This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json) Hash identifier: rcoC/nP0oSn/7Q9EejYFiPFPCTBFy76dZZ3MvNXadGg= Subject key identifier: 1A:90:A7:01:03:DB:C2:D0:40:69:44:98:32:AE:E0:D3:70:1B:F3:D9 Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4 Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4 Certificate serial: 019B650D6174DEBD7B867CAB057AFDBB9A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft Manifest number: 14CC Signing time: Sun 28 Dec 2025 13:02:14 +0000 Manifest this update: Sun 28 Dec 2025 13:02:14 +0000 Manifest next update: Mon 29 Dec 2025 13:02:14 +0000 Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=) 2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: 2zDNxSTiml3zHjEtqp1M9QoIfyj/2KudgzSHmE0A8q0=) 3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:61:74:de:bd:7b:86:7c:ab:05:7a:fd:bb:9a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4 Validity Not Before: Dec 28 13:02:14 2025 GMT Not After : Dec 29 13:02:14 2025 GMT Subject: CN=1a90a70103dbc2d04069449832aee0d3701bf3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:87:35:ff:d6:17:67:e1:18:79:ae:91:b4:ba: c7:c9:d9:f2:4c:ec:71:e2:2e:bd:54:bb:22:57:ac: b1:a5:37:69:5e:8b:a1:5c:75:fc:4f:30:94:ea:c9: c3:02:5e:02:4d:74:94:2f:16:62:e4:d5:e6:e5:9a: 02:e0:0c:fc:b7:a9:8d:03:5e:a3:55:02:25:bb:d6: 48:59:f5:69:5f:04:88:5a:b0:5e:cc:d9:38:0f:7f: dc:17:8f:2e:b2:61:58:c3:7b:ce:66:1f:25:80:bf: 8e:50:63:5f:f3:6c:c5:11:f5:55:71:8f:b0:1f:11: 8a:de:28:f2:b6:03:52:40:84:44:45:1e:4b:1f:62: 70:d6:23:fa:ab:4c:16:4c:32:d9:27:8e:c2:9d:08: a7:8b:b4:30:48:16:f8:d9:f6:50:a0:89:de:0f:ea: d0:6c:6d:35:7e:52:a2:19:ce:c1:8d:9c:a3:65:7c: 5b:6e:8d:37:b2:63:1f:87:82:1d:9a:0c:95:01:a8: 93:31:3c:cd:09:0b:10:0f:ac:9f:70:43:b8:ac:ea: 0b:79:66:e0:40:33:da:76:4b:1c:52:92:69:e6:41: d3:0b:e8:85:3b:ae:bf:96:bb:d5:53:a4:08:4d:f7: cb:6b:ce:88:fc:ee:a3:53:e1:7b:5c:3a:ad:fa:fa: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:90:A7:01:03:DB:C2:D0:40:69:44:98:32:AE:E0:D3:70:1B:F3:D9 X509v3 Authority Key Identifier: keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6b:25:94:0b:59:40:14:d8:7e:07:e6:cf:91:f7:9c:67:d9: 7e:e8:e6:52:28:96:4b:30:b9:f1:ab:14:40:9f:a2:73:4b:56: bc:98:7e:15:fd:2f:ea:fc:02:24:74:d7:34:96:21:0e:5e:c6: b2:ab:b0:81:d4:3e:e6:24:88:02:6d:ed:90:aa:c1:79:1d:be: 7f:1c:1f:e6:52:eb:bd:cf:e1:e5:b9:74:8b:b9:5a:2c:c9:60: 47:ec:a3:f9:82:5a:a2:83:44:2e:cc:75:81:cf:e3:2c:45:09: 2e:da:80:5f:2a:3a:25:35:60:59:14:85:d5:fd:21:f4:b0:9a: 7c:95:ba:e5:ba:02:b8:74:7d:a4:f4:7b:e1:a2:d8:b4:72:4e: 2f:b8:23:7c:79:e7:03:e5:52:2b:a1:04:6d:d1:32:5e:81:54: bc:f4:ad:2e:7d:e8:4e:ea:18:02:97:e3:19:8d:56:5a:b4:87: 9b:23:44:6a:d9:b3:36:51:5a:55:02:9e:6b:0a:1d:db:79:02: b3:76:11:36:83:83:fe:39:a2:f8:2b:bf:31:f7:68:fa:66:7f: 05:9a:53:16:f5:37:03:4b:9c:16:a4:e4:9c:76:fd:d6:14:83: ed:a8:58:38:c0:6c:75:2d:71:7a:ef:63:61:48:3c:b3:c0:96: 82:48:32:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDWF03r17hnyrBXr9u5oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjQzZGFjZTg2NjM0NDdlZTQ3MjU1MjBkNzhjNTRhYjdi OTlhZDQwHhcNMjUxMjI4MTMwMjE0WhcNMjUxMjI5MTMwMjE0WjAzMTEwLwYDVQQD EygxYTkwYTcwMTAzZGJjMmQwNDA2OTQ0OTgzMmFlZTBkMzcwMWJmM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oc1/9YXZ+EYea6RtLrHydnyTOxx 4i69VLsiV6yxpTdpXouhXHX8TzCU6snDAl4CTXSULxZi5NXm5ZoC4Az8t6mNA16j VQIlu9ZIWfVpXwSIWrBezNk4D3/cF48usmFYw3vOZh8lgL+OUGNf82zFEfVVcY+w HxGK3ijytgNSQIRERR5LH2Jw1iP6q0wWTDLZJ47CnQini7QwSBb42fZQoIneD+rQ bG01flKiGc7BjZyjZXxbbo03smMfh4IdmgyVAaiTMTzNCQsQD6yfcEO4rOoLeWbg QDPadkscUpJp5kHTC+iFO66/lrvVU6QITffLa86I/O6jU+F7XDqt+vrEVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqQpwED28LQQGlEmDKu4NNwG/PZMB8GA1UdIwQY MBaAFBO0PazoZjRH7kclUg14xUq3uZrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NTY5MGEtMGFjZi00ZjM2LWE4OWMt MmI0YTI3MTQyMTRhLzEvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82NTY5MGEtMGFjZi00ZjM2LWE4OWMtMmI0YTI3MTQyMTRh LzEvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGsllAtZ QBTYfgfmz5H3nGfZfujmUiiWSzC58asUQJ+ic0tWvJh+Ff0v6vwCJHTXNJYhDl7G squwgdQ+5iSIAm3tkKrBeR2+fxwf5lLrvc/h5bl0i7laLMlgR+yj+YJaooNELsx1 gc/jLEUJLtqAXyo6JTVgWRSF1f0h9LCafJW65boCuHR9pPR74aLYtHJOL7gjfHnn A+VSK6EEbdEyXoFUvPStLn3oTuoYApfjGY1WWrSHmyNEatmzNlFaVQKeawod23kC s3YRNoOD/jmi+Cu/Mfdo+mZ/BZpTFvU3A0ucFqTknHb91hSD7ahYOMBsdS1xeu9j YUg8s8CWgkgyxA== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client