This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json) Hash identifier: G2l+lTAPISZWLRDkjGg8BxDOfwt/6zNiXxIytyzEVMo= Subject key identifier: DA:DC:15:29:D6:E8:0D:86:C6:46:10:78:D5:2E:F1:0D:22:7A:0E:B3 Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd Certificate serial: 019B462729D1B86B5ECD55D3D16E907AF0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 13:02:10 +0000 Manifest this update: Mon 22 Dec 2025 13:02:10 +0000 Manifest next update: Tue 23 Dec 2025 13:02:10 +0000 Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: SsLcv7xydoa+LMlFdt+NeJtOiFdki3vt/opZGMxIXgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:29:d1:b8:6b:5e:cd:55:d3:d1:6e:90:7a:f0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd Validity Not Before: Dec 22 13:02:10 2025 GMT Not After : Dec 23 13:02:10 2025 GMT Subject: CN=dadc1529d6e80d86c6461078d52ef10d227a0eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:7b:2e:d1:c6:8b:6b:f2:7f:32:29:0e:f0: 5c:6e:b6:20:c8:cd:9f:b2:49:ed:6f:f3:78:26:c1: e6:0f:a0:64:16:2d:f0:c2:76:3d:f8:4b:af:46:b6: c4:cb:9f:85:a0:3d:a4:ac:e8:57:19:7a:cf:63:2a: 73:0c:32:d4:ec:ba:10:c3:e7:b0:86:04:1e:8d:1c: d9:23:8a:9f:a2:03:0a:4a:74:9e:91:79:5e:a5:4b: fb:b1:c2:8c:59:20:a6:dd:7c:ce:4e:55:da:33:00: 13:54:52:00:7a:12:6c:08:c2:ba:4f:71:a3:97:4d: 41:1d:96:00:da:db:09:04:6d:38:ea:c2:9b:69:fb: 85:3e:04:be:90:04:7c:3c:77:bf:e5:af:5a:66:69: 8a:6e:28:9e:58:e5:5c:3e:eb:2b:40:8b:db:aa:06: b3:12:5d:83:73:8e:35:b3:48:2b:b2:f0:cd:c9:46: 64:a0:94:52:b6:ee:a1:6d:8c:06:ba:ba:c3:ed:1d: f4:30:7b:4c:97:c4:4b:cf:60:9d:99:16:31:56:cc: 2b:86:69:86:a9:fa:a5:24:1c:69:aa:bf:69:14:f3: 70:e0:51:86:7b:9e:c9:6e:96:ff:09:36:51:03:fb: 2a:52:93:78:83:af:f9:31:06:fe:c5:a4:81:c1:b4: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:15:29:D6:E8:0D:86:C6:46:10:78:D5:2E:F1:0D:22:7A:0E:B3 X509v3 Authority Key Identifier: keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:41:b5:c9:10:29:9f:f7:55:73:8c:19:de:1c:13:8f:bf:48: 27:b4:51:21:23:5f:40:db:01:ff:f5:f9:1c:46:e1:ff:e2:a9: cb:2d:46:8a:84:54:c8:24:3a:79:e0:4c:e1:dd:1a:5c:dc:b5: ac:82:67:fe:e9:54:ec:d6:07:b6:5d:c1:c9:82:32:8e:78:ae: a7:cb:d2:0a:a4:5d:0b:bd:40:4c:8a:91:3e:70:e1:37:c2:9c: c6:21:15:5b:9f:8f:9f:b1:5b:8b:00:2c:4f:01:bc:0d:86:f1: ea:ed:ca:86:77:d3:bf:2b:fb:32:b5:3e:9d:03:4f:87:5c:9b: 71:07:4f:fe:23:b2:7e:dd:f9:e9:6e:c2:97:de:91:75:11:e3: 77:fd:08:66:9d:1b:c3:6b:fd:55:e8:13:bf:3d:d9:20:3e:d8: 54:75:45:57:77:4d:d6:f1:cf:c0:3d:2c:35:df:5d:d0:b1:58: 25:e3:a1:fc:a7:1f:b0:26:45:ca:1b:19:4c:b9:ca:d5:51:b8: e8:6a:09:a5:a1:69:dd:5a:c8:6b:6c:9c:7a:50:b3:24:d1:5e: 97:74:28:c8:d3:db:2f:9c:03:28:6e:56:47:f2:24:0c:83:26: e5:86:19:3c:f6:3e:d3:62:ef:a7:c9:ff:ea:1a:54:d1:c7:1a: fd:43:87:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJynRuGtezVXT0W6QevCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTc3NWFkZjk3MTcyZTJmNjhmYzkxMDUzMDlkMzc1M2Jh MWY0Y2QwHhcNMjUxMjIyMTMwMjEwWhcNMjUxMjIzMTMwMjEwWjAzMTEwLwYDVQQD EyhkYWRjMTUyOWQ2ZTgwZDg2YzY0NjEwNzhkNTJlZjEwZDIyN2EwZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgh7LtHGi2vyfzIpDvBcbrYgyM2f skntb/N4JsHmD6BkFi3wwnY9+EuvRrbEy5+FoD2krOhXGXrPYypzDDLU7LoQw+ew hgQejRzZI4qfogMKSnSekXlepUv7scKMWSCm3XzOTlXaMwATVFIAehJsCMK6T3Gj l01BHZYA2tsJBG046sKbafuFPgS+kAR8PHe/5a9aZmmKbiieWOVcPusrQIvbqgaz El2Dc441s0grsvDNyUZkoJRStu6hbYwGurrD7R30MHtMl8RLz2CdmRYxVswrhmmG qfqlJBxpqr9pFPNw4FGGe57Jbpb/CTZRA/sqUpN4g6/5MQb+xaSBwbQjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrcFSnW6A2GxkYQeNUu8Q0ieg6zMB8GA1UdIwQY MBaAFHgXda35cXLi9o/JEFMJ03U7ofTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xMTRkMjUtYTFhYS00YTMzLWI3YjQt NTYwZTliMDUzZGQxLzEvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xMTRkMjUtYTFhYS00YTMzLWI3YjQtNTYwZTliMDUzZGQx LzEvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEG1yRAp n/dVc4wZ3hwTj79IJ7RRISNfQNsB//X5HEbh/+Kpyy1GioRUyCQ6eeBM4d0aXNy1 rIJn/ulU7NYHtl3ByYIyjniup8vSCqRdC71ATIqRPnDhN8KcxiEVW5+Pn7FbiwAs TwG8DYbx6u3KhnfTvyv7MrU+nQNPh1ybcQdP/iOyft356W7Cl96RdRHjd/0IZp0b w2v9VegTvz3ZID7YVHVFV3dN1vHPwD0sNd9d0LFYJeOh/KcfsCZFyhsZTLnK1VG4 6GoJpaFp3VrIa2ycelCzJNFel3QoyNPbL5wDKG5WR/IkDIMm5YYZPPY+02Lvp8n/ 6hpU0cca/UOHxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:53:41 2025 by rpki-client