This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json) Hash identifier: y12ps8sQfXdnz8NGfjYbJW63tn+deG+lm6t9jpjgoqA= Subject key identifier: 3A:42:5A:80:4F:63:3F:66:21:90:E2:C4:9F:DB:0C:5E:A9:4A:07:BB Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31 Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231 Certificate serial: 019B61D4809ACA97C326E08921C96B0D15E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft Manifest number: 0A50 Signing time: Sat 27 Dec 2025 22:01:14 +0000 Manifest this update: Sat 27 Dec 2025 22:01:14 +0000 Manifest next update: Sun 28 Dec 2025 22:01:14 +0000 Files and hashes: 1: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: psBRif5wCR5Bh9RF9uZZ/LA2s0MIv8YUMUQYK4zfBLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:80:9a:ca:97:c3:26:e0:89:21:c9:6b:0d:15:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231 Validity Not Before: Dec 27 22:01:14 2025 GMT Not After : Dec 28 22:01:14 2025 GMT Subject: CN=3a425a804f633f662190e2c49fdb0c5ea94a07bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:1e:b8:df:f0:61:ea:2c:29:f0:96:db:75: a3:2f:24:4b:d4:2d:86:d2:e2:89:04:f1:3d:e8:c3: 7c:68:d5:91:54:c8:18:f1:d4:11:09:de:f4:cc:5c: aa:54:cb:95:06:a5:b2:93:94:ae:cb:8c:7e:62:2a: 3f:25:9f:82:81:c2:a0:24:fb:43:7c:a6:43:71:a8: d2:c3:17:60:1a:29:64:2e:77:31:61:1a:59:2e:75: 5b:af:cd:fa:8b:92:3c:41:78:57:38:1f:1d:1c:09: 9b:ca:4f:66:ab:1b:b6:44:c2:97:c2:bb:1e:97:78: 03:d2:93:37:e5:c6:61:d3:5a:32:e3:21:13:49:28: 66:da:d7:2f:66:46:b8:29:6d:15:6f:a0:f2:a3:f1: 90:1e:c7:fd:b3:03:e4:ce:d0:db:e1:fd:75:d7:2e: e2:23:58:90:ba:64:eb:78:1c:80:a4:ea:9a:bb:19: 21:ee:df:aa:1e:2d:51:83:36:6b:93:51:04:27:50: c2:7a:7e:8d:29:c5:21:f0:bf:60:7d:89:e5:51:11: 9e:72:f4:d7:ea:4c:ce:07:5e:57:47:c5:ff:21:42: 97:47:f7:69:bd:47:ba:c8:2b:df:f6:fa:72:a0:50: fe:f7:89:e9:22:96:93:5a:f1:dc:77:da:94:2d:24: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:5A:80:4F:63:3F:66:21:90:E2:C4:9F:DB:0C:5E:A9:4A:07:BB X509v3 Authority Key Identifier: keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6b:6d:45:75:56:00:3f:d4:d5:65:3f:5b:38:ff:29:45:82: a8:67:de:15:54:87:00:8c:ce:0f:ff:45:d3:16:0f:8d:02:80: e9:cd:21:2e:1a:eb:20:7c:e3:72:5c:e9:d9:2d:0e:41:6d:7d: 83:90:69:0c:a6:29:29:8e:67:b5:10:8d:58:7e:30:ea:7d:9c: aa:b4:11:81:35:84:94:78:9e:b4:39:c5:7e:cb:d4:9a:57:d4: 2b:c6:89:6c:64:f3:27:81:d4:e4:59:fa:d2:1b:64:61:51:49: 49:0a:0a:6d:07:c8:3e:f2:f4:46:98:17:3a:11:09:51:93:71: c7:b5:3d:ad:ce:2a:fd:bb:d8:27:60:87:a7:ee:a7:be:24:cf: e0:d3:95:4d:02:dd:d8:e7:41:f7:52:ba:10:7a:7c:e8:8e:61: c0:19:7c:1d:1b:6a:f8:a9:2e:ae:e6:00:d2:e2:72:c9:e8:6b: 37:f5:bd:f7:98:cb:26:f2:4e:52:81:de:ad:8a:f5:bb:4f:39: cf:a4:8b:f1:1c:d3:d1:a2:d0:06:8f:20:87:25:80:80:78:a4: e7:51:fa:7a:66:d5:8c:fb:ab:e1:ed:f9:35:f1:18:97:e2:dd: 88:ab:ff:eb:85:20:e3:73:e9:e0:df:73:f4:4f:db:c2:c0:70: 68:32:dc:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1ICaypfDJuCJIclrDRXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy N2MyMzEwHhcNMjUxMjI3MjIwMTE0WhcNMjUxMjI4MjIwMTE0WjAzMTEwLwYDVQQD EygzYTQyNWE4MDRmNjMzZjY2MjE5MGUyYzQ5ZmRiMGM1ZWE5NGEwN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKEeuN/wYeosKfCW23WjLyRL1C2G 0uKJBPE96MN8aNWRVMgY8dQRCd70zFyqVMuVBqWyk5Suy4x+Yio/JZ+CgcKgJPtD fKZDcajSwxdgGilkLncxYRpZLnVbr836i5I8QXhXOB8dHAmbyk9mqxu2RMKXwrse l3gD0pM35cZh01oy4yETSShm2tcvZka4KW0Vb6Dyo/GQHsf9swPkztDb4f111y7i I1iQumTreByApOqauxkh7t+qHi1RgzZrk1EEJ1DCen6NKcUh8L9gfYnlURGecvTX 6kzOB15XR8X/IUKXR/dpvUe6yCvf9vpyoFD+94npIpaTWvHcd9qULSQ2PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpCWoBPYz9mIZDixJ/bDF6pSge7MB8GA1UdIwQY MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt YjhhMjhjYmVmNGFkLzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmttRXVW AD/U1WU/Wzj/KUWCqGfeFVSHAIzOD/9F0xYPjQKA6c0hLhrrIHzjclzp2S0OQW19 g5BpDKYpKY5ntRCNWH4w6n2cqrQRgTWElHietDnFfsvUmlfUK8aJbGTzJ4HU5Fn6 0htkYVFJSQoKbQfIPvL0RpgXOhEJUZNxx7U9rc4q/bvYJ2CHp+6nviTP4NOVTQLd 2OdB91K6EHp86I5hwBl8HRtq+KkuruYA0uJyyehrN/W995jLJvJOUoHerYr1u085 z6SL8RzT0aLQBo8ghyWAgHik51H6embVjPur4e35NfEYl+LdiKv/64Ug43Pp4N9z 9E/bwsBwaDLcoA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:06 2025 by rpki-client