This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json) Hash identifier: GEBRumqhawKJy3wsDy0cpAr71heT8Q1FxuuzJYj9NDU= Subject key identifier: 76:96:9F:22:D4:A0:3F:A2:8A:9A:13:AE:A6:09:5D:DF:DD:2E:06:44 Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Certificate serial: 019B3D22B6A06A3E4710DBBD3611758A4F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft Manifest number: 136F Signing time: Sat 20 Dec 2025 19:00:43 +0000 Manifest this update: Sat 20 Dec 2025 19:00:43 +0000 Manifest next update: Sun 21 Dec 2025 19:00:43 +0000 Files and hashes: 1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=) 2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: 2fE3KyAhApR5WoAKGltvnkR0GJnd+1YmQl2qZR7ofP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:b6:a0:6a:3e:47:10:db:bd:36:11:75:8a:4f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Validity Not Before: Dec 20 19:00:43 2025 GMT Not After : Dec 21 19:00:43 2025 GMT Subject: CN=76969f22d4a03fa28a9a13aea6095ddfdd2e0644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:38:b0:40:94:91:25:74:18:93:e2:9d:78: c7:d6:15:91:86:4f:c0:49:dd:7c:0d:73:53:f7:29: b8:f3:5d:59:02:98:06:a7:de:ee:3d:b9:a5:10:9a: 4c:0b:76:b1:9e:b9:75:41:a2:b9:e0:ab:05:da:82: 01:fc:6b:8e:33:e2:6f:a2:46:11:9b:00:da:c6:81: 24:6f:42:fd:0b:f4:8d:b8:80:ca:6f:de:ef:16:9d: da:82:2c:9a:9b:d9:45:79:dc:db:02:0c:b9:ce:87: 4e:b6:f5:d4:c5:fd:93:83:ab:e4:81:36:90:89:d5: 5e:22:6d:9e:56:da:54:e0:ef:82:b8:ea:20:d9:07: fa:68:3c:a6:d3:67:5a:45:e5:3d:44:81:89:9c:fd: ab:6b:36:f4:a7:03:e7:e1:2d:e5:a7:bd:ca:fe:6f: 17:91:94:ef:3a:02:4a:91:d1:4c:a5:ba:88:7f:7c: b6:fb:aa:df:03:a3:5f:98:ae:27:9e:65:47:a2:2a: 20:89:37:57:6e:85:e5:fd:5e:3c:1b:42:c9:29:7c: cd:5c:b3:6d:d3:98:50:24:fc:c6:90:3b:af:15:52: dd:9f:58:f7:41:ac:c4:59:26:d5:1f:25:66:2e:f4: 16:a9:a4:2b:cf:5e:11:74:b3:74:f6:97:2e:6e:11: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:9F:22:D4:A0:3F:A2:8A:9A:13:AE:A6:09:5D:DF:DD:2E:06:44 X509v3 Authority Key Identifier: keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2f:d8:79:c8:1e:74:af:2a:8a:b6:9f:0b:5d:2e:b6:33:bf: 77:3b:72:13:1a:83:54:76:b4:1f:30:57:f4:db:f0:f1:20:9b: 26:18:c1:5e:0d:73:11:ed:97:16:6b:85:12:c6:40:a9:6e:48: b6:92:53:a4:25:ce:c7:27:13:6e:62:1b:21:27:90:db:8d:cc: 03:bc:a0:28:f3:6f:14:2a:d0:43:2b:f3:d0:2b:b6:d5:33:d5: ac:c8:a8:c2:58:63:4b:f2:f7:71:c8:05:a0:d7:0e:42:0b:5f: 7d:2e:a6:b3:bf:ba:43:32:75:ab:e8:d2:b2:3f:ad:94:3e:75: 36:cf:8c:db:9b:68:a6:52:df:fb:f8:ef:37:7e:30:72:b8:b6: 55:b0:1f:e4:36:c0:ca:a3:86:95:51:05:56:c2:ce:8f:e4:e0: 4d:98:3f:f8:df:e8:71:1a:bc:54:b7:46:e5:43:d4:70:10:43: 7d:35:dc:31:df:6a:73:df:25:0a:6b:eb:88:c8:2f:9b:06:3e: b0:2c:8e:74:7b:44:bd:89:97:43:1a:48:58:b0:00:44:4a:4a: d4:50:42:72:03:25:ff:00:e7:54:5a:41:59:f6:1f:5d:ab:8f: b4:d4:0e:c6:6c:68:f9:ce:59:cf:be:10:1f:bb:d8:fa:f7:45: 31:6b:b9:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iragaj5HENu9NhF1ik97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzExZjIwODgzYTYyYmMwNjM5MWJhN2IyNTgyY2U3MmIz ZmU5MWMwHhcNMjUxMjIwMTkwMDQzWhcNMjUxMjIxMTkwMDQzWjAzMTEwLwYDVQQD Eyg3Njk2OWYyMmQ0YTAzZmEyOGE5YTEzYWVhNjA5NWRkZmRkMmUwNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopc4sECUkSV0GJPinXjH1hWRhk/A Sd18DXNT9ym4811ZApgGp97uPbmlEJpMC3axnrl1QaK54KsF2oIB/GuOM+JvokYR mwDaxoEkb0L9C/SNuIDKb97vFp3agiyam9lFedzbAgy5zodOtvXUxf2Tg6vkgTaQ idVeIm2eVtpU4O+CuOog2Qf6aDym02daReU9RIGJnP2razb0pwPn4S3lp73K/m8X kZTvOgJKkdFMpbqIf3y2+6rfA6NfmK4nnmVHoiogiTdXboXl/V48G0LJKXzNXLNt 05hQJPzGkDuvFVLdn1j3QazEWSbVHyVmLvQWqaQrz14RdLN09pcubhGjywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaWnyLUoD+iipoTrqYJXd/dLgZEMB8GA1UdIwQY MBaAFFdxHyCIOmK8Bjkbp7JYLOcrP+kcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMt NzE0ZDE5NThiNzdiLzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMtNzE0ZDE5NThiNzdi LzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS/Yecge dK8qirafC10utjO/dztyExqDVHa0HzBX9Nvw8SCbJhjBXg1zEe2XFmuFEsZAqW5I tpJTpCXOxycTbmIbISeQ243MA7ygKPNvFCrQQyvz0Cu21TPVrMiowlhjS/L3ccgF oNcOQgtffS6ms7+6QzJ1q+jSsj+tlD51Ns+M25toplLf+/jvN34wcri2VbAf5DbA yqOGlVEFVsLOj+TgTZg/+N/ocRq8VLdG5UPUcBBDfTXcMd9qc98lCmvriMgvmwY+ sCyOdHtEvYmXQxpIWLAAREpK1FBCcgMl/wDnVFpBWfYfXauPtNQOxmxo+c5Zz74Q H7vY+vdFMWu5Wg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:55:01 2025 by rpki-client