This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json) Hash identifier: H1uvAjMyftnUISsEbM3/MJxzNz4fEWIjSUCpYT5pX/8= Subject key identifier: 7F:4A:9F:D0:C8:07:E6:A4:06:78:9A:65:DE:1D:E1:CD:30:70:9E:F5 Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Certificate serial: 019B47028898D6AC94AA736EE67CB25B79AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft Manifest number: 170D Signing time: Mon 22 Dec 2025 17:01:46 +0000 Manifest this update: Mon 22 Dec 2025 17:01:46 +0000 Manifest next update: Tue 23 Dec 2025 17:01:46 +0000 Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: 8rTnFuDvXpd5loZbvtBC6ZXqLjQ042XupTrYSxWmTdc=) 2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:88:98:d6:ac:94:aa:73:6e:e6:7c:b2:5b:79:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85 Validity Not Before: Dec 22 17:01:46 2025 GMT Not After : Dec 23 17:01:46 2025 GMT Subject: CN=7f4a9fd0c807e6a406789a65de1de1cd30709ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:84:ce:78:91:8b:28:6f:a8:bb:51:ef:7b: 2e:1e:d5:29:8c:e3:4a:fd:87:7b:2e:41:0f:cf:17: e7:8e:6a:12:06:f0:8d:c8:c8:86:64:f2:e6:b5:84: f1:0e:67:35:36:cf:d7:2b:52:82:ca:f6:f1:87:c7: ca:73:e5:0f:0f:e2:72:91:aa:85:21:50:6c:41:43: 07:9e:c6:67:e1:0e:8b:72:b7:c4:eb:0f:85:c8:a2: 62:2d:2c:5f:0f:9c:1a:22:a3:59:28:a0:56:b7:a0: db:c7:11:d3:32:b7:13:c6:d9:21:91:66:90:61:23: f4:97:9d:bb:90:53:e4:b3:54:79:73:36:83:98:21: 52:59:89:a7:8d:ce:1b:d3:0c:12:0a:cd:45:40:54: 59:4c:82:91:4e:4f:d6:26:33:e7:6a:a1:7b:2d:50: 16:16:f4:1c:37:8d:d0:f5:50:0f:ba:4b:ab:94:11: fa:ea:3e:a3:88:ce:a6:fd:d7:c1:b4:b7:cb:c9:14: 4e:74:b8:6f:e6:bb:28:10:e8:c3:bb:64:95:68:30: ef:17:7a:f6:50:86:2a:01:54:27:28:02:62:05:22: 60:53:9c:1a:a8:93:3e:49:c8:42:30:a4:40:69:1e: 56:80:0a:7c:b2:ed:7b:fc:6d:00:c2:9c:c1:6f:62: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4A:9F:D0:C8:07:E6:A4:06:78:9A:65:DE:1D:E1:CD:30:70:9E:F5 X509v3 Authority Key Identifier: keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:04:59:5a:89:49:d5:9a:1b:47:20:4f:ae:ee:97:67:8f:23: 59:a5:08:05:3a:c7:7e:90:7c:30:4d:ae:30:36:1b:69:f4:53: 13:eb:23:af:a6:a1:97:6d:02:9a:f1:4b:49:ad:ae:b8:e6:bf: dc:23:20:40:9f:46:e1:aa:eb:af:25:02:f6:1a:e6:41:d1:a1: 57:5f:bb:77:de:cd:94:57:74:94:46:70:09:3a:a5:d1:5a:40: 32:45:35:d5:45:91:20:43:81:48:30:55:87:cd:2e:d3:83:03: 4e:5f:8c:9e:78:c6:d5:91:a4:77:83:05:90:24:b1:37:e1:78: 09:f3:0c:cc:cf:8f:04:b5:c3:4f:a8:a9:a7:94:0b:e9:ea:a4: fb:67:62:9d:cb:da:50:48:9c:e6:b4:eb:48:1f:34:2d:ec:df: c5:12:ac:de:4b:18:19:41:31:5c:ab:5e:cb:4d:ee:ac:a2:0c: 66:d8:f7:4b:67:06:0c:24:f8:8e:ee:64:2b:d5:56:bd:18:00: 05:34:df:30:74:dc:ed:a8:7a:0f:fc:8c:7e:cf:d8:e7:27:cf: 16:10:db:f7:31:b4:b5:9e:cd:8d:9c:d4:0d:b4:fb:90:9a:f6: 29:91:a1:ba:50:57:9b:23:ec:05:9b:4f:db:17:c5:96:19:96: ae:45:c5:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAoiY1qyUqnNu5nyyW3mvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZmUzOTAwZTE0MWMzYjE2OWEzY2NjYjM1NTdiY2NlZjI4 OTVlODUwHhcNMjUxMjIyMTcwMTQ2WhcNMjUxMjIzMTcwMTQ2WjAzMTEwLwYDVQQD Eyg3ZjRhOWZkMGM4MDdlNmE0MDY3ODlhNjVkZTFkZTFjZDMwNzA5ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S+EzniRiyhvqLtR73suHtUpjONK /Yd7LkEPzxfnjmoSBvCNyMiGZPLmtYTxDmc1Ns/XK1KCyvbxh8fKc+UPD+JykaqF IVBsQUMHnsZn4Q6LcrfE6w+FyKJiLSxfD5waIqNZKKBWt6DbxxHTMrcTxtkhkWaQ YSP0l527kFPks1R5czaDmCFSWYmnjc4b0wwSCs1FQFRZTIKRTk/WJjPnaqF7LVAW FvQcN43Q9VAPukurlBH66j6jiM6m/dfBtLfLyRROdLhv5rsoEOjDu2SVaDDvF3r2 UIYqAVQnKAJiBSJgU5waqJM+SchCMKRAaR5WgAp8su17/G0AwpzBb2KFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9Kn9DIB+akBniaZd4d4c0wcJ71MB8GA1UdIwQY MBaAFBH+OQDhQcOxaaPMyzVXvM7yiV6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEt Y2UxYThkYzk0MDQ4LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEtY2UxYThkYzk0MDQ4 LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQRZWolJ 1ZobRyBPru6XZ48jWaUIBTrHfpB8ME2uMDYbafRTE+sjr6ahl20CmvFLSa2uuOa/ 3CMgQJ9G4arrryUC9hrmQdGhV1+7d97NlFd0lEZwCTql0VpAMkU11UWRIEOBSDBV h80u04MDTl+MnnjG1ZGkd4MFkCSxN+F4CfMMzM+PBLXDT6ipp5QL6eqk+2dincva UEic5rTrSB80LezfxRKs3ksYGUExXKtey03urKIMZtj3S2cGDCT4ju5kK9VWvRgA BTTfMHTc7ah6D/yMfs/Y5yfPFhDb9zG0tZ7NjZzUDbT7kJr2KZGhulBXmyPsBZtP 2xfFlhmWrkXFag== -----END CERTIFICATE-----Generated at Tue Dec 23 00:00:44 2025 by rpki-client