This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json) Hash identifier: sCyd/pCfWH4vItQC7Y6BD4rRxp1d+5YlPLL5WZbVTk4= Subject key identifier: CB:1D:8B:44:BF:F3:E5:E7:75:E1:BB:E1:B6:5F:10:27:3A:DA:8E:64 Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Certificate serial: 019B6957444A6C69910A9E082C5C221F058D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft Manifest number: 111B Signing time: Mon 29 Dec 2025 09:01:25 +0000 Manifest this update: Mon 29 Dec 2025 09:01:25 +0000 Manifest next update: Tue 30 Dec 2025 09:01:25 +0000 Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: odC2rXOb2S9nSWCftXMduqR8tCJxqBdXx/3rvOMCVTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:44:4a:6c:69:91:0a:9e:08:2c:5c:22:1f:05:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Validity Not Before: Dec 29 09:01:25 2025 GMT Not After : Dec 30 09:01:25 2025 GMT Subject: CN=cb1d8b44bff3e5e775e1bbe1b65f10273ada8e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:43:da:04:a8:82:3f:d5:51:37:79:10:63: f4:2b:21:24:1f:60:ea:66:1a:78:ef:bb:60:4a:ef: 2d:58:eb:7d:10:cf:78:9e:60:86:3a:c4:88:da:4d: d8:2c:cc:d2:48:3b:7c:62:7f:78:40:05:7d:12:25: df:1c:14:e1:4c:4e:a8:3c:50:31:85:51:56:8a:b2: 31:d0:03:37:57:7e:8c:13:ef:ed:71:5a:82:2c:93: eb:d8:1c:07:f9:4c:f5:4c:9c:ee:dc:5a:4f:7d:de: ff:98:db:58:64:06:17:19:ae:0d:c1:ee:03:45:31: 44:5e:08:f9:55:18:c3:a2:12:4c:92:bd:80:73:b1: 93:de:56:ae:4e:50:09:7a:d7:96:6c:b9:41:74:37: 02:8a:64:30:98:9e:d1:f1:c6:37:42:e7:a7:0d:8a: bb:3c:77:ed:86:2d:18:b0:e3:39:93:9c:f2:20:8d: 7c:74:86:ce:b8:01:82:d9:73:5d:d7:b4:02:a8:d7: 14:86:d6:b3:95:16:18:47:f5:4e:b3:54:e1:cc:e5: 5c:20:e3:24:ad:af:8c:c4:c0:e2:99:e0:bd:5e:91: 3b:b1:d0:8b:b5:da:2b:ea:6d:9e:a4:28:39:7d:4c: e5:58:fd:ab:84:e4:05:85:a1:e7:61:e1:57:0e:a9: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:8B:44:BF:F3:E5:E7:75:E1:BB:E1:B6:5F:10:27:3A:DA:8E:64 X509v3 Authority Key Identifier: keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6c:cb:1c:6b:86:a1:25:9c:3e:05:ea:e6:81:b8:07:e5:10: 92:33:e8:f5:20:a9:a6:6a:65:a4:3e:46:b5:bd:bb:65:1a:8c: 35:4e:a7:d0:d9:08:71:19:32:33:b8:ca:c7:3e:d8:54:f5:3a: 5d:13:b8:cb:c6:81:4b:1e:d9:60:63:3b:6a:45:6e:e2:61:d6: 45:1e:df:db:66:5e:86:3e:e2:f1:fd:9d:86:a5:ed:cb:2b:25: 83:43:7d:66:ce:0f:fd:23:8b:8e:c5:5f:ea:09:9d:7e:b2:74: 7d:ab:87:92:ca:94:91:a4:c2:ba:54:ee:15:53:10:70:33:f8: 6e:44:5f:bb:ec:95:fe:a9:7d:02:81:a2:c0:e9:ce:f9:95:db: 4a:be:d9:41:57:f4:33:4a:87:53:df:92:a6:b4:92:9b:33:6b: 7e:4a:2e:b3:78:54:79:2c:17:36:bd:c4:6b:7c:3f:7e:95:6b: 33:de:5f:3a:7b:f5:3b:4a:b9:a3:d9:5c:b3:97:f7:b7:29:15: 24:4b:c6:20:63:ac:a3:f7:1b:3b:44:2f:97:13:4f:eb:12:58: d5:2d:0f:26:cf:50:09:2a:19:c2:46:d5:45:3d:f2:ae:04:1b: a2:09:1f:e0:77:32:ab:37:ea:e2:1a:b8:78:fd:7e:c3:d0:24: d1:8b:0d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpV0RKbGmRCp4ILFwiHwWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj MWVhNmIwHhcNMjUxMjI5MDkwMTI1WhcNMjUxMjMwMDkwMTI1WjAzMTEwLwYDVQQD EyhjYjFkOGI0NGJmZjNlNWU3NzVlMWJiZTFiNjVmMTAyNzNhZGE4ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLVD2gSogj/VUTd5EGP0KyEkH2Dq Zhp477tgSu8tWOt9EM94nmCGOsSI2k3YLMzSSDt8Yn94QAV9EiXfHBThTE6oPFAx hVFWirIx0AM3V36ME+/tcVqCLJPr2BwH+Uz1TJzu3FpPfd7/mNtYZAYXGa4Nwe4D RTFEXgj5VRjDohJMkr2Ac7GT3lauTlAJeteWbLlBdDcCimQwmJ7R8cY3QuenDYq7 PHfthi0YsOM5k5zyII18dIbOuAGC2XNd17QCqNcUhtazlRYYR/VOs1ThzOVcIOMk ra+MxMDimeC9XpE7sdCLtdor6m2epCg5fUzlWP2rhOQFhaHnYeFXDql/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsdi0S/8+XndeG74bZfECc62o5kMB8GA1UdIwQY MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2 LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmzLHGuG oSWcPgXq5oG4B+UQkjPo9SCppmplpD5Gtb27ZRqMNU6n0NkIcRkyM7jKxz7YVPU6 XRO4y8aBSx7ZYGM7akVu4mHWRR7f22Zehj7i8f2dhqXtyyslg0N9Zs4P/SOLjsVf 6gmdfrJ0fauHksqUkaTCulTuFVMQcDP4bkRfu+yV/ql9AoGiwOnO+ZXbSr7ZQVf0 M0qHU9+SprSSmzNrfkous3hUeSwXNr3Ea3w/fpVrM95fOnv1O0q5o9lcs5f3tykV JEvGIGOso/cbO0QvlxNP6xJY1S0PJs9QCSoZwkbVRT3yrgQbogkf4Hcyqzfq4hq4 eP1+w9Ak0YsNqg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:07 2025 by rpki-client