This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft File: 56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json) Hash identifier: r3xKeK0KuAQujXGY/YFu7875Ohfdyi7sbCxI4KvoyMU= Subject key identifier: 7C:C3:A8:25:C4:95:9B:19:DF:6D:D2:17:05:CA:04:69:26:04:94:B7 Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Certificate serial: 019B3CEC65DA88A4BA8821891F61BA11A8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: xXPzBk8jWyGycxgbtnYYfQFbdLZQ9Ab3b43PI7QS96c=) 2: 8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa (hash: 62aQx/AwBMCJ8pFWHg2Z3I0/UbL8gX53YDgRIUnI4jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:65:da:88:a4:ba:88:21:89:1f:61:ba:11:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=7cc3a825c4959b19df6dd21705ca0469260494b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:1f:a1:d9:8d:e0:11:51:0e:32:e5:e0:0b: ed:65:8f:9b:9b:ce:03:48:f4:9a:4b:40:cc:29:18: 5e:1d:0a:ce:9f:d2:ef:f0:9d:fd:54:79:2e:7f:60: fd:f6:43:9b:49:1b:e1:1c:73:7e:52:67:73:fa:4b: 55:a4:58:0b:0d:2f:3d:3f:fb:ff:a7:41:56:93:20: c2:18:32:58:0a:d2:ce:24:a1:a4:6a:d3:14:16:18: 78:8a:86:f1:97:18:07:05:7f:49:f7:87:b5:c3:f6: ba:a7:62:45:e8:7b:15:3e:02:a0:a8:3a:31:29:05: 2e:aa:e0:88:68:30:c6:5a:23:a6:cc:00:74:9d:e7: 99:5a:d2:73:50:e1:fe:8c:79:e0:7d:1a:76:24:97: fa:b0:5c:87:56:78:fd:71:e5:3c:38:0b:1c:ff:83: 80:a5:ab:76:1e:b3:0e:c8:e1:b0:6a:ce:a4:8f:88: b0:ae:49:b6:36:4a:d0:54:8b:80:1e:96:7d:51:2b: 2a:c4:f4:cf:65:fe:df:f4:cf:9a:47:75:2b:b2:9c: 1d:85:05:6c:2c:c9:32:e7:e8:60:ca:77:a0:00:d1: 27:38:5b:4f:6a:ef:93:d2:7a:11:1f:63:c5:31:26: 3b:ae:f1:7a:d0:ab:62:43:d8:ec:61:0d:70:c1:95: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:A8:25:C4:95:9B:19:DF:6D:D2:17:05:CA:04:69:26:04:94:B7 X509v3 Authority Key Identifier: keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e4:a0:aa:de:f7:fb:7e:95:fc:89:d2:3c:48:3f:51:e7:7c: 72:ce:c1:f1:6e:5d:ed:ab:2d:f6:33:13:dd:af:dd:fd:c7:36: b5:78:d0:4e:f8:01:d6:23:60:1b:a2:68:b6:87:02:92:72:c2: c2:89:c7:79:ee:b6:d9:ce:56:7f:b6:43:0f:7c:aa:b0:c1:24: 2e:bc:f9:f6:4f:ba:c9:66:81:1d:27:50:9b:7f:8a:1f:a0:d0: 28:e4:1f:68:2c:84:1e:be:6e:2d:2f:65:61:9d:c6:6d:81:a7: 18:2f:45:de:c8:99:7c:73:d5:7e:da:3b:66:16:a6:bf:b1:b3: 17:7a:54:64:8c:2a:95:88:2d:18:a3:73:9d:40:42:e0:e1:90: e3:08:e1:d8:6f:70:48:d7:d7:a5:57:79:66:67:2a:99:63:9f: 42:a6:56:f5:2c:74:4c:1c:77:77:6f:cc:ad:0c:c6:d5:a3:be: 27:29:92:4d:40:ab:05:ba:7c:13:b9:7f:dc:a7:89:25:ba:f4: ae:de:ae:3e:f8:39:d8:be:1c:1d:d4:17:4c:2f:36:57:7f:af: da:81:17:5e:ba:35:d3:9b:65:f0:0f:6d:e0:40:f9:cb:1e:25: ef:5f:0f:d6:1e:e8:c3:41:fa:78:ab:f6:b3:4e:d1:c9:46:83: 8c:61:58:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GXaiKS6iCGJH2G6EaipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi OGQ1ODUwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD Eyg3Y2MzYTgyNWM0OTU5YjE5ZGY2ZGQyMTcwNWNhMDQ2OTI2MDQ5NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYQfodmN4BFRDjLl4AvtZY+bm84D SPSaS0DMKRheHQrOn9Lv8J39VHkuf2D99kObSRvhHHN+Umdz+ktVpFgLDS89P/v/ p0FWkyDCGDJYCtLOJKGkatMUFhh4iobxlxgHBX9J94e1w/a6p2JF6HsVPgKgqDox KQUuquCIaDDGWiOmzAB0neeZWtJzUOH+jHngfRp2JJf6sFyHVnj9ceU8OAsc/4OA pat2HrMOyOGwas6kj4iwrkm2NkrQVIuAHpZ9USsqxPTPZf7f9M+aR3UrspwdhQVs LMky5+hgynegANEnOFtPau+T0noRH2PFMSY7rvF60KtiQ9jsYQ1wwZXvewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzDqCXElZsZ323SFwXKBGkmBJS3MB8GA1UdIwQY MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt ZTM2ZDBiOWI2NDVkLzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreSgqt73 +36V/InSPEg/Ued8cs7B8W5d7ast9jMT3a/d/cc2tXjQTvgB1iNgG6JotocCknLC wonHee622c5Wf7ZDD3yqsMEkLrz59k+6yWaBHSdQm3+KH6DQKOQfaCyEHr5uLS9l YZ3GbYGnGC9F3siZfHPVfto7Zhamv7GzF3pUZIwqlYgtGKNznUBC4OGQ4wjh2G9w SNfXpVd5ZmcqmWOfQqZW9Sx0TBx3d2/MrQzG1aO+JymSTUCrBbp8E7l/3KeJJbr0 rt6uPvg52L4cHdQXTC82V3+v2oEXXro105tl8A9t4ED5yx4l718P1h7ow0H6eKv2 s07RyUaDjGFYGA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:27 2025 by rpki-client