This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json) Hash identifier: ZsL/KLHwFyiTSUVMu/qcGUrTuL3EoauRhYUbiqt+qBg= Subject key identifier: 30:A3:2A:61:F4:35:1E:E8:BA:B9:CE:68:C8:E2:EA:80:BC:F7:AD:38 Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06 Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006 Certificate serial: 019B3CEB9236DEA0D02A701A0E8EA520C373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft Manifest number: 0861 Signing time: Sat 20 Dec 2025 18:00:29 +0000 Manifest this update: Sat 20 Dec 2025 18:00:29 +0000 Manifest next update: Sun 21 Dec 2025 18:00:29 +0000 Files and hashes: 1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: eROlDdZtyUD6WB1r5h7D9R2quV95gZ8UgB05nFxfQGc=) 2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=) 3: o5c9jN1jf1Vq55US0JNDh4jzhhg.roa (hash: HXHoZ43PrTM6Khxwi8qIfw/BUPH0XkctdT6uWpJdea8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:92:36:de:a0:d0:2a:70:1a:0e:8e:a5:20:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006 Validity Not Before: Dec 20 18:00:29 2025 GMT Not After : Dec 21 18:00:29 2025 GMT Subject: CN=30a32a61f4351ee8bab9ce68c8e2ea80bcf7ad38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:ee:d2:09:f6:ce:73:06:9c:dc:0d:dc:4c: 8d:46:bd:e7:6f:ba:dc:06:17:0c:bf:5a:4b:24:aa: e1:fd:04:dd:e9:73:59:28:b6:e6:dd:11:22:a0:6f: b1:f5:1b:16:76:93:4a:9b:d4:20:4a:a3:ef:ac:75: e0:5c:34:87:58:02:10:87:82:c7:2a:fa:ac:98:bc: 9f:d0:68:b3:2a:85:16:fd:61:7f:07:cc:40:8e:9a: 4a:6c:9d:b0:4c:0a:69:d3:24:9c:dd:c8:4b:ef:c4: e5:3b:b5:0f:d0:85:45:29:4c:9f:3f:3b:11:63:c1: 16:a7:c2:e8:cf:40:f4:d7:f1:48:cc:ed:14:08:24: 1d:e3:11:0d:c1:c3:50:3a:d3:bd:cd:50:2d:45:6d: 66:0b:5f:11:9e:87:d8:77:2b:28:3f:48:c4:e8:4d: f8:38:32:cb:d3:51:ed:9b:89:ec:97:31:c2:15:8f: aa:98:0f:24:0a:11:ed:83:10:41:60:b7:dc:b8:db: 09:af:25:78:eb:c0:5c:9d:75:85:2e:73:2c:aa:9c: f1:f8:fe:b9:6a:07:cd:f0:70:aa:4c:ed:1c:59:13: fe:d4:81:5a:89:72:34:78:8e:49:44:ea:c4:fd:be: 12:d3:2a:21:26:a5:64:43:71:42:c3:4c:38:c9:46: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:2A:61:F4:35:1E:E8:BA:B9:CE:68:C8:E2:EA:80:BC:F7:AD:38 X509v3 Authority Key Identifier: keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:ae:bd:aa:c4:62:11:f1:44:eb:40:2a:af:6f:b7:aa:cc: 54:81:a3:3f:87:60:9e:f1:a8:08:8a:f6:3f:6c:e7:36:be:0b: bf:c2:6a:d6:fd:01:be:56:4b:2f:79:d5:2b:2b:c5:72:97:66: 48:fd:f9:e6:f4:8d:28:3c:61:42:09:4d:27:06:5a:2e:1f:48: f1:2b:53:3e:ca:19:c2:5d:22:7d:02:e8:cc:c5:68:2f:c6:99: d0:0b:fd:85:db:9c:b2:1b:cc:0b:b3:2e:9e:4c:55:97:ad:95: 5d:83:7f:27:7b:88:14:7c:5c:0b:54:8f:ca:31:e2:5a:09:0d: f9:43:4f:d0:4d:3f:c5:ab:9f:27:da:8a:21:b0:59:11:62:4e: c1:c0:de:94:46:3e:cf:7e:b8:51:7f:2d:34:54:b2:3e:a2:4b: 8a:a0:c4:e2:db:c5:06:1e:68:8c:da:10:4c:a7:3c:7d:f5:8a: ac:2f:28:03:f7:04:44:a5:91:ca:44:47:da:c6:cb:75:e7:14: 67:a6:b8:11:aa:e0:3d:53:ac:9e:10:6e:d2:69:3a:45:b9:9e: 0f:3c:5c:78:40:ea:57:76:3d:3f:23:37:ad:13:73:2f:c1:b6: cb:82:0a:c1:f2:34:b0:97:39:0c:62:b7:e6:57:97:3d:12:e3: 7c:bd:38:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865I23qDQKnAaDo6lIMNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDcwMzhiODNlYjI0N2ZjNjViZGFkMDE5NWI4NjI0NmY4 ZjMwMDYwHhcNMjUxMjIwMTgwMDI5WhcNMjUxMjIxMTgwMDI5WjAzMTEwLwYDVQQD EygzMGEzMmE2MWY0MzUxZWU4YmFiOWNlNjhjOGUyZWE4MGJjZjdhZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDPu0gn2znMGnNwN3EyNRr3nb7rc BhcMv1pLJKrh/QTd6XNZKLbm3REioG+x9RsWdpNKm9QgSqPvrHXgXDSHWAIQh4LH KvqsmLyf0GizKoUW/WF/B8xAjppKbJ2wTApp0ySc3chL78TlO7UP0IVFKUyfPzsR Y8EWp8Loz0D01/FIzO0UCCQd4xENwcNQOtO9zVAtRW1mC18RnofYdysoP0jE6E34 ODLL01Htm4nslzHCFY+qmA8kChHtgxBBYLfcuNsJryV468BcnXWFLnMsqpzx+P65 agfN8HCqTO0cWRP+1IFaiXI0eI5JROrE/b4S0yohJqVkQ3FCw0w4yUYQgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCjKmH0NR7ournOaMji6oC89604MB8GA1UdIwQY MBaAFBDXA4uD6yR/xlva0BlbhiRvjzAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUt MWM1YmRlMmMxNGY0LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUtMWM1YmRlMmMxNGY0 LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgiuvarE YhHxROtAKq9vt6rMVIGjP4dgnvGoCIr2P2znNr4Lv8Jq1v0BvlZLL3nVKyvFcpdm SP355vSNKDxhQglNJwZaLh9I8StTPsoZwl0ifQLozMVoL8aZ0Av9hducshvMC7Mu nkxVl62VXYN/J3uIFHxcC1SPyjHiWgkN+UNP0E0/xaufJ9qKIbBZEWJOwcDelEY+ z364UX8tNFSyPqJLiqDE4tvFBh5ojNoQTKc8ffWKrC8oA/cERKWRykRH2sbLdecU Z6a4EargPVOsnhBu0mk6RbmeDzxceEDqV3Y9PyM3rRNzL8G2y4IKwfI0sJc5DGK3 5leXPRLjfL04Sg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:41 2025 by rpki-client