This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json) Hash identifier: Bn9nMA2S2PcVXbDhwNyk9cGzxbJU91ItcyGs39ceGWI= Subject key identifier: 3B:65:5A:FE:C6:3F:41:4E:82:AC:95:E0:70:A6:4E:F5:3A:47:8D:29 Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Certificate serial: 019B503BD1C9B82369C184243D0B0699292E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft Manifest number: 110E Signing time: Wed 24 Dec 2025 12:00:56 +0000 Manifest this update: Wed 24 Dec 2025 12:00:56 +0000 Manifest next update: Thu 25 Dec 2025 12:00:56 +0000 Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: 2nELTrcXFg1Fwld04bJx78Oy3x2tAp3oCRAZxZ68uoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:d1:c9:b8:23:69:c1:84:24:3d:0b:06:99:29:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Validity Not Before: Dec 24 12:00:56 2025 GMT Not After : Dec 25 12:00:56 2025 GMT Subject: CN=3b655afec63f414e82ac95e070a64ef53a478d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:5b:cd:67:db:62:62:2f:0d:25:23:c7:8c: c8:85:43:ec:74:8c:bf:18:14:1d:8a:25:84:f5:de: f1:84:2e:ae:57:dd:ae:50:af:94:93:53:94:71:dd: 51:2f:a9:45:a5:02:dd:fe:c0:be:9a:59:05:45:d1: 3c:36:d9:19:28:a8:4e:36:5a:39:ff:b9:2b:b4:0f: a0:f9:f2:3b:02:96:a6:6b:e5:9d:79:ab:b9:06:0d: 3e:cc:0b:04:6f:17:2a:66:4c:ac:0f:31:09:3c:74: c4:54:d3:aa:9a:00:3b:99:f5:d9:ca:25:f3:8b:a3: e3:da:84:49:ab:ed:db:3b:85:e6:35:4d:7c:b7:c4: 74:4c:22:bc:8c:59:84:14:cc:2c:07:94:95:fd:4a: 33:28:23:fc:54:f4:8e:8e:2d:58:d6:85:09:81:97: 02:ac:54:71:0b:a7:4b:60:dd:9f:ee:77:8d:6a:2b: d1:18:f9:be:ac:ef:0b:5c:92:bc:40:7e:f3:ea:a6: 2f:32:e2:88:c8:7d:1d:e8:11:6c:a9:80:b3:86:08: 52:fa:a0:13:e6:ca:4f:58:12:41:35:f6:20:a9:95: 4b:99:1a:98:3d:da:c3:53:65:e3:7b:da:43:08:85: 8b:f9:08:14:aa:c5:d3:aa:c6:8a:43:c1:4b:87:e5: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:5A:FE:C6:3F:41:4E:82:AC:95:E0:70:A6:4E:F5:3A:47:8D:29 X509v3 Authority Key Identifier: keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fc:6c:45:24:97:c7:91:1e:36:7a:c1:8f:80:f3:11:8b:9a: 61:35:b3:e1:4a:3f:27:65:b1:18:88:8a:ea:e2:1f:b6:3e:19: 8d:94:d4:3a:fe:6b:76:e1:26:d3:57:d5:bd:9d:a2:8f:5b:68: 9b:4a:56:9f:8d:d5:79:ff:48:12:db:f1:77:ff:70:d2:dc:a4: 25:b8:3f:01:98:58:6a:6f:c2:c1:89:0a:e9:79:a5:a1:81:4e: bb:ee:54:57:30:25:b0:2c:03:2c:4e:4c:8b:8b:c5:2a:87:24: 1e:3f:6a:bf:12:c8:76:f7:8f:a5:a2:32:66:7f:4b:4a:d6:0f: 01:1c:99:8f:b6:c4:a9:f1:47:f6:70:14:4f:35:30:17:3d:74: 91:c2:57:d1:c6:88:ee:02:fc:b8:1b:f2:26:fc:ae:60:20:06: 1f:d0:16:d2:c1:52:47:f4:ac:22:35:3c:a6:5c:30:b8:72:b2: d9:3c:8a:ea:34:a6:b9:cd:5b:20:15:4e:e0:f6:53:48:1c:21: 99:a5:b8:02:00:d4:c7:49:2a:6c:c2:5f:04:b0:2c:55:b2:b3: 95:58:73:de:b1:88:ff:8c:73:7d:1f:3a:e8:54:43:43:d2:64: 9d:d7:40:1d:8f:9d:49:1e:fa:d0:b4:73:a1:f0:5e:c9:c2:a6: a1:ba:a6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO9HJuCNpwYQkPQsGmSkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj MWVhNmIwHhcNMjUxMjI0MTIwMDU2WhcNMjUxMjI1MTIwMDU2WjAzMTEwLwYDVQQD EygzYjY1NWFmZWM2M2Y0MTRlODJhYzk1ZTA3MGE2NGVmNTNhNDc4ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFlbzWfbYmIvDSUjx4zIhUPsdIy/ GBQdiiWE9d7xhC6uV92uUK+Uk1OUcd1RL6lFpQLd/sC+mlkFRdE8NtkZKKhONlo5 /7krtA+g+fI7Apama+Wdeau5Bg0+zAsEbxcqZkysDzEJPHTEVNOqmgA7mfXZyiXz i6Pj2oRJq+3bO4XmNU18t8R0TCK8jFmEFMwsB5SV/UozKCP8VPSOji1Y1oUJgZcC rFRxC6dLYN2f7neNaivRGPm+rO8LXJK8QH7z6qYvMuKIyH0d6BFsqYCzhghS+qAT 5spPWBJBNfYgqZVLmRqYPdrDU2Xje9pDCIWL+QgUqsXTqsaKQ8FLh+XrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtlWv7GP0FOgqyV4HCmTvU6R40pMB8GA1UdIwQY MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2 LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffxsRSSX x5EeNnrBj4DzEYuaYTWz4Uo/J2WxGIiK6uIftj4ZjZTUOv5rduEm01fVvZ2ij1to m0pWn43Vef9IEtvxd/9w0tykJbg/AZhYam/CwYkK6XmloYFOu+5UVzAlsCwDLE5M i4vFKockHj9qvxLIdvePpaIyZn9LStYPARyZj7bEqfFH9nAUTzUwFz10kcJX0caI 7gL8uBvyJvyuYCAGH9AW0sFSR/SsIjU8plwwuHKy2TyK6jSmuc1bIBVO4PZTSBwh maW4AgDUx0kqbMJfBLAsVbKzlVhz3rGI/4xzfR866FRDQ9JknddAHY+dSR760LRz ofBeycKmobqmnA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:42 2025 by rpki-client