This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json) Hash identifier: 10cY7SUzcAZ7SSCPW9w+yCtZG8HMe4aL4dIoZo1JBNg= Subject key identifier: FD:51:A3:6A:27:67:F9:6C:9C:8C:8F:4D:A8:55:A7:23:69:EB:12:97 Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b Certificate serial: 019B51BCA93475625C0EF70852003DFF5950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft Manifest number: 10FC Signing time: Wed 24 Dec 2025 19:01:16 +0000 Manifest this update: Wed 24 Dec 2025 19:01:16 +0000 Manifest next update: Thu 25 Dec 2025 19:01:16 +0000 Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: nKfqDZFqgn1OqMmb4dW3ncEUxqGo6Ot9tIvyRdmyWzs=) 2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:a9:34:75:62:5c:0e:f7:08:52:00:3d:ff:59:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b Validity Not Before: Dec 24 19:01:16 2025 GMT Not After : Dec 25 19:01:16 2025 GMT Subject: CN=fd51a36a2767f96c9c8c8f4da855a72369eb1297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:ce:ec:98:c0:4d:03:77:f0:c2:84:d1:c0: b7:0b:93:52:32:98:d7:18:4c:b4:5f:a6:ac:f1:f3: 58:ea:17:25:b0:93:4c:9a:ef:24:b8:f4:a8:2d:00: 88:f7:72:cc:52:b2:60:29:b9:6c:10:c2:87:c7:ac: d9:45:1a:6e:b9:f1:19:bc:80:e9:c7:c6:e8:e8:e7: 19:0d:26:b5:eb:33:ee:28:86:6c:15:cd:ce:1f:0b: 39:cf:c8:38:7f:ea:a5:03:bf:a8:e3:21:39:7c:d2: ce:e5:b0:79:d6:ca:4b:3d:b1:07:ef:7a:e6:02:ad: 14:14:a4:c6:c7:53:98:e2:73:38:f3:aa:5d:a0:dd: 02:42:22:11:b0:2b:16:19:c7:85:13:26:6e:94:58: ad:3c:03:f5:cd:4f:48:1e:90:fa:fa:97:e3:81:c8: 6a:7c:45:cc:76:cf:3b:79:5d:e5:98:ca:62:4c:37: ad:c7:33:c5:30:35:76:4f:8b:a9:3e:ae:47:94:2e: c9:42:b6:20:15:08:a7:0a:db:69:5a:f8:e4:00:bf: 58:4a:90:d8:e1:d4:93:d7:65:7f:16:05:c1:99:7b: 11:97:8e:c7:88:f2:c9:e0:1f:43:af:6e:d1:85:bf: b0:68:e5:b4:3b:f1:25:77:4f:ee:3e:cc:c0:41:24: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:A3:6A:27:67:F9:6C:9C:8C:8F:4D:A8:55:A7:23:69:EB:12:97 X509v3 Authority Key Identifier: keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:04:14:a9:e3:69:7c:b6:0e:d5:3b:1a:c7:f8:c2:11:6d: 68:bb:af:f1:46:7c:7d:ae:35:59:1a:28:b1:80:ee:af:29:ba: 88:55:85:30:d8:4b:f4:99:f2:eb:c5:cb:63:8f:cf:ca:44:87: ac:a0:00:07:7c:3f:70:03:18:3d:01:60:6f:71:f3:bd:0b:8e: 4c:6b:fd:1f:cf:b9:67:94:d0:fb:86:59:06:9c:6e:f6:45:db: 26:0b:be:7a:dc:78:93:da:2f:e2:ba:a1:23:71:f2:f3:6b:b7: 0a:c2:a0:b9:20:3f:b2:a2:9b:17:88:be:c2:40:0b:d9:90:b3: 3f:a2:4f:45:26:94:9f:82:2f:da:54:3c:f9:75:78:b2:06:63: 66:df:f5:d8:26:1c:e7:27:26:bc:d7:18:e9:c0:03:cc:d3:46: 83:d8:a8:76:96:f2:ec:1e:96:14:16:94:49:37:42:78:67:02: 8a:99:ab:ac:2c:4e:9f:e8:10:d7:26:34:00:a2:a9:9c:04:52: 42:a6:0d:13:f5:56:aa:a5:b9:95:df:56:a3:67:b5:0b:9f:a4: d0:26:0a:2c:6f:af:fa:52:e0:6d:4f:7d:e4:fe:56:68:57:f0: 5b:e5:1b:2a:3a:65:ff:2f:3d:3d:9c:4f:73:be:4a:de:5b:09: 3c:5a:f7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvKk0dWJcDvcIUgA9/1lQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzgzN2Q1ZDE3OTY5ZDJiYzBkNDRlNTYzNGE5NGJmN2Qz NGU5MGIwHhcNMjUxMjI0MTkwMTE2WhcNMjUxMjI1MTkwMTE2WjAzMTEwLwYDVQQD EyhmZDUxYTM2YTI3NjdmOTZjOWM4YzhmNGRhODU1YTcyMzY5ZWIxMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1nO7JjATQN38MKE0cC3C5NSMpjX GEy0X6as8fNY6hclsJNMmu8kuPSoLQCI93LMUrJgKblsEMKHx6zZRRpuufEZvIDp x8bo6OcZDSa16zPuKIZsFc3OHws5z8g4f+qlA7+o4yE5fNLO5bB51spLPbEH73rm Aq0UFKTGx1OY4nM486pdoN0CQiIRsCsWGceFEyZulFitPAP1zU9IHpD6+pfjgchq fEXMds87eV3lmMpiTDetxzPFMDV2T4upPq5HlC7JQrYgFQinCttpWvjkAL9YSpDY 4dST12V/FgXBmXsRl47HiPLJ4B9Dr27Rhb+waOW0O/Eld0/uPszAQSR1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1Ro2onZ/lsnIyPTahVpyNp6xKXMB8GA1UdIwQY MBaAFBN4N9XReWnSvA1E5WNKlL99NOkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAt NGRiM2YxODhmNWI2LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAtNGRiM2YxODhmNWI2 LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcQEFKnj aXy2DtU7Gsf4whFtaLuv8UZ8fa41WRoosYDurym6iFWFMNhL9Jny68XLY4/PykSH rKAAB3w/cAMYPQFgb3HzvQuOTGv9H8+5Z5TQ+4ZZBpxu9kXbJgu+etx4k9ov4rqh I3Hy82u3CsKguSA/sqKbF4i+wkAL2ZCzP6JPRSaUn4Iv2lQ8+XV4sgZjZt/12CYc 5ycmvNcY6cADzNNGg9iodpby7B6WFBaUSTdCeGcCipmrrCxOn+gQ1yY0AKKpnARS QqYNE/VWqqW5ld9Wo2e1C5+k0CYKLG+v+lLgbU995P5WaFfwW+UbKjpl/y89PZxP c75K3lsJPFr3MA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:01:52 2025 by rpki-client