This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json) Hash identifier: EoBES6UNtv2W9rZWdYK6u+y37ZmmsWZuMOion2dRsrE= Subject key identifier: 4D:99:92:62:37:5A:DD:2E:20:25:AF:8D:9A:66:17:FA:82:32:09:6A Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Certificate serial: 019B3AFD6747005D54843FC6B4AF33E7678E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft Manifest number: 1103 Signing time: Sat 20 Dec 2025 09:00:43 +0000 Manifest this update: Sat 20 Dec 2025 09:00:43 +0000 Manifest next update: Sun 21 Dec 2025 09:00:43 +0000 Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: MM99Sj9mrtRXxpvAyqW2s8hAJN+agqWo2Ww4ymemR78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:67:47:00:5d:54:84:3f:c6:b4:af:33:e7:67:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Validity Not Before: Dec 20 09:00:43 2025 GMT Not After : Dec 21 09:00:43 2025 GMT Subject: CN=4d999262375add2e2025af8d9a6617fa8232096a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:d6:ca:25:83:6d:78:92:96:03:ce:3f:ea: 4b:54:df:96:f4:1d:84:ec:1d:68:d8:ae:7d:37:e5: bc:9e:95:25:51:c4:fb:29:41:f4:01:a0:cc:ab:56: 05:70:b2:5a:a3:09:a8:f5:e7:86:4d:01:2c:3a:b8: 39:3d:a1:89:39:78:f0:87:a3:7e:79:c4:1c:c8:df: b1:4b:4a:7d:ef:0f:02:bd:f7:b2:da:39:88:b9:f1: 38:d3:83:3b:6a:49:43:3c:ce:2a:45:68:a7:62:ce: fb:30:c0:2f:b0:3c:75:5f:40:21:b2:6a:52:4b:a9: 0c:3c:7a:da:d8:70:57:1f:76:0c:ae:52:b4:ca:b5: 82:39:56:90:32:32:d2:f7:01:a7:0d:67:81:eb:a2: 5f:29:5b:01:30:b6:73:ac:1d:6c:a1:ff:86:7e:8e: fa:44:ff:6a:91:4a:02:d0:35:bd:14:ff:1a:ca:92: 72:c2:15:05:44:fc:12:ee:c0:08:3d:f7:47:fb:f3: 5a:38:2a:98:1e:fa:28:d2:73:d5:69:58:7f:8d:a1: c1:68:e5:0c:3d:6d:07:9e:96:4d:4a:95:ff:dd:54: 82:84:91:19:b3:b3:8f:e6:77:5b:8b:82:6b:c3:11: 6e:3c:d6:0a:50:98:d2:4c:03:0a:d0:f9:39:c4:8c: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:99:92:62:37:5A:DD:2E:20:25:AF:8D:9A:66:17:FA:82:32:09:6A X509v3 Authority Key Identifier: keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ad:da:0b:ca:44:62:d7:2f:bf:fd:a3:09:5f:fd:35:95:da: 00:ad:17:d6:ba:b1:d8:8a:b4:90:55:25:f8:55:3a:49:3c:33: c0:d1:7a:9a:35:4e:e1:33:cd:77:2c:f6:7e:af:3f:ef:87:c2: 20:7b:d0:83:49:53:99:ac:78:fa:9a:43:55:d8:19:1c:2b:59: c5:0d:1d:6e:72:8d:d9:e6:77:40:79:0f:8b:1e:e4:9e:45:3c: 5c:2a:eb:29:e9:fb:a6:c4:3d:96:73:f9:2b:62:e7:57:8e:a5: 88:b1:1c:f3:60:50:e5:d8:38:80:c9:37:f7:fd:30:45:fa:6b: 2c:70:15:7d:e2:7e:86:6a:aa:a6:2d:3b:26:42:6a:0a:f5:27: 3c:22:99:da:7c:93:5d:05:3a:e0:99:73:94:d9:64:89:5d:50: a1:07:43:0c:1a:56:c8:87:df:6f:34:fb:2b:54:67:b2:86:7b: ff:19:5e:26:d9:d2:c1:2c:76:a6:1f:fa:b7:db:1b:9a:16:fb: 47:69:55:88:f5:8e:39:b7:76:4b:2b:94:d5:8a:75:a0:f1:d1: a5:bb:43:b0:10:06:1f:46:6f:3f:3d:2d:d3:b6:93:a4:dc:a0: 1d:95:82:3b:d8:be:49:b3:f8:b0:31:ab:ec:78:74:dc:cb:17: dc:7b:c4:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/WdHAF1UhD/GtK8z52eOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj MWVhNmIwHhcNMjUxMjIwMDkwMDQzWhcNMjUxMjIxMDkwMDQzWjAzMTEwLwYDVQQD Eyg0ZDk5OTI2MjM3NWFkZDJlMjAyNWFmOGQ5YTY2MTdmYTgyMzIwOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPWyiWDbXiSlgPOP+pLVN+W9B2E 7B1o2K59N+W8npUlUcT7KUH0AaDMq1YFcLJaowmo9eeGTQEsOrg5PaGJOXjwh6N+ ecQcyN+xS0p97w8Cvfey2jmIufE404M7aklDPM4qRWinYs77MMAvsDx1X0AhsmpS S6kMPHra2HBXH3YMrlK0yrWCOVaQMjLS9wGnDWeB66JfKVsBMLZzrB1sof+Gfo76 RP9qkUoC0DW9FP8aypJywhUFRPwS7sAIPfdH+/NaOCqYHvoo0nPVaVh/jaHBaOUM PW0HnpZNSpX/3VSChJEZs7OP5ndbi4JrwxFuPNYKUJjSTAMK0Pk5xIwMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2ZkmI3Wt0uICWvjZpmF/qCMglqMB8GA1UdIwQY MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2 LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE63aC8pE Ytcvv/2jCV/9NZXaAK0X1rqx2Iq0kFUl+FU6STwzwNF6mjVO4TPNdyz2fq8/74fC IHvQg0lTmax4+ppDVdgZHCtZxQ0dbnKN2eZ3QHkPix7knkU8XCrrKen7psQ9lnP5 K2LnV46liLEc82BQ5dg4gMk39/0wRfprLHAVfeJ+hmqqpi07JkJqCvUnPCKZ2nyT XQU64JlzlNlkiV1QoQdDDBpWyIffbzT7K1RnsoZ7/xleJtnSwSx2ph/6t9sbmhb7 R2lViPWOObd2SyuU1Yp1oPHRpbtDsBAGH0ZvPz0t07aTpNygHZWCO9i+SbP4sDGr 7Hh03MsX3HvE2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:08:50 2025 by rpki-client