This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json) Hash identifier: ECxhbw+QQ3AoYuyxH0OPI5oWUYHaJKxFZRvHS0o0yZc= Subject key identifier: C1:93:F1:9C:BC:6D:5E:09:57:83:50:95:86:20:F7:06:3D:C9:D8:52 Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62 Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62 Certificate serial: 019B5ABFB6A70C147FE070FEC8FD560941C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft Manifest number: 1262 Signing time: Fri 26 Dec 2025 13:01:12 +0000 Manifest this update: Fri 26 Dec 2025 13:01:12 +0000 Manifest next update: Sat 27 Dec 2025 13:01:12 +0000 Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: nFOY16JWYcV/OctyCftlpzB295Hzm5ErvhQM8C9rY38=) 2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:b6:a7:0c:14:7f:e0:70:fe:c8:fd:56:09:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62 Validity Not Before: Dec 26 13:01:12 2025 GMT Not After : Dec 27 13:01:12 2025 GMT Subject: CN=c193f19cbc6d5e09578350958620f7063dc9d852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:ba:f3:a6:6c:55:35:a8:cb:50:56:ca:c0: 3b:7c:18:35:1e:ff:e0:4b:90:f0:11:10:d8:ab:5b: 14:49:3a:72:1c:3f:30:37:57:58:4a:27:35:75:48: c0:84:ff:fb:a6:41:fd:b5:e6:ed:84:27:66:b6:14: 45:b4:76:ef:29:12:e0:ea:10:ef:f8:23:a4:b3:f9: 99:67:ed:cf:5c:83:5b:c4:01:7c:a9:07:15:36:3c: 30:ba:ab:5d:74:e1:1e:1d:8f:59:5a:4e:2d:66:b1: e0:4d:2e:38:3d:e1:8d:1f:43:61:e5:b2:7d:a2:84: 0d:9a:15:2e:f9:2e:a0:ad:33:ef:01:df:8e:f4:c2: 7f:63:b2:00:77:d2:aa:79:3e:20:18:c0:44:3d:d2: e4:a2:c5:85:e4:69:ed:50:70:ee:d1:e9:52:aa:bd: ca:37:7d:fb:80:29:68:64:1f:ce:d2:fe:e0:f6:26: eb:de:6d:c0:a8:2e:ee:5f:d2:21:29:e1:63:a7:9c: a1:73:2e:89:7f:40:8e:dc:7a:02:83:51:ea:9d:e5: ed:35:97:ec:a3:d9:c5:e0:bd:e9:28:23:0b:fa:eb: 9b:6a:d2:3b:37:27:88:09:cb:7d:51:ef:04:b1:ce: 84:5d:bf:ac:69:e4:c5:78:c6:ae:4d:1b:ab:3d:db: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:93:F1:9C:BC:6D:5E:09:57:83:50:95:86:20:F7:06:3D:C9:D8:52 X509v3 Authority Key Identifier: keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:9d:20:f9:f3:ae:a9:da:93:2a:d0:09:de:42:08:4c:82: 6b:58:a5:59:22:e2:c8:e7:20:58:42:c1:aa:35:40:c6:44:8c: 17:24:f6:2e:03:43:72:5c:28:8c:11:f8:e0:c4:3b:ee:a6:c4: 30:d4:4c:53:8e:ee:20:02:60:26:09:a3:22:f1:5f:8f:ca:19: 44:ed:a5:32:56:82:56:e4:a6:c9:f5:71:42:05:68:fb:9c:dc: a5:a7:91:fd:9b:20:13:4a:ff:53:35:28:2d:a5:5e:c9:83:ec: 80:13:b2:31:c5:02:e6:86:56:62:e3:5e:44:af:a8:85:0c:75: b5:2e:d4:2b:58:27:99:a8:41:00:e7:b2:e2:22:67:84:93:8f: 02:34:90:b7:4c:4d:4c:2e:36:17:93:22:74:66:77:54:26:bc: 20:56:1f:eb:a2:59:21:18:73:cc:a9:ac:a6:2c:b6:d7:37:1c: a4:94:ee:4d:e9:38:eb:6e:4d:f3:73:cb:f1:9b:bb:80:24:e9: 1e:ec:1d:5c:b0:c4:59:ec:88:0f:4f:3a:93:e4:b0:76:f8:d9: c5:e8:b5:c7:d9:0c:4b:a0:2e:50:0e:0d:a7:7c:c5:82:fa:0a: 9c:25:69:3a:5b:8a:41:64:c2:4a:2b:62:ad:fb:3c:99:d3:39: 14:42:3f:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav7anDBR/4HD+yP1WCUHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl MDNmNjIwHhcNMjUxMjI2MTMwMTEyWhcNMjUxMjI3MTMwMTEyWjAzMTEwLwYDVQQD EyhjMTkzZjE5Y2JjNmQ1ZTA5NTc4MzUwOTU4NjIwZjcwNjNkYzlkODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsm686ZsVTWoy1BWysA7fBg1Hv/g S5DwERDYq1sUSTpyHD8wN1dYSic1dUjAhP/7pkH9tebthCdmthRFtHbvKRLg6hDv +COks/mZZ+3PXINbxAF8qQcVNjwwuqtddOEeHY9ZWk4tZrHgTS44PeGNH0Nh5bJ9 ooQNmhUu+S6grTPvAd+O9MJ/Y7IAd9KqeT4gGMBEPdLkosWF5GntUHDu0elSqr3K N337gCloZB/O0v7g9ibr3m3AqC7uX9IhKeFjp5yhcy6Jf0CO3HoCg1HqneXtNZfs o9nF4L3pKCML+uubatI7NyeICct9Ue8Esc6EXb+saeTFeMauTRurPds48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGT8Zy8bV4JV4NQlYYg9wY9ydhSMB8GA1UdIwQY MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt NzY0MzYzYjEzY2QyLzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkGdIPnz rqnakyrQCd5CCEyCa1ilWSLiyOcgWELBqjVAxkSMFyT2LgNDclwojBH44MQ77qbE MNRMU47uIAJgJgmjIvFfj8oZRO2lMlaCVuSmyfVxQgVo+5zcpaeR/ZsgE0r/UzUo LaVeyYPsgBOyMcUC5oZWYuNeRK+ohQx1tS7UK1gnmahBAOey4iJnhJOPAjSQt0xN TC42F5MidGZ3VCa8IFYf66JZIRhzzKmspiy21zccpJTuTek4625N83PL8Zu7gCTp HuwdXLDEWeyID086k+SwdvjZxei1x9kMS6AuUA4Np3zFgvoKnCVpOluKQWTCSiti rfs8mdM5FEI/WA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:28 2025 by rpki-client