This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json) Hash identifier: yCbZ38dIajubXBwwyf+w9Lrj73GcvKf60Aszp6BOUlg= Subject key identifier: 1A:9E:70:FA:C4:85:9D:64:31:D9:FA:14:CE:E1:02:0D:A6:88:0F:8B Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Certificate serial: 019B51BD6FDF242083C3D3AC2AD7E9D765A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft Manifest number: 04B4 Signing time: Wed 24 Dec 2025 19:02:07 +0000 Manifest this update: Wed 24 Dec 2025 19:02:07 +0000 Manifest next update: Thu 25 Dec 2025 19:02:07 +0000 Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: cVorPvUEifZ20LFZgzzpKE2c11iW++zHCge69IMDEYI=) 2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:6f:df:24:20:83:c3:d3:ac:2a:d7:e9:d7:65:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Validity Not Before: Dec 24 19:02:07 2025 GMT Not After : Dec 25 19:02:07 2025 GMT Subject: CN=1a9e70fac4859d6431d9fa14cee1020da6880f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:04:48:64:af:28:89:f5:c5:1f:95:cc:57: e3:f3:2b:6a:41:66:53:1d:5b:ee:b5:f6:c1:a6:b8: ca:88:7a:0b:28:af:cf:ed:0e:4b:a8:2f:f1:94:de: 45:f9:7d:9c:df:54:6d:59:21:5b:8c:22:8b:49:90: f2:f4:c1:e2:9b:d8:98:b0:62:5a:76:ec:9f:93:bf: 66:42:a6:50:98:73:60:37:fc:40:a9:be:e9:ac:b3: f3:5f:66:c1:83:92:e5:8b:b5:dd:dd:1f:cb:ef:03: 16:51:f9:9c:f8:13:69:16:0f:6d:a3:85:6a:2d:12: 76:b9:62:b8:e2:d6:89:c9:b5:d0:19:43:52:b4:73: 10:52:b8:2a:80:b3:b6:68:92:d9:c9:23:f9:f6:20: 97:9a:05:9d:a5:2d:b4:de:1f:18:6e:eb:1b:44:a8: e3:88:ef:d0:d8:62:69:98:6b:7e:b1:18:1a:1a:ec: 85:ab:c3:7e:2c:b5:dc:5b:8f:93:ac:cd:74:99:be: 3f:c2:6c:45:ee:74:c9:4d:9c:80:b1:f7:62:aa:40: 14:ba:95:81:89:61:fb:0a:fa:af:93:65:da:4e:4f: 41:e1:c6:a1:5c:e5:ff:ad:52:ef:fe:e4:59:48:cb: a8:1a:74:2c:3f:bb:1f:6f:76:86:d8:31:5a:9f:e8: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9E:70:FA:C4:85:9D:64:31:D9:FA:14:CE:E1:02:0D:A6:88:0F:8B X509v3 Authority Key Identifier: keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:08:ee:89:de:ff:60:f8:cf:be:cb:2e:10:31:db:d0:3c:8c: 4d:ad:21:c1:7f:7b:26:4c:19:ba:84:db:e2:da:0b:de:d2:20: 4a:cc:95:67:14:47:fa:ce:80:d3:02:51:85:39:73:71:4e:b5: 4e:ea:78:eb:32:18:42:ec:91:2d:10:0e:ac:45:01:eb:e8:84: b4:a4:68:b4:de:65:f8:aa:54:92:4b:4c:9b:97:7c:37:da:5c: 96:9b:4f:02:74:2c:a6:0f:43:92:d2:08:10:1d:04:4d:2d:7e: 52:9a:7d:bb:44:bd:66:c9:9b:18:f3:d0:65:39:69:13:81:11: 20:93:a5:ea:96:f4:37:10:65:09:1e:f6:23:34:67:aa:f0:2d: 90:ce:d8:5b:0b:6e:3d:2b:84:02:6c:02:e8:ac:92:cc:d1:1b: b5:4b:60:fa:36:f3:a2:f9:c1:bb:68:bb:55:db:c9:b5:05:c3: 47:a5:0d:29:92:c8:ed:4f:06:b8:2c:77:7e:6c:09:99:3e:f9: 95:02:a4:c4:fd:1a:df:6f:dc:ac:22:29:32:69:f6:bc:7e:92: b9:b1:83:c8:54:59:9f:2e:27:de:d8:2d:c4:33:39:bf:9d:dc: 85:a9:84:b5:8a:9b:fb:eb:83:32:a3:7f:0f:9e:89:b9:90:f7: 07:61:4f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvW/fJCCDw9OsKtfp12WiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Nzc5NmUxNmI1NjVkNzI3MzY2OTg2Y2M5Y2E5Y2E2M2Qx YTRlNTgwHhcNMjUxMjI0MTkwMjA3WhcNMjUxMjI1MTkwMjA3WjAzMTEwLwYDVQQD EygxYTllNzBmYWM0ODU5ZDY0MzFkOWZhMTRjZWUxMDIwZGE2ODgwZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy40ESGSvKIn1xR+VzFfj8ytqQWZT HVvutfbBprjKiHoLKK/P7Q5LqC/xlN5F+X2c31RtWSFbjCKLSZDy9MHim9iYsGJa duyfk79mQqZQmHNgN/xAqb7prLPzX2bBg5Lli7Xd3R/L7wMWUfmc+BNpFg9to4Vq LRJ2uWK44taJybXQGUNStHMQUrgqgLO2aJLZySP59iCXmgWdpS203h8YbusbRKjj iO/Q2GJpmGt+sRgaGuyFq8N+LLXcW4+TrM10mb4/wmxF7nTJTZyAsfdiqkAUupWB iWH7Cvqvk2XaTk9B4cahXOX/rVLv/uRZSMuoGnQsP7sfb3aG2DFan+i/XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqecPrEhZ1kMdn6FM7hAg2miA+LMB8GA1UdIwQY MBaAFNd3luFrVl1yc2aYbMnKnKY9Gk5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTct MTU1ZmQwYjQzZjlmLzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTctMTU1ZmQwYjQzZjlm LzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQjuid7/ YPjPvssuEDHb0DyMTa0hwX97JkwZuoTb4toL3tIgSsyVZxRH+s6A0wJRhTlzcU61 Tup46zIYQuyRLRAOrEUB6+iEtKRotN5l+KpUkktMm5d8N9pclptPAnQspg9DktII EB0ETS1+Upp9u0S9ZsmbGPPQZTlpE4ERIJOl6pb0NxBlCR72IzRnqvAtkM7YWwtu PSuEAmwC6KySzNEbtUtg+jbzovnBu2i7VdvJtQXDR6UNKZLI7U8GuCx3fmwJmT75 lQKkxP0a32/crCIpMmn2vH6SubGDyFRZny4n3tgtxDM5v53chamEtYqb++uDMqN/ D56JuZD3B2FP2Q== -----END CERTIFICATE-----Generated at Wed Dec 24 23:23:14 2025 by rpki-client