This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json) Hash identifier: 5BeVnoYxxelepjWlpKbYzGPL53Ez/oFGm7lUZH2rz6A= Subject key identifier: 41:90:02:8B:06:4F:73:CF:D9:7A:B7:F5:45:71:B9:0B:3B:04:EC:5C Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1 Certificate serial: 019B638B481081F429EAA69318B8F0ACAB0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft Manifest number: 1798 Signing time: Sun 28 Dec 2025 06:00:30 +0000 Manifest this update: Sun 28 Dec 2025 06:00:30 +0000 Manifest next update: Mon 29 Dec 2025 06:00:30 +0000 Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=) 2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: +0081ziQwFdFkGWHqhR1AZnaVNMMcAYUb95ZNB3ktjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:48:10:81:f4:29:ea:a6:93:18:b8:f0:ac:ab:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1 Validity Not Before: Dec 28 06:00:30 2025 GMT Not After : Dec 29 06:00:30 2025 GMT Subject: CN=4190028b064f73cfd97ab7f54571b90b3b04ec5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:9a:3a:40:1b:32:fa:77:4b:71:e0:78:d9: e2:d2:59:89:0f:73:a5:0c:ed:7f:f8:04:eb:1d:fe: 4e:b6:f9:e7:b0:66:79:9c:24:4f:8e:34:4a:22:7b: 04:44:0c:3e:21:f4:b2:a8:7d:65:cb:06:cf:cd:e2: df:9b:e3:0f:05:f4:a8:57:35:79:31:e4:e1:01:bb: 6a:60:9e:ab:fb:19:89:5f:85:5a:9e:3c:1e:7f:ae: f2:0a:1d:40:6f:0b:20:36:47:ef:09:9b:c1:c6:30: 4d:2a:d2:2b:2c:c9:3a:c4:06:51:0a:1c:bb:d2:69: 1e:18:00:cf:21:26:07:75:aa:6c:a4:28:1d:5d:8d: c6:61:f9:db:bf:e0:d2:28:5c:ae:75:85:2e:8c:f2: d4:c7:77:86:20:74:60:22:4a:d2:a5:04:14:9b:9e: 9a:56:b3:a1:7d:d0:1f:fa:ed:bc:d5:bc:37:c8:0c: aa:75:43:9d:05:12:d7:5d:8a:c0:17:b0:70:43:ce: 09:0c:2f:28:34:30:54:15:e4:1f:04:67:bf:c4:58: f2:b2:1a:e4:9e:c9:12:b8:a8:86:79:5f:7b:76:5e: c4:fc:d5:67:68:d6:26:81:c5:23:3c:13:c4:22:82: 38:88:ae:9c:ae:ec:f2:51:61:f1:d5:47:2a:62:49: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:90:02:8B:06:4F:73:CF:D9:7A:B7:F5:45:71:B9:0B:3B:04:EC:5C X509v3 Authority Key Identifier: keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:35:04:5d:fa:67:04:83:09:d8:cd:1d:e2:55:8b:6e:b8: a0:92:6f:e9:3c:7a:f9:e4:d9:13:4f:93:d0:36:1d:98:ad:9a: 84:15:0c:d7:5b:ce:1a:12:f9:1a:85:7a:49:88:18:57:ce:eb: 5e:da:91:7c:f2:d5:dc:a5:aa:a4:13:b3:d5:19:21:dd:a1:9d: 0a:f2:2b:36:0a:a7:f3:31:59:02:65:91:6a:df:62:04:e9:08: fb:8e:7a:80:b3:2a:6b:8e:8e:d8:6f:7d:f1:a6:93:07:3b:74: 3f:5d:ff:e3:19:29:08:c2:4b:68:d4:e7:f1:5a:0d:60:84:08: fa:b4:b6:65:11:d0:54:cc:b8:e5:5a:29:da:7d:e4:d1:d0:f3: 39:4f:97:e5:6c:64:2c:00:ec:f1:38:e1:5b:c9:b3:69:87:22: f3:b7:2c:14:a0:6e:fe:d7:83:93:4b:9f:f7:2f:98:36:3e:87: f3:07:e7:77:ab:ec:da:8b:5e:dc:3d:da:cc:1c:83:a4:20:61: 02:9e:b1:0b:3b:28:64:1c:30:05:26:ca:91:09:f1:b7:fd:4f: 57:3b:63:f6:e5:db:23:53:5a:2e:c1:0d:e0:e4:54:8d:5b:6d: 66:c1:cc:0a:39:e9:8e:82:9b:94:56:5b:01:68:38:f8:2b:8e: 88:5f:e5:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji0gQgfQp6qaTGLjwrKsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzA0MDA3ZTIxMzVjOGIxMjc4MDM1YmE3NjQyYjk5MTU5 NDQ0YjEwHhcNMjUxMjI4MDYwMDMwWhcNMjUxMjI5MDYwMDMwWjAzMTEwLwYDVQQD Eyg0MTkwMDI4YjA2NGY3M2NmZDk3YWI3ZjU0NTcxYjkwYjNiMDRlYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxyaOkAbMvp3S3HgeNni0lmJD3Ol DO1/+ATrHf5OtvnnsGZ5nCRPjjRKInsERAw+IfSyqH1lywbPzeLfm+MPBfSoVzV5 MeThAbtqYJ6r+xmJX4Vanjwef67yCh1AbwsgNkfvCZvBxjBNKtIrLMk6xAZRChy7 0mkeGADPISYHdapspCgdXY3GYfnbv+DSKFyudYUujPLUx3eGIHRgIkrSpQQUm56a VrOhfdAf+u281bw3yAyqdUOdBRLXXYrAF7BwQ84JDC8oNDBUFeQfBGe/xFjyshrk nskSuKiGeV97dl7E/NVnaNYmgcUjPBPEIoI4iK6cruzyUWHx1UcqYknY0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGQAosGT3PP2Xq39UVxuQs7BOxcMB8GA1UdIwQY MBaAFHpwQAfiE1yLEngDW6dkK5kVlESxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEt Zjc3MTBhMDMwZmEyLzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEtZjc3MTBhMDMwZmEy LzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYM1BF36 ZwSDCdjNHeJVi264oJJv6Tx6+eTZE0+T0DYdmK2ahBUM11vOGhL5GoV6SYgYV87r XtqRfPLV3KWqpBOz1Rkh3aGdCvIrNgqn8zFZAmWRat9iBOkI+456gLMqa46O2G99 8aaTBzt0P13/4xkpCMJLaNTn8VoNYIQI+rS2ZRHQVMy45Vop2n3k0dDzOU+X5Wxk LADs8TjhW8mzaYci87csFKBu/teDk0uf9y+YNj6H8wfnd6vs2ote3D3azByDpCBh Ap6xCzsoZBwwBSbKkQnxt/1PVztj9uXbI1NaLsEN4ORUjVttZsHMCjnpjoKblFZb AWg4+CuOiF/lLw== -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:45 2025 by rpki-client