This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft File: eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json) Hash identifier: J7jfMSkEtldqpJfBV8QDn4g/zPGtcWGVS6cbyNQ/Irs= Subject key identifier: 5C:A4:BB:F2:DA:13:D8:A9:CB:37:B6:78:B4:D7:E2:2E:B6:2D:C5:02 Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3 Certificate issuer: /CN=797a905b4e7de5856297f6e03a65625de22c42f3 Certificate serial: 019B5976D78DC9DADB332D7DB2D0B3889386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft Manifest number: 0F62 Signing time: Fri 26 Dec 2025 07:01:59 +0000 Manifest this update: Fri 26 Dec 2025 07:01:59 +0000 Manifest next update: Sat 27 Dec 2025 07:01:59 +0000 Files and hashes: 1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: Ft1PCIZoDce3NYa77xHEkIaLUG/AS6W51Ee7j+/vIvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d7:8d:c9:da:db:33:2d:7d:b2:d0:b3:88:93:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3 Validity Not Before: Dec 26 07:01:59 2025 GMT Not After : Dec 27 07:01:59 2025 GMT Subject: CN=5ca4bbf2da13d8a9cb37b678b4d7e22eb62dc502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:34:7d:9e:4e:7c:a2:74:70:44:5e:8e:2f: bc:7e:e7:86:b8:4a:0b:da:a7:cc:bf:b3:5a:88:6d: 75:7d:bf:d8:a1:32:77:1d:2c:ee:18:63:61:5d:09: 08:6a:66:c1:4e:85:48:44:66:28:cd:46:46:2f:30: 3d:c9:9d:c4:fd:a7:6d:1e:68:d5:36:c2:83:4d:d9: e4:d2:65:15:93:6c:90:ac:4e:d5:2e:19:ad:19:3b: e9:f4:82:50:8a:ae:71:3a:fd:20:44:b1:9d:a8:67: b5:09:07:e5:96:03:2e:73:34:4f:da:f9:08:66:32: 35:ed:c2:de:1f:7b:a9:f0:f6:06:15:b2:71:7a:0d: fe:bc:5b:01:91:a5:b6:6e:15:87:ae:34:16:b2:04: 5f:23:15:b7:3f:c8:e2:76:fd:dd:82:bb:01:9f:12: da:05:ad:4a:6b:c3:d9:73:b9:37:96:58:b1:5c:e2: e4:8e:8a:e5:e5:bf:0a:5e:bd:7c:26:61:7c:92:ad: c3:13:bc:71:1a:26:23:6c:d5:fa:23:7d:de:c3:fd: da:e4:24:fd:cd:e0:59:eb:3a:49:38:1f:8b:f3:8b: 74:1e:96:a9:bd:f6:3d:60:15:20:e5:c3:e6:1b:66: 29:b9:cf:5a:11:4a:a5:c1:fd:3d:cf:59:74:82:1e: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A4:BB:F2:DA:13:D8:A9:CB:37:B6:78:B4:D7:E2:2E:B6:2D:C5:02 X509v3 Authority Key Identifier: keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:7a:8e:4d:57:99:6c:3b:b0:ec:50:28:19:e2:90:c0:37: 39:3b:51:05:da:1f:40:a1:80:6d:d5:e4:72:2a:a7:8e:68:8f: 34:b4:35:55:67:a4:5a:05:8d:c7:a8:a0:2b:b7:ff:0c:d7:9f: f8:68:1b:f4:a6:27:13:44:d3:5c:66:6c:2b:13:3c:7c:a6:1b: f4:6d:59:04:16:df:bf:ce:81:9b:e4:4c:e6:46:88:2c:38:72: 39:f7:03:a2:04:68:3b:c9:79:7d:9b:df:5d:f1:31:77:72:2c: a1:bb:8d:71:a8:96:98:b4:53:fe:b5:9e:94:64:0c:e4:51:82: c1:9b:18:38:3e:7e:e3:ee:00:50:ef:77:a0:c1:74:88:82:b4: ac:0f:ae:e5:b9:58:b7:65:98:a2:74:00:64:91:47:86:f1:97: 75:91:f1:19:fe:b5:63:cf:96:58:29:a3:f5:58:b0:07:8c:07: e0:4b:dd:ee:57:d1:34:3d:a5:b9:cb:ed:7f:0a:c7:6c:14:91: d9:f5:0f:09:e5:11:3b:e1:d1:e5:cb:9a:6b:26:84:89:72:5e: 68:8f:bc:16:e3:02:a4:54:2c:da:12:98:ec:6b:ee:78:12:62: f1:a3:5a:d6:dd:1e:01:e6:f1:7e:da:41:11:6e:0e:f9:f0:8a: 93:c2:72:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdteNydrbMy19stCziJOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E5MDViNGU3ZGU1ODU2Mjk3ZjZlMDNhNjU2MjVkZTIy YzQyZjMwHhcNMjUxMjI2MDcwMTU5WhcNMjUxMjI3MDcwMTU5WjAzMTEwLwYDVQQD Eyg1Y2E0YmJmMmRhMTNkOGE5Y2IzN2I2NzhiNGQ3ZTIyZWI2MmRjNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS40fZ5OfKJ0cEReji+8fueGuEoL 2qfMv7NaiG11fb/YoTJ3HSzuGGNhXQkIambBToVIRGYozUZGLzA9yZ3E/adtHmjV NsKDTdnk0mUVk2yQrE7VLhmtGTvp9IJQiq5xOv0gRLGdqGe1CQfllgMuczRP2vkI ZjI17cLeH3up8PYGFbJxeg3+vFsBkaW2bhWHrjQWsgRfIxW3P8jidv3dgrsBnxLa Ba1Ka8PZc7k3llixXOLkjorl5b8KXr18JmF8kq3DE7xxGiYjbNX6I33ew/3a5CT9 zeBZ6zpJOB+L84t0HpapvfY9YBUg5cPmG2Ypuc9aEUqlwf09z1l0gh7M+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyku/LaE9ipyze2eLTX4i62LcUCMB8GA1UdIwQY MBaAFHl6kFtOfeWFYpf24DplYl3iLELzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNjliZTQtNDFjMC00MzEyLTk0ZGQt ZjY5N2MyZWE2NzY3LzEvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wNjliZTQtNDFjMC00MzEyLTk0ZGQtZjY5N2MyZWE2NzY3 LzEvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgN6jk1X mWw7sOxQKBnikMA3OTtRBdofQKGAbdXkciqnjmiPNLQ1VWekWgWNx6igK7f/DNef +Ggb9KYnE0TTXGZsKxM8fKYb9G1ZBBbfv86Bm+RM5kaILDhyOfcDogRoO8l5fZvf XfExd3IsobuNcaiWmLRT/rWelGQM5FGCwZsYOD5+4+4AUO93oMF0iIK0rA+u5blY t2WYonQAZJFHhvGXdZHxGf61Y8+WWCmj9ViwB4wH4Evd7lfRND2lucvtfwrHbBSR 2fUPCeURO+HR5cuaayaEiXJeaI+8FuMCpFQs2hKY7GvueBJi8aNa1t0eAebxftpB EW4O+fCKk8Jyfg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:27 2025 by rpki-client