This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json) Hash identifier: nRZDyi1IEAAag4Ay4p9vTkGzHjnsZQtHjYhGgYv8B18= Subject key identifier: 10:72:59:E5:98:7F:F0:5C:85:07:E4:9A:78:38:70:89:69:21:87:8E Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe Certificate serial: 019B40C8FB200351A3C6B6306E5CCA8BA667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:11 +0000 Manifest this update: Sun 21 Dec 2025 12:01:11 +0000 Manifest next update: Mon 22 Dec 2025 12:01:11 +0000 Files and hashes: 1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: eZJa7ShIZ05EFgoggM+SoGp+DsmrOj87qB5cEhut2BI=) 2: UkP4jKKKyGHBawn8RPGOoI0g86k.roa (hash: t1NCQU9kIDrxSOL+gI05c500j4/UZOaC1oFaRb7Gluw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:fb:20:03:51:a3:c6:b6:30:6e:5c:ca:8b:a6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe Validity Not Before: Dec 21 12:01:11 2025 GMT Not After : Dec 22 12:01:11 2025 GMT Subject: CN=107259e5987ff05c8507e49a783870896921878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:76:6f:2b:98:0f:33:1a:77:87:71:68:eb:e5: e2:5b:63:32:f1:d6:f3:65:06:68:20:f1:4c:33:11: 22:d5:f1:8d:9a:ad:c6:1e:5d:bc:a7:5a:08:54:4f: 1c:cf:42:20:d7:1e:c7:5c:e5:a8:a6:f9:37:35:ce: 05:40:32:cd:a9:78:6b:46:34:d0:3a:31:7c:0b:25: bc:4a:3a:d0:8c:70:29:18:c5:77:23:c0:10:b9:58: a2:14:a9:c7:9b:a4:b6:7c:5c:dc:77:c6:3f:93:96: a2:e2:bf:9a:89:ff:b8:0b:26:4a:11:d2:d5:8c:e6: 27:61:bd:41:d3:cf:29:b4:80:9c:f2:02:db:05:2f: e2:cf:14:1d:24:44:b7:c3:48:37:93:80:ad:89:e7: 4f:42:d3:c3:4e:cb:00:1a:cf:7f:8e:59:cb:14:18: 08:d1:e6:b4:eb:c7:6d:2e:b9:d5:7f:d9:76:63:54: 43:20:51:2e:c7:91:00:14:b7:2e:61:d0:3a:e7:08: 63:e3:da:cb:8c:ca:39:46:42:03:e7:93:a0:0a:01: 2c:1e:d3:15:5d:a4:69:55:93:45:8a:fc:25:b1:cf: d8:3a:99:ba:c0:09:5c:d6:d9:cc:7a:af:f0:ce:93: fc:62:ed:8b:f3:f2:4b:a1:b3:e6:d9:2f:b7:5e:25: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:72:59:E5:98:7F:F0:5C:85:07:E4:9A:78:38:70:89:69:21:87:8E X509v3 Authority Key Identifier: keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:62:db:a8:09:c0:9c:aa:a2:0c:26:7a:08:aa:b7:a8:4c:37: eb:fc:1d:0f:b7:4e:72:9f:94:98:f4:88:d0:b3:df:3f:79:f5: 49:13:8b:71:7c:f7:29:fc:99:82:bb:bb:af:1d:93:75:57:78: 69:d4:18:98:7c:71:8a:44:a9:ae:c5:ce:ec:4e:85:1e:ef:19: 39:5b:2c:9a:7e:0b:9b:47:91:3b:0e:a8:38:0c:21:f0:1a:cd: d5:e0:34:47:2c:9e:d8:30:bf:41:05:b4:32:1e:61:65:13:98: 63:69:26:f8:9a:ba:f5:29:61:d5:2a:71:bd:81:0b:e5:c6:7e: eb:20:22:df:d9:95:91:0e:ad:26:bb:9d:9b:9a:b7:3a:6a:de: 86:e3:e6:ab:8b:e8:04:cb:9d:b6:a2:a2:46:74:47:07:4c:81: 5d:b0:12:3b:82:d5:58:48:ee:5b:67:9a:6b:07:12:90:ec:69: 16:db:0f:83:48:fe:a2:02:30:bc:db:e2:41:ca:48:a8:2d:2c: ac:32:af:1d:0d:a7:0a:56:19:3a:e0:09:ba:3c:ca:fc:00:10: 25:c7:26:a8:e9:c5:61:03:17:17:14:0e:dc:18:3a:92:c2:41: 69:0a:35:5e:04:7a:72:6c:aa:be:19:a1:98:ac:40:a0:06:c7: 69:dd:70:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyPsgA1GjxrYwblzKi6ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1 OGQ1ZmUwHhcNMjUxMjIxMTIwMTExWhcNMjUxMjIyMTIwMTExWjAzMTEwLwYDVQQD EygxMDcyNTllNTk4N2ZmMDVjODUwN2U0OWE3ODM4NzA4OTY5MjE4NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HZvK5gPMxp3h3Fo6+XiW2My8dbz ZQZoIPFMMxEi1fGNmq3GHl28p1oIVE8cz0Ig1x7HXOWopvk3Nc4FQDLNqXhrRjTQ OjF8CyW8SjrQjHApGMV3I8AQuViiFKnHm6S2fFzcd8Y/k5ai4r+aif+4CyZKEdLV jOYnYb1B088ptICc8gLbBS/izxQdJES3w0g3k4CtiedPQtPDTssAGs9/jlnLFBgI 0ea068dtLrnVf9l2Y1RDIFEux5EAFLcuYdA65whj49rLjMo5RkID55OgCgEsHtMV XaRpVZNFivwlsc/YOpm6wAlc1tnMeq/wzpP8Yu2L8/JLobPm2S+3XiWuQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBByWeWYf/BchQfkmng4cIlpIYeOMB8GA1UdIwQY MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWLbqAnA nKqiDCZ6CKq3qEw36/wdD7dOcp+UmPSI0LPfP3n1SROLcXz3KfyZgru7rx2TdVd4 adQYmHxxikSprsXO7E6FHu8ZOVssmn4Lm0eROw6oOAwh8BrN1eA0Ryye2DC/QQW0 Mh5hZROYY2km+Jq69Slh1SpxvYEL5cZ+6yAi39mVkQ6tJrudm5q3OmrehuPmq4vo BMudtqKiRnRHB0yBXbASO4LVWEjuW2eaawcSkOxpFtsPg0j+ogIwvNviQcpIqC0s rDKvHQ2nClYZOuAJujzK/AAQJccmqOnFYQMXFxQO3Bg6ksJBaQo1XgR6cmyqvhmh mKxAoAbHad1wCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:38:33 2025 by rpki-client