This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json) Hash identifier: uqh6NyF+7UR1gCcf66jMBwyfQw3WFSi/vDBcSGClV7E= Subject key identifier: BF:90:B0:BF:02:8C:A2:FE:23:35:9C:6D:AE:F3:FA:CD:BF:50:91:02 Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Certificate serial: 019B3B6B24EB7674A9B1B374A0F02D381687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft Manifest number: 1307 Signing time: Sat 20 Dec 2025 11:00:36 +0000 Manifest this update: Sat 20 Dec 2025 11:00:36 +0000 Manifest next update: Sun 21 Dec 2025 11:00:36 +0000 Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: Mu6mQ3Y1RTuGwFKgCYLohySPPEjB5R/buE9qjTWrXuo=) 2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=) 3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=) 4: U08W2KflM_3EvK4hUoGMDawSFr8.roa (hash: O5Hds9IXa1qN2RUUFQrPf5uOEOZLuUsI3gxYVdP8ubA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:24:eb:76:74:a9:b1:b3:74:a0:f0:2d:38:16:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Validity Not Before: Dec 20 11:00:36 2025 GMT Not After : Dec 21 11:00:36 2025 GMT Subject: CN=bf90b0bf028ca2fe23359c6daef3facdbf509102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:fc:af:0f:6d:a5:dc:98:f1:c2:f4:57:5c: ec:bd:be:51:68:26:51:be:bc:64:bb:f9:5f:9a:a0: 4f:b0:72:e1:1c:00:f3:e6:1b:87:a7:81:0d:54:66: cc:4c:e0:47:45:fc:2f:d1:36:aa:53:46:04:df:01: 2d:2a:fe:f0:95:2c:ea:e0:67:24:2f:74:54:1d:3d: a2:03:bb:be:99:6b:32:d1:b4:11:6c:88:aa:9a:43: 18:af:10:71:d4:16:b9:2e:0e:9c:bd:e5:9f:04:da: 27:58:95:ad:65:e9:0f:9d:26:ef:da:6a:bf:9a:e9: 5f:f9:07:30:4b:d5:a5:1f:fe:fd:4e:3a:5d:af:a9: 4d:06:7b:b0:3e:a2:8d:d6:b5:2b:be:68:67:cd:17: b5:c9:7b:05:11:6b:3e:4b:f9:bf:a4:5b:cd:48:e1: 56:de:3e:69:bd:f6:81:dd:ed:53:72:04:f8:40:47: 5d:ea:10:49:5b:3b:4f:ce:ca:31:ea:be:2d:d9:30: a1:b7:32:35:2d:a0:f5:c1:8b:f0:82:3b:03:b8:1a: 09:df:8d:cd:33:25:c5:33:52:33:67:19:c6:5f:bf: 30:7e:38:f9:4c:69:d9:8c:24:88:9e:43:f0:e0:56: 55:ce:c9:b4:9c:be:fb:34:d6:61:3d:09:d6:23:c6: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:90:B0:BF:02:8C:A2:FE:23:35:9C:6D:AE:F3:FA:CD:BF:50:91:02 X509v3 Authority Key Identifier: keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:89:13:87:b4:20:44:d0:10:f7:64:a9:55:ac:fa:2f:0d:76: d8:de:d8:55:8e:76:44:d7:02:e8:54:8a:71:e1:1a:d7:a7:3b: 00:2e:bc:39:52:50:40:f0:36:74:2d:17:cf:a9:f5:2d:c2:70: 3e:4e:30:ae:f7:ec:d5:eb:4a:92:f9:24:38:8f:3f:c8:90:e3: 39:54:e2:8d:76:2f:d9:a7:2e:27:db:85:f4:61:cb:3b:22:55: 6a:5b:3e:b8:78:e6:4c:32:14:1d:fc:38:25:c8:cf:7c:dd:81: d7:37:1e:a7:0d:87:c2:8f:09:23:a4:e5:54:2c:84:bd:fc:c6: 04:25:72:d6:8a:30:07:56:11:df:84:45:08:61:ea:2a:cc:92: 43:aa:0c:1d:73:d4:96:7b:d0:82:f6:b5:5b:2f:35:d3:a5:6b: e2:37:58:f0:d7:04:f8:f4:94:9c:c0:eb:36:a2:92:66:4b:23: 10:e8:7d:65:66:8f:a2:6e:0a:bb:cb:26:5f:ba:90:78:03:3d: 2c:da:e8:4a:d6:38:d3:16:8e:c9:34:b5:dd:56:4e:cb:b8:43: cf:5d:bc:e0:f1:c3:8e:bf:7a:87:ec:ee:d5:31:54:bd:32:eb: 4c:b1:95:ea:5e:8e:4e:2b:d0:9a:1c:f1:5b:5d:93:26:9e:bd: 16:19:fd:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ayTrdnSpsbN0oPAtOBaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1 YmI5MzkwHhcNMjUxMjIwMTEwMDM2WhcNMjUxMjIxMTEwMDM2WjAzMTEwLwYDVQQD EyhiZjkwYjBiZjAyOGNhMmZlMjMzNTljNmRhZWYzZmFjZGJmNTA5MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/D8rw9tpdyY8cL0V1zsvb5RaCZR vrxku/lfmqBPsHLhHADz5huHp4ENVGbMTOBHRfwv0TaqU0YE3wEtKv7wlSzq4Gck L3RUHT2iA7u+mWsy0bQRbIiqmkMYrxBx1Ba5Lg6cveWfBNonWJWtZekPnSbv2mq/ mulf+QcwS9WlH/79Tjpdr6lNBnuwPqKN1rUrvmhnzRe1yXsFEWs+S/m/pFvNSOFW 3j5pvfaB3e1TcgT4QEdd6hBJWztPzsox6r4t2TChtzI1LaD1wYvwgjsDuBoJ343N MyXFM1IzZxnGX78wfjj5TGnZjCSInkPw4FZVzsm0nL77NNZhPQnWI8ZxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+QsL8CjKL+IzWcba7z+s2/UJECMB8GA1UdIwQY MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt Y2IzZmE0MDdlMGY0LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0 LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYkTh7Qg RNAQ92SpVaz6Lw122N7YVY52RNcC6FSKceEa16c7AC68OVJQQPA2dC0Xz6n1LcJw Pk4wrvfs1etKkvkkOI8/yJDjOVTijXYv2acuJ9uF9GHLOyJVals+uHjmTDIUHfw4 JcjPfN2B1zcepw2Hwo8JI6TlVCyEvfzGBCVy1oowB1YR34RFCGHqKsySQ6oMHXPU lnvQgva1Wy8106Vr4jdY8NcE+PSUnMDrNqKSZksjEOh9ZWaPom4Ku8smX7qQeAM9 LNroStY40xaOyTS13VZOy7hDz1284PHDjr96h+zu1TFUvTLrTLGV6l6OTivQmhzx W12TJp69Fhn9XQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:46 2025 by rpki-client