This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json) Hash identifier: llzX530403UVRpm3GoWZD7ktGxltHBKGbCLPqa56328= Subject key identifier: 6B:E0:DF:2D:13:C6:85:2A:07:94:C7:14:BA:D4:D2:02:75:4C:0E:6A Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Certificate serial: 019B5719F6CD47ED2836536E404BD264B9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft Manifest number: 11C0 Signing time: Thu 25 Dec 2025 20:01:17 +0000 Manifest this update: Thu 25 Dec 2025 20:01:17 +0000 Manifest next update: Fri 26 Dec 2025 20:01:17 +0000 Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: f94arFNiv5sA/znMF2Sxil5h3+MfqsnIuT+SHKk0Rec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:19:f6:cd:47:ed:28:36:53:6e:40:4b:d2:64:b9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Validity Not Before: Dec 25 20:01:17 2025 GMT Not After : Dec 26 20:01:17 2025 GMT Subject: CN=6be0df2d13c6852a0794c714bad4d202754c0e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:1b:7e:e3:e5:6c:68:78:b1:88:bf:1d:93: 36:85:8b:24:2d:3b:df:26:cc:73:c8:0c:ec:09:0d: 5e:0e:ec:55:7d:f7:c8:c8:f5:db:1b:99:42:34:fa: 9a:ea:bd:52:62:af:f8:00:d8:73:58:ec:70:15:6c: 9f:12:da:19:7a:3f:c6:14:3f:e4:a9:fd:be:50:76: 1f:e0:70:3f:65:f2:71:35:5e:10:ab:29:95:45:28: c2:a7:90:6d:bc:b0:e9:df:9f:0a:d8:eb:ee:cc:6b: dd:4b:09:b7:4c:ac:81:b9:28:32:6a:f5:49:54:e5: f2:f2:40:57:29:f4:7b:70:90:a4:1f:45:e9:10:f5: 45:0d:b6:f3:bb:e9:d8:6c:aa:d6:b5:98:89:41:c2: f9:d8:22:0f:28:e5:26:38:31:39:3d:cc:d5:e4:3e: 44:b9:6f:83:70:3b:74:24:da:b8:f5:5d:82:ac:76: b0:d6:b8:94:a3:8f:37:5f:c7:15:4d:b8:4b:e8:d6: 4d:ed:24:23:6f:5a:42:21:89:62:d5:5b:4e:91:76: ac:48:61:a3:72:06:d8:81:92:5c:16:18:ed:35:eb: c6:77:ed:b8:a6:c6:33:52:a1:31:c2:1a:64:49:5c: 9d:47:72:83:f6:46:98:c7:84:c7:d9:48:46:36:7d: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:DF:2D:13:C6:85:2A:07:94:C7:14:BA:D4:D2:02:75:4C:0E:6A X509v3 Authority Key Identifier: keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:78:27:b1:aa:0e:86:3f:f9:a2:31:c9:05:4e:71:fb:1e:c8: 8e:d0:b9:2f:85:83:6b:4d:bd:78:c4:57:39:05:e4:dc:2f:55: e9:f9:0f:f3:34:a6:ee:85:ed:6e:99:45:e0:c7:44:94:3d:93: ce:a0:7a:4c:06:37:b7:9d:ca:8d:e8:c7:c2:88:73:8f:69:7d: 82:80:fb:3a:46:2b:f9:45:db:07:d3:36:63:7b:14:fc:30:67: c8:df:86:c0:8c:32:3a:9d:32:1c:f1:d6:95:d1:39:f2:36:1c: c3:1d:66:35:b9:39:59:f8:2a:92:ce:fc:5c:f0:4c:2e:2f:b3: 61:ba:39:3a:a3:a7:8f:11:6a:3a:06:16:74:83:ce:e1:65:27: 82:5b:9d:16:32:8a:de:4e:35:0f:21:82:65:1c:67:9a:0c:6f: e4:40:de:11:44:20:ba:49:51:3a:25:c0:c4:da:fc:11:5d:e6: 3c:61:6a:a1:11:a9:6d:8a:45:99:77:56:32:7c:f1:aa:c3:8d: c4:db:4a:b3:b6:67:10:c6:e6:57:7d:06:4b:cc:51:3e:f8:90: 60:a9:66:1a:5b:7f:2c:cf:fc:91:88:ec:6b:68:4c:4a:94:63: f3:5e:7d:93:1b:50:89:17:c6:76:36:ce:75:2a:c9:75:56:1e: e7:dc:f4:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXGfbNR+0oNlNuQEvSZLnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm MWJhY2YwHhcNMjUxMjI1MjAwMTE3WhcNMjUxMjI2MjAwMTE3WjAzMTEwLwYDVQQD Eyg2YmUwZGYyZDEzYzY4NTJhMDc5NGM3MTRiYWQ0ZDIwMjc1NGMwZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD0bfuPlbGh4sYi/HZM2hYskLTvf JsxzyAzsCQ1eDuxVfffIyPXbG5lCNPqa6r1SYq/4ANhzWOxwFWyfEtoZej/GFD/k qf2+UHYf4HA/ZfJxNV4QqymVRSjCp5BtvLDp358K2OvuzGvdSwm3TKyBuSgyavVJ VOXy8kBXKfR7cJCkH0XpEPVFDbbzu+nYbKrWtZiJQcL52CIPKOUmODE5PczV5D5E uW+DcDt0JNq49V2CrHaw1riUo483X8cVTbhL6NZN7SQjb1pCIYli1VtOkXasSGGj cgbYgZJcFhjtNevGd+24psYzUqExwhpkSVydR3KD9kaYx4TH2UhGNn0vCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvg3y0TxoUqB5THFLrU0gJ1TA5qMB8GA1UdIwQY MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3gnsaoO hj/5ojHJBU5x+x7IjtC5L4WDa029eMRXOQXk3C9V6fkP8zSm7oXtbplF4MdElD2T zqB6TAY3t53KjejHwohzj2l9goD7OkYr+UXbB9M2Y3sU/DBnyN+GwIwyOp0yHPHW ldE58jYcwx1mNbk5Wfgqks78XPBMLi+zYbo5OqOnjxFqOgYWdIPO4WUngludFjKK 3k41DyGCZRxnmgxv5EDeEUQguklROiXAxNr8EV3mPGFqoRGpbYpFmXdWMnzxqsON xNtKs7ZnEMbmV30GS8xRPviQYKlmGlt/LM/8kYjsa2hMSpRj8159kxtQiRfGdjbO dSrJdVYe59z0kg== -----END CERTIFICATE-----Generated at Fri Dec 26 01:35:44 2025 by rpki-client