This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json) Hash identifier: X7ASaZ/xf+JAW1LNm5mSJRdDqdc3a8oc+cCnVp2HyZc= Subject key identifier: 3A:CF:41:91:33:01:32:F3:B8:2F:CC:DB:EA:0A:C1:31:D7:E5:D1:BA Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Certificate serial: 019B59AC6956C37C56313767D5B15F49E21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft Manifest number: 02B4 Signing time: Fri 26 Dec 2025 08:00:29 +0000 Manifest this update: Fri 26 Dec 2025 08:00:29 +0000 Manifest next update: Sat 27 Dec 2025 08:00:29 +0000 Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: kDCf1rT6Z+Bj/3Ee3xpR4Yc0yYGZQFtXBg3uB7AE9kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:69:56:c3:7c:56:31:37:67:d5:b1:5f:49:e2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9 Validity Not Before: Dec 26 08:00:29 2025 GMT Not After : Dec 27 08:00:29 2025 GMT Subject: CN=3acf4191330132f3b82fccdbea0ac131d7e5d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:f7:76:41:04:37:b6:b9:a9:c3:76:7a:69: c6:ed:c6:81:01:a9:ff:1d:52:c1:ff:a7:56:e5:2a: 1a:58:23:3e:13:f2:ac:1f:9c:0f:c4:26:e1:19:4e: a4:b3:34:f4:47:05:0e:60:94:97:7f:66:08:95:33: 0f:14:9b:9c:f8:d7:5b:41:ef:ff:19:8f:05:9d:08: 78:90:9e:57:34:8e:8c:c1:17:55:b6:53:9c:6b:ce: d5:20:92:ba:d4:2e:71:df:08:f8:58:f3:76:8b:ae: 69:54:f6:aa:8c:c4:47:fb:c5:44:13:5e:60:f4:fb: 4f:e7:0c:f8:9d:28:2f:fe:1e:b3:e5:29:7f:2c:98: d1:26:eb:6d:9d:c0:7b:f7:31:6f:e7:c7:f9:a0:6f: c9:8e:eb:37:4d:12:4a:47:0b:ac:7f:2d:14:a4:5b: 34:8d:4e:68:64:fc:c3:36:43:b3:53:11:7d:18:d0: 72:45:22:5b:e6:e7:7e:cf:b5:41:30:7e:b0:67:c7: ff:60:13:43:86:fc:3e:38:6b:85:cf:21:43:1b:28: 63:5b:7d:d1:21:36:45:1e:e4:a5:25:0f:c4:6e:68: 94:ca:6b:fe:f6:e4:10:7c:d5:fc:63:5b:05:7f:9d: cb:1e:97:6a:1a:f9:2f:e6:94:0f:18:93:c7:9b:c4: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CF:41:91:33:01:32:F3:B8:2F:CC:DB:EA:0A:C1:31:D7:E5:D1:BA X509v3 Authority Key Identifier: keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b6:bc:68:bf:37:35:de:73:f7:cf:21:3e:bf:ef:c6:51:fc: 86:4d:43:49:a2:3b:9e:2d:a8:cf:84:6f:34:2d:2d:46:b1:cc: 6b:53:9a:ef:3b:af:d2:33:19:c2:fb:1e:40:b7:bb:e1:87:99: 1f:c7:d1:e9:07:ae:50:d3:63:ef:6c:1e:2e:bd:3a:ac:5e:b3: cc:aa:0d:06:2e:a6:40:c5:92:b4:54:4a:59:a7:4c:ce:9d:06: 74:36:72:2d:af:cd:b3:4d:d3:46:44:0f:17:ba:98:67:ee:25: 20:d6:06:8e:65:54:5b:6a:1a:11:a9:66:d2:a6:ab:39:a4:b6: 30:8f:08:b9:e3:62:70:f2:df:ea:c0:da:4c:f2:40:5d:3e:74: 4a:a1:6b:c1:54:7e:cf:c0:91:cb:d2:60:83:63:28:39:13:8a: 0c:9d:92:ef:58:dd:bb:49:5f:0c:61:dc:b0:4d:94:1f:c4:d9: 1c:f8:68:73:e1:cc:d7:1b:3b:f5:f4:ac:45:e4:50:ff:5d:05: 67:a5:9b:9a:8b:d6:24:42:91:18:99:0d:a6:16:68:a2:98:61: cd:9a:0d:f5:fe:c0:c4:8c:e6:8d:19:0d:60:15:f5:01:8b:13: 1b:6b:97:82:a3:8f:27:dc:04:c1:cc:e5:f9:a8:64:e7:67:ec: ec:a6:91:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrGlWw3xWMTdn1bFfSeIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3 OTEyYjkwHhcNMjUxMjI2MDgwMDI5WhcNMjUxMjI3MDgwMDI5WjAzMTEwLwYDVQQD EygzYWNmNDE5MTMzMDEzMmYzYjgyZmNjZGJlYTBhYzEzMWQ3ZTVkMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lH3dkEEN7a5qcN2emnG7caBAan/ HVLB/6dW5SoaWCM+E/KsH5wPxCbhGU6kszT0RwUOYJSXf2YIlTMPFJuc+NdbQe// GY8FnQh4kJ5XNI6MwRdVtlOca87VIJK61C5x3wj4WPN2i65pVPaqjMRH+8VEE15g 9PtP5wz4nSgv/h6z5Sl/LJjRJuttncB79zFv58f5oG/Jjus3TRJKRwusfy0UpFs0 jU5oZPzDNkOzUxF9GNByRSJb5ud+z7VBMH6wZ8f/YBNDhvw+OGuFzyFDGyhjW33R ITZFHuSlJQ/EbmiUymv+9uQQfNX8Y1sFf53LHpdqGvkv5pQPGJPHm8TOuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrPQZEzATLzuC/M2+oKwTHX5dG6MB8GA1UdIwQY MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0 LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWra8aL83 Nd5z988hPr/vxlH8hk1DSaI7ni2oz4RvNC0tRrHMa1Oa7zuv0jMZwvseQLe74YeZ H8fR6QeuUNNj72weLr06rF6zzKoNBi6mQMWStFRKWadMzp0GdDZyLa/Ns03TRkQP F7qYZ+4lINYGjmVUW2oaEalm0qarOaS2MI8IueNicPLf6sDaTPJAXT50SqFrwVR+ z8CRy9Jgg2MoOROKDJ2S71jdu0lfDGHcsE2UH8TZHPhoc+HM1xs79fSsReRQ/10F Z6WbmovWJEKRGJkNphZoophhzZoN9f7AxIzmjRkNYBX1AYsTG2uXgqOPJ9wEwczl +ahk52fs7KaR7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client