certificate serial: 019AF31BC582290D77E931EDC17374383040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft Manifest number: 0719 Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: u1z8uNbCKrr1yCKSzcty1o9TkQcwWuOf2rQGBET++Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c5:82:29:0d:77:e9:31:ed:c1:73:74:38:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56 Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=e1a1fb4d1a2864914070656ddf00e5f711609ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:e6:dc:08:6f:e5:99:67:25:dd:c1:23:69: 19:ca:4f:1d:d2:6a:5f:d7:20:11:19:99:5f:9c:7f: fc:cb:a7:5d:04:ba:ec:85:d3:6f:8e:bf:d2:44:b8: 27:ec:f7:49:20:30:55:fa:5b:9f:2a:f5:88:f3:2a: 9f:72:93:92:8f:74:14:6b:05:36:87:35:99:bb:26: 22:52:98:08:78:7d:bd:8a:41:29:e7:aa:fe:94:85: f7:0b:90:fb:00:63:1d:12:c4:54:73:a0:f4:45:d7: 03:67:ba:f8:76:76:ff:d3:45:ed:09:98:aa:7a:46: 80:5c:7c:f8:60:d6:fe:a8:56:b5:37:b6:71:02:a5: d3:25:88:2a:b8:7c:84:53:e2:01:b1:99:dc:88:8d: 97:92:a4:d4:55:fc:8b:d1:c5:de:5c:43:c0:f8:bf: 0b:1d:a8:22:bc:ea:3e:65:d5:78:47:2f:e9:bf:74: 99:83:73:a5:2e:95:b2:ee:05:f2:78:bc:45:ad:f0: 85:83:29:77:b5:2d:29:43:7f:d3:0f:2d:39:67:9c: 41:03:fc:29:90:e3:eb:d0:3b:9c:3e:2a:0a:50:c9: 78:f7:4f:aa:a2:ea:5e:f8:a4:e2:af:5a:71:76:ee: 51:92:14:e4:7e:f2:50:a9:1f:fc:a3:b7:73:4a:31: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A1:FB:4D:1A:28:64:91:40:70:65:6D:DF:00:E5:F7:11:60:9F:F4 X509v3 Authority Key Identifier: keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a9:aa:c2:1b:f9:c3:87:32:60:ca:bc:8b:e9:aa:93:bf:48: 16:93:de:c2:5d:84:7c:3e:ba:96:f1:39:f0:95:77:42:70:ac: 4a:57:c9:37:b5:69:c8:ae:38:2a:4c:a5:a2:9d:d8:35:49:cf: 6b:af:e7:00:fb:f1:e6:5a:4f:61:69:2e:37:9f:e3:80:7a:21: 3e:57:84:19:49:98:ab:c7:c5:ea:c5:d4:9c:9b:d9:8b:e9:ae: 8e:3b:ad:24:b3:62:3f:31:5b:a8:53:8f:57:d0:49:1a:3d:24: 5e:2c:9a:bd:1e:87:87:28:e3:2d:18:5c:51:1e:d1:17:9e:7f: 65:e7:71:58:35:49:21:5f:84:f8:6e:85:13:a4:ab:e9:92:54: d4:48:e0:4d:8c:73:b6:9e:88:3d:35:46:4d:cc:5e:da:c0:ac: 48:55:eb:ec:e1:4a:d2:2a:01:1a:79:1d:41:12:be:7f:cb:3a: f5:f1:f1:8c:a5:3b:59:59:6d:2c:3b:92:a2:46:14:74:d0:89: f6:f9:42:4e:1f:61:af:3c:83:f7:3e:f5:ec:b1:2f:e7:2e:e7: eb:49:af:45:5e:fe:5c:ac:b4:2b:ee:67:d9:76:06:57:ec:dd: 1a:3f:ee:e3:70:cc:4f:7b:77:1c:f7:a2:b6:a3:31:60:4c:da: 79:5a:f1:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8WCKQ136THtwXN0ODBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTQ1YmI4NWJhNzU4NWUyODhhY2I3MWE0NTJiMGNjOGVl MGRiNTYwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD EyhlMWExZmI0ZDFhMjg2NDkxNDA3MDY1NmRkZjAwZTVmNzExNjA5ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMjm3Ahv5ZlnJd3BI2kZyk8d0mpf 1yARGZlfnH/8y6ddBLrshdNvjr/SRLgn7PdJIDBV+lufKvWI8yqfcpOSj3QUawU2 hzWZuyYiUpgIeH29ikEp56r+lIX3C5D7AGMdEsRUc6D0RdcDZ7r4dnb/00XtCZiq ekaAXHz4YNb+qFa1N7ZxAqXTJYgquHyEU+IBsZnciI2XkqTUVfyL0cXeXEPA+L8L HagivOo+ZdV4Ry/pv3SZg3OlLpWy7gXyeLxFrfCFgyl3tS0pQ3/TDy05Z5xBA/wp kOPr0DucPioKUMl490+qoupe+KTir1pxdu5RkhTkfvJQqR/8o7dzSjF4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGh+00aKGSRQHBlbd8A5fcRYJ/0MB8GA1UdIwQY MBaAFHvkW7hbp1heKIrLcaRSsMyO4NtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Yzc2YzgtMmE4OS00MmEyLWIwZjct NDEwYTFiZGUxMjFmLzEvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Yzc2YzgtMmE4OS00MmEyLWIwZjctNDEwYTFiZGUxMjFm LzEvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKmqwhv5 w4cyYMq8i+mqk79IFpPewl2EfD66lvE58JV3QnCsSlfJN7VpyK44Kkylop3YNUnP a6/nAPvx5lpPYWkuN5/jgHohPleEGUmYq8fF6sXUnJvZi+mujjutJLNiPzFbqFOP V9BJGj0kXiyavR6HhyjjLRhcUR7RF55/ZedxWDVJIV+E+G6FE6Sr6ZJU1EjgTYxz tp6IPTVGTcxe2sCsSFXr7OFK0ioBGnkdQRK+f8s69fHxjKU7WVltLDuSokYUdNCJ 9vlCTh9hrzyD9z717LEv5y7n60mvRV7+XKy0K+5n2XYGV+zdGj/u43DMT3t3HPei tqMxYEzaeVrx5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:16 2025 by rpki-client