This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft File: 71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json) Hash identifier: 5pPjC9VmXUb+n/8iNQ5B7a1VPjvxBd3fwvkig6OcuvM= Subject key identifier: 95:F1:2E:12:31:E6:F0:ED:21:18:44:C5:3B:9A:E6:17:C4:26:90:82 Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC Certificate issuer: /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac Certificate serial: 019B495D9F01E63AC3B2121311DE15F0ECF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft Manifest number: 030A Signing time: Tue 23 Dec 2025 04:00:30 +0000 Manifest this update: Tue 23 Dec 2025 04:00:30 +0000 Manifest next update: Wed 24 Dec 2025 04:00:30 +0000 Files and hashes: 1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: snsIz2V0qvYc2wgdSDpDIiKaDv8XW0s1AaGmSIhKtaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:9f:01:e6:3a:c3:b2:12:13:11:de:15:f0:ec:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac Validity Not Before: Dec 23 04:00:30 2025 GMT Not After : Dec 24 04:00:30 2025 GMT Subject: CN=95f12e1231e6f0ed211844c53b9ae617c4269082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:d5:22:8b:e4:4c:56:9b:3b:5d:14:53:bf: b9:ee:a5:6c:86:f0:c5:94:8d:40:83:da:09:49:5f: 0f:10:c8:2d:c8:ac:28:e2:55:f9:f7:94:55:d1:87: 77:0f:bf:02:cc:2b:74:24:04:3d:95:9c:8c:d1:82: 8d:12:56:dc:cf:62:7c:b8:6e:3e:53:27:61:dc:17: 37:f1:e0:fe:a6:93:4a:e7:2e:6f:94:cb:e1:3c:32: b2:6c:2e:5e:dd:77:b8:bf:f3:f8:55:83:5d:c0:ac: 9d:4a:1d:e7:b0:5e:66:04:3d:0f:91:f5:bc:61:5f: 72:ad:22:ad:14:ca:6a:0a:9f:d7:1b:eb:0d:58:13: 2c:40:8d:41:4e:e1:e9:aa:15:d2:b5:28:92:df:7d: 4d:95:50:c2:00:26:ae:3e:7b:91:44:50:63:a4:50: 20:99:d0:97:32:33:50:a3:76:5a:ff:ef:ea:fc:fe: cd:c6:00:c9:19:9a:09:f4:ca:61:7b:c7:a7:8c:bb: 7b:68:f0:87:3a:d5:06:77:cb:a4:a4:f5:5f:62:92: d8:f6:ad:94:6e:de:19:ee:23:89:93:f5:97:53:1d: 38:ef:05:f8:a7:91:c0:f7:ab:46:b8:6b:56:06:6b: 76:69:5c:ec:fd:52:df:af:0e:11:40:7b:b1:f0:68: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:2E:12:31:E6:F0:ED:21:18:44:C5:3B:9A:E6:17:C4:26:90:82 X509v3 Authority Key Identifier: keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:64:37:5f:95:61:53:04:75:b0:03:31:61:b8:a1:1c:a9:98: 3e:7c:85:0d:11:cf:ba:64:3e:34:a2:65:c3:fa:99:84:de:a8: cd:61:dc:05:8b:54:99:26:50:82:24:94:c6:93:d9:5d:b3:e4: eb:d6:72:5b:fd:d0:c1:cf:81:ac:06:ed:4d:ed:cb:74:e2:bb: 1c:76:63:7f:0f:76:19:fc:df:fb:5d:0d:e5:eb:e4:23:6f:7f: 3e:9d:33:48:1a:f4:f9:57:14:15:4d:88:0c:d5:87:41:15:a8: b1:f9:6e:c4:73:0b:c6:35:b2:8d:8d:f5:96:cb:b7:41:b1:52: 7e:35:4a:6d:e7:64:f8:30:20:4e:c7:96:c4:c1:f6:1f:18:8b: 5e:4c:ae:21:ee:ef:66:79:36:3d:79:1f:f4:21:70:b4:56:e6: 02:c5:9b:a8:67:db:32:a1:04:5e:56:42:d7:25:b0:ca:fe:cc: f5:97:40:4d:4e:15:a1:12:80:56:8d:32:a8:64:8d:f9:2f:4a: 83:d8:2d:7a:6c:e7:78:13:e2:e7:58:a5:f7:50:80:35:1b:b8: be:38:73:30:64:6e:85:b7:21:5e:72:24:30:27:d7:ac:1b:74: 11:3c:6a:48:b3:d2:2b:c9:26:c9:39:9a:ec:ce:e8:b7:4a:85: 2d:33:0e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXZ8B5jrDshITEd4V8OzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNThmODU3MmJkZDc3ZDk4MTQxMTE4MGUyZWY5YThhODAy Yzc2YWMwHhcNMjUxMjIzMDQwMDMwWhcNMjUxMjI0MDQwMDMwWjAzMTEwLwYDVQQD Eyg5NWYxMmUxMjMxZTZmMGVkMjExODQ0YzUzYjlhZTYxN2M0MjY5MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx53VIovkTFabO10UU7+57qVshvDF lI1Ag9oJSV8PEMgtyKwo4lX595RV0Yd3D78CzCt0JAQ9lZyM0YKNElbcz2J8uG4+ Uydh3Bc38eD+ppNK5y5vlMvhPDKybC5e3Xe4v/P4VYNdwKydSh3nsF5mBD0PkfW8 YV9yrSKtFMpqCp/XG+sNWBMsQI1BTuHpqhXStSiS331NlVDCACauPnuRRFBjpFAg mdCXMjNQo3Za/+/q/P7NxgDJGZoJ9Mphe8enjLt7aPCHOtUGd8ukpPVfYpLY9q2U bt4Z7iOJk/WXUx047wX4p5HA96tGuGtWBmt2aVzs/VLfrw4RQHux8GiYmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXxLhIx5vDtIRhExTua5hfEJpCCMB8GA1UdIwQY MBaAFO9Y+Fcr3XfZgUERgOLvmoqALHasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAt MzhlODA1ZmY0YzczLzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAtMzhlODA1ZmY0Yzcz LzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWQ3X5Vh UwR1sAMxYbihHKmYPnyFDRHPumQ+NKJlw/qZhN6ozWHcBYtUmSZQgiSUxpPZXbPk 69ZyW/3Qwc+BrAbtTe3LdOK7HHZjfw92Gfzf+10N5evkI29/Pp0zSBr0+VcUFU2I DNWHQRWosfluxHMLxjWyjY31lsu3QbFSfjVKbedk+DAgTseWxMH2HxiLXkyuIe7v Znk2PXkf9CFwtFbmAsWbqGfbMqEEXlZC1yWwyv7M9ZdATU4VoRKAVo0yqGSN+S9K g9gtemzneBPi51il91CANRu4vjhzMGRuhbchXnIkMCfXrBt0ETxqSLPSK8kmyTma 7M7ot0qFLTMOdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:46 2025 by rpki-client