This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json) Hash identifier: Ld3qY9j0qfSA31UCI30TEqkVcNeXhAOqpyWk8SmArBc= Subject key identifier: D2:A2:77:26:89:34:BA:15:F6:48:7F:1E:C8:EF:7E:E6:DE:11:7D:DB Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d Certificate serial: 019B2C2F48A6F26E5D50D0A01BFCA3EA91B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft Manifest number: 030B Signing time: Wed 17 Dec 2025 12:00:54 +0000 Manifest this update: Wed 17 Dec 2025 12:00:54 +0000 Manifest next update: Thu 18 Dec 2025 12:00:54 +0000 Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: g/Tv73R1UK0QwQZto7j3Cm+t+JHP0OrooPpaqpQ4VGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:48:a6:f2:6e:5d:50:d0:a0:1b:fc:a3:ea:91:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d Validity Not Before: Dec 17 12:00:54 2025 GMT Not After : Dec 18 12:00:54 2025 GMT Subject: CN=d2a277268934ba15f6487f1ec8ef7ee6de117ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:dc:db:01:be:39:c3:a6:57:d8:87:10:19: 3b:a8:75:49:19:57:33:5a:f9:e1:8d:ff:af:ba:e4: 59:1d:c1:d4:0f:39:51:22:3e:52:00:c0:c9:98:ce: 22:43:2f:83:f3:93:53:ab:3c:c6:d2:25:03:48:19: 35:0e:11:09:d7:ef:7f:41:9c:60:31:40:1a:16:49: 7d:fe:bf:e4:43:33:0e:61:34:eb:64:20:f7:3b:c9: 05:ac:35:63:4b:f3:fb:f0:0d:b4:81:27:49:76:c2: bb:f2:96:82:2c:75:21:f2:e8:6d:9e:a2:88:a4:01: d0:24:54:b5:23:1f:7a:5a:d7:9a:30:6d:57:86:6e: 98:fc:ec:8c:86:6a:df:24:60:3c:85:bb:ab:af:74: 30:aa:c6:52:c4:e4:17:cc:80:2c:05:68:04:92:6b: 25:bc:9f:c8:da:87:f6:f6:d5:f6:18:37:11:4b:96: 27:35:20:f8:b3:69:b2:7f:44:1f:69:69:60:70:91: de:ce:84:a9:e6:dd:f4:c9:83:51:91:27:0e:6a:9e: d7:40:de:ca:61:b1:62:56:77:a5:bb:5a:ac:bc:05: 01:0e:9c:a3:f3:70:45:65:d4:5e:26:aa:c8:42:3d: 6d:10:60:f8:a8:9f:bc:84:63:7f:49:36:78:b8:a1: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:77:26:89:34:BA:15:F6:48:7F:1E:C8:EF:7E:E6:DE:11:7D:DB X509v3 Authority Key Identifier: keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:08:c2:c9:67:d4:bb:65:c4:3e:ca:5d:62:fa:3f:57:53:8f: f3:cd:90:8d:3c:a2:e0:f9:e5:a2:cb:a4:71:c3:64:f9:19:3f: 5b:43:95:1d:a7:cc:11:7d:36:62:00:89:f8:23:0f:83:35:e0: 93:53:96:9d:49:b7:8d:18:ef:bd:ff:21:b8:6d:3b:1a:5e:19: a8:dc:ec:4b:99:67:67:79:8b:d6:75:20:08:f4:5e:59:a1:59: 2f:94:4d:d4:2a:f8:4c:d5:0b:32:1b:4b:1d:85:c1:b0:17:94: 6c:b6:8f:d1:25:ab:9a:f4:af:1a:ef:2e:8e:4c:46:3c:d2:7f: 8f:c3:0a:7d:1a:44:ec:9b:9f:d8:aa:ae:d3:35:a8:8a:83:c4: 83:eb:ab:6a:0e:38:27:6c:9e:7c:f9:71:a7:d4:02:d2:f8:b6: af:c1:ae:1f:3e:a5:1f:49:db:1c:f9:44:25:eb:c7:51:ec:e0: bb:8e:7d:19:ab:1d:9b:de:9c:99:24:7d:28:2e:dd:df:ad:47: ac:1f:f5:c3:68:86:5d:c9:c4:24:f4:a5:86:0d:d9:82:ee:ea: 27:03:60:c8:ab:59:d5:95:ea:69:eb:c2:16:8f:b0:15:9d:51: ab:58:5a:62:92:10:3e:84:57:06:a0:6d:7c:c1:08:a8:f7:db: 36:89:fb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0im8m5dUNCgG/yj6pGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYmJhYmUxZmEyOWNjZGFmY2JkNGY5NGI1YzdlNGQwZDFm ODk0N2QwHhcNMjUxMjE3MTIwMDU0WhcNMjUxMjE4MTIwMDU0WjAzMTEwLwYDVQQD EyhkMmEyNzcyNjg5MzRiYTE1ZjY0ODdmMWVjOGVmN2VlNmRlMTE3ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjLc2wG+OcOmV9iHEBk7qHVJGVcz Wvnhjf+vuuRZHcHUDzlRIj5SAMDJmM4iQy+D85NTqzzG0iUDSBk1DhEJ1+9/QZxg MUAaFkl9/r/kQzMOYTTrZCD3O8kFrDVjS/P78A20gSdJdsK78paCLHUh8uhtnqKI pAHQJFS1Ix96WteaMG1Xhm6Y/OyMhmrfJGA8hburr3QwqsZSxOQXzIAsBWgEkmsl vJ/I2of29tX2GDcRS5YnNSD4s2myf0QfaWlgcJHezoSp5t30yYNRkScOap7XQN7K YbFiVnelu1qsvAUBDpyj83BFZdReJqrIQj1tEGD4qJ+8hGN/STZ4uKHD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKidyaJNLoV9kh/HsjvfubeEX3bMB8GA1UdIwQY MBaAFBO7q+H6Kcza/L1PlLXH5NDR+JR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAt NDA3MThlMGUzMjhkLzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAtNDA3MThlMGUzMjhk LzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgjCyWfU u2XEPspdYvo/V1OP882QjTyi4PnlosukccNk+Rk/W0OVHafMEX02YgCJ+CMPgzXg k1OWnUm3jRjvvf8huG07Gl4ZqNzsS5lnZ3mL1nUgCPReWaFZL5RN1Cr4TNULMhtL HYXBsBeUbLaP0SWrmvSvGu8ujkxGPNJ/j8MKfRpE7Juf2Kqu0zWoioPEg+urag44 J2yefPlxp9QC0vi2r8GuHz6lH0nbHPlEJevHUezgu459Gasdm96cmSR9KC7d361H rB/1w2iGXcnEJPSlhg3Zgu7qJwNgyKtZ1ZXqaevCFo+wFZ1Rq1haYpIQPoRXBqBt fMEIqPfbNon7Yg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:30 2025 by rpki-client