This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json) Hash identifier: u4yZ0H8DGJ0hGdQGnZWCuglFm3xVLaVz0rdlPx+p+AQ= Subject key identifier: F1:F2:F7:0E:BF:7A:5E:F9:6D:6C:BF:F0:82:79:0E:C4:C1:B9:71:79 Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156 Certificate serial: 019B6B7BD3A01FF2BF0C71CF5594184F6387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft Manifest number: 0CFB Signing time: Mon 29 Dec 2025 19:00:35 +0000 Manifest this update: Mon 29 Dec 2025 19:00:35 +0000 Manifest next update: Tue 30 Dec 2025 19:00:35 +0000 Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: qStAX8vA9RpOiXlV5PIkmXkUYH4shMIB80JNzTpQVcU=) 2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7b:d3:a0:1f:f2:bf:0c:71:cf:55:94:18:4f:63:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156 Validity Not Before: Dec 29 19:00:35 2025 GMT Not After : Dec 30 19:00:35 2025 GMT Subject: CN=f1f2f70ebf7a5ef96d6cbff082790ec4c1b97179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ed:4e:71:a5:f8:25:4e:e9:bf:80:e5:74:10: c0:a2:b2:ab:5d:e8:85:4c:fb:5f:16:36:8d:c9:1f: b1:35:62:87:a3:8f:f8:c1:68:a0:3e:6e:c2:87:c9: 98:f9:92:b5:4b:28:0d:80:a7:69:3a:f6:68:84:51: bc:34:25:b5:2d:dd:53:91:c2:04:3c:f9:5b:2a:af: 01:3f:69:f9:cc:32:6c:53:f6:ee:db:af:1c:cc:85: 01:62:6a:9b:dd:8c:90:7e:02:fa:fd:78:98:7a:ad: f9:f2:9f:4b:33:da:1a:34:37:71:d5:bc:41:d5:a8: 70:06:45:b1:71:59:bd:17:06:43:34:b9:e4:42:d3: c0:c1:83:ad:dd:d8:e4:56:b7:97:f0:12:ec:f5:fd: d4:03:28:6a:0f:b5:fd:a2:79:93:f7:a2:95:82:af: 17:1b:94:5d:f1:08:99:08:c2:99:0c:ca:8a:50:e9: 59:ed:ad:85:1e:db:a3:b2:93:a2:9c:88:0f:f2:b3: f5:f3:e8:17:dd:6d:8b:ec:26:46:73:d6:25:fb:4c: e1:10:ee:ec:c0:35:44:3b:30:aa:ff:2d:5d:84:7b: a8:20:ac:d9:67:46:75:fc:b3:a7:53:97:58:47:16: fc:fa:a2:08:d2:e5:be:2a:f3:5e:c2:27:9c:a2:5f: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:F7:0E:BF:7A:5E:F9:6D:6C:BF:F0:82:79:0E:C4:C1:B9:71:79 X509v3 Authority Key Identifier: keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:68:21:df:16:ce:e7:87:74:48:5a:87:1b:aa:c5:6d:95:39: 82:bb:74:96:64:97:2f:f3:49:6a:48:ba:3c:7b:67:2a:42:dc: e7:5d:47:a2:32:08:c2:e1:26:96:76:47:25:c0:32:23:97:2c: 88:67:2a:c6:fd:79:2a:cf:f9:5e:f1:19:23:83:5d:cd:42:fb: 7d:91:22:da:ee:a3:04:9c:8c:00:cb:f7:f4:75:e8:8a:91:34: 9f:2f:5a:7f:48:af:32:1e:09:34:51:28:e0:ad:fa:27:b8:dc: 80:79:47:38:81:a2:3f:26:c3:e9:4f:75:9b:14:63:59:36:df: 28:34:c2:36:ff:6a:c5:17:21:9a:c5:29:12:1e:e5:33:e2:b0: 78:b2:89:d0:73:11:3a:8f:04:d4:26:f5:d6:e9:e0:91:9d:a1: 0d:67:73:22:fa:09:b3:36:16:8c:df:96:ba:c0:48:5e:30:55: c5:4c:a5:42:b1:2a:6e:01:20:85:ff:c3:bb:4c:59:9a:30:83: fb:70:43:38:bf:b5:ce:d1:ad:f2:34:89:d4:09:75:20:55:9c: cf:fe:ec:73:8f:01:a5:1b:66:d0:f2:a4:6d:9f:ae:b6:f0:22: 34:44:59:03:b7:8d:de:ed:c0:27:73:cf:d8:16:d4:30:2b:3b: fd:2d:72:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtre9OgH/K/DHHPVZQYT2OHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3 OTkxNTYwHhcNMjUxMjI5MTkwMDM1WhcNMjUxMjMwMTkwMDM1WjAzMTEwLwYDVQQD EyhmMWYyZjcwZWJmN2E1ZWY5NmQ2Y2JmZjA4Mjc5MGVjNGMxYjk3MTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+1OcaX4JU7pv4DldBDAorKrXeiF TPtfFjaNyR+xNWKHo4/4wWigPm7Ch8mY+ZK1SygNgKdpOvZohFG8NCW1Ld1TkcIE PPlbKq8BP2n5zDJsU/bu268czIUBYmqb3YyQfgL6/XiYeq358p9LM9oaNDdx1bxB 1ahwBkWxcVm9FwZDNLnkQtPAwYOt3djkVreX8BLs9f3UAyhqD7X9onmT96KVgq8X G5Rd8QiZCMKZDMqKUOlZ7a2FHtujspOinIgP8rP18+gX3W2L7CZGc9Yl+0zhEO7s wDVEOzCq/y1dhHuoIKzZZ0Z1/LOnU5dYRxb8+qII0uW+KvNewiecol9EjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHy9w6/el75bWy/8IJ5DsTBuXF5MB8GA1UdIwQY MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt ZmNmZjllODQ3Y2EyLzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWgh3xbO 54d0SFqHG6rFbZU5grt0lmSXL/NJaki6PHtnKkLc511HojIIwuEmlnZHJcAyI5cs iGcqxv15Ks/5XvEZI4NdzUL7fZEi2u6jBJyMAMv39HXoipE0ny9af0ivMh4JNFEo 4K36J7jcgHlHOIGiPybD6U91mxRjWTbfKDTCNv9qxRchmsUpEh7lM+KweLKJ0HMR Oo8E1Cb11ungkZ2hDWdzIvoJszYWjN+WusBIXjBVxUylQrEqbgEghf/Du0xZmjCD +3BDOL+1ztGt8jSJ1Al1IFWcz/7sc48BpRtm0PKkbZ+utvAiNERZA7eN3u3AJ3PP 2BbUMCs7/S1yBg== -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:10 2025 by rpki-client