This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json) Hash identifier: DyrrXCvNIn6e21HWCmIhwAPA3Wqae5ZGImEGXhqKqKQ= Subject key identifier: D3:55:E4:41:C6:04:35:1D:0B:82:D0:06:FA:C2:28:C7:86:6E:96:C3 Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Certificate serial: 019B24AC6AFF967121EE3F9416F9B12CDBF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft Manifest number: 1251 Signing time: Tue 16 Dec 2025 01:00:37 +0000 Manifest this update: Tue 16 Dec 2025 01:00:37 +0000 Manifest next update: Wed 17 Dec 2025 01:00:37 +0000 Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: av2IUn27Yy0qWFWPgG97EvLP/EpmQE2SULFL1EcAE+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:6a:ff:96:71:21:ee:3f:94:16:f9:b1:2c:db:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73 Validity Not Before: Dec 16 01:00:37 2025 GMT Not After : Dec 17 01:00:37 2025 GMT Subject: CN=d355e441c604351d0b82d006fac228c7866e96c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:69:25:b5:f2:2e:38:02:f6:6a:89:ce:a4: fe:99:ea:10:fd:24:81:a2:55:e2:1a:b1:c1:85:10: 45:e8:7d:84:02:60:49:d5:34:c3:df:77:fb:a7:87: 3c:43:37:c7:df:62:cb:9b:6e:5a:57:20:61:a9:6c: 60:a1:90:e7:e6:04:31:24:9c:a1:7d:73:27:58:0d: a0:0a:19:d7:ec:a1:98:d9:99:5f:3d:e5:33:db:e5: 1b:06:8e:9b:e1:12:6a:d7:02:15:78:69:55:90:c7: 95:f2:b0:46:6b:4d:98:03:37:21:86:10:45:8d:10: c6:8c:71:3e:7e:25:d1:9c:87:ca:57:95:42:c5:b8: ae:b0:7b:91:a9:31:b5:b2:f4:c6:cd:0d:d4:0f:87: 73:37:f7:b1:d5:15:0d:ed:c6:ae:e5:43:78:31:94: ee:34:cb:5a:fa:f5:99:e6:06:b9:00:e3:59:cf:fe: 57:ac:9c:91:2c:c1:22:ac:ed:73:f3:e4:e4:06:8c: 80:71:27:56:f8:df:72:e9:90:3d:1e:6e:9d:b1:5a: 60:83:bc:9e:71:94:92:ba:d3:c0:f6:81:89:1c:fa: b0:5a:5c:fa:d4:15:f3:ab:52:07:37:32:c5:0c:bf: 6c:9d:94:ae:a2:6d:21:b0:f6:24:25:f8:53:69:b3: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:55:E4:41:C6:04:35:1D:0B:82:D0:06:FA:C2:28:C7:86:6E:96:C3 X509v3 Authority Key Identifier: keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:64:48:60:1e:21:72:2b:b5:a1:4e:66:6b:7a:85:bd:88:b1: ee:99:1b:10:72:9c:83:17:24:af:c9:7e:24:43:26:44:50:70: c5:2e:be:11:c3:65:8d:f7:19:77:27:b6:2f:63:58:20:0b:18: 5a:9d:8c:5d:13:b0:e3:2a:70:fc:eb:63:da:3e:f7:67:90:1f: 55:cd:96:82:7d:74:c7:e2:55:3e:cb:47:0c:be:57:aa:f4:99: ed:35:99:52:50:b9:9f:e4:63:9e:88:4f:b6:0d:e8:61:a7:ba: 6e:a0:0e:54:7f:eb:bd:de:41:5f:bf:e0:9f:a5:98:b3:7a:b8: f1:a3:0c:c8:a4:ba:07:30:bd:19:c8:4e:37:38:60:95:41:85: 99:8d:2e:f9:63:d8:da:0e:6d:50:9a:04:ad:36:cb:d9:0b:df: c4:12:f3:12:02:3c:aa:35:cd:42:6e:74:69:6e:5f:64:a0:1d: bd:14:b5:a4:60:93:6f:4f:47:d5:c7:0e:fa:c7:23:78:64:21: dd:80:25:38:26:68:90:f1:9e:86:21:16:f1:db:95:31:d8:30: 5f:c3:22:ce:4a:95:69:8a:7f:a7:31:26:55:95:2b:a0:ba:f0: 72:25:55:11:d6:a4:99:2b:07:14:07:2e:f7:cd:dd:d5:91:a2: b0:90:df:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrGr/lnEh7j+UFvmxLNv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOWVhOTNjNzllY2M1ZDVjYTkwMzAxYWNkM2E4OTJkNmUy ZTFlNzMwHhcNMjUxMjE2MDEwMDM3WhcNMjUxMjE3MDEwMDM3WjAzMTEwLwYDVQQD EyhkMzU1ZTQ0MWM2MDQzNTFkMGI4MmQwMDZmYWMyMjhjNzg2NmU5NmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VpJbXyLjgC9mqJzqT+meoQ/SSB olXiGrHBhRBF6H2EAmBJ1TTD33f7p4c8QzfH32LLm25aVyBhqWxgoZDn5gQxJJyh fXMnWA2gChnX7KGY2ZlfPeUz2+UbBo6b4RJq1wIVeGlVkMeV8rBGa02YAzchhhBF jRDGjHE+fiXRnIfKV5VCxbiusHuRqTG1svTGzQ3UD4dzN/ex1RUN7cau5UN4MZTu NMta+vWZ5ga5AONZz/5XrJyRLMEirO1z8+TkBoyAcSdW+N9y6ZA9Hm6dsVpgg7ye cZSSutPA9oGJHPqwWlz61BXzq1IHNzLFDL9snZSuom0hsPYkJfhTabPNVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNV5EHGBDUdC4LQBvrCKMeGbpbDMB8GA1UdIwQY MBaAFHqeqTx57MXVypAwGs06iS1uLh5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEt NGNjY2I0Yzc5MThmLzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81ZmRjMzctZjMwZC00NzBhLTlhMDEtNGNjY2I0Yzc5MThm LzEvZXA2cFBIbnN4ZFhLa0RBYXpUcUpMVzR1SG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWRIYB4h ciu1oU5ma3qFvYix7pkbEHKcgxckr8l+JEMmRFBwxS6+EcNljfcZdye2L2NYIAsY Wp2MXROw4ypw/Otj2j73Z5AfVc2Wgn10x+JVPstHDL5XqvSZ7TWZUlC5n+RjnohP tg3oYae6bqAOVH/rvd5BX7/gn6WYs3q48aMMyKS6BzC9GchONzhglUGFmY0u+WPY 2g5tUJoErTbL2QvfxBLzEgI8qjXNQm50aW5fZKAdvRS1pGCTb09H1ccO+scjeGQh 3YAlOCZokPGehiEW8duVMdgwX8MizkqVaYp/pzEmVZUroLrwciVVEdakmSsHFAcu 983d1ZGisJDf+A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:30 2025 by rpki-client