This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json) Hash identifier: 7Tjl9PC9bRkdfxRiwUbnZPROk13g7bac9j9hD7Strpo= Subject key identifier: D3:E3:FA:79:FA:08:02:DF:DF:65:09:E7:26:50:FF:82:32:A7:28:1C Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1 Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1 Certificate serial: 019B4701DDD30FA062D2553702E520E16ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft Manifest number: 06FA Signing time: Mon 22 Dec 2025 17:01:03 +0000 Manifest this update: Mon 22 Dec 2025 17:01:03 +0000 Manifest next update: Tue 23 Dec 2025 17:01:03 +0000 Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: yJRE7NcQhZl8bIpnoFowBDz+yfFGsI+FhIQINTo2BQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:dd:d3:0f:a0:62:d2:55:37:02:e5:20:e1:6e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1 Validity Not Before: Dec 22 17:01:03 2025 GMT Not After : Dec 23 17:01:03 2025 GMT Subject: CN=d3e3fa79fa0802dfdf6509e72650ff8232a7281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:e6:51:c4:53:2e:35:93:c0:54:62:50:88: c1:3d:53:6b:b5:8d:54:c2:c0:60:73:c1:f2:e7:a8: b7:5f:97:67:53:0c:d0:aa:9c:ad:0f:55:72:aa:77: 1a:6e:19:df:b1:d9:1c:6e:b4:75:39:53:fa:83:39: 60:1d:a4:2b:c7:84:53:92:a8:50:07:92:24:ef:a1: 5a:1f:4e:2f:09:13:14:00:8a:12:7a:28:59:47:2f: ff:74:af:63:f3:bd:49:ab:33:ba:c9:06:9b:f8:e6: 43:28:76:9f:f1:71:74:36:1e:f6:79:ff:98:86:6d: 01:ea:f8:d9:99:a0:64:4f:77:6c:bd:d0:a9:de:e5: eb:e5:16:66:dd:b3:fc:09:a0:52:99:cb:91:3f:5a: f6:1c:c8:46:50:39:34:75:67:a2:a7:a6:4f:8d:b8: 4d:9f:1d:89:74:56:ea:39:99:2a:4f:3d:11:bb:4c: d6:6f:67:e0:9d:34:df:a9:c7:e3:69:74:e1:ed:c1: c0:10:6b:e5:62:f4:4a:e9:8c:91:b6:68:f7:f9:bd: f8:bb:c9:1e:62:99:4a:a5:ec:f0:06:45:f2:4b:ff: 11:40:17:c7:8b:c5:cd:29:7d:da:68:42:c8:cd:6b: 88:a8:6c:9f:36:e5:49:89:9b:f8:04:bb:cf:66:6d: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E3:FA:79:FA:08:02:DF:DF:65:09:E7:26:50:FF:82:32:A7:28:1C X509v3 Authority Key Identifier: keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a0:50:91:fc:54:8c:49:e4:64:84:e5:a7:f1:94:30:6a:c2: 02:c9:fe:b0:14:0b:9c:89:7b:66:47:a9:5c:27:b8:23:4d:12: c6:1d:13:ff:14:7d:07:4f:b5:3c:37:bf:b8:34:43:57:55:04: 56:cb:b5:5a:9d:c5:be:98:16:83:b0:75:d4:52:72:ad:fc:ea: fb:8e:9f:97:00:10:7d:e2:ca:da:4c:20:7a:b4:3e:6a:76:d7: d8:0f:dc:38:a5:12:95:9b:e5:01:83:10:35:ac:72:c3:54:af: 3a:0f:6f:6b:de:ff:52:e1:ce:8e:15:07:05:f2:93:f7:ed:0a: bc:09:12:ec:24:f4:56:31:e3:e3:d0:3e:dd:e4:69:1d:ea:05: c2:c6:4d:1a:7f:18:e8:1f:3e:06:ee:67:6b:07:66:1d:f6:c7: 82:c7:45:6d:10:f3:72:3e:80:77:d0:e0:c3:ca:80:46:75:08: 63:1b:03:1c:12:4d:7d:7f:3c:e6:a4:e3:ca:7f:cc:1e:b2:cd: 3a:3d:4f:c9:8a:58:83:6a:1c:7e:f2:4d:38:93:7e:f7:71:d5: 5b:a9:ea:12:26:62:71:c3:47:fb:15:a8:fa:e7:3a:3a:d3:9a: ed:fa:db:a7:c7:d3:a3:86:8b:3f:76:88:d7:82:4e:34:4d:8e: 11:8f:e3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAd3TD6Bi0lU3AuUg4W7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTkwNWMyY2Y4OGFmMzJhYWFjYmRkNjcxY2QzY2MzYWNm ZjkyZDEwHhcNMjUxMjIyMTcwMTAzWhcNMjUxMjIzMTcwMTAzWjAzMTEwLwYDVQQD EyhkM2UzZmE3OWZhMDgwMmRmZGY2NTA5ZTcyNjUwZmY4MjMyYTcyODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXmUcRTLjWTwFRiUIjBPVNrtY1U wsBgc8Hy56i3X5dnUwzQqpytD1VyqncabhnfsdkcbrR1OVP6gzlgHaQrx4RTkqhQ B5Ik76FaH04vCRMUAIoSeihZRy//dK9j871JqzO6yQab+OZDKHaf8XF0Nh72ef+Y hm0B6vjZmaBkT3dsvdCp3uXr5RZm3bP8CaBSmcuRP1r2HMhGUDk0dWeip6ZPjbhN nx2JdFbqOZkqTz0Ru0zWb2fgnTTfqcfjaXTh7cHAEGvlYvRK6YyRtmj3+b34u8ke YplKpezwBkXyS/8RQBfHi8XNKX3aaELIzWuIqGyfNuVJiZv4BLvPZm0MiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPj+nn6CALf32UJ5yZQ/4IypygcMB8GA1UdIwQY MBaAFBBZBcLPiK8yqqy91nHNPMOs/5LRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAt NDUzYWQwZGYwZTEwLzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAtNDUzYWQwZGYwZTEw LzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6BQkfxU jEnkZITlp/GUMGrCAsn+sBQLnIl7ZkepXCe4I00Sxh0T/xR9B0+1PDe/uDRDV1UE Vsu1Wp3FvpgWg7B11FJyrfzq+46flwAQfeLK2kwgerQ+anbX2A/cOKUSlZvlAYMQ Naxyw1SvOg9va97/UuHOjhUHBfKT9+0KvAkS7CT0VjHj49A+3eRpHeoFwsZNGn8Y 6B8+Bu5nawdmHfbHgsdFbRDzcj6Ad9Dgw8qARnUIYxsDHBJNfX885qTjyn/MHrLN Oj1PyYpYg2ocfvJNOJN+93HVW6nqEiZiccNH+xWo+uc6OtOa7frbp8fTo4aLP3aI 14JONE2OEY/jSg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:39 2025 by rpki-client