This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json) Hash identifier: inR014rM/P6MYI4JAYaYr+eOp2Yq+LrNNvFWAbYdGgU= Subject key identifier: 46:E7:73:6D:58:17:A8:8F:5E:C0:40:CB:E2:7E:CB:36:79:B9:D3:1D Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013 Certificate serial: 019B5ED2DF832A8D4491C012513BFDD6EF22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft Manifest number: 17A0 Signing time: Sat 27 Dec 2025 08:00:36 +0000 Manifest this update: Sat 27 Dec 2025 08:00:36 +0000 Manifest next update: Sun 28 Dec 2025 08:00:36 +0000 Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=) 2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: Mi0j1Vql5XT2N5/ICZJEOnBM5m4YL6yaNvsTI8zJRI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d2:df:83:2a:8d:44:91:c0:12:51:3b:fd:d6:ef:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704ab9688427073ff7e179de5af002e09f236013 Validity Not Before: Dec 27 08:00:36 2025 GMT Not After : Dec 28 08:00:36 2025 GMT Subject: CN=46e7736d5817a88f5ec040cbe27ecb3679b9d31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:38:3e:b6:3d:d1:4b:21:e0:a8:96:7c:58: 58:dc:21:e1:a8:ea:b9:b6:b5:49:80:8f:4b:b6:8c: 5a:ff:2b:53:09:6c:16:5c:df:f2:3f:1c:81:e3:3d: 41:08:01:8c:06:cf:de:d6:6f:f1:3f:f9:9c:aa:63: 54:07:6b:df:cc:f7:8f:30:d6:a2:45:da:59:6d:47: 75:1f:95:d7:79:dc:8f:5e:17:cf:46:4e:dc:7a:51: b6:e0:9a:84:1e:83:6c:6f:a5:05:83:cb:ad:0d:eb: b2:f2:97:bc:b5:e0:41:6b:96:8c:3f:7f:83:fe:4c: 4a:2e:69:5c:89:d1:d2:c8:6d:80:a1:f8:5a:45:69: a8:e1:2a:ea:89:c1:35:57:c3:aa:57:a9:32:32:58: 05:58:7d:b5:90:dd:67:6f:8c:ce:af:ba:e8:f1:99: 1c:c2:22:b2:7b:e4:3b:76:0d:92:65:c7:81:74:67: 22:49:e7:27:a7:ad:0a:f5:24:ee:5b:05:66:1e:a6: 87:ae:17:aa:3f:26:0a:a9:32:9c:a2:c7:6f:5b:39: bc:0d:5a:2b:d7:8a:02:51:7a:83:4d:5b:85:5a:ba: 61:46:d4:60:6d:48:1b:c2:d7:1c:ad:fa:10:18:31: b6:4f:83:7c:dd:08:c5:dd:27:e7:6d:1b:ab:62:11: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:73:6D:58:17:A8:8F:5E:C0:40:CB:E2:7E:CB:36:79:B9:D3:1D X509v3 Authority Key Identifier: keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f3:04:ed:7c:de:a3:18:7e:f1:7f:d2:ba:0d:6e:d8:0f:e1: a9:3b:49:09:24:5b:8c:1a:0a:19:46:1a:d3:4c:ec:a6:ac:cb: 5f:bc:65:fd:5e:71:e7:07:d6:46:0e:f5:25:0b:0c:0c:3f:2e: 0f:20:23:f5:8f:dd:72:6d:ba:91:78:18:a4:68:cf:54:fd:2d: 25:82:a3:cc:8b:61:ff:e5:6b:48:56:91:35:d4:3b:25:23:bd: 70:98:92:1c:d2:78:31:3a:f9:1a:5d:37:d1:9d:6c:37:77:4b: e8:7a:87:bf:46:d3:6b:9c:14:b0:d3:07:f1:1a:af:16:5c:2d: 08:54:ba:42:69:a7:05:93:47:25:70:42:be:44:68:80:5c:66: 5b:af:eb:81:1d:d6:f2:72:38:b0:f7:a9:df:04:03:87:67:ba: 12:96:fe:9e:57:8d:1a:13:f2:3f:97:9c:a1:68:14:d5:53:a0: d8:eb:8c:49:e8:96:fd:95:20:57:d5:6f:59:11:74:e4:e1:4e: f0:d4:84:ef:90:6d:b8:c5:5d:c6:da:4e:4c:d2:9c:ef:41:2a: f4:a8:b5:22:3e:df:69:15:e5:0f:f3:e6:5d:0c:82:53:88:86: 5d:ae:67:e4:49:f7:22:f6:9f:17:1f:3e:7b:57:bf:6a:c3:87: 8a:34:50:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte0t+DKo1EkcASUTv91u8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy MzYwMTMwHhcNMjUxMjI3MDgwMDM2WhcNMjUxMjI4MDgwMDM2WjAzMTEwLwYDVQQD Eyg0NmU3NzM2ZDU4MTdhODhmNWVjMDQwY2JlMjdlY2IzNjc5YjlkMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQ4PrY90Ush4KiWfFhY3CHhqOq5 trVJgI9Ltoxa/ytTCWwWXN/yPxyB4z1BCAGMBs/e1m/xP/mcqmNUB2vfzPePMNai RdpZbUd1H5XXedyPXhfPRk7celG24JqEHoNsb6UFg8utDeuy8pe8teBBa5aMP3+D /kxKLmlcidHSyG2AofhaRWmo4SrqicE1V8OqV6kyMlgFWH21kN1nb4zOr7ro8Zkc wiKye+Q7dg2SZceBdGciSecnp60K9STuWwVmHqaHrheqPyYKqTKcosdvWzm8DVor 14oCUXqDTVuFWrphRtRgbUgbwtccrfoQGDG2T4N83QjF3SfnbRurYhGe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbnc21YF6iPXsBAy+J+yzZ5udMdMB8GA1UdIwQY MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0 LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfME7Xze oxh+8X/Sug1u2A/hqTtJCSRbjBoKGUYa00zspqzLX7xl/V5x5wfWRg71JQsMDD8u DyAj9Y/dcm26kXgYpGjPVP0tJYKjzIth/+VrSFaRNdQ7JSO9cJiSHNJ4MTr5Gl03 0Z1sN3dL6HqHv0bTa5wUsNMH8RqvFlwtCFS6QmmnBZNHJXBCvkRogFxmW6/rgR3W 8nI4sPep3wQDh2e6Epb+nleNGhPyP5ecoWgU1VOg2OuMSeiW/ZUgV9VvWRF05OFO 8NSE75BtuMVdxtpOTNKc70Eq9Ki1Ij7faRXlD/PmXQyCU4iGXa5n5En3IvafFx8+ e1e/asOHijRQew== -----END CERTIFICATE-----Generated at Sat Dec 27 11:07:19 2025 by rpki-client