This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft File: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json) Hash identifier: qrYHGvSp2b784k+6AS0AEpLPBmf6ZnnyZj8ViSwUcOs= Subject key identifier: 21:BC:87:C2:E2:78:55:54:CA:1F:FC:17:A6:1A:E8:2F:81:60:2A:24 Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 Certificate issuer: /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Certificate serial: 019B1E3D1528A4C2D94B83BBE9EFDE73ECC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 19:01:18 +0000 Manifest this update: Sun 14 Dec 2025 19:01:18 +0000 Manifest next update: Mon 15 Dec 2025 19:01:18 +0000 Files and hashes: 1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: L7jGaKdGVNOmkDvla5YoY+xJrF802KGpUaODu7vBPyA=) 2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:15:28:a4:c2:d9:4b:83:bb:e9:ef:de:73:ec:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Validity Not Before: Dec 14 19:01:18 2025 GMT Not After : Dec 15 19:01:18 2025 GMT Subject: CN=21bc87c2e2785554ca1ffc17a61ae82f81602a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:b9:5c:fa:7f:a8:8d:0a:6d:51:ba:ac:bf: 9d:d0:9d:4f:5f:2a:a0:32:8b:f3:5d:ec:6f:62:3a: 2f:f0:50:db:d6:f4:74:bf:8e:a3:79:fb:01:97:cd: 30:a4:8c:dc:6e:9d:6f:0b:0a:82:4e:31:41:61:fc: 57:de:22:ae:5f:0d:6a:02:be:82:72:ba:eb:7a:64: 2e:a8:ef:cd:48:18:5c:3c:37:45:6c:2c:f0:27:0b: 25:d0:e8:7e:f5:4b:6b:e3:21:8b:73:81:92:f7:75: db:09:57:b4:16:c0:04:db:0b:8a:84:d6:16:4e:49: f6:06:b3:d3:0b:ee:0e:87:31:06:57:a4:b3:e7:64: 93:1e:3a:af:7d:fa:4b:96:08:f7:6b:e5:80:b0:97: 1a:c3:29:71:8a:88:83:93:73:1b:e4:42:9f:c9:ac: 8c:f5:24:7c:8d:fa:b3:41:05:48:f9:87:cd:45:90: 24:b1:ae:47:00:ae:0e:c7:89:a2:fe:d3:fc:6a:d3: 14:0b:63:e0:4c:f8:20:1b:ae:df:5e:b9:d2:96:cd: 68:1f:95:d0:ea:29:f1:47:64:32:62:67:e1:54:23: 0e:e6:1d:24:2b:b4:db:65:9f:d8:72:72:aa:26:8b: 13:79:f6:ff:c2:ae:44:24:ee:21:17:8f:f7:b3:43: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BC:87:C2:E2:78:55:54:CA:1F:FC:17:A6:1A:E8:2F:81:60:2A:24 X509v3 Authority Key Identifier: keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7f:15:e6:73:3e:9d:24:53:6e:75:20:52:71:c3:5e:5e:2d: d4:8b:b9:fa:c1:09:2d:b1:9f:99:cc:88:ce:16:9a:ae:ba:59: e1:99:9f:8f:82:81:6e:6f:b0:32:2d:2b:e4:a1:32:00:e9:78: b3:f5:da:e9:39:7f:03:2a:b4:d1:32:3a:99:c0:01:c6:21:e5: f5:b9:98:27:00:c5:f3:f0:f2:68:e0:70:f1:a3:1e:2e:53:d5: 2c:9a:ed:0b:40:e9:45:6f:4f:78:ec:30:83:85:b3:35:a6:2b: 7e:30:c9:22:6b:ec:a9:98:34:27:36:0c:ed:e0:30:a3:c0:79: 3d:c2:89:aa:00:5c:df:6e:74:ec:f5:90:d7:f3:fd:33:91:18: c2:fb:db:69:bf:9d:ca:b3:a2:4f:68:88:81:9b:b0:06:8b:a9: 1b:58:45:b0:54:4a:cf:66:5c:fd:a1:99:82:14:f1:e3:f5:c5: ad:b6:bf:8b:c5:04:5c:3d:63:61:7e:c8:00:71:a4:b4:ca:e2: 5d:9e:dc:fa:68:a2:6f:9b:fe:29:24:e5:f0:79:90:31:31:7c: a6:9a:05:9f:b7:f8:7c:c5:5a:f3:7b:c8:3b:63:c2:a1:20:fa: 23:f4:d6:6d:38:48:40:d3:7d:b7:6b:15:02:64:ce:86:dd:ce: 04:da:d4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePRUopMLZS4O76e/ec+zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTViYThkNDlhMmRkMWU5MWMzYWFjY2JjZjE0NGYwNDU5 M2YxYjMwHhcNMjUxMjE0MTkwMTE4WhcNMjUxMjE1MTkwMTE4WjAzMTEwLwYDVQQD EygyMWJjODdjMmUyNzg1NTU0Y2ExZmZjMTdhNjFhZTgyZjgxNjAyYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgi5XPp/qI0KbVG6rL+d0J1PXyqg MovzXexvYjov8FDb1vR0v46jefsBl80wpIzcbp1vCwqCTjFBYfxX3iKuXw1qAr6C crrremQuqO/NSBhcPDdFbCzwJwsl0Oh+9Utr4yGLc4GS93XbCVe0FsAE2wuKhNYW Tkn2BrPTC+4OhzEGV6Sz52STHjqvffpLlgj3a+WAsJcawylxioiDk3Mb5EKfyayM 9SR8jfqzQQVI+YfNRZAksa5HAK4Ox4mi/tP8atMUC2PgTPggG67fXrnSls1oH5XQ 6inxR2QyYmfhVCMO5h0kK7TbZZ/YcnKqJosTefb/wq5EJO4hF4/3s0NPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG8h8LieFVUyh/8F6Ya6C+BYCokMB8GA1UdIwQY MBaAFBBVuo1Jot0ekcOqzLzxRPBFk/GzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgt NGVkYWY3N2EwZTVkLzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgtNGVkYWY3N2EwZTVk LzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH8V5nM+ nSRTbnUgUnHDXl4t1Iu5+sEJLbGfmcyIzhaarrpZ4Zmfj4KBbm+wMi0r5KEyAOl4 s/Xa6Tl/Ayq00TI6mcABxiHl9bmYJwDF8/DyaOBw8aMeLlPVLJrtC0DpRW9PeOww g4WzNaYrfjDJImvsqZg0JzYM7eAwo8B5PcKJqgBc32507PWQ1/P9M5EYwvvbab+d yrOiT2iIgZuwBoupG1hFsFRKz2Zc/aGZghTx4/XFrba/i8UEXD1jYX7IAHGktMri XZ7c+miib5v+KSTl8HmQMTF8ppoFn7f4fMVa83vIO2PCoSD6I/TWbThIQNN9t2sV AmTOht3OBNrU5w== -----END CERTIFICATE-----Generated at Mon Dec 15 01:17:47 2025 by rpki-client