This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft File: e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json) Hash identifier: GHR11dYJiTUFwkuOCubflAobhgX94F7p+e7dI7PotaE= Subject key identifier: 81:34:90:BC:68:11:5D:77:DD:8C:28:65:EC:D5:51:02:80:9C:56:9F Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66 Certificate issuer: /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466 Certificate serial: 019B2A7848EF098BF0ACA60AE44D79713C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft Manifest number: 0381 Signing time: Wed 17 Dec 2025 04:01:24 +0000 Manifest this update: Wed 17 Dec 2025 04:01:24 +0000 Manifest next update: Thu 18 Dec 2025 04:01:24 +0000 Files and hashes: 1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: ZUIHb3Nso71AI0XOZmo6nmmQ9Mkja4HVBiU2o4sFdYE=) 2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:48:ef:09:8b:f0:ac:a6:0a:e4:4d:79:71:3c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466 Validity Not Before: Dec 17 04:01:24 2025 GMT Not After : Dec 18 04:01:24 2025 GMT Subject: CN=813490bc68115d77dd8c2865ecd55102809c569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:b5:f2:5b:d3:9c:dc:6e:5d:93:8f:87:99: 39:3f:7b:9a:9f:d8:bf:01:4b:44:ba:ef:6d:0f:91: e0:13:d0:f5:9d:28:47:11:e2:b3:a6:4a:96:a2:30: 7e:84:a1:62:92:3e:cc:8a:11:5d:9a:ae:e0:4c:99: 1b:39:97:fb:41:c7:bc:78:18:8e:bb:14:9e:ae:e9: 27:bd:bb:42:01:34:16:d1:f0:64:17:59:e4:a5:bc: d1:69:f3:1a:e9:33:56:d6:43:a3:9e:ae:e4:12:6a: 4a:70:64:d3:24:0e:7c:62:80:da:e3:6e:05:de:f1: d6:c0:eb:40:8b:2a:b5:dc:1d:c8:d6:7d:3d:db:fe: 24:82:95:f6:9c:64:70:53:55:58:a5:8f:cc:2e:bc: 88:dc:42:aa:61:f3:84:5e:2f:25:74:6b:fc:b6:90: c3:fe:c5:0f:9f:68:a0:97:83:2c:55:5e:63:f0:fc: 10:7a:a4:3e:76:18:5d:c1:2f:36:03:f6:c1:bb:2f: a4:6b:fb:4f:24:95:da:4e:af:0a:14:00:3b:17:96: 38:3f:c3:70:35:51:7a:86:cf:30:9c:c9:65:f7:e0: da:39:2e:f0:ac:3e:7a:2c:88:41:7a:59:1c:e9:d8: 41:3c:09:7b:52:df:3a:79:5d:e6:30:8e:b2:0c:49: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:34:90:BC:68:11:5D:77:DD:8C:28:65:EC:D5:51:02:80:9C:56:9F X509v3 Authority Key Identifier: keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d4:f8:bb:29:a5:e5:cb:b5:cc:55:44:b6:39:a7:fa:f8:95: 5d:a4:de:44:ce:4d:48:a2:65:a2:2f:df:9d:a0:f8:bb:f3:8b: ca:c6:93:82:26:0c:90:64:0c:31:11:7d:0b:ce:9b:96:5b:8d: 9b:9c:64:0b:7c:c4:4c:58:1a:ea:d9:de:06:29:35:33:62:d6: 18:ef:87:62:b6:b5:f7:53:d4:57:9e:65:bb:d9:16:5b:3a:45: fe:4a:d2:7f:a8:58:81:0e:7e:f2:59:8b:b0:33:3a:db:31:5c: 86:9a:3b:fa:b9:ef:6f:f5:e8:d7:9c:5d:0b:62:10:e4:d0:3f: ed:85:ca:a5:ba:80:c8:cc:70:02:8b:f3:9a:c1:b0:97:3d:83: ef:11:f1:38:cb:5e:6c:0e:63:84:d2:48:f9:25:50:e3:c0:32: 18:48:15:86:d7:84:a0:09:f2:7a:e1:b2:58:5f:be:7b:55:07: 2b:dc:eb:1e:51:22:6d:dc:7f:12:14:56:3f:db:2a:bf:d4:0f: 12:94:31:52:c8:3a:ed:4c:f6:80:b3:24:ee:f8:eb:9b:dc:1b: 39:52:b2:86:bf:35:68:fd:fa:fc:01:0e:ec:a2:6a:d2:29:f4: 4a:a8:d3:91:d8:03:7d:2b:0c:84:60:25:3b:73:28:9c:03:0f: 2f:e6:3d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeEjvCYvwrKYK5E15cTw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNjYxNDI0MGJjMGY3NmIwMmY5ZTNhM2Y0MDYwYWI0OTM2 ZmY0NjYwHhcNMjUxMjE3MDQwMTI0WhcNMjUxMjE4MDQwMTI0WjAzMTEwLwYDVQQD Eyg4MTM0OTBiYzY4MTE1ZDc3ZGQ4YzI4NjVlY2Q1NTEwMjgwOWM1NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPi18lvTnNxuXZOPh5k5P3uan9i/ AUtEuu9tD5HgE9D1nShHEeKzpkqWojB+hKFikj7MihFdmq7gTJkbOZf7Qce8eBiO uxSeruknvbtCATQW0fBkF1nkpbzRafMa6TNW1kOjnq7kEmpKcGTTJA58YoDa424F 3vHWwOtAiyq13B3I1n092/4kgpX2nGRwU1VYpY/MLryI3EKqYfOEXi8ldGv8tpDD /sUPn2igl4MsVV5j8PwQeqQ+dhhdwS82A/bBuy+ka/tPJJXaTq8KFAA7F5Y4P8Nw NVF6hs8wnMll9+DaOS7wrD56LIhBelkc6dhBPAl7Ut86eV3mMI6yDEl/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE0kLxoEV133YwoZezVUQKAnFafMB8GA1UdIwQY MBaAFHtmFCQLwPdrAvnjo/QGCrSTb/RmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYt ODBjN2FmODdjYzg1LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYtODBjN2FmODdjYzg1 LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNT4uyml 5cu1zFVEtjmn+viVXaTeRM5NSKJloi/fnaD4u/OLysaTgiYMkGQMMRF9C86blluN m5xkC3zETFga6tneBik1M2LWGO+HYra191PUV55lu9kWWzpF/krSf6hYgQ5+8lmL sDM62zFchpo7+rnvb/Xo15xdC2IQ5NA/7YXKpbqAyMxwAovzmsGwlz2D7xHxOMte bA5jhNJI+SVQ48AyGEgVhteEoAnyeuGyWF++e1UHK9zrHlEibdx/EhRWP9sqv9QP EpQxUsg67Uz2gLMk7vjrm9wbOVKyhr81aP36/AEO7KJq0in0SqjTkdgDfSsMhGAl O3MonAMPL+Y97g== -----END CERTIFICATE-----Generated at Wed Dec 17 09:43:48 2025 by rpki-client