This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft File: Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json) Hash identifier: MMvYGpQpmsdWi8C5doxArlnCNBkTlFD4M/r8aq6oFp4= Subject key identifier: 6F:C5:CA:90:F2:B2:E4:C9:58:86:C0:2F:72:13:1E:4A:5C:2C:90:10 Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2 Certificate issuer: /CN=127af6c693573a2270c9237875456c2df0b503c2 Certificate serial: 019B2D0CAD501C91403FD343B2241448406D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft Manifest number: 0BCC Signing time: Wed 17 Dec 2025 16:02:44 +0000 Manifest this update: Wed 17 Dec 2025 16:02:44 +0000 Manifest next update: Thu 18 Dec 2025 16:02:44 +0000 Files and hashes: 1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: 1bW/aiuq6v65+9f853pwyoNW2G7qvHiqkh59fWPnF/Y=) 2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:ad:50:1c:91:40:3f:d3:43:b2:24:14:48:40:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2 Validity Not Before: Dec 17 16:02:44 2025 GMT Not After : Dec 18 16:02:44 2025 GMT Subject: CN=6fc5ca90f2b2e4c95886c02f72131e4a5c2c9010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c1:c9:d6:79:ee:4d:c1:b9:23:99:30:58:5e: 8f:fd:8a:02:61:4f:b1:80:81:07:11:64:39:95:50: 76:2b:2a:ed:d1:cf:0e:85:d3:49:5e:5a:03:9e:28: 2a:2e:2f:a5:44:fc:d1:1a:bb:da:31:25:81:ca:8b: 0f:4a:aa:51:ce:4c:8a:d9:1d:4f:8d:e9:62:78:71: 68:55:7c:a7:33:16:6b:54:a4:58:d6:6b:59:d2:06: 17:ab:d7:a8:58:b4:10:7c:75:99:30:c8:54:f0:b9: 0f:c3:f3:4b:e5:b6:41:18:e1:49:6b:5f:c7:33:83: de:0e:34:2b:3f:8c:5b:17:b6:13:d5:40:d9:1d:2d: 9c:21:19:6e:88:3b:d2:bf:d1:bf:00:53:ed:19:ba: 33:e6:f1:6d:e9:1c:cc:22:25:05:97:54:63:d8:ee: ed:87:48:b4:8a:37:03:c2:8a:e1:6d:ac:dc:26:92: b9:3b:e2:ec:1d:fc:c9:71:4c:af:96:3f:93:09:f2: f7:ef:ac:6f:e1:63:6e:df:bb:98:cf:25:b9:5c:ae: 93:5a:29:92:37:8d:99:a6:83:8c:05:19:a3:0e:5b: 58:88:e3:f3:31:8a:04:8f:6a:d7:57:e7:8a:bd:39: 66:95:88:98:b2:ee:77:f9:f6:2e:0e:fc:f6:dc:7d: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:CA:90:F2:B2:E4:C9:58:86:C0:2F:72:13:1E:4A:5C:2C:90:10 X509v3 Authority Key Identifier: keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:30:25:a0:8c:2a:38:48:d4:54:38:e1:7b:2b:98:06:dc:b4: 32:8e:7a:91:62:68:3d:b7:8e:06:86:10:a2:b5:ac:05:8d:3c: 10:18:d4:74:a2:91:4c:7a:9f:58:56:c5:5b:dd:e6:2a:66:9a: ca:e7:e1:a6:d1:97:c2:5d:7f:53:d7:5e:99:8a:45:b6:27:36: 18:c6:f5:6f:23:35:1f:1a:29:c3:fc:9b:20:83:85:16:7a:9d: 2c:16:4a:f9:6b:6f:15:88:75:e5:15:8d:74:bc:a6:d8:00:3e: fd:0a:ef:62:d2:6f:fe:8b:b6:bf:78:13:f1:63:18:34:d7:37: ae:96:02:2d:6c:14:6e:9d:26:39:7d:fd:26:ec:50:b1:4e:04: 9e:2e:b5:90:2b:e4:8a:1a:c5:22:9e:ff:51:39:0f:6d:3c:01: f3:ae:59:e5:1a:57:35:d4:a9:4a:d3:b4:21:4a:e9:bf:0a:a7: 12:49:48:e5:19:57:43:7b:9b:2f:db:08:bf:be:5d:27:6a:f6: 0b:47:56:85:58:fb:00:2c:53:39:fd:14:ec:85:f5:1f:56:94: a9:69:d2:85:7f:c5:5b:fd:b9:bb:8f:59:02:f6:a3:18:79:89: 97:16:5f:48:86:5a:32:1a:f2:8b:93:e2:d1:5f:a4:32:31:6b: f2:ab:41:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDK1QHJFAP9NDsiQUSEBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyN2FmNmM2OTM1NzNhMjI3MGM5MjM3ODc1NDU2YzJkZjBi NTAzYzIwHhcNMjUxMjE3MTYwMjQ0WhcNMjUxMjE4MTYwMjQ0WjAzMTEwLwYDVQQD Eyg2ZmM1Y2E5MGYyYjJlNGM5NTg4NmMwMmY3MjEzMWU0YTVjMmM5MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sHJ1nnuTcG5I5kwWF6P/YoCYU+x gIEHEWQ5lVB2Kyrt0c8OhdNJXloDnigqLi+lRPzRGrvaMSWByosPSqpRzkyK2R1P jelieHFoVXynMxZrVKRY1mtZ0gYXq9eoWLQQfHWZMMhU8LkPw/NL5bZBGOFJa1/H M4PeDjQrP4xbF7YT1UDZHS2cIRluiDvSv9G/AFPtGboz5vFt6RzMIiUFl1Rj2O7t h0i0ijcDworhbazcJpK5O+LsHfzJcUyvlj+TCfL376xv4WNu37uYzyW5XK6TWimS N42ZpoOMBRmjDltYiOPzMYoEj2rXV+eKvTlmlYiYsu53+fYuDvz23H2OkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/FypDysuTJWIbAL3ITHkpcLJAQMB8GA1UdIwQY MBaAFBJ69saTVzoicMkjeHVFbC3wtQPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZDM2MmMtZjg2My00ZDQwLTgwYmQt ODVmYzVmZDkwZmQ4LzEvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZDM2MmMtZjg2My00ZDQwLTgwYmQtODVmYzVmZDkwZmQ4 LzEvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTAloIwq OEjUVDjheyuYBty0Mo56kWJoPbeOBoYQorWsBY08EBjUdKKRTHqfWFbFW93mKmaa yufhptGXwl1/U9demYpFtic2GMb1byM1Hxopw/ybIIOFFnqdLBZK+WtvFYh15RWN dLym2AA+/QrvYtJv/ou2v3gT8WMYNNc3rpYCLWwUbp0mOX39JuxQsU4Eni61kCvk ihrFIp7/UTkPbTwB865Z5RpXNdSpStO0IUrpvwqnEklI5RlXQ3ubL9sIv75dJ2r2 C0dWhVj7ACxTOf0U7IX1H1aUqWnShX/FW/25u49ZAvajGHmJlxZfSIZaMhryi5Pi 0V+kMjFr8qtBFw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:13:06 2025 by rpki-client