This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json) Hash identifier: +FjD2ep5g3Ecvq2x8zFPkoD3eIkjS81fI0e6hOdloXE= Subject key identifier: 44:3D:13:DF:82:76:83:A8:F7:25:34:1F:7B:35:C9:71:40:62:94:D5 Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Certificate serial: 019B6EB53E8E23C4974AD441F6D55DC541B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 10:02:10 +0000 Manifest this update: Tue 30 Dec 2025 10:02:10 +0000 Manifest next update: Wed 31 Dec 2025 10:02:10 +0000 Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: kTOGHTy/eMC12uWF155ZQDMvSTfLKZaBAd77YuC7Emo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b5:3e:8e:23:c4:97:4a:d4:41:f6:d5:5d:c5:41:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Validity Not Before: Dec 30 10:02:10 2025 GMT Not After : Dec 31 10:02:10 2025 GMT Subject: CN=443d13df827683a8f725341f7b35c971406294d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:2c:e7:92:cd:4f:c1:0e:b4:a6:02:5a:01: b0:03:f1:e8:5a:e6:bf:47:88:4b:d6:0e:4f:cc:9a: b4:b6:fd:78:f8:81:13:07:56:9f:f5:8a:25:02:04: 08:21:79:86:92:98:de:8f:54:0c:da:78:69:1a:80: a6:32:b1:12:8c:23:c8:f6:1b:b4:c5:09:62:61:d9: 17:a9:a8:28:ac:7a:0b:89:3a:c8:49:3b:af:ec:37: ab:02:1e:54:1d:98:37:18:06:4d:23:20:85:1f:07: aa:d8:8f:7f:cc:4d:e7:af:96:3e:d0:75:b2:ee:2c: ee:54:0a:99:2a:3f:54:78:eb:ff:af:2e:0c:88:ce: 0f:7a:4e:2c:5e:67:fc:af:0b:7f:00:ad:5b:b1:8d: 6f:97:9b:bc:48:20:44:65:df:97:f7:87:1d:36:6b: a7:cd:f7:20:76:2f:67:86:45:e1:88:6b:ad:5f:2c: bc:c5:be:91:8b:22:51:59:b6:85:e2:11:9b:4f:ec: 5e:94:02:b4:dd:ce:6b:09:47:e2:4c:bd:f8:a4:0a: 73:4b:6d:7e:c9:58:fb:cc:35:c0:5a:96:64:c5:e7: 20:da:71:58:e8:7b:c5:e7:a1:af:7f:19:6f:ef:ea: 52:92:20:1b:66:e5:d2:55:43:66:e0:28:99:61:b9: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:13:DF:82:76:83:A8:F7:25:34:1F:7B:35:C9:71:40:62:94:D5 X509v3 Authority Key Identifier: keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d2:65:b0:b8:17:18:d5:a4:4c:f5:71:49:6d:b7:28:11:e4: 6e:3a:47:29:4e:f4:60:fe:61:b4:a9:29:b7:e2:41:87:fb:d1: d7:98:4e:8f:33:e9:79:f1:b0:c6:d3:96:3a:26:2f:b6:50:aa: cd:a0:d7:6b:0d:d8:1c:d6:b0:04:0e:d5:36:19:4f:7c:a0:9c: 5b:6e:b6:0d:1b:65:4c:f5:3b:93:4f:e0:3b:48:52:35:8f:5f: 0c:5b:5f:c0:a2:42:40:a3:48:3a:ff:8c:56:3b:a0:88:60:d7: c1:36:d9:86:d8:be:a7:a2:e0:6f:bf:b1:0a:9d:ee:f7:87:96: 6b:aa:8f:b1:e2:42:25:32:ce:e7:7c:93:e5:79:e0:a9:13:82: 5d:84:c4:aa:49:c1:ee:20:90:84:c9:bb:db:9c:ce:55:dd:5a: e5:b2:52:6d:5b:f1:43:c8:41:a4:87:97:6c:3f:e4:d0:9f:1a: bf:63:07:22:17:43:30:d1:61:70:e3:e5:71:1c:03:a0:b8:f2: e1:da:4a:e6:61:92:37:73:18:14:d8:6d:87:b8:13:09:3e:93: 58:d3:57:0f:1e:42:dc:e6:62:df:0c:30:59:4a:05:da:ca:74: a4:9b:60:96:01:33:bc:2f:af:e8:d7:77:8b:c1:2b:24:54:94: fd:6f:0a:76 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtutT6OI8SXStRB9tVdxUG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzEwNTkyNzk4OWVjNDFjMDg5MDNhZDhjZDU2YTg5ZGFl OGJlNWQwHhcNMjUxMjMwMTAwMjEwWhcNMjUxMjMxMTAwMjEwWjAzMTEwLwYDVQQD Eyg0NDNkMTNkZjgyNzY4M2E4ZjcyNTM0MWY3YjM1Yzk3MTQwNjI5NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ws55LNT8EOtKYCWgGwA/HoWua/ R4hL1g5PzJq0tv14+IETB1af9YolAgQIIXmGkpjej1QM2nhpGoCmMrESjCPI9hu0 xQliYdkXqagorHoLiTrISTuv7DerAh5UHZg3GAZNIyCFHweq2I9/zE3nr5Y+0HWy 7izuVAqZKj9UeOv/ry4MiM4Pek4sXmf8rwt/AK1bsY1vl5u8SCBEZd+X94cdNmun zfcgdi9nhkXhiGutXyy8xb6RiyJRWbaF4hGbT+xelAK03c5rCUfiTL34pApzS21+ yVj7zDXAWpZkxecg2nFY6HvF56Gvfxlv7+pSkiAbZuXSVUNm4CiZYbmgywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEQ9E9+CdoOo9yU0H3s1yXFAYpTVMB8GA1UdIwQY MBaAFPnBBZJ5iexBwIkDrYzVaona6L5dMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jRUZrbm1KN0VIQWlRT3RqTlZxaWRyb3ZsMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNWY2MmVmLTMyZWYtNDRmNy1iNDEy LTFiMTg2YjZmY2Y0MS8xLzEtY0VGa25tSjdFSEFpUU90ak5WcWlkcm92bDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzVmNjJlZi0zMmVmLTQ0ZjctYjQxMi0xYjE4NmI2ZmNm NDEvMS8xLWNFRmtubUo3RUhBaVFPdGpOVnFpZHJvdmwwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNJl sLgXGNWkTPVxSW23KBHkbjpHKU70YP5htKkpt+JBh/vR15hOjzPpefGwxtOWOiYv tlCqzaDXaw3YHNawBA7VNhlPfKCcW262DRtlTPU7k0/gO0hSNY9fDFtfwKJCQKNI Ov+MVjugiGDXwTbZhti+p6Lgb7+xCp3u94eWa6qPseJCJTLO53yT5XngqROCXYTE qknB7iCQhMm725zOVd1a5bJSbVvxQ8hBpIeXbD/k0J8av2MHIhdDMNFhcOPlcRwD oLjy4dpK5mGSN3MYFNhth7gTCT6TWNNXDx5C3OZi3wwwWUoF2sp0pJtglgEzvC+v 6Nd3i8ErJFSU/W8Kdg== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:48 2025 by rpki-client