This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json) Hash identifier: iH/p6Wz+I+gnB+R5nQIMFNXZd+WGafiF9lOAtAmmaVU= Subject key identifier: 3D:5A:06:38:8D:31:7B:84:F0:BB:3D:0E:1F:FE:C5:D1:2E:3B:6B:75 Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156 Certificate serial: 019B41001C1A69A9B1D5B2C844EF65FCA8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft Manifest number: 0CE5 Signing time: Sun 21 Dec 2025 13:01:24 +0000 Manifest this update: Sun 21 Dec 2025 13:01:24 +0000 Manifest next update: Mon 22 Dec 2025 13:01:24 +0000 Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: rsGEkwefz0m5Xaw1Nrhm9k+gfA0AyPeFKigHr5yCkP4=) 2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:1c:1a:69:a9:b1:d5:b2:c8:44:ef:65:fc:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156 Validity Not Before: Dec 21 13:01:24 2025 GMT Not After : Dec 22 13:01:24 2025 GMT Subject: CN=3d5a06388d317b84f0bb3d0e1ffec5d12e3b6b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:c2:d6:22:65:a0:34:f8:ef:c5:64:a8:2b: a5:59:58:98:cf:50:bf:4a:89:5d:19:62:72:89:c6: 7a:18:e3:7b:f6:e7:9d:bd:fb:a7:6b:7c:2b:d2:a1: a2:37:30:e3:4a:82:ec:95:6c:65:97:db:5a:2f:2d: 3d:40:85:3b:e4:d1:3e:e9:cd:1e:91:13:86:47:3b: ff:50:92:03:7c:e5:e6:0f:47:63:ee:08:6b:5e:d7: a1:73:31:54:64:c5:80:c6:f2:36:27:09:c7:e4:10: fe:e2:27:33:60:85:f6:7b:6e:49:c6:89:9e:33:93: 89:cb:2f:ed:7c:4d:cf:c0:04:6d:11:13:34:e4:30: e5:e1:ee:8d:2f:83:49:ca:f8:23:0e:41:05:6f:49: 88:ed:b0:6e:f7:68:df:09:ca:09:9f:a6:4d:36:f9: 1d:15:d9:a7:a3:a2:88:3f:48:35:82:fd:66:a1:48: 1a:59:38:15:91:e0:a4:39:78:df:60:85:e4:8c:bb: 93:1d:6f:74:57:83:9a:cc:b4:aa:d9:5a:23:91:9e: 42:52:19:07:97:5c:d9:f6:cf:b6:09:bf:4f:d9:10: 83:ac:97:f7:e8:98:09:59:d7:23:29:5a:56:76:a2: 72:5c:90:dc:05:94:77:86:55:f8:f1:75:8d:fa:86: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5A:06:38:8D:31:7B:84:F0:BB:3D:0E:1F:FE:C5:D1:2E:3B:6B:75 X509v3 Authority Key Identifier: keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cb:e8:93:01:ef:a0:48:03:2b:eb:e4:5c:a3:94:27:37:94: 65:eb:75:e0:16:cf:7e:89:4e:85:5f:b9:9b:12:02:8c:d4:23: 46:e3:bd:54:e3:78:31:0b:c4:6e:c1:00:af:a8:55:89:3b:c1: 15:67:26:4c:3c:5f:c2:35:3a:9e:dd:80:ae:b8:ec:4b:64:10: d3:ec:22:6d:29:09:3a:fc:6b:77:57:d1:68:3d:c2:0d:9c:0e: d8:c3:72:99:1f:32:8d:f3:e1:30:59:0f:fe:4e:11:6a:27:31: aa:21:6b:15:14:b0:fa:72:cd:0b:cd:28:34:7f:c5:cf:62:68: 83:18:64:42:00:e0:26:6a:fc:18:ea:62:31:84:d5:13:06:eb: a3:27:64:0f:ea:f7:75:e8:7a:69:75:b4:91:25:5d:cb:c0:bd: e1:ed:76:ae:bf:04:22:63:7c:f8:ad:7e:20:f8:ed:63:a7:81: c4:35:67:3d:d2:3c:04:49:b4:fd:b7:e7:f2:b2:72:4a:a8:77: f5:02:5a:9b:b4:0c:c0:f8:7d:60:40:f8:fd:e4:86:b5:a4:85: d3:5d:42:48:86:58:bd:6c:3c:70:ee:ef:f6:94:b1:7c:a1:09: 69:47:ae:63:eb:65:14:cd:5f:37:90:44:eb:93:13:12:3c:9f: 47:59:06:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBABwaaamx1bLIRO9l/KipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3 OTkxNTYwHhcNMjUxMjIxMTMwMTI0WhcNMjUxMjIyMTMwMTI0WjAzMTEwLwYDVQQD EygzZDVhMDYzODhkMzE3Yjg0ZjBiYjNkMGUxZmZlYzVkMTJlM2I2Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCzC1iJloDT478VkqCulWViYz1C/ SoldGWJyicZ6GON79uedvfuna3wr0qGiNzDjSoLslWxll9taLy09QIU75NE+6c0e kROGRzv/UJIDfOXmD0dj7ghrXtehczFUZMWAxvI2JwnH5BD+4iczYIX2e25Jxome M5OJyy/tfE3PwARtERM05DDl4e6NL4NJyvgjDkEFb0mI7bBu92jfCcoJn6ZNNvkd Fdmno6KIP0g1gv1moUgaWTgVkeCkOXjfYIXkjLuTHW90V4OazLSq2VojkZ5CUhkH l1zZ9s+2Cb9P2RCDrJf36JgJWdcjKVpWdqJyXJDcBZR3hlX48XWN+oYm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1aBjiNMXuE8Ls9Dh/+xdEuO2t1MB8GA1UdIwQY MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt ZmNmZjllODQ3Y2EyLzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMvokwHv oEgDK+vkXKOUJzeUZet14BbPfolOhV+5mxICjNQjRuO9VON4MQvEbsEAr6hViTvB FWcmTDxfwjU6nt2ArrjsS2QQ0+wibSkJOvxrd1fRaD3CDZwO2MNymR8yjfPhMFkP /k4RaicxqiFrFRSw+nLNC80oNH/Fz2JogxhkQgDgJmr8GOpiMYTVEwbroydkD+r3 deh6aXW0kSVdy8C94e12rr8EImN8+K1+IPjtY6eBxDVnPdI8BEm0/bfn8rJySqh3 9QJam7QMwPh9YED4/eSGtaSF011CSIZYvWw8cO7v9pSxfKEJaUeuY+tlFM1fN5BE 65MTEjyfR1kGxg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:54 2025 by rpki-client