This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft File: b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json) Hash identifier: CftAbzXVNjqXHLZE/fwBKsF3+VYyofeTq4QnBCruuSY= Subject key identifier: 3B:B4:81:B8:6D:8C:BD:03:71:89:F8:B2:BA:30:13:7F:7D:4D:B4:81 Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12 Certificate issuer: /CN=6ff7891331450dc86283a089bd9470e69c37ed12 Certificate serial: 019B3C7E00F299D18EB75AEDEF78AB5E0E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft Manifest number: 0357 Signing time: Sat 20 Dec 2025 16:00:49 +0000 Manifest this update: Sat 20 Dec 2025 16:00:49 +0000 Manifest next update: Sun 21 Dec 2025 16:00:49 +0000 Files and hashes: 1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: xv3m9C+ZwHMbeld7vpc/+/WmCByAsPPgVz5plq+ZBWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:00:f2:99:d1:8e:b7:5a:ed:ef:78:ab:5e:0e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12 Validity Not Before: Dec 20 16:00:49 2025 GMT Not After : Dec 21 16:00:49 2025 GMT Subject: CN=3bb481b86d8cbd037189f8b2ba30137f7d4db481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:f6:e2:56:ae:23:53:a8:5b:90:cb:5b:3f: 9b:b7:35:2c:2e:f7:78:c9:ba:44:60:dd:a0:20:e7: 33:c4:25:1a:f2:61:f4:d6:42:9c:0f:3f:e4:7f:c3: 1c:55:33:3a:3e:85:ea:44:aa:7c:8f:d7:1e:86:0e: ab:11:b2:0e:0d:37:f8:ae:ba:5e:81:94:4c:cd:91: 61:2d:0e:98:4e:69:c4:1f:1f:e5:07:5c:95:db:63: cc:f6:8f:b2:eb:eb:da:72:a0:b3:42:2f:b7:95:4f: 18:f3:b8:c9:e2:5d:f6:52:c7:d1:8b:71:f2:0e:49: fd:3d:47:a6:61:bc:67:a1:f0:d8:0d:13:0b:8b:e1: af:ac:f7:5e:34:aa:91:86:d3:95:c1:0e:7a:ff:2c: d7:a0:ea:73:7c:4e:20:57:3f:ca:dd:a1:7a:75:00: 32:a9:ac:78:cf:5e:4c:47:b7:c7:9a:51:9e:37:dd: 89:76:cd:b1:1d:fd:18:31:70:49:57:52:cd:09:85: 86:68:ef:cf:86:db:0a:64:41:26:97:da:45:3b:b9: 84:d1:7a:26:bf:eb:3c:41:58:a8:5a:0c:90:74:23: 55:45:5a:4b:ce:6d:19:dd:4b:79:76:d6:ce:b6:4e: fa:3b:fe:6d:1b:88:99:b1:ef:75:9f:44:b6:a0:97: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:81:B8:6D:8C:BD:03:71:89:F8:B2:BA:30:13:7F:7D:4D:B4:81 X509v3 Authority Key Identifier: keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d8:da:ca:d5:b2:6a:6b:ad:ab:7e:91:05:db:94:9e:7f:5d: 9e:94:22:3a:5e:45:54:76:52:52:4e:df:6a:3a:17:c0:f5:39: 3c:2f:65:d6:d0:74:ca:d8:0b:f8:a1:e3:e8:50:d9:c1:74:1a: 4f:8b:3a:86:e4:87:ef:dd:2b:60:31:05:95:04:bb:81:67:21: 7e:b7:98:ac:e0:07:8a:2b:93:f0:24:67:59:31:fe:b4:56:7c: a8:2c:2c:7b:e1:3a:19:1c:a3:27:1a:92:30:db:92:9b:9f:e5: 0d:6e:b7:bf:e9:25:62:6b:c1:f1:b9:b5:7c:23:b4:53:56:f8: 2b:87:29:6f:d8:51:55:f9:29:ab:66:2d:25:69:e0:b6:57:47: 6c:ce:ba:70:09:7f:b8:8d:72:5b:1e:8d:f7:b3:50:f2:a4:13: 23:39:ff:6a:6c:cf:ab:11:f4:80:4a:54:74:2d:c6:b8:ad:e4: 77:e0:f7:05:13:64:22:3b:16:b3:ef:82:2f:90:e0:b5:05:52: fb:1d:89:06:42:5d:26:f2:c4:1b:ae:0c:b1:c7:2c:f7:0c:68: c0:5c:5a:f9:59:81:97:2e:ee:5c:02:82:ec:2e:4e:a2:f6:d4: 92:36:d5:6a:e8:80:b7:58:a3:23:54:d3:f2:ab:bb:a4:2a:38: 25:90:15:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgDymdGOt1rt73irXg46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz N2VkMTIwHhcNMjUxMjIwMTYwMDQ5WhcNMjUxMjIxMTYwMDQ5WjAzMTEwLwYDVQQD EygzYmI0ODFiODZkOGNiZDAzNzE4OWY4YjJiYTMwMTM3ZjdkNGRiNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla724lauI1OoW5DLWz+btzUsLvd4 ybpEYN2gIOczxCUa8mH01kKcDz/kf8McVTM6PoXqRKp8j9cehg6rEbIODTf4rrpe gZRMzZFhLQ6YTmnEHx/lB1yV22PM9o+y6+vacqCzQi+3lU8Y87jJ4l32UsfRi3Hy Dkn9PUemYbxnofDYDRMLi+GvrPdeNKqRhtOVwQ56/yzXoOpzfE4gVz/K3aF6dQAy qax4z15MR7fHmlGeN92Jds2xHf0YMXBJV1LNCYWGaO/PhtsKZEEml9pFO7mE0Xom v+s8QVioWgyQdCNVRVpLzm0Z3Ut5dtbOtk76O/5tG4iZse91n0S2oJdwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu0gbhtjL0DcYn4srowE399TbSBMB8GA1UdIwQY MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3 LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltjaytWy amutq36RBduUnn9dnpQiOl5FVHZSUk7fajoXwPU5PC9l1tB0ytgL+KHj6FDZwXQa T4s6huSH790rYDEFlQS7gWchfreYrOAHiiuT8CRnWTH+tFZ8qCwse+E6GRyjJxqS MNuSm5/lDW63v+klYmvB8bm1fCO0U1b4K4cpb9hRVfkpq2YtJWngtldHbM66cAl/ uI1yWx6N97NQ8qQTIzn/amzPqxH0gEpUdC3GuK3kd+D3BRNkIjsWs++CL5DgtQVS +x2JBkJdJvLEG64Msccs9wxowFxa+VmBly7uXAKC7C5OovbUkjbVauiAt1ijI1TT 8qu7pCo4JZAVrw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:47 2025 by rpki-client