This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json) Hash identifier: RQaoguKSBwpj3kGyIdWICCqIMIrixi9iuUXZp2sNBlM= Subject key identifier: 19:11:8C:A4:9F:7F:17:3F:C5:1E:18:DE:54:4F:EB:41:F4:B8:22:D6 Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11 Certificate serial: 019B405A93429111349FF032A59AD4FD4EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft Manifest number: 0E5A Signing time: Sun 21 Dec 2025 10:00:36 +0000 Manifest this update: Sun 21 Dec 2025 10:00:36 +0000 Manifest next update: Mon 22 Dec 2025 10:00:36 +0000 Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: +T8smqgva3KzJQ2mQ9x8rWEZHHc7WHku4T9pta+19Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:93:42:91:11:34:9f:f0:32:a5:9a:d4:fd:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11 Validity Not Before: Dec 21 10:00:36 2025 GMT Not After : Dec 22 10:00:36 2025 GMT Subject: CN=19118ca49f7f173fc51e18de544feb41f4b822d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:b0:94:32:2f:5b:ea:d4:d0:6b:c3:84:d6: 9e:c1:19:a9:df:66:8e:5a:48:8c:2d:e2:8b:b8:15: 4d:59:9e:45:c6:0c:cf:87:6e:83:c6:15:e8:d6:c1: 5a:98:34:c9:03:16:35:1b:07:88:99:d5:04:06:f0: 21:e7:0e:7e:26:bf:1b:a5:27:92:21:2c:c6:10:bb: 99:5d:f2:36:51:c5:e6:5e:6f:ae:ab:49:35:43:8a: 11:73:f1:80:ac:15:29:4c:93:43:6b:d9:7f:c5:db: 93:21:93:97:28:38:5a:df:cf:45:32:0a:56:83:5c: 96:ac:ae:95:9a:dd:22:94:3e:e6:1d:fd:77:b6:41: e6:19:63:9e:af:8d:9d:01:66:77:01:af:ef:96:12: f7:44:be:c9:d8:1f:fc:7b:d3:1d:b8:bd:b1:34:87: 84:94:1b:e8:ca:6e:80:2c:dc:2f:aa:1c:af:68:a3: e3:2f:65:09:db:e6:29:82:a4:38:2c:85:f0:af:c7: 9c:48:a2:7b:9b:cd:bf:40:d5:18:61:34:7d:dc:7c: 10:6a:7b:dc:a2:d2:fb:ff:4e:4b:12:01:db:f3:d5: c8:90:1a:a5:8a:8a:60:5f:d9:3d:69:58:6a:88:e7: 9b:f3:ec:c2:b2:f2:34:4e:bb:80:14:cc:87:28:af: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:8C:A4:9F:7F:17:3F:C5:1E:18:DE:54:4F:EB:41:F4:B8:22:D6 X509v3 Authority Key Identifier: keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:34:87:11:d1:c1:1b:8b:c3:47:1b:d2:e7:e6:bb:42:4a:90: de:6d:a7:dc:4e:d0:4c:44:f8:7f:ae:01:de:c5:39:98:77:1a: 98:b3:e0:94:cf:7a:e6:4b:cf:89:6a:88:84:1c:8c:db:45:52: 01:1b:02:1f:7a:68:0c:53:26:57:04:88:91:3e:62:40:13:0d: 5c:02:c3:07:90:ae:8c:39:fe:cf:b8:e8:e9:e9:ad:bd:b2:14: 36:d2:b9:23:35:75:94:a0:94:bd:5e:4f:79:c6:e7:bd:c1:e4: c4:4f:9d:4b:37:3c:e0:0c:c1:9f:74:88:67:fb:6b:1b:7f:fa: e1:64:4e:69:bc:11:6c:43:2f:aa:57:83:e6:a7:e4:30:86:29: 9d:5a:da:0d:e4:7b:b1:2a:46:41:2b:e4:96:3c:7d:45:08:08: ff:76:c4:ef:1b:65:d6:fb:d8:3b:14:a7:78:45:4d:b7:3f:31: 9c:37:20:11:18:b8:c7:84:a2:a8:97:61:54:56:ca:96:e8:9b: 7a:a0:e6:41:0c:6f:ee:5a:0f:c4:e3:09:d1:7d:b1:7b:96:69: 07:d8:27:40:88:47:76:3b:40:a0:28:5f:57:d3:a2:63:63:2f: 12:69:fb:19:ed:74:54:ec:f9:6e:2a:e3:14:b5:0f:a0:7d:02: 9b:39:2e:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpNCkRE0n/AypZrU/U6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1 MDNlMTEwHhcNMjUxMjIxMTAwMDM2WhcNMjUxMjIyMTAwMDM2WjAzMTEwLwYDVQQD EygxOTExOGNhNDlmN2YxNzNmYzUxZTE4ZGU1NDRmZWI0MWY0YjgyMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykywlDIvW+rU0GvDhNaewRmp32aO WkiMLeKLuBVNWZ5FxgzPh26DxhXo1sFamDTJAxY1GweImdUEBvAh5w5+Jr8bpSeS ISzGELuZXfI2UcXmXm+uq0k1Q4oRc/GArBUpTJNDa9l/xduTIZOXKDha389FMgpW g1yWrK6Vmt0ilD7mHf13tkHmGWOer42dAWZ3Aa/vlhL3RL7J2B/8e9MduL2xNIeE lBvoym6ALNwvqhyvaKPjL2UJ2+YpgqQ4LIXwr8ecSKJ7m82/QNUYYTR93HwQanvc otL7/05LEgHb89XIkBqliopgX9k9aVhqiOeb8+zCsvI0TruAFMyHKK+B7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkRjKSffxc/xR4Y3lRP60H0uCLWMB8GA1UdIwQY MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5 LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjSHEdHB G4vDRxvS5+a7QkqQ3m2n3E7QTET4f64B3sU5mHcamLPglM965kvPiWqIhByM20VS ARsCH3poDFMmVwSIkT5iQBMNXALDB5CujDn+z7jo6emtvbIUNtK5IzV1lKCUvV5P ecbnvcHkxE+dSzc84AzBn3SIZ/trG3/64WROabwRbEMvqleD5qfkMIYpnVraDeR7 sSpGQSvkljx9RQgI/3bE7xtl1vvYOxSneEVNtz8xnDcgERi4x4SiqJdhVFbKluib eqDmQQxv7loPxOMJ0X2xe5ZpB9gnQIhHdjtAoChfV9OiY2MvEmn7Ge10VOz5birj FLUPoH0CmzkuiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:08:28 2025 by rpki-client