This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json) Hash identifier: G7gXYAIegWEMkP7MYI0y+QWO69iUo9fE4iMjqi9dRGQ= Subject key identifier: E6:11:35:6E:9E:45:59:88:27:24:A5:75:1D:0D:75:A8:63:63:11:BF Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Certificate serial: 019B755B5EF1066556D9997237336F1BD315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft Manifest number: 1725 Signing time: Wed 31 Dec 2025 17:01:20 +0000 Manifest this update: Wed 31 Dec 2025 17:01:20 +0000 Manifest next update: Thu 01 Jan 2026 17:01:20 +0000 Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: UUKrXYMmcWw62/PC3pz3iZXI26VVTADdHmaCVF/feKM=) 2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5b:5e:f1:06:65:56:d9:99:72:37:33:6f:1b:d3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Validity Not Before: Dec 31 17:01:20 2025 GMT Not After : Jan 1 17:01:20 2026 GMT Subject: CN=e611356e9e4559882724a5751d0d75a8636311bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:c6:89:b7:00:5a:0c:57:0e:db:fb:41:44: 6c:1b:ca:6d:0c:b3:19:7c:70:a7:56:b5:ba:83:c6: 31:19:08:3a:7f:c2:f8:b0:ab:34:51:72:eb:88:ee: c1:b0:4a:b8:46:e1:c2:e6:60:49:37:15:36:33:3e: af:6d:87:d1:6c:2a:9f:c0:34:7d:3b:cc:c6:97:cf: 66:7d:ab:ce:9a:50:3e:4b:68:ab:7e:c7:57:08:d0: 9e:f0:91:ee:15:39:30:d2:d7:c2:ba:3b:78:86:4d: 5c:69:98:f3:e1:9c:00:35:b3:27:22:9b:61:84:6f: 28:84:fb:13:d2:9c:83:c5:d1:90:d6:35:63:be:00: c3:2b:1a:74:7a:33:0a:58:25:9c:5e:5e:ee:35:0d: 55:9b:69:a0:b3:e1:4c:a3:56:d4:60:0b:51:9b:0a: 84:ec:03:fa:51:e5:2b:5a:e0:2c:30:0a:30:16:11: b8:d6:49:f4:22:a2:5a:72:7a:27:cc:b1:42:62:31: 04:10:a3:c8:7a:ae:11:af:38:39:f3:69:f4:eb:86: c8:39:b8:09:10:d5:96:d4:64:04:80:cc:61:98:2c: 76:65:0d:b5:03:9c:cc:6c:21:49:1e:3e:48:15:b0: 30:3c:76:ba:06:72:11:fc:43:d9:2e:c8:d5:ad:70: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:11:35:6E:9E:45:59:88:27:24:A5:75:1D:0D:75:A8:63:63:11:BF X509v3 Authority Key Identifier: keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:20:ba:88:31:68:fd:ab:f5:47:f4:87:c2:a8:0d:b6:90: a1:82:e3:a1:f3:b0:2f:5f:5e:41:33:be:7d:ff:43:ec:ff:56: 59:34:ab:40:13:43:2a:49:fb:f2:58:7c:39:59:fa:8d:46:c8: ef:c9:e5:1e:a6:e4:0b:2c:44:f9:ed:12:ea:e4:6d:45:ad:e2: da:85:95:a2:fd:d5:03:74:30:0c:34:27:45:1d:a5:e5:ea:24: ac:50:8b:bb:18:0a:19:ba:ea:e0:24:a1:ac:ee:db:a8:27:11: db:2a:ea:f3:ab:11:45:f2:77:51:05:cf:8e:2a:05:1d:e5:0c: fd:61:90:78:e4:34:05:7f:48:bb:55:5d:f2:0b:6e:bf:00:38: 41:dc:7a:1c:68:b5:ad:ec:a1:2c:5f:d4:fd:b7:b8:7f:ea:bb: 49:65:14:8e:03:ba:8e:2e:2b:5f:a6:b1:75:fe:0b:e4:77:87: 12:02:ee:7b:e6:2b:ea:40:81:04:21:51:18:f0:c2:b6:30:df: c1:d7:15:3b:9d:55:7d:5b:05:1b:80:b5:f7:c1:ef:40:e6:de: 07:3e:31:e5:a0:fd:77:2d:9c:b1:03:64:00:ed:d6:9a:ce:af: 74:ec:20:ff:3b:4d:b6:65:12:45:1e:64:53:a7:c4:70:b0:59: b2:c5:27:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1W17xBmVW2ZlyNzNvG9MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZmUzOTAwZTE0MWMzYjE2OWEzY2NjYjM1NTdiY2NlZjI4 OTVlODUwHhcNMjUxMjMxMTcwMTIwWhcNMjYwMTAxMTcwMTIwWjAzMTEwLwYDVQQD EyhlNjExMzU2ZTllNDU1OTg4MjcyNGE1NzUxZDBkNzVhODYzNjMxMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnnGibcAWgxXDtv7QURsG8ptDLMZ fHCnVrW6g8YxGQg6f8L4sKs0UXLriO7BsEq4RuHC5mBJNxU2Mz6vbYfRbCqfwDR9 O8zGl89mfavOmlA+S2irfsdXCNCe8JHuFTkw0tfCujt4hk1caZjz4ZwANbMnIpth hG8ohPsT0pyDxdGQ1jVjvgDDKxp0ejMKWCWcXl7uNQ1Vm2mgs+FMo1bUYAtRmwqE 7AP6UeUrWuAsMAowFhG41kn0IqJacnonzLFCYjEEEKPIeq4Rrzg582n064bIObgJ ENWW1GQEgMxhmCx2ZQ21A5zMbCFJHj5IFbAwPHa6BnIR/EPZLsjVrXDQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYRNW6eRVmIJySldR0NdahjYxG/MB8GA1UdIwQY MBaAFBH+OQDhQcOxaaPMyzVXvM7yiV6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEt Y2UxYThkYzk0MDQ4LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEtY2UxYThkYzk0MDQ4 LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNAguogx aP2r9Uf0h8KoDbaQoYLjofOwL19eQTO+ff9D7P9WWTSrQBNDKkn78lh8OVn6jUbI 78nlHqbkCyxE+e0S6uRtRa3i2oWVov3VA3QwDDQnRR2l5eokrFCLuxgKGbrq4CSh rO7bqCcR2yrq86sRRfJ3UQXPjioFHeUM/WGQeOQ0BX9Iu1Vd8gtuvwA4Qdx6HGi1 reyhLF/U/be4f+q7SWUUjgO6ji4rX6axdf4L5HeHEgLue+Yr6kCBBCFRGPDCtjDf wdcVO51VfVsFG4C198HvQObeBz4x5aD9dy2csQNkAO3Wms6vdOwg/ztNtmUSRR5k U6fEcLBZssUnkA== -----END CERTIFICATE-----Generated at Wed Dec 31 22:50:59 2025 by rpki-client