This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json) Hash identifier: 03entJQOHkk7HpCemzkEsStyUTfap8WilPL0a/sTI2A= Subject key identifier: 55:F5:D3:7B:BE:37:FF:BF:63:44:AB:BA:6F:73:81:E8:CA:53:F2:B0 Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b Certificate serial: 019B4814F33527F0B71AE1ECC4BC63E2393F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft Manifest number: 14C1 Signing time: Mon 22 Dec 2025 22:01:31 +0000 Manifest this update: Mon 22 Dec 2025 22:01:31 +0000 Manifest next update: Tue 23 Dec 2025 22:01:31 +0000 Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: FaG42vOPUMmdGvkxd2OGb+6acAxTnuwv1s57W+8XWz8=) 2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:f3:35:27:f0:b7:1a:e1:ec:c4:bc:63:e2:39:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b Validity Not Before: Dec 22 22:01:31 2025 GMT Not After : Dec 23 22:01:31 2025 GMT Subject: CN=55f5d37bbe37ffbf6344abba6f7381e8ca53f2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:22:f7:ad:4d:73:be:e7:57:f3:ea:a4:ce:5e: c5:6d:15:34:0a:bf:ce:93:5d:d5:ee:18:b9:43:c3: 5f:f7:7d:ec:78:67:79:50:cb:89:2e:82:7a:f6:ce: 11:cc:82:26:f1:cb:f4:8c:72:42:aa:a6:e8:7e:29: 87:b7:ae:11:6c:61:92:1b:eb:15:db:d4:0e:b3:ca: 4b:13:e4:ec:dc:69:fe:61:a3:6d:76:b9:d5:6c:98: 1c:5f:7b:7d:e1:72:55:ae:ae:e8:57:a5:c3:f6:94: 1d:e5:bf:7e:29:cf:70:7e:32:fe:a2:7b:40:2a:e5: 2c:f4:80:cc:9d:49:1e:fc:22:7c:1a:3e:7a:db:7e: 60:cf:bb:b6:74:35:2b:65:f3:0c:ca:15:6c:4e:18: 3d:22:3c:1b:73:3e:a2:30:96:f8:c6:33:18:2a:dc: 38:6c:ed:76:82:8c:7f:c9:b5:63:67:84:cc:2a:ea: 26:94:3e:82:3f:bc:9d:b2:ee:09:a9:24:5a:c7:dd: c5:85:f7:67:39:d5:45:ea:16:aa:5c:14:bf:d3:dc: 40:83:5d:23:cf:d7:49:db:cb:1e:72:f3:07:a1:a9: c0:59:32:63:41:54:75:be:2a:af:72:89:98:1b:72: c0:6e:9d:20:6a:4b:7a:64:5e:90:a6:7f:7e:39:3e: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:D3:7B:BE:37:FF:BF:63:44:AB:BA:6F:73:81:E8:CA:53:F2:B0 X509v3 Authority Key Identifier: keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:60:e4:0d:8d:2d:2a:9a:b4:2f:b6:b6:a5:91:40:02:0a:90: 62:5d:e3:49:2c:ea:39:39:1a:d7:3d:9b:9a:d1:07:d7:3d:39: 87:2b:2a:1b:38:76:99:9d:02:75:6e:de:36:17:44:57:ad:53: f3:e3:5f:cd:c9:f4:f8:70:aa:d8:5b:d3:91:19:51:a6:ee:5c: 95:93:b9:b4:f7:20:9e:d3:cf:2f:32:ce:0b:ba:c6:db:3c:c7: 70:ce:6c:4e:cb:2d:f1:67:a7:61:80:be:a1:6a:32:e4:1c:df: 38:b5:93:bb:f9:ff:62:94:60:44:be:8c:6c:c7:20:67:8f:92: 6e:20:e1:20:67:7a:01:2c:5c:6d:ab:44:b1:a7:f3:bf:11:df: 81:fb:16:b7:0c:4b:8f:24:d7:0c:d3:10:2b:c4:75:17:b9:90: c4:d3:5c:55:d6:9d:b3:e3:f5:19:62:1b:3d:93:62:80:77:a9: ae:f8:84:dc:84:09:09:e8:f5:31:38:da:c4:de:b0:c7:b9:80: 37:7f:b0:a5:9f:4a:1c:e1:02:bc:70:2a:fb:e2:89:44:63:ca: 87:45:4e:5a:d7:b6:ef:08:be:56:ca:f9:ea:44:50:db:08:04: 36:3a:86:ff:4c:2d:f8:8f:6f:67:cb:67:8f:a5:d4:9d:1a:6b: 78:7f:50:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFPM1J/C3GuHsxLxj4jk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjg5YjgwMTg2MzMyZDQ0MWJiMDUxNWM0NzI2MWM1ZmZh MDYxNmIwHhcNMjUxMjIyMjIwMTMxWhcNMjUxMjIzMjIwMTMxWjAzMTEwLwYDVQQD Eyg1NWY1ZDM3YmJlMzdmZmJmNjM0NGFiYmE2ZjczODFlOGNhNTNmMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCL3rU1zvudX8+qkzl7FbRU0Cr/O k13V7hi5Q8Nf933seGd5UMuJLoJ69s4RzIIm8cv0jHJCqqbofimHt64RbGGSG+sV 29QOs8pLE+Ts3Gn+YaNtdrnVbJgcX3t94XJVrq7oV6XD9pQd5b9+Kc9wfjL+ontA KuUs9IDMnUke/CJ8Gj56235gz7u2dDUrZfMMyhVsThg9Ijwbcz6iMJb4xjMYKtw4 bO12gox/ybVjZ4TMKuomlD6CP7ydsu4JqSRax93FhfdnOdVF6haqXBS/09xAg10j z9dJ28secvMHoanAWTJjQVR1viqvcomYG3LAbp0gakt6ZF6Qpn9+OT6UAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX103u+N/+/Y0Srum9zgejKU/KwMB8GA1UdIwQY MBaAFBO4m4AYYzLUQbsFFcRyYcX/oGFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUt YzE5MjMyYmRhNDMwLzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUtYzE5MjMyYmRhNDMw LzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWDkDY0t Kpq0L7a2pZFAAgqQYl3jSSzqOTka1z2bmtEH1z05hysqGzh2mZ0CdW7eNhdEV61T 8+Nfzcn0+HCq2FvTkRlRpu5clZO5tPcgntPPLzLOC7rG2zzHcM5sTsst8WenYYC+ oWoy5BzfOLWTu/n/YpRgRL6MbMcgZ4+SbiDhIGd6ASxcbatEsafzvxHfgfsWtwxL jyTXDNMQK8R1F7mQxNNcVdads+P1GWIbPZNigHeprviE3IQJCej1MTjaxN6wx7mA N3+wpZ9KHOECvHAq++KJRGPKh0VOWte27wi+Vsr56kRQ2wgENjqG/0wt+I9vZ8tn j6XUnRpreH9QGA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:29:13 2025 by rpki-client