This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json) Hash identifier: M0xjgHjiFOtjhoZOp1zw/ObONbmTivMof0S0Bkbsfzg= Subject key identifier: 71:BF:A0:49:A1:E2:5B:6C:AB:7A:D5:E7:32:FD:AA:85:FE:F0:CD:39 Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Certificate serial: 019B4626684E52C3E2BCAD46EFB978DFF9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft Manifest number: 177A Signing time: Mon 22 Dec 2025 13:01:20 +0000 Manifest this update: Mon 22 Dec 2025 13:01:20 +0000 Manifest next update: Tue 23 Dec 2025 13:01:20 +0000 Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: 2sDNlyF6HnFRWFklzaBZsDuPZ4hwBDzavJCo1vHPSZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:68:4e:52:c3:e2:bc:ad:46:ef:b9:78:df:f9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0 Validity Not Before: Dec 22 13:01:20 2025 GMT Not After : Dec 23 13:01:20 2025 GMT Subject: CN=71bfa049a1e25b6cab7ad5e732fdaa85fef0cd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:20:8f:7a:f4:80:e3:19:6f:7e:4e:ca:17: 4d:3d:b9:c1:66:40:07:a9:3b:86:d2:4a:36:16:e5: be:90:21:d0:c4:fc:a4:00:f2:68:a5:87:ae:2c:06: 4f:9d:e4:82:74:39:73:aa:22:da:b3:3d:55:f3:fd: 36:a7:55:18:23:02:1f:92:60:7c:c0:ba:af:d6:ab: 62:d6:0c:cb:48:25:84:c6:fb:85:8e:bb:45:9a:ae: 34:02:b3:e2:82:41:ad:94:1a:f7:0a:86:1b:46:95: 58:4e:6a:28:8f:03:5e:ac:7b:9c:96:88:26:95:df: 97:8b:c5:e7:99:a0:42:52:80:56:5d:6a:e8:36:88: 0c:a2:ed:aa:cc:34:69:cf:c9:50:45:bf:aa:25:0a: 6e:df:0a:22:52:49:d3:5f:26:9a:7a:3a:c1:e4:a7: 36:d5:da:81:b9:25:48:e1:e5:05:9a:3b:f6:96:25: 6c:b0:0d:6c:4b:cf:20:3c:ed:a0:6d:73:32:a3:0d: 65:ca:e9:c3:d2:44:10:eb:45:16:a4:bb:6f:5b:ae: ad:0d:bf:f3:64:4b:05:77:26:e4:a9:41:f1:f3:41: c4:ad:08:54:ac:26:cb:16:12:61:66:0d:21:db:15: 77:c9:d7:53:5b:61:7f:96:6b:1b:79:98:d9:a8:11: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BF:A0:49:A1:E2:5B:6C:AB:7A:D5:E7:32:FD:AA:85:FE:F0:CD:39 X509v3 Authority Key Identifier: keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:37:0a:28:7e:24:3e:46:48:a5:6c:72:af:5f:2a:4c:be:c5: 8c:9b:ca:61:0c:2e:79:1a:b6:4b:ef:3c:db:ae:09:9a:9a:99: 27:56:5c:48:e6:94:cf:a1:4e:50:84:35:06:16:01:28:3e:f8: c5:86:de:5a:30:7b:74:d5:5c:ef:9f:58:55:6f:1f:3e:0c:16: cf:d4:5e:23:77:19:1f:6b:bf:da:f7:2c:bf:a1:6d:dd:40:48: ae:a3:97:32:c5:bd:83:16:d3:6c:ac:6b:4e:8b:46:a9:3b:26: d3:92:e7:9d:8a:46:3c:8d:ce:92:59:15:e4:12:d3:01:15:a0: b1:ef:d1:0e:07:aa:b7:74:1e:5a:3c:5f:9e:24:5e:af:dc:dd: 27:9a:f8:2c:90:80:c5:65:ed:69:34:52:02:02:b9:3d:7d:56: 27:33:13:7a:d5:01:ff:bf:b7:97:86:7a:39:ed:ec:73:d8:21: 13:b5:f6:8e:bb:20:bd:ca:49:ea:52:fd:f2:71:bc:d5:cc:12: c3:86:d6:e2:d7:07:3d:44:04:3c:c1:6b:de:1d:74:d4:11:b6: 56:7e:1a:49:c9:9f:9e:a2:a4:90:95:69:ac:ac:4b:58:32:d3: f3:87:11:54:13:b3:34:9f:d1:13:60:0a:96:73:7d:e9:da:45: 7a:94:7b:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJmhOUsPivK1G77l43/nLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw YzIyYTAwHhcNMjUxMjIyMTMwMTIwWhcNMjUxMjIzMTMwMTIwWjAzMTEwLwYDVQQD Eyg3MWJmYTA0OWExZTI1YjZjYWI3YWQ1ZTczMmZkYWE4NWZlZjBjZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreAgj3r0gOMZb35OyhdNPbnBZkAH qTuG0ko2FuW+kCHQxPykAPJopYeuLAZPneSCdDlzqiLasz1V8/02p1UYIwIfkmB8 wLqv1qti1gzLSCWExvuFjrtFmq40ArPigkGtlBr3CoYbRpVYTmoojwNerHuclogm ld+Xi8XnmaBCUoBWXWroNogMou2qzDRpz8lQRb+qJQpu3woiUknTXyaaejrB5Kc2 1dqBuSVI4eUFmjv2liVssA1sS88gPO2gbXMyow1lyunD0kQQ60UWpLtvW66tDb/z ZEsFdybkqUHx80HErQhUrCbLFhJhZg0h2xV3yddTW2F/lmsbeZjZqBFbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHG/oEmh4ltsq3rV5zL9qoX+8M05MB8GA1UdIwQY MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzcKKH4k PkZIpWxyr18qTL7FjJvKYQwueRq2S+88264JmpqZJ1ZcSOaUz6FOUIQ1BhYBKD74 xYbeWjB7dNVc759YVW8fPgwWz9ReI3cZH2u/2vcsv6Ft3UBIrqOXMsW9gxbTbKxr TotGqTsm05LnnYpGPI3OklkV5BLTARWgse/RDgeqt3QeWjxfniRer9zdJ5r4LJCA xWXtaTRSAgK5PX1WJzMTetUB/7+3l4Z6Oe3sc9ghE7X2jrsgvcpJ6lL98nG81cwS w4bW4tcHPUQEPMFr3h101BG2Vn4aScmfnqKkkJVprKxLWDLT84cRVBOzNJ/RE2AK lnN96dpFepR7Ng== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:34 2025 by rpki-client