This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft File: RE6tbxE5qlv2Y80A_myq4UpiFRI.mft (raw, json) Hash identifier: 0XrNAlNmfEPbAPMDUFH6FZ/NoSnDXgxWWXntkfZtcp4= Subject key identifier: 4E:C1:A2:BE:73:50:FA:2D:27:22:4F:8C:98:D6:E8:FD:22:B0:44:37 Authority key identifier: 44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12 Certificate issuer: /CN=444ead6f1139aa5bf663cd00fe6caae14a621512 Certificate serial: 019B59E3EAB403283EEE443287F972633EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft Manifest number: 0107 Signing time: Fri 26 Dec 2025 09:01:07 +0000 Manifest this update: Fri 26 Dec 2025 09:01:07 +0000 Manifest next update: Sat 27 Dec 2025 09:01:07 +0000 Files and hashes: 1: RE6tbxE5qlv2Y80A_myq4UpiFRI.crl (hash: JogcI2tDhHFEwumhlS0b88dEGatW4PPoHj0VDCdrRkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ea:b4:03:28:3e:ee:44:32:87:f9:72:63:3e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444ead6f1139aa5bf663cd00fe6caae14a621512 Validity Not Before: Dec 26 09:01:07 2025 GMT Not After : Dec 27 09:01:07 2025 GMT Subject: CN=4ec1a2be7350fa2d27224f8c98d6e8fd22b04437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:55:06:b2:e4:92:cd:16:ec:82:74:75:27: d8:72:a8:98:d9:42:69:c2:e7:6c:dd:cf:6b:b9:6f: 7b:c9:bd:f6:56:12:3f:b0:c3:97:fd:25:01:fa:f2: 0f:dd:d3:c7:53:93:94:96:5d:66:15:13:f7:ea:e2: 69:08:05:7c:1c:54:85:dd:ad:8e:c1:04:87:5f:2d: 5b:43:6f:d4:19:c1:7c:6a:a6:94:d5:42:d9:d8:41: 84:da:3b:a0:5a:55:8b:8c:01:87:bf:81:78:55:e0: 5e:8b:eb:0f:41:51:cf:17:1b:ca:58:76:f4:9a:6a: 23:04:ce:97:66:f1:75:24:d1:b6:53:95:5c:04:9e: cf:7b:d0:b9:45:74:7f:c7:9e:51:1f:7a:80:f0:59: 84:55:89:68:ee:ad:51:5a:e0:40:d8:59:df:3e:46: 6b:5e:b8:5b:16:82:7a:b4:cd:10:7e:22:3d:bc:c8: a7:0b:f3:c3:b6:3c:af:89:4f:b8:5d:49:d1:92:ae: 1f:6a:79:8c:5d:57:78:53:81:d5:5a:1e:19:84:4b: 3f:ca:15:f6:0f:c2:4e:21:5a:a8:76:73:39:ab:7e: 88:77:ed:61:d7:4d:80:10:f4:3f:cc:f3:d4:0d:33: e1:74:8b:2a:22:96:70:41:d0:62:b2:26:15:29:80: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C1:A2:BE:73:50:FA:2D:27:22:4F:8C:98:D6:E8:FD:22:B0:44:37 X509v3 Authority Key Identifier: keyid:44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:31:ef:3d:70:6c:12:25:7a:88:c3:35:e7:98:38:03:13:e2: 2a:83:59:ea:ca:ab:97:2c:38:1f:75:c8:83:9d:76:7d:d0:31: 08:72:b6:be:7e:6a:cf:a0:97:6d:e3:5a:1f:49:f5:15:82:d6: 7e:49:7d:47:90:0b:52:43:01:9e:a9:e7:59:54:9b:7b:27:f2: 06:74:a8:a9:9d:50:5a:37:7c:a9:3e:3e:0a:16:f1:ef:9e:93: f3:b6:59:19:80:02:db:a8:d1:38:cc:b6:57:04:82:f8:71:b7: 8b:fe:04:93:da:08:fb:a4:35:6a:04:44:e1:7a:82:da:02:9e: b4:41:82:3c:0c:05:ab:7a:c4:90:32:93:14:ba:b1:71:39:85: 74:81:2d:83:99:ad:ed:b6:bc:ca:85:7f:1d:dd:db:f2:9a:fa: 7e:62:07:f8:38:a6:e9:46:c0:ef:48:a5:3e:56:d7:79:eb:6e: 10:f3:fb:2d:50:11:c2:5b:07:7d:21:c9:ac:fc:5b:fe:b3:52: 2d:d1:1a:f1:e1:0a:3c:07:94:e0:30:a5:25:9e:cf:fe:8e:09: a5:18:3a:cd:f0:32:32:c6:75:ab:ca:30:9d:4f:71:81:c3:42: cd:2e:00:ab:d2:34:3f:cb:fd:a2:1e:65:9d:09:f5:a9:33:94: 3b:85:5e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+q0Ayg+7kQyh/lyYz7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NGVhZDZmMTEzOWFhNWJmNjYzY2QwMGZlNmNhYWUxNGE2 MjE1MTIwHhcNMjUxMjI2MDkwMTA3WhcNMjUxMjI3MDkwMTA3WjAzMTEwLwYDVQQD Eyg0ZWMxYTJiZTczNTBmYTJkMjcyMjRmOGM5OGQ2ZThmZDIyYjA0NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQZVBrLkks0W7IJ0dSfYcqiY2UJp wuds3c9ruW97yb32VhI/sMOX/SUB+vIP3dPHU5OUll1mFRP36uJpCAV8HFSF3a2O wQSHXy1bQ2/UGcF8aqaU1ULZ2EGE2jugWlWLjAGHv4F4VeBei+sPQVHPFxvKWHb0 mmojBM6XZvF1JNG2U5VcBJ7Pe9C5RXR/x55RH3qA8FmEVYlo7q1RWuBA2FnfPkZr XrhbFoJ6tM0QfiI9vMinC/PDtjyviU+4XUnRkq4fanmMXVd4U4HVWh4ZhEs/yhX2 D8JOIVqodnM5q36Id+1h102AEPQ/zPPUDTPhdIsqIpZwQdBisiYVKYC6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7Bor5zUPotJyJPjJjW6P0isEQ3MB8GA1UdIwQY MBaAFEROrW8ROapb9mPNAP5squFKYhUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MmU2NDAtYTRlOC00MDliLTkyODUt NGNmNjY1NjNjYTBiLzEvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MmU2NDAtYTRlOC00MDliLTkyODUtNGNmNjY1NjNjYTBi LzEvUkU2dGJ4RTVxbHYyWTgwQV9teXE0VXBpRlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjHvPXBs EiV6iMM155g4AxPiKoNZ6sqrlyw4H3XIg512fdAxCHK2vn5qz6CXbeNaH0n1FYLW fkl9R5ALUkMBnqnnWVSbeyfyBnSoqZ1QWjd8qT4+Chbx756T87ZZGYAC26jROMy2 VwSC+HG3i/4Ek9oI+6Q1agRE4XqC2gKetEGCPAwFq3rEkDKTFLqxcTmFdIEtg5mt 7ba8yoV/Hd3b8pr6fmIH+Dim6UbA70ilPlbXeetuEPP7LVARwlsHfSHJrPxb/rNS LdEa8eEKPAeU4DClJZ7P/o4JpRg6zfAyMsZ1q8ownU9xgcNCzS4Aq9I0P8v9oh5l nQn1qTOUO4VeLQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client