This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json) Hash identifier: w1y27ZGCR7mqxnHX90lE3auNCYm7Px1qVBR0erhBYMo= Subject key identifier: F4:25:40:99:46:B5:BB:0A:D0:6F:61:A3:2F:AE:53:37:15:2C:E2:53 Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f Certificate serial: 019B2175DFDA8C6B35BF921FEC4944BB1CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 10:02:11 +0000 Manifest this update: Mon 15 Dec 2025 10:02:11 +0000 Manifest next update: Tue 16 Dec 2025 10:02:11 +0000 Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: QbxyDAJ8H548W4H9/0PGxflXH3VrnRb/OV5YlQOc8rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:df:da:8c:6b:35:bf:92:1f:ec:49:44:bb:1c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f Validity Not Before: Dec 15 10:02:11 2025 GMT Not After : Dec 16 10:02:11 2025 GMT Subject: CN=f425409946b5bb0ad06f61a32fae5337152ce253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:d0:bd:26:66:75:c1:2c:68:76:a8:bf:92: 5f:4a:cd:ab:c3:c9:a9:62:24:c0:dc:46:cb:a4:6f: 0a:15:04:5f:5e:cf:28:5a:2d:04:2e:69:ae:08:10: 63:84:94:76:ef:36:fe:81:39:6d:cb:16:94:93:57: 5c:38:04:1b:db:89:52:7b:47:55:6c:25:0b:3f:b1: f1:14:b9:63:03:e7:37:34:06:3b:b4:c5:c1:89:f5: 40:cf:5d:60:44:51:c8:44:5c:a8:23:57:3b:7e:75: eb:d3:d9:62:69:d4:ef:a0:3c:04:4a:69:8a:57:30: 22:d8:17:93:07:1d:25:63:9b:fe:63:b6:de:fe:13: 8a:7b:5e:a5:24:8d:58:87:ec:83:e8:9d:7e:6d:ef: 1d:67:11:ce:55:c7:02:00:7d:d0:2b:08:c7:74:38: 08:cf:ee:cf:ea:40:ec:65:c6:e3:4f:4e:0c:70:46: bb:50:3c:9a:1d:00:ee:5f:2e:b4:b6:01:72:da:12: 59:24:05:96:13:69:ae:b1:8c:a1:ce:ad:a6:15:91: a5:aa:8a:06:33:c7:be:5d:88:35:80:ef:bc:58:7b: e8:8a:9b:ec:a7:b5:0b:24:40:d3:b4:7a:e6:39:29: 87:01:31:f2:29:2b:5c:d2:85:b1:41:e3:24:4c:ae: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:25:40:99:46:B5:BB:0A:D0:6F:61:A3:2F:AE:53:37:15:2C:E2:53 X509v3 Authority Key Identifier: keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:a6:bf:82:bf:82:6b:16:96:94:38:14:0f:94:07:d6:fb: 47:98:c2:e7:b1:42:5d:24:a0:67:57:b3:31:0a:2a:98:82:f4: 04:c3:d1:e8:be:09:3a:67:cf:ed:55:1e:e2:6d:2d:f8:cf:cf: 60:a8:5f:58:60:47:98:0f:ab:e0:34:33:80:9f:3a:53:55:f9: d7:a0:7d:82:d9:5d:1c:4a:d0:f1:9e:54:09:a8:d8:ca:3a:17: 73:38:72:65:e3:70:b7:17:5a:ab:16:ba:99:61:1e:bf:f0:61: 26:51:96:75:0b:f1:11:46:05:8d:ef:53:2d:4b:56:fb:c1:2c: ff:b8:36:7b:8d:cf:58:20:ee:ef:e1:0e:a8:3b:af:a1:48:b7: 9a:7a:13:7c:f2:d5:f7:60:ee:70:db:f2:20:a5:e3:bf:47:7b: 66:73:a4:04:72:e1:f3:5b:90:d8:0a:f0:1b:81:77:4c:32:59: 63:da:e8:62:7e:42:be:04:52:1b:e8:fa:31:d6:df:b9:c5:72: 99:97:3c:6a:0f:08:65:db:67:37:44:a6:e2:6f:58:bf:f1:ef: 57:7c:13:9b:40:48:ce:6b:44:b3:34:29:ea:b5:2c:f5:06:a8: 3b:16:36:2c:92:23:1d:2c:15:08:b4:c9:23:59:b0:c0:e6:82: 22:db:3f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdd/ajGs1v5If7ElEuxy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4 YjQ4MWYwHhcNMjUxMjE1MTAwMjExWhcNMjUxMjE2MTAwMjExWjAzMTEwLwYDVQQD EyhmNDI1NDA5OTQ2YjViYjBhZDA2ZjYxYTMyZmFlNTMzNzE1MmNlMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApajQvSZmdcEsaHaov5JfSs2rw8mp YiTA3EbLpG8KFQRfXs8oWi0ELmmuCBBjhJR27zb+gTltyxaUk1dcOAQb24lSe0dV bCULP7HxFLljA+c3NAY7tMXBifVAz11gRFHIRFyoI1c7fnXr09liadTvoDwESmmK VzAi2BeTBx0lY5v+Y7be/hOKe16lJI1Yh+yD6J1+be8dZxHOVccCAH3QKwjHdDgI z+7P6kDsZcbjT04McEa7UDyaHQDuXy60tgFy2hJZJAWWE2musYyhzq2mFZGlqooG M8e+XYg1gO+8WHvoipvsp7ULJEDTtHrmOSmHATHyKStc0oWxQeMkTK4tHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQlQJlGtbsK0G9hoy+uUzcVLOJTMB8GA1UdIwQY MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaKmv4K/ gmsWlpQ4FA+UB9b7R5jC57FCXSSgZ1ezMQoqmIL0BMPR6L4JOmfP7VUe4m0t+M/P YKhfWGBHmA+r4DQzgJ86U1X516B9gtldHErQ8Z5UCajYyjoXczhyZeNwtxdaqxa6 mWEev/BhJlGWdQvxEUYFje9TLUtW+8Es/7g2e43PWCDu7+EOqDuvoUi3mnoTfPLV 92DucNvyIKXjv0d7ZnOkBHLh81uQ2ArwG4F3TDJZY9roYn5CvgRSG+j6MdbfucVy mZc8ag8IZdtnN0Sm4m9Yv/HvV3wTm0BIzmtEszQp6rUs9QaoOxY2LJIjHSwVCLTJ I1mwwOaCIts/vA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:33:04 2025 by rpki-client