This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json) Hash identifier: +yUTvN/D0Y9ZjhBAaP6nCPi5sQ7fXX8MDPCWN8zgi8M= Subject key identifier: C6:FB:63:01:8B:E3:F2:87:3E:24:80:E7:1A:F0:AD:49:17:5C:CD:7E Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Certificate serial: 019B3DC78A272E5E88C6B39F4F34E7FF63AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft Manifest number: 0E69 Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: JTy/y4pIq722hiOkwU0taZLxhUBl0MlNTZ0W73yxw5c=) 2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8a:27:2e:5e:88:c6:b3:9f:4f:34:e7:ff:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=c6fb63018be3f2873e2480e71af0ad49175ccd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:90:44:48:fa:31:40:99:1f:62:f4:24:19: 15:2e:09:86:3b:d0:5c:ae:b0:cc:cc:30:db:87:04: fe:b6:59:6b:3d:0b:f6:39:7f:5b:24:ac:55:8d:f3: fc:ba:99:db:16:24:9f:a7:f3:0e:7f:9d:76:1f:8b: 5a:e8:2f:41:3a:8e:6a:29:fd:20:fd:4e:6d:3f:62: 5b:ce:c9:f3:3f:8b:91:a9:6d:95:6f:10:93:49:2f: 50:e3:7b:8f:c2:d5:b9:23:43:23:0a:e7:44:df:1a: ae:f1:63:76:80:98:3d:d7:a3:bd:25:b5:4a:b9:87: 1a:78:e2:f0:3a:da:a8:2f:e8:16:18:27:5a:33:e2: 54:13:45:ff:55:c1:a8:4a:b4:e2:ce:8f:5d:7f:dd: f8:45:9a:ff:28:71:54:e1:2b:ac:7a:5e:93:a3:cc: 30:5b:a5:7f:a4:18:d1:66:f9:b4:74:51:b5:a2:4b: d0:8b:f1:3f:9b:0a:91:50:9e:3d:3e:c8:63:9f:2a: 44:73:bd:b2:9e:6c:97:68:32:0f:7b:96:de:2d:f1: 02:e2:44:d1:ce:f1:ae:f4:41:ce:6e:42:cb:18:da: b0:04:5d:0b:6c:d9:e8:ae:f0:70:36:ec:1c:a8:5d: 5d:00:3d:4d:d5:14:90:7e:d4:ec:3b:6a:c1:34:20: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FB:63:01:8B:E3:F2:87:3E:24:80:E7:1A:F0:AD:49:17:5C:CD:7E X509v3 Authority Key Identifier: keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c8:0c:3a:54:05:ba:7c:5f:4c:63:88:9f:eb:04:91:44:97: 6d:73:d8:e1:66:05:b4:7b:0a:b3:c5:e6:eb:80:93:bb:a0:f4: 51:e8:ae:a5:24:50:b9:b1:cc:de:53:b2:6d:7b:bc:00:44:40: 09:34:8c:d4:a2:3c:48:f6:17:cd:f7:67:e9:d1:b5:ca:14:8e: 64:6c:df:cd:69:11:6a:ab:81:69:ef:d1:bc:ec:9a:6e:fb:da: eb:c2:95:c2:1b:44:62:79:32:c5:48:44:38:35:88:06:d6:91: a1:92:ae:00:1e:f0:c9:ec:0a:bd:b7:d9:e9:43:80:fe:75:11: 14:61:c9:78:44:37:0e:a8:27:57:79:53:d2:d3:72:c6:39:a8: e0:ce:e6:47:83:57:18:38:ed:8f:d4:ff:cd:e5:b4:c2:f1:43: 37:2c:34:21:52:bc:0d:15:33:b7:23:cc:ca:e2:93:5f:39:56: 8d:88:e9:3d:17:f1:4b:13:c5:e2:b1:e4:27:7d:65:93:f1:e4: 41:9a:18:32:c7:ed:ad:96:97:de:a6:df:0c:19:41:8d:bf:be: 87:78:a5:0b:ca:41:85:98:81:fe:5d:7b:4e:2d:c3:5d:28:cd: 80:c9:fd:e2:13:a1:e2:49:b2:77:2e:d5:f9:41:b0:ce:9f:91: 86:89:0b:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4onLl6IxrOfTzTn/2OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh ZmMyNDYwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD EyhjNmZiNjMwMThiZTNmMjg3M2UyNDgwZTcxYWYwYWQ0OTE3NWNjZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fqQREj6MUCZH2L0JBkVLgmGO9Bc rrDMzDDbhwT+tllrPQv2OX9bJKxVjfP8upnbFiSfp/MOf512H4ta6C9BOo5qKf0g /U5tP2JbzsnzP4uRqW2VbxCTSS9Q43uPwtW5I0MjCudE3xqu8WN2gJg916O9JbVK uYcaeOLwOtqoL+gWGCdaM+JUE0X/VcGoSrTizo9df934RZr/KHFU4Susel6To8ww W6V/pBjRZvm0dFG1okvQi/E/mwqRUJ49PshjnypEc72ynmyXaDIPe5beLfEC4kTR zvGu9EHObkLLGNqwBF0LbNnorvBwNuwcqF1dAD1N1RSQftTsO2rBNCDQKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb7YwGL4/KHPiSA5xrwrUkXXM1+MB8GA1UdIwQY MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt NDdlMzA0OTgzMGIwLzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8gMOlQF unxfTGOIn+sEkUSXbXPY4WYFtHsKs8Xm64CTu6D0UeiupSRQubHM3lOybXu8AERA CTSM1KI8SPYXzfdn6dG1yhSOZGzfzWkRaquBae/RvOyabvva68KVwhtEYnkyxUhE ODWIBtaRoZKuAB7wyewKvbfZ6UOA/nURFGHJeEQ3DqgnV3lT0tNyxjmo4M7mR4NX GDjtj9T/zeW0wvFDNyw0IVK8DRUztyPMyuKTXzlWjYjpPRfxSxPF4rHkJ31lk/Hk QZoYMsftrZaX3qbfDBlBjb++h3ilC8pBhZiB/l17Ti3DXSjNgMn94hOh4kmydy7V +UGwzp+RhokLqg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:31 2025 by rpki-client