This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft File: eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json) Hash identifier: eVAss9EsKXDanVwp1mwUBFbqRu2CC03euzjsZeTcnus= Subject key identifier: D6:72:4C:7F:68:76:92:D8:EB:DB:AF:63:8F:ED:2A:5F:C8:27:6A:81 Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E Certificate issuer: /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e Certificate serial: 019B41A4262E6D8DA5A7BF597B6E3F431E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 16:00:35 +0000 Manifest this update: Sun 21 Dec 2025 16:00:35 +0000 Manifest next update: Mon 22 Dec 2025 16:00:35 +0000 Files and hashes: 1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: gEV2lKXvHSGToBQJd8y9QHYv6Wi/HoRLiikr2Iephn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:26:2e:6d:8d:a5:a7:bf:59:7b:6e:3f:43:1e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e Validity Not Before: Dec 21 16:00:35 2025 GMT Not After : Dec 22 16:00:35 2025 GMT Subject: CN=d6724c7f687692d8ebdbaf638fed2a5fc8276a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:c5:50:06:df:9c:54:48:54:54:42:89:34: 22:a7:cd:ad:c1:92:7e:98:3f:77:94:44:65:99:af: d4:ad:aa:27:bd:c1:20:da:18:36:80:55:63:ba:a4: 41:25:9f:52:36:0f:97:22:9d:40:fc:97:15:dd:a5: 7a:43:ac:22:b4:31:53:16:9d:2a:0f:55:9b:b4:60: 6d:77:d6:25:af:7d:60:9b:7d:2d:97:08:b8:a8:14: 60:30:ca:5d:86:68:84:0c:ff:f3:f0:9b:c1:4b:0b: 2b:bf:c5:da:be:c8:d5:1d:bd:92:c8:30:65:f8:dc: cd:04:cf:a4:93:92:7f:a3:64:ab:f3:d8:90:f5:c7: 7e:56:f6:da:24:4b:2c:45:bc:f7:86:43:80:04:37: 64:e6:ea:4d:f1:0a:fe:55:dc:36:88:6f:eb:b3:95: 2b:18:b9:b2:16:dd:90:58:82:a1:a5:6b:7f:9a:a2: af:0e:d3:4a:4e:37:a3:a2:bf:8d:15:20:9b:06:ec: 1e:f4:4d:ed:d8:49:1d:09:ca:86:f7:c0:ea:80:e4: bf:ef:41:28:b1:aa:20:0e:95:50:44:b6:df:1d:cd: 8f:b4:36:90:4a:36:34:0d:14:c0:1d:6c:3d:8f:13: af:35:aa:77:24:b7:6a:c6:b7:50:b5:0a:21:ca:0e: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:4C:7F:68:76:92:D8:EB:DB:AF:63:8F:ED:2A:5F:C8:27:6A:81 X509v3 Authority Key Identifier: keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:88:f7:1f:aa:98:bb:e2:b2:ba:00:03:a3:e5:d0:af:3a:52: 44:24:a1:5a:30:fa:ff:ba:ff:59:66:e5:e2:b3:cc:ff:fd:2f: dd:d4:14:cd:47:ae:16:c5:3e:4b:10:a5:29:f0:8f:da:f2:92: a9:92:90:ef:8b:4b:12:df:ea:cf:90:27:06:04:61:9f:a5:f4: a3:ef:7d:3f:b0:04:cb:f5:d8:0e:de:44:d5:c8:95:cc:d9:18: 47:41:07:56:5b:a9:00:9e:e8:70:04:c9:09:a9:0b:90:87:16: ca:38:d0:97:62:a0:f6:c8:ec:57:68:28:8f:ae:5e:e6:88:52: d3:a1:3b:dc:35:e3:b8:06:a2:ef:99:aa:51:c4:0c:15:21:f3: f2:f4:cc:89:3a:a2:7b:cb:d3:e2:56:32:63:11:1a:36:0c:b6: 7b:06:8e:eb:d4:20:89:a0:de:82:52:e7:f0:f3:2a:88:e6:d8: 38:33:3e:a5:f6:bd:04:d9:c9:04:71:53:e5:81:c3:f4:ce:28: c0:7b:98:7b:ae:93:b7:9e:d3:9b:60:15:82:f2:08:e5:22:9f: db:11:ab:e9:f1:bc:25:f5:7d:09:b8:37:f7:6a:e9:cc:74:f0: a2:f9:90:02:26:5f:4e:66:de:98:c2:3b:77:e9:f1:88:09:ce: 8c:b1:09:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpCYubY2lp79Ze24/Qx54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NWQ2NThkZTAzYThkY2QwYjZkZjZlNzY2YzcwN2Y0ZmUz ZDE1MmUwHhcNMjUxMjIxMTYwMDM1WhcNMjUxMjIyMTYwMDM1WjAzMTEwLwYDVQQD EyhkNjcyNGM3ZjY4NzY5MmQ4ZWJkYmFmNjM4ZmVkMmE1ZmM4Mjc2YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcXFUAbfnFRIVFRCiTQip82twZJ+ mD93lERlma/UraonvcEg2hg2gFVjuqRBJZ9SNg+XIp1A/JcV3aV6Q6witDFTFp0q D1WbtGBtd9Ylr31gm30tlwi4qBRgMMpdhmiEDP/z8JvBSwsrv8XavsjVHb2SyDBl +NzNBM+kk5J/o2Sr89iQ9cd+VvbaJEssRbz3hkOABDdk5upN8Qr+Vdw2iG/rs5Ur GLmyFt2QWIKhpWt/mqKvDtNKTjejor+NFSCbBuwe9E3t2EkdCcqG98DqgOS/70Eo saogDpVQRLbfHc2PtDaQSjY0DRTAHWw9jxOvNap3JLdqxrdQtQohyg62pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZyTH9odpLY69uvY4/tKl/IJ2qBMB8GA1UdIwQY MBaAFHldZY3gOo3NC23252bHB/T+PRUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYt N2I3NTY1MGNiMmNlLzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYtN2I3NTY1MGNiMmNl LzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYj3H6qY u+KyugADo+XQrzpSRCShWjD6/7r/WWbl4rPM//0v3dQUzUeuFsU+SxClKfCP2vKS qZKQ74tLEt/qz5AnBgRhn6X0o+99P7AEy/XYDt5E1ciVzNkYR0EHVlupAJ7ocATJ CakLkIcWyjjQl2Kg9sjsV2goj65e5ohS06E73DXjuAai75mqUcQMFSHz8vTMiTqi e8vT4lYyYxEaNgy2ewaO69QgiaDeglLn8PMqiObYODM+pfa9BNnJBHFT5YHD9M4o wHuYe66Tt57Tm2AVgvII5SKf2xGr6fG8JfV9Cbg392rpzHTwovmQAiZfTmbemMI7 d+nxiAnOjLEJjg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:58 2025 by rpki-client