This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json) Hash identifier: UUSdIODQi/WEuLdIBO45oNhTVKYy39joiJ9ZWoanvIk= Subject key identifier: E5:76:8A:50:1E:EC:0D:00:88:39:94:41:88:E9:9D:72:2D:8C:F0:6A Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C Certificate issuer: /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c Certificate serial: 019B30E8230DBC92A523382BD501DE227292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 10:01:18 +0000 Manifest this update: Thu 18 Dec 2025 10:01:18 +0000 Manifest next update: Fri 19 Dec 2025 10:01:18 +0000 Files and hashes: 1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: e3KJMOnNCTmwxATwtcXdFcIYyYI6ihWtqEDcCLh9HRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:23:0d:bc:92:a5:23:38:2b:d5:01:de:22:72:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c Validity Not Before: Dec 18 10:01:18 2025 GMT Not After : Dec 19 10:01:18 2025 GMT Subject: CN=e5768a501eec0d008839944188e99d722d8cf06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:3c:30:df:60:51:3f:5f:97:a4:67:07:8e: c6:0e:02:2c:bd:38:7c:06:22:3c:1d:99:2d:b2:d2: e8:dc:60:5c:a4:0b:32:0b:5a:9c:58:96:40:d3:3c: 8d:5d:74:19:3d:a1:e7:e0:36:7a:e0:83:2a:53:94: e2:46:98:44:86:ac:ae:87:31:77:08:92:c1:29:61: 10:f4:b2:19:00:e5:89:ba:22:47:28:39:7c:35:ae: a1:1c:5a:68:d7:26:50:7a:52:24:e3:41:5c:e5:cc: 17:29:8b:3f:69:03:33:ee:a0:bd:d6:e2:02:e6:4f: 7a:41:29:f4:6c:81:92:d5:5e:f0:f0:4f:83:7c:6c: 84:15:af:df:ec:d7:a1:97:07:4d:c2:cb:62:49:42: df:87:7c:6a:d8:2e:3d:bc:7f:bb:41:41:2f:02:fc: 40:c7:5e:f9:ba:5c:12:ae:e1:0e:42:1c:03:9d:64: d1:c7:12:55:1b:9f:a4:6b:36:0c:56:f5:26:4b:90: 22:55:2c:89:27:65:3c:59:75:16:41:1a:90:e9:e0: 0a:96:ba:62:d4:7c:df:99:81:71:13:db:85:95:75: 17:0a:aa:1a:a5:3a:33:df:d2:b8:19:06:5c:42:15: a8:5c:8e:73:fc:74:b4:29:44:c5:1d:29:35:e6:8e: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:8A:50:1E:EC:0D:00:88:39:94:41:88:E9:9D:72:2D:8C:F0:6A X509v3 Authority Key Identifier: keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:f2:89:32:e8:d3:c9:fb:11:a0:16:1c:98:99:e2:c5:24: cb:38:73:83:d4:19:1b:c9:73:a8:db:70:18:ee:6d:81:72:18: 90:b0:31:e1:a1:fa:93:66:b7:fb:36:6c:9b:65:69:fd:ed:b4: 3e:66:a3:62:72:b5:81:70:04:8a:88:93:c3:11:d5:e5:25:f7: f0:15:21:ec:f5:2c:fd:bd:a3:4b:b5:01:5a:b4:df:e2:32:3e: 94:af:e3:17:a7:5a:a8:fd:c3:0f:6b:ad:84:bb:4f:59:2a:94: 3b:80:06:01:5c:89:b8:00:5f:14:09:d1:a1:7f:0f:b4:bc:48: 3a:ee:0b:b9:75:43:0e:57:2d:3d:19:b6:08:cc:ab:94:9e:6b: 9f:27:83:bf:8c:00:57:19:2f:4f:9f:05:f9:86:f1:94:25:40: e1:16:b7:01:a5:eb:5e:eb:86:91:cd:ac:8c:34:1d:9c:fd:f3: e0:6e:42:38:03:6f:1f:78:8f:ac:61:63:99:77:a9:7c:4d:7e: 27:c2:aa:8e:0e:12:7f:f4:b1:73:92:83:ac:aa:6b:6f:47:3b: df:bb:0b:ac:0c:cd:13:d8:e8:0f:32:39:cc:c1:5a:3f:bd:ae: 53:71:d2:e2:a1:2b:63:c0:29:65:a7:cc:73:c7:ee:1d:15:22: 0f:14:c7:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6CMNvJKlIzgr1QHeInKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NTk2NjljMmI3YzBiMjVjMDdlNzkzMmI4YTFmOThiMGJi ZWRjNGMwHhcNMjUxMjE4MTAwMTE4WhcNMjUxMjE5MTAwMTE4WjAzMTEwLwYDVQQD EyhlNTc2OGE1MDFlZWMwZDAwODgzOTk0NDE4OGU5OWQ3MjJkOGNmMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk48MN9gUT9fl6RnB47GDgIsvTh8 BiI8HZktstLo3GBcpAsyC1qcWJZA0zyNXXQZPaHn4DZ64IMqU5TiRphEhqyuhzF3 CJLBKWEQ9LIZAOWJuiJHKDl8Na6hHFpo1yZQelIk40Fc5cwXKYs/aQMz7qC91uIC 5k96QSn0bIGS1V7w8E+DfGyEFa/f7NehlwdNwstiSULfh3xq2C49vH+7QUEvAvxA x175ulwSruEOQhwDnWTRxxJVG5+kazYMVvUmS5AiVSyJJ2U8WXUWQRqQ6eAKlrpi 1HzfmYFxE9uFlXUXCqoapToz39K4GQZcQhWoXI5z/HS0KUTFHSk15o4uJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV2ilAe7A0AiDmUQYjpnXItjPBqMB8GA1UdIwQY MBaAFHhZZpwrfAslwH55Mrih+YsLvtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2Njkt ZmMzNTU5Njk2MjQ2LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2NjktZmMzNTU5Njk2MjQ2 LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9jyiTLo 08n7EaAWHJiZ4sUkyzhzg9QZG8lzqNtwGO5tgXIYkLAx4aH6k2a3+zZsm2Vp/e20 PmajYnK1gXAEioiTwxHV5SX38BUh7PUs/b2jS7UBWrTf4jI+lK/jF6daqP3DD2ut hLtPWSqUO4AGAVyJuABfFAnRoX8PtLxIOu4LuXVDDlctPRm2CMyrlJ5rnyeDv4wA VxkvT58F+YbxlCVA4Ra3AaXrXuuGkc2sjDQdnP3z4G5COANvH3iPrGFjmXepfE1+ J8Kqjg4Sf/Sxc5KDrKprb0c737sLrAzNE9joDzI5zMFaP72uU3HS4qErY8ApZafM c8fuHRUiDxTHtQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:12 2025 by rpki-client