This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json) Hash identifier: bAGwK6+E5YxefYYaQCdcKp95pQtjN5exZCxUdlA49bY= Subject key identifier: 98:75:26:0B:64:65:39:AC:8E:3E:91:B7:0C:AC:9A:9C:6F:7F:ED:67 Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Certificate serial: 019B41DB45896C4B6C4DBF1BAF1521D5B797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft Manifest number: 11B5 Signing time: Sun 21 Dec 2025 17:00:47 +0000 Manifest this update: Sun 21 Dec 2025 17:00:47 +0000 Manifest next update: Mon 22 Dec 2025 17:00:47 +0000 Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: agNR9jOsOvPUUAFijh7dPBnl+VIJpAfdtzSTG1r7eYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:45:89:6c:4b:6c:4d:bf:1b:af:15:21:d5:b7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf Validity Not Before: Dec 21 17:00:47 2025 GMT Not After : Dec 22 17:00:47 2025 GMT Subject: CN=9875260b646539ac8e3e91b70cac9a9c6f7fed67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:ae:21:33:bb:31:7e:de:66:4c:d1:71:a5: 8e:89:42:33:c5:69:a3:7a:d1:73:08:8b:95:54:76: ca:1e:c2:cf:09:74:81:74:0e:83:47:2f:d3:ba:41: 68:7a:64:b1:f9:09:74:ce:d4:e9:9d:0f:33:cc:a0: d7:46:0e:1d:f1:b7:a4:56:6e:4d:11:bd:36:24:ad: 23:be:a2:90:4b:eb:2c:13:89:82:e9:f6:eb:3b:fb: ea:a4:5f:9f:86:25:96:c2:2a:c6:78:87:42:12:e7: 3c:0e:02:96:d7:a7:66:a5:05:ff:eb:48:da:a5:a1: 24:a4:92:33:94:f2:17:46:af:7d:a8:47:f0:48:18: a0:ee:0f:dd:2d:b2:01:95:b9:74:82:5e:1c:2b:c5: 5f:09:81:b3:be:68:d5:f0:13:30:2f:26:70:ba:29: 19:d8:dd:ba:96:fa:a5:30:ec:d1:85:c9:ba:d7:c0: 5b:40:0c:f0:4b:83:de:c1:5c:4c:01:ef:ee:6a:9a: 0e:43:71:34:6f:97:c7:67:c5:5c:06:2a:02:d7:8e: 03:96:ea:d3:a7:b3:c6:55:4e:03:f0:47:c0:37:34: 62:d0:1d:01:ae:28:5e:d3:6d:4e:e5:1a:43:5f:0f: 84:1a:a4:f5:6b:e1:0a:22:e5:e2:76:fd:fa:f6:5e: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:26:0B:64:65:39:AC:8E:3E:91:B7:0C:AC:9A:9C:6F:7F:ED:67 X509v3 Authority Key Identifier: keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8e:83:ee:81:4b:02:df:a8:38:41:82:b2:0e:06:ff:73:a2: 1c:1d:58:a0:02:58:b6:2b:f9:de:49:5f:e5:09:13:06:2a:59: 32:e8:92:41:5d:88:d0:c4:25:b2:ff:a3:5b:c6:b4:48:1f:e1: 8f:97:d4:27:bd:91:81:df:57:f7:da:32:4c:0f:81:a0:de:f1: 79:59:21:2b:15:27:5d:d4:23:02:bf:38:87:ca:1d:2d:04:f3: 3c:82:a9:83:cb:3e:8a:e0:ce:7a:d7:bb:36:34:13:23:2b:1f: 4d:2f:a5:3c:94:63:49:dc:21:56:db:e3:d9:b9:38:21:03:42: ce:8b:0a:bd:8a:11:ce:e5:0a:8b:b7:28:d5:ff:e5:05:3e:a6: d3:62:07:56:73:16:b2:f1:4f:85:9e:5d:41:53:6a:92:2c:90: 30:0d:45:0f:d8:46:50:55:d1:06:92:72:53:e6:bd:13:72:fb: 42:e2:34:b3:1d:94:72:f0:2d:3a:0c:63:43:27:49:ed:3f:ff: 3a:b8:e1:5d:43:48:14:c4:4e:91:a4:1f:48:63:23:49:47:59: 27:c8:3f:a2:b2:59:d4:3e:cb:5f:a5:3f:7c:c4:62:2d:c0:59: b3:9b:73:ea:5b:04:44:da:3e:c7:24:45:05:5f:6b:11:7a:68: 7a:75:e7:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB20WJbEtsTb8brxUh1beXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm MWJhY2YwHhcNMjUxMjIxMTcwMDQ3WhcNMjUxMjIyMTcwMDQ3WjAzMTEwLwYDVQQD Eyg5ODc1MjYwYjY0NjUzOWFjOGUzZTkxYjcwY2FjOWE5YzZmN2ZlZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOuITO7MX7eZkzRcaWOiUIzxWmj etFzCIuVVHbKHsLPCXSBdA6DRy/TukFoemSx+Ql0ztTpnQ8zzKDXRg4d8bekVm5N Eb02JK0jvqKQS+ssE4mC6fbrO/vqpF+fhiWWwirGeIdCEuc8DgKW16dmpQX/60ja paEkpJIzlPIXRq99qEfwSBig7g/dLbIBlbl0gl4cK8VfCYGzvmjV8BMwLyZwuikZ 2N26lvqlMOzRhcm618BbQAzwS4PewVxMAe/uapoOQ3E0b5fHZ8VcBioC144DlurT p7PGVU4D8EfANzRi0B0Brihe021O5RpDXw+EGqT1a+EKIuXidv369l6mPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh1JgtkZTmsjj6Rtwysmpxvf+1nMB8GA1UdIwQY MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI6D7oFL At+oOEGCsg4G/3OiHB1YoAJYtiv53klf5QkTBipZMuiSQV2I0MQlsv+jW8a0SB/h j5fUJ72Rgd9X99oyTA+BoN7xeVkhKxUnXdQjAr84h8odLQTzPIKpg8s+iuDOete7 NjQTIysfTS+lPJRjSdwhVtvj2bk4IQNCzosKvYoRzuUKi7co1f/lBT6m02IHVnMW svFPhZ5dQVNqkiyQMA1FD9hGUFXRBpJyU+a9E3L7QuI0sx2UcvAtOgxjQydJ7T// OrjhXUNIFMROkaQfSGMjSUdZJ8g/orJZ1D7LX6U/fMRiLcBZs5tz6lsERNo+xyRF BV9rEXpoenXngA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:36 2025 by rpki-client