This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json) Hash identifier: xis1ySU1b82HddWARLYgSfGr3uC9IU7Cjhm42lNKxpE= Subject key identifier: E3:13:20:E9:F0:B8:DC:2E:3F:20:4B:0E:74:69:AD:2C:17:30:18:D1 Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17 Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717 Certificate serial: 019B424B11117D43FF3447594A794CD3BD0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft Manifest number: 1089 Signing time: Sun 21 Dec 2025 19:02:54 +0000 Manifest this update: Sun 21 Dec 2025 19:02:54 +0000 Manifest next update: Mon 22 Dec 2025 19:02:54 +0000 Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: ry/m6e0h2t8BgVW7fapAKDFUnPrxe2FMT3lt1oGkgq0=) 2: mCL_9-CtuY-87CF98-9c33rXIUE.roa (hash: wOWeLe9RAlzQTuA4jLsQKE3f+PG+mmJoHLvKrWcnYc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:11:11:7d:43:ff:34:47:59:4a:79:4c:d3:bd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717 Validity Not Before: Dec 21 19:02:54 2025 GMT Not After : Dec 22 19:02:54 2025 GMT Subject: CN=e31320e9f0b8dc2e3f204b0e7469ad2c173018d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:60:a8:82:97:c1:21:4c:00:49:0a:7d:59: f9:c0:29:8e:bd:d1:28:f1:9b:4a:dd:55:0c:9c:42: 59:23:f8:d1:f4:1b:d3:e8:52:d7:c8:ec:38:92:d5: bb:e8:e4:0e:3a:36:9b:81:9d:a5:9e:73:11:0f:44: 8e:8b:5f:06:99:30:ba:f0:68:f8:b1:92:72:a0:bc: 36:2b:9d:06:d5:da:c5:b7:44:b6:f7:e0:46:01:3d: d8:65:59:e1:f4:c8:2e:10:5b:e0:64:91:60:57:87: 9c:45:34:e7:69:9c:2d:0c:c8:6e:96:e6:62:c8:bc: e9:26:e9:2a:db:d2:9a:bf:fe:6a:d4:47:b0:b7:74: 75:7e:52:7a:e5:cf:c6:5f:44:c0:9e:d3:93:e7:d0: 39:e0:d7:27:54:cf:28:aa:f3:4c:a2:f9:33:1f:41: 96:b2:05:99:31:45:57:5c:36:d8:7e:51:5d:5e:f0: 8e:b2:05:56:b2:e9:c5:97:75:24:d4:9f:db:41:9c: 8b:fe:db:4e:24:04:9d:bb:bc:7a:d5:03:87:01:76: f4:32:64:80:88:0f:86:4e:ca:8a:5d:12:88:a0:c5: f2:2f:4f:6e:78:8f:92:6e:06:95:c1:f6:de:5f:77: 03:ae:a0:eb:64:e3:27:fb:65:e2:11:91:8f:71:f2: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:13:20:E9:F0:B8:DC:2E:3F:20:4B:0E:74:69:AD:2C:17:30:18:D1 X509v3 Authority Key Identifier: keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:45:6b:ac:b8:6e:fe:78:01:8f:97:d3:9e:03:2a:fd:f7: de:66:c8:12:4a:87:d8:54:2e:a7:67:ac:78:aa:3c:a9:0f:e0: 82:06:a4:7a:b1:e9:62:1b:dd:e0:03:88:9d:c5:c5:85:74:b5: 90:8c:0c:f1:7c:41:3c:2a:d7:ae:8e:a9:28:e8:46:ed:63:97: c2:c3:b6:e9:f7:16:e0:cc:4a:91:a9:0e:b2:0e:ac:13:2f:b4: b1:e7:60:a6:73:8b:32:d4:3e:06:51:a4:b9:13:01:a3:d3:4c: e6:ea:cf:a3:9f:91:b3:bb:6e:89:c4:5a:e8:b0:b3:c4:ff:71: 0f:19:c3:d8:a5:61:93:73:88:e6:89:63:47:12:c9:d7:4f:85: 33:85:14:8d:9c:84:01:4a:1a:23:a8:50:a8:e3:fe:e5:1b:03: 62:60:cb:74:dd:c8:ce:d8:37:bc:7c:54:37:77:f8:f5:0e:ca: 18:07:96:d1:23:cf:41:6e:20:b7:c2:73:df:f4:55:95:fe:e9: 7f:61:ff:8d:2d:e3:ac:6d:a1:02:26:09:5b:e8:df:34:22:e1: 40:d5:fd:32:83:3a:ed:bf:72:e3:9e:87:db:01:99:15:78:55: 42:94:94:4e:16:e7:0e:05:ab:51:2f:75:13:92:31:13:ff:70: db:e8:01:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSxERfUP/NEdZSnlM070OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzViNDA5MzhkODdjZDMzMjcyNmFhYTQ4MWFhNzFhZTZl OTg3MTcwHhcNMjUxMjIxMTkwMjU0WhcNMjUxMjIyMTkwMjU0WjAzMTEwLwYDVQQD EyhlMzEzMjBlOWYwYjhkYzJlM2YyMDRiMGU3NDY5YWQyYzE3MzAxOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZpgqIKXwSFMAEkKfVn5wCmOvdEo 8ZtK3VUMnEJZI/jR9BvT6FLXyOw4ktW76OQOOjabgZ2lnnMRD0SOi18GmTC68Gj4 sZJyoLw2K50G1drFt0S29+BGAT3YZVnh9MguEFvgZJFgV4ecRTTnaZwtDMhuluZi yLzpJukq29Kav/5q1Eewt3R1flJ65c/GX0TAntOT59A54NcnVM8oqvNMovkzH0GW sgWZMUVXXDbYflFdXvCOsgVWsunFl3Uk1J/bQZyL/ttOJASdu7x61QOHAXb0MmSA iA+GTsqKXRKIoMXyL09ueI+SbgaVwfbeX3cDrqDrZOMn+2XiEZGPcfJsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMTIOnwuNwuPyBLDnRprSwXMBjRMB8GA1UdIwQY MBaAFBN1tAk42HzTMnJqqkgapxrm6YcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQt YTI1MGRhMTNkNjhhLzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQtYTI1MGRhMTNkNjhh LzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXpFa6y4 bv54AY+X054DKv333mbIEkqH2FQup2eseKo8qQ/gggakerHpYhvd4AOIncXFhXS1 kIwM8XxBPCrXro6pKOhG7WOXwsO26fcW4MxKkakOsg6sEy+0sedgpnOLMtQ+BlGk uRMBo9NM5urPo5+Rs7tuicRa6LCzxP9xDxnD2KVhk3OI5oljRxLJ10+FM4UUjZyE AUoaI6hQqOP+5RsDYmDLdN3Iztg3vHxUN3f49Q7KGAeW0SPPQW4gt8Jz3/RVlf7p f2H/jS3jrG2hAiYJW+jfNCLhQNX9MoM67b9y456H2wGZFXhVQpSUThbnDgWrUS91 E5IxE/9w2+gBKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:45 2025 by rpki-client