This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json) Hash identifier: m4JIEBVpPIMIEShKcegGeh6uH9K/jzR0wv8DUIgWi2o= Subject key identifier: 58:2B:05:7C:62:6A:40:A1:BB:4F:28:81:87:1A:34:E7:32:13:66:30 Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Certificate serial: 019B1A293DE78425570D9DDF94501CA1477D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft Manifest number: 1774 Signing time: Sun 14 Dec 2025 00:01:08 +0000 Manifest this update: Sun 14 Dec 2025 00:01:08 +0000 Manifest next update: Mon 15 Dec 2025 00:01:08 +0000 Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: X3E5zTYAouXamX3b+ES1koSNskVr+TeHVEfv5IXkzGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:3d:e7:84:25:57:0d:9d:df:94:50:1c:a1:47:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Validity Not Before: Dec 14 00:01:08 2025 GMT Not After : Dec 15 00:01:08 2025 GMT Subject: CN=582b057c626a40a1bb4f2881871a34e732136630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:8c:51:73:31:2f:bc:29:f8:a7:83:b6:6d: d7:4b:35:de:29:0a:9f:8f:cb:18:24:98:fa:76:38: fd:c0:6b:81:b5:4a:90:38:c2:04:77:ee:1d:4d:f3: 5f:37:60:01:76:80:35:05:d3:b5:36:3c:e8:e8:6f: 28:05:2b:bb:df:ec:6e:cd:00:07:a8:b7:3a:8c:11: 29:33:db:de:e3:99:eb:26:65:fc:ce:fe:0f:35:ef: 68:ff:ac:c6:a8:1d:19:39:b0:c1:4f:88:13:cd:f4: 08:82:3f:4a:b6:16:d5:cc:68:3a:15:0b:24:c1:e6: 6c:96:d7:96:bb:2c:c0:d2:d4:fb:16:96:94:25:b7: b3:ec:a9:19:a4:dd:bb:6d:da:92:90:92:19:89:d3: 0f:5d:7b:5f:b0:9e:34:d8:14:b3:61:82:53:f5:ce: 0e:1b:38:f1:ab:5f:34:6d:b1:78:6f:ef:8b:0d:ea: 0f:e0:14:cd:f4:a0:4f:e1:50:d0:cd:44:9c:7d:5a: 93:3c:2c:3c:f1:1a:fd:f6:0e:01:e0:33:6d:5e:7e: b6:c2:9e:5b:1a:1e:e6:f8:1e:b9:3f:ab:9f:81:6b: 40:2e:37:10:8d:6c:d1:e5:3c:f4:08:d3:31:3d:84: d0:bb:21:8c:7a:a6:28:b0:54:a7:ff:d3:20:67:87: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:05:7C:62:6A:40:A1:BB:4F:28:81:87:1A:34:E7:32:13:66:30 X509v3 Authority Key Identifier: keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:36:7f:f2:e1:3f:a3:17:8c:e6:72:b8:88:90:19:fc:61:96: c9:06:10:71:cb:2a:e7:8a:96:b1:cb:95:08:ce:22:0b:54:4a: 6a:06:0d:c9:12:86:61:af:66:3f:ec:90:b4:b9:94:51:21:90: a3:5e:d6:75:21:9f:c3:66:08:cd:54:35:b5:d0:2b:33:16:31: c9:82:c4:e2:f1:ef:f5:8a:a4:08:1a:bc:4b:be:d2:44:56:22: 1b:54:f0:12:4a:fc:b2:a7:ba:04:e8:5c:22:9e:f0:8a:e3:d9: 84:0b:f8:4e:6d:0a:2c:a1:1e:58:e3:fa:bd:3b:1c:27:35:90: 17:d0:2a:df:47:17:74:0d:da:c2:77:d5:8c:7a:bd:6f:3c:73: c1:50:5b:1a:7d:25:46:c9:5d:ec:09:f0:41:fa:a9:69:57:8c: e4:a9:85:02:ae:40:ef:63:34:5c:65:91:9d:e9:fd:1e:14:42: 27:cb:40:0d:0d:86:2e:3a:ef:db:db:50:5e:f9:fd:de:a8:fb: fc:e1:c9:8b:e7:85:c0:7f:2a:bd:b8:18:67:59:8f:14:a5:c2: 8a:6e:2d:35:0a:8e:cb:b0:1d:e9:83:93:7b:36:c3:94:f0:a8: 15:3d:45:b1:23:4c:a4:f1:4a:db:2d:cd:34:c1:08:59:11:03: cf:05:22:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKT3nhCVXDZ3flFAcoUd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzUwZWI2ZDEyYzU3ZWE2NDMwYjlmMDIzOTVjYWYyYTgx YmVjZjgwHhcNMjUxMjE0MDAwMTA4WhcNMjUxMjE1MDAwMTA4WjAzMTEwLwYDVQQD Eyg1ODJiMDU3YzYyNmE0MGExYmI0ZjI4ODE4NzFhMzRlNzMyMTM2NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3SMUXMxL7wp+KeDtm3XSzXeKQqf j8sYJJj6djj9wGuBtUqQOMIEd+4dTfNfN2ABdoA1BdO1Njzo6G8oBSu73+xuzQAH qLc6jBEpM9ve45nrJmX8zv4PNe9o/6zGqB0ZObDBT4gTzfQIgj9KthbVzGg6FQsk weZslteWuyzA0tT7FpaUJbez7KkZpN27bdqSkJIZidMPXXtfsJ402BSzYYJT9c4O Gzjxq180bbF4b++LDeoP4BTN9KBP4VDQzUScfVqTPCw88Rr99g4B4DNtXn62wp5b Gh7m+B65P6ufgWtALjcQjWzR5Tz0CNMxPYTQuyGMeqYosFSn/9MgZ4ewPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgrBXxiakChu08ogYcaNOcyE2YwMB8GA1UdIwQY MBaAFHp1DrbRLFfqZDC58COVyvKoG+z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUt NTcyMjc5ODJhMDAwLzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUtNTcyMjc5ODJhMDAw LzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTZ/8uE/ oxeM5nK4iJAZ/GGWyQYQccsq54qWscuVCM4iC1RKagYNyRKGYa9mP+yQtLmUUSGQ o17WdSGfw2YIzVQ1tdArMxYxyYLE4vHv9YqkCBq8S77SRFYiG1TwEkr8sqe6BOhc Ip7wiuPZhAv4Tm0KLKEeWOP6vTscJzWQF9Aq30cXdA3awnfVjHq9bzxzwVBbGn0l Rsld7AnwQfqpaVeM5KmFAq5A72M0XGWRnen9HhRCJ8tADQ2GLjrv29tQXvn93qj7 /OHJi+eFwH8qvbgYZ1mPFKXCim4tNQqOy7Ad6YOTezbDlPCoFT1FsSNMpPFK2y3N NMEIWREDzwUizA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:41 2025 by rpki-client