This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json) Hash identifier: aKUI1v7robUV+tdXOjAxJYJiMA2M+CuyRrrgar+9FJE= Subject key identifier: A3:59:C8:B3:B8:E3:F7:78:BC:A4:31:96:13:78:73:E5:DB:4D:31:F9 Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Certificate serial: 019B71EBC27AE0D098E3071754E885F1DDA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft Manifest number: 0E84 Signing time: Wed 31 Dec 2025 01:00:34 +0000 Manifest this update: Wed 31 Dec 2025 01:00:34 +0000 Manifest next update: Thu 01 Jan 2026 01:00:34 +0000 Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: YMTYJ97o4DflWCkHq7Su2qvQZmKwb3GDzBFwyt3ccec=) 2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:c2:7a:e0:d0:98:e3:07:17:54:e8:85:f1:dd:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Validity Not Before: Dec 31 01:00:34 2025 GMT Not After : Jan 1 01:00:34 2026 GMT Subject: CN=a359c8b3b8e3f778bca43196137873e5db4d31f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:dd:4c:e0:84:69:84:f1:d0:91:33:9d:a7: de:c7:a0:d5:5b:4d:84:17:ab:4c:8f:c1:3d:df:00: 64:2b:50:ec:3b:a1:12:86:0b:ba:f5:20:00:e9:df: eb:9f:e9:a5:cd:69:ec:73:31:18:8e:20:43:d0:5c: 49:ab:4a:99:32:c6:c9:e2:dc:1f:d4:41:48:bd:ba: 5a:d5:a2:d0:0a:8c:39:47:5c:5a:da:f7:34:95:90: 71:de:20:c1:1d:2b:4c:97:c2:36:45:1c:b1:50:1f: 18:20:61:99:06:92:49:70:0c:e2:72:4c:ac:06:a4: d1:57:27:2b:da:11:51:77:b3:58:f5:db:2b:38:0d: fe:65:84:5c:60:40:f1:1e:0d:71:8f:a2:a2:c4:28: 48:be:17:32:17:66:b7:0f:46:9b:1f:8b:ee:86:d4: ac:d5:7c:2f:39:d1:01:69:10:4b:c2:9e:4c:e3:5d: 88:08:21:10:c8:b8:cc:cf:7e:fa:4d:2a:6c:37:8b: 08:25:aa:8a:37:86:1d:f0:6e:db:f9:f3:7f:2b:c8: ca:67:9e:c4:15:c9:04:ef:e9:a2:95:22:9d:db:ee: 3f:60:da:ed:09:e5:6e:9a:34:8a:38:04:3d:c3:da: 1c:13:2f:d1:5e:04:dc:a2:66:58:28:72:59:e6:bc: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:59:C8:B3:B8:E3:F7:78:BC:A4:31:96:13:78:73:E5:DB:4D:31:F9 X509v3 Authority Key Identifier: keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:97:a6:b6:f8:c8:73:fa:b7:a1:ba:d0:24:b2:b2:43:d5: ac:aa:bb:64:a5:4d:4f:25:2f:f7:0a:84:c0:32:da:ed:89:c6: 15:98:8e:af:e9:1b:81:a1:59:87:8b:73:22:2a:2f:7c:2e:44: f2:c4:32:a8:75:3a:54:9b:71:17:d1:bd:f4:1c:f7:e1:19:cf: f1:6b:42:51:2c:bf:65:0e:74:d6:9e:49:02:41:d5:04:b0:5b: 7a:aa:9e:5c:ba:7b:72:25:e8:0b:4a:42:cc:90:72:9f:05:18: a1:c1:f5:f0:25:46:2c:48:7e:2d:12:ba:10:35:da:ed:fd:2f: b3:48:ae:fa:b5:c2:08:ed:cf:08:6c:2e:65:26:77:f3:28:29: aa:c5:0d:a8:f9:f6:09:1a:12:88:a2:8c:33:4a:8c:e9:4b:fa: 2d:ee:35:60:62:b1:9d:d9:ad:ec:2f:af:bd:06:7b:e1:af:91: 54:a8:c4:15:d1:f1:18:50:90:da:73:e1:f1:b8:bc:eb:99:7b: 91:89:f8:03:da:08:bb:09:91:d4:8e:cf:ff:21:0a:ab:5c:d5: ce:cb:77:86:b9:16:73:41:54:f7:3d:4c:9e:c5:bb:cc:a7:92: 88:9a:cc:00:1b:11:10:46:a7:42:1f:07:de:ae:f4:77:17:8c: 21:38:79:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx68J64NCY4wcXVOiF8d2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh ZmMyNDYwHhcNMjUxMjMxMDEwMDM0WhcNMjYwMTAxMDEwMDM0WjAzMTEwLwYDVQQD EyhhMzU5YzhiM2I4ZTNmNzc4YmNhNDMxOTYxMzc4NzNlNWRiNGQzMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrdTOCEaYTx0JEznafex6DVW02E F6tMj8E93wBkK1DsO6EShgu69SAA6d/rn+mlzWnsczEYjiBD0FxJq0qZMsbJ4twf 1EFIvbpa1aLQCow5R1xa2vc0lZBx3iDBHStMl8I2RRyxUB8YIGGZBpJJcAzickys BqTRVycr2hFRd7NY9dsrOA3+ZYRcYEDxHg1xj6KixChIvhcyF2a3D0abH4vuhtSs 1XwvOdEBaRBLwp5M412ICCEQyLjMz376TSpsN4sIJaqKN4Yd8G7b+fN/K8jKZ57E FckE7+milSKd2+4/YNrtCeVumjSKOAQ9w9ocEy/RXgTcomZYKHJZ5rwkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNZyLO44/d4vKQxlhN4c+XbTTH5MB8GA1UdIwQY MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt NDdlMzA0OTgzMGIwLzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi2Xprb4 yHP6t6G60CSyskPVrKq7ZKVNTyUv9wqEwDLa7YnGFZiOr+kbgaFZh4tzIiovfC5E 8sQyqHU6VJtxF9G99Bz34RnP8WtCUSy/ZQ501p5JAkHVBLBbeqqeXLp7ciXoC0pC zJBynwUYocH18CVGLEh+LRK6EDXa7f0vs0iu+rXCCO3PCGwuZSZ38ygpqsUNqPn2 CRoSiKKMM0qM6Uv6Le41YGKxndmt7C+vvQZ74a+RVKjEFdHxGFCQ2nPh8bi865l7 kYn4A9oIuwmR1I7P/yEKq1zVzst3hrkWc0FU9z1MnsW7zKeSiJrMABsREEanQh8H 3q70dxeMITh5rQ== -----END CERTIFICATE-----Generated at Wed Dec 31 07:59:02 2025 by rpki-client