This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json) Hash identifier: M4l46ZaVq+BCGUlfaDkiN92jYJ7BnF8vnf0oH2inHAE= Subject key identifier: D0:79:D7:05:9E:CE:F4:23:34:CE:D1:F8:8F:78:F3:E8:39:54:2D:A3 Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3 Certificate serial: 019B3C10685A98A385FD27F35DAF1183CF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft Manifest number: 054D Signing time: Sat 20 Dec 2025 14:01:06 +0000 Manifest this update: Sat 20 Dec 2025 14:01:06 +0000 Manifest next update: Sun 21 Dec 2025 14:01:06 +0000 Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: TVDRdx1vknplx1d3go2P/LrYUBcgj7dWW9MxnVgE/cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:68:5a:98:a3:85:fd:27:f3:5d:af:11:83:cf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3 Validity Not Before: Dec 20 14:01:06 2025 GMT Not After : Dec 21 14:01:06 2025 GMT Subject: CN=d079d7059ecef42334ced1f88f78f3e839542da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:35:89:43:9d:e7:20:f3:98:fc:09:e2:78: a9:4a:71:3c:fa:39:b1:d6:88:19:43:45:f3:bf:0d: e6:ad:f7:ff:f8:7c:7f:d4:1c:84:84:9b:9a:9b:36: 7a:e0:00:ee:10:8c:93:2c:87:63:fc:1f:9a:7e:d1: d8:77:ea:71:c5:21:8f:c2:4d:fc:98:07:b4:08:28: e2:60:10:3b:2b:9a:e8:63:9e:aa:8e:ff:5f:1b:40: ae:eb:17:d2:f8:cb:95:61:ca:2e:26:c1:2b:27:68: c1:1b:d2:4d:2a:e1:d5:79:c1:81:29:78:34:b5:b6: 38:20:d0:ac:1a:a3:4e:eb:3f:d7:01:bc:13:64:40: 18:b0:21:fc:78:25:e9:fe:f6:5f:74:20:2a:ce:95: 43:25:c0:25:9a:f9:55:71:f2:af:7c:c9:b8:14:aa: 71:04:0b:f9:c7:81:f6:bb:0b:e2:4e:64:62:f0:bf: 56:9c:b1:7f:2c:6d:91:0b:83:d5:20:f1:d0:66:5b: 15:f5:51:c0:4a:99:45:81:a6:9f:13:75:a5:b3:f2: 1c:d6:f5:34:9b:25:14:da:83:56:74:72:61:16:c5: 90:83:06:d3:74:0a:05:ef:08:fc:8b:ac:09:fb:8c: 1c:b5:26:a9:d8:c8:2b:64:79:2f:27:43:0e:5a:78: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:D7:05:9E:CE:F4:23:34:CE:D1:F8:8F:78:F3:E8:39:54:2D:A3 X509v3 Authority Key Identifier: keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:a2:19:d1:39:55:cc:fe:95:d8:b6:34:29:4b:c3:9e:69: aa:1a:2e:6b:d8:23:d1:5e:8b:11:1a:16:9c:0e:89:97:9c:19: d3:9a:10:0c:ac:5b:19:e7:28:26:67:08:b9:60:0f:5f:52:5b: 39:a7:ff:0e:8b:31:f6:d7:3c:80:e9:ef:fe:58:2f:aa:f9:ea: 2d:2c:33:8a:53:ac:4c:f6:76:cc:c5:fe:e6:bc:fb:5a:72:de: b9:87:c5:2e:d9:86:03:b0:98:bc:08:13:95:ff:70:02:a4:ce: a0:ce:db:38:5f:eb:d8:0c:91:cc:1d:af:e4:6e:e5:c0:83:b7: 03:e1:99:5e:a3:67:88:42:9b:6b:08:08:d5:02:74:fe:24:58: 60:d0:17:fd:30:81:24:ba:7b:0a:11:3d:c6:27:e6:be:30:1a: 7a:29:19:9d:0f:f3:21:32:94:13:ea:40:31:99:8d:71:7b:d9: 12:6d:cb:ea:4d:f9:83:91:d3:41:bd:dd:92:b5:7c:14:c7:ff: 0a:4a:90:4d:11:43:d7:51:1e:0b:05:d8:a3:27:a9:ba:71:32: 81:89:52:ff:bb:3e:e2:ba:77:96:16:01:07:ba:42:02:2d:08: 40:5c:b9:6f:8d:83:e7:ce:bb:4b:7c:a8:77:a2:c3:70:72:ab: 0a:9d:4d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGhamKOF/SfzXa8Rg88FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTEwOTFkMzhlZWU1OTc5NjMzYWYyNzcyOGVlOTUyMzFh ZmY2ZDMwHhcNMjUxMjIwMTQwMTA2WhcNMjUxMjIxMTQwMTA2WjAzMTEwLwYDVQQD EyhkMDc5ZDcwNTllY2VmNDIzMzRjZWQxZjg4Zjc4ZjNlODM5NTQyZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHE1iUOd5yDzmPwJ4nipSnE8+jmx 1ogZQ0Xzvw3mrff/+Hx/1ByEhJuamzZ64ADuEIyTLIdj/B+aftHYd+pxxSGPwk38 mAe0CCjiYBA7K5roY56qjv9fG0Cu6xfS+MuVYcouJsErJ2jBG9JNKuHVecGBKXg0 tbY4INCsGqNO6z/XAbwTZEAYsCH8eCXp/vZfdCAqzpVDJcAlmvlVcfKvfMm4FKpx BAv5x4H2uwviTmRi8L9WnLF/LG2RC4PVIPHQZlsV9VHASplFgaafE3Wls/Ic1vU0 myUU2oNWdHJhFsWQgwbTdAoF7wj8i6wJ+4wctSap2MgrZHkvJ0MOWngUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB51wWezvQjNM7R+I948+g5VC2jMB8GA1UdIwQY MBaAFHXhCR047uWXljOvJ3KO6VIxr/bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEt MGQ2NzFkNDcwMDc4LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEtMGQ2NzFkNDcwMDc4 LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbimiGdE5 Vcz+ldi2NClLw55pqhoua9gj0V6LERoWnA6Jl5wZ05oQDKxbGecoJmcIuWAPX1Jb Oaf/Dosx9tc8gOnv/lgvqvnqLSwzilOsTPZ2zMX+5rz7WnLeuYfFLtmGA7CYvAgT lf9wAqTOoM7bOF/r2AyRzB2v5G7lwIO3A+GZXqNniEKbawgI1QJ0/iRYYNAX/TCB JLp7ChE9xifmvjAaeikZnQ/zITKUE+pAMZmNcXvZEm3L6k35g5HTQb3dkrV8FMf/ CkqQTRFD11EeCwXYoyepunEygYlS/7s+4rp3lhYBB7pCAi0IQFy5b42D5867S3yo d6LDcHKrCp1Nwg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:13:43 2025 by rpki-client