This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json) Hash identifier: fSOC5GlMRD13R+MHT6wM60ZAK9vt3M8M4B1kouqHpXM= Subject key identifier: 91:7C:46:11:DE:21:1C:E1:04:6B:D0:6F:5F:96:5A:CA:55:72:BF:44 Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88 Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88 Certificate serial: 019B27E4920A7A97DC9C19879E1473A3002F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft Manifest number: 114C Signing time: Tue 16 Dec 2025 16:00:49 +0000 Manifest this update: Tue 16 Dec 2025 16:00:49 +0000 Manifest next update: Wed 17 Dec 2025 16:00:49 +0000 Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: 9nUjL9t84lVKGuyHJNZr+QCnYQn0dh0SDKdfDo5SJu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:92:0a:7a:97:dc:9c:19:87:9e:14:73:a3:00:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88 Validity Not Before: Dec 16 16:00:49 2025 GMT Not After : Dec 17 16:00:49 2025 GMT Subject: CN=917c4611de211ce1046bd06f5f965aca5572bf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:0d:01:07:b2:a2:ba:63:84:e3:70:86:b4: d8:73:fc:1a:22:e2:dc:93:13:ed:86:40:53:b2:88: 00:46:53:f1:ee:15:5e:4a:3f:be:b8:87:32:c8:e7: 2a:62:0e:4e:6c:ba:1d:69:b3:f6:a6:e7:ec:09:cd: 7b:a5:9d:37:43:2e:06:6d:7b:6c:d4:77:a7:cc:b5: 97:b9:a6:94:72:cc:64:99:88:c8:32:36:7e:34:65: 5b:f1:ab:56:1a:ce:dd:9a:55:f7:7a:69:ac:28:4e: cb:f8:a1:39:dd:53:16:07:49:a5:15:bf:e9:a2:52: 8e:00:5a:0f:1a:64:3f:c5:cb:41:5b:7d:9e:ad:f8: 6a:60:89:c5:5a:53:3f:90:e8:5a:b6:4d:62:53:41: 8e:51:cd:5e:54:6d:3e:a3:ab:74:01:ec:4c:44:0d: 65:24:07:23:ea:22:27:ef:bf:0f:f5:a8:b1:ad:07: 34:59:52:e9:a5:a5:34:97:4a:77:39:9c:11:ea:f5: 31:3a:87:9d:ee:1b:5e:aa:7f:92:b4:aa:dc:43:74: af:bd:68:c0:3a:52:bc:67:d4:97:8e:98:11:4d:0f: 91:d6:04:af:6f:b1:11:82:2e:7a:70:49:ee:f0:16: 8e:4a:e9:28:64:39:c6:f5:63:86:f6:87:8c:b5:68: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:46:11:DE:21:1C:E1:04:6B:D0:6F:5F:96:5A:CA:55:72:BF:44 X509v3 Authority Key Identifier: keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:75:7b:94:8a:6d:41:e1:fd:7f:40:4c:f2:38:40:de:7c:32: 68:21:0b:0b:e2:0f:68:17:15:ad:51:a6:dc:b9:1f:08:cd:06: 99:d1:68:ab:ad:22:a0:36:c8:38:c9:80:0c:f5:95:ec:a6:2f: 7f:e8:48:0e:ec:74:41:ce:5f:62:a8:2b:07:5d:60:ab:a5:91: af:d9:12:46:87:57:16:e8:ff:b0:8b:48:e6:ec:f6:6a:51:88: 55:41:e1:0f:24:e6:13:d5:2f:a2:12:3c:b0:96:fa:0b:53:27: 55:c1:dc:38:2e:7b:7c:42:78:6f:a0:c6:ed:15:4c:f8:a1:ec: 90:40:ac:88:a9:02:ab:c3:08:8c:4b:d3:58:fc:48:9d:05:c6: d8:ca:07:81:e0:e1:f0:cf:2f:a4:58:7e:9d:f8:9c:7d:86:dd: fb:51:d7:bd:c8:fe:a0:89:f6:d2:cf:5c:01:6d:a9:98:74:d4: 6b:ed:4b:ee:d9:cc:ca:f4:61:a7:22:b1:6e:d4:db:df:a5:85: ee:5c:1d:f0:e6:4d:9f:31:b6:87:30:fa:5e:d0:81:ce:a8:16: b4:0a:c6:72:ee:c8:1d:12:57:e9:1a:9b:fe:7b:5b:82:9b:42: c2:17:18:c9:c7:4a:0a:bb:1c:de:fe:ed:e9:8e:be:7f:40:ef: 39:63:b1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5JIKepfcnBmHnhRzowAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj Y2RlODgwHhcNMjUxMjE2MTYwMDQ5WhcNMjUxMjE3MTYwMDQ5WjAzMTEwLwYDVQQD Eyg5MTdjNDYxMWRlMjExY2UxMDQ2YmQwNmY1Zjk2NWFjYTU1NzJiZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gANAQeyorpjhONwhrTYc/waIuLc kxPthkBTsogARlPx7hVeSj++uIcyyOcqYg5ObLodabP2pufsCc17pZ03Qy4GbXts 1HenzLWXuaaUcsxkmYjIMjZ+NGVb8atWGs7dmlX3emmsKE7L+KE53VMWB0mlFb/p olKOAFoPGmQ/xctBW32erfhqYInFWlM/kOhatk1iU0GOUc1eVG0+o6t0AexMRA1l JAcj6iIn778P9aixrQc0WVLppaU0l0p3OZwR6vUxOoed7hteqn+StKrcQ3SvvWjA OlK8Z9SXjpgRTQ+R1gSvb7ERgi56cEnu8BaOSukoZDnG9WOG9oeMtWgCCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF8RhHeIRzhBGvQb1+WWspVcr9EMB8GA1UdIwQY MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3 LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3V7lIpt QeH9f0BM8jhA3nwyaCELC+IPaBcVrVGm3LkfCM0GmdFoq60ioDbIOMmADPWV7KYv f+hIDux0Qc5fYqgrB11gq6WRr9kSRodXFuj/sItI5uz2alGIVUHhDyTmE9UvohI8 sJb6C1MnVcHcOC57fEJ4b6DG7RVM+KHskECsiKkCq8MIjEvTWPxInQXG2MoHgeDh 8M8vpFh+nficfYbd+1HXvcj+oIn20s9cAW2pmHTUa+1L7tnMyvRhpyKxbtTb36WF 7lwd8OZNnzG2hzD6XtCBzqgWtArGcu7IHRJX6Rqb/ntbgptCwhcYycdKCrsc3v7t 6Y6+f0DvOWOxJA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:40 2025 by rpki-client