This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json) Hash identifier: 4rkE1zr4DdssnLHn/ZXc+byVu3285Xw3SEJWyALGTkU= Subject key identifier: 90:05:42:F0:F8:B8:50:21:0D:02:C6:3E:3E:8C:AB:8C:A5:66:81:E8 Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda Certificate serial: 019B397DC18BD23461B18A1A3B4C621A0F7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft Manifest number: 0E0A Signing time: Sat 20 Dec 2025 02:01:41 +0000 Manifest this update: Sat 20 Dec 2025 02:01:41 +0000 Manifest next update: Sun 21 Dec 2025 02:01:41 +0000 Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: wSsNMSIt8jJ73RTQTFIdOucIcuqQTPqr8+TECRnkM60=) 2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:c1:8b:d2:34:61:b1:8a:1a:3b:4c:62:1a:0f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda Validity Not Before: Dec 20 02:01:41 2025 GMT Not After : Dec 21 02:01:41 2025 GMT Subject: CN=900542f0f8b850210d02c63e3e8cab8ca56681e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:29:b4:99:e0:6e:59:75:61:ee:b3:3d:ae: 15:b1:47:69:e9:25:89:29:22:9d:dd:1c:68:95:11: e1:55:fb:b7:df:a2:78:60:36:82:7f:16:ec:35:9b: 6a:63:97:90:18:a4:d8:1e:50:49:1f:12:90:4c:a9: 59:c5:45:8a:f9:23:3c:33:35:08:a0:eb:14:e4:a3: 5b:a9:5e:15:47:56:35:78:b2:b4:83:d1:6c:8b:9b: b7:f1:98:ee:6c:00:d6:f9:ef:34:36:2d:22:40:33: 5c:18:cd:17:d1:8e:27:1c:d9:d0:95:b6:de:77:80: 76:2d:79:5e:2b:9c:8d:75:d4:4a:59:31:2d:ac:15: 7e:ff:9a:2c:37:3d:85:7b:aa:02:56:d8:98:0b:fa: 25:14:83:b7:4e:2f:97:b0:b4:a3:51:3f:d9:12:0e: e1:8d:89:78:c6:d7:d6:66:3c:ce:58:7a:8c:30:93: 07:9b:2f:84:cc:b3:47:49:ce:61:a2:4e:af:64:77: 71:b3:0f:6a:bd:65:08:20:d2:75:fb:cb:8f:2a:9f: 67:f9:1a:52:d2:52:7a:3b:77:58:11:b0:6c:4a:16: ba:1b:02:27:48:cb:47:69:09:14:75:4f:77:9b:5f: 77:74:bb:74:03:5a:58:55:36:2c:e3:40:94:8b:08: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:42:F0:F8:B8:50:21:0D:02:C6:3E:3E:8C:AB:8C:A5:66:81:E8 X509v3 Authority Key Identifier: keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e4:d2:de:a7:d7:6a:14:38:cd:f4:31:03:6d:3f:24:74:e3: 09:cf:21:16:b3:7b:95:65:09:4c:6d:4a:32:a6:46:f7:83:94: 12:c0:32:9c:80:b8:1f:42:18:ff:b4:38:f3:0e:36:41:9f:15: d7:f5:76:3e:69:96:96:f4:2c:5c:e8:a6:dd:b4:89:a0:3b:3f: 3f:9e:f8:ca:08:df:f0:50:19:73:16:30:0d:aa:7a:63:85:6c: 97:07:3e:ab:05:fe:48:e0:6c:ce:bb:71:84:89:84:61:06:30: 99:89:64:b4:48:ea:1d:af:7e:34:b2:9f:87:3a:72:ab:d5:fb: 63:7c:1e:5f:43:59:09:b0:f9:d1:48:8c:d9:18:38:20:6a:87: 45:b2:ed:80:aa:ff:e7:27:a9:e4:dd:07:f2:95:21:a0:e6:96: ea:e2:56:00:97:3e:5a:53:5c:a2:c5:39:2c:0d:c5:ad:75:9a: 8e:ad:99:0a:65:24:ed:aa:d6:58:01:5e:f6:fc:13:58:d0:12: 8f:a2:59:64:58:af:6c:e9:f0:e9:72:45:24:6e:63:2f:f9:5f: 31:93:28:c1:20:78:99:2e:f8:22:86:d8:b7:f8:c7:d7:43:56: e8:fd:a8:d8:7b:a6:ad:84:82:c2:03:87:70:e6:e8:ea:e1:ac: 60:a0:1e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fcGL0jRhsYoaO0xiGg9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2 NTBmZGEwHhcNMjUxMjIwMDIwMTQxWhcNMjUxMjIxMDIwMTQxWjAzMTEwLwYDVQQD Eyg5MDA1NDJmMGY4Yjg1MDIxMGQwMmM2M2UzZThjYWI4Y2E1NjY4MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYAptJngbll1Ye6zPa4VsUdp6SWJ KSKd3RxolRHhVfu336J4YDaCfxbsNZtqY5eQGKTYHlBJHxKQTKlZxUWK+SM8MzUI oOsU5KNbqV4VR1Y1eLK0g9Fsi5u38ZjubADW+e80Ni0iQDNcGM0X0Y4nHNnQlbbe d4B2LXleK5yNddRKWTEtrBV+/5osNz2Fe6oCVtiYC/olFIO3Ti+XsLSjUT/ZEg7h jYl4xtfWZjzOWHqMMJMHmy+EzLNHSc5hok6vZHdxsw9qvWUIINJ1+8uPKp9n+RpS 0lJ6O3dYEbBsSha6GwInSMtHaQkUdU93m193dLt0A1pYVTYs40CUiwg9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAFQvD4uFAhDQLGPj6Mq4ylZoHoMB8GA1UdIwQY MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4 LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+TS3qfX ahQ4zfQxA20/JHTjCc8hFrN7lWUJTG1KMqZG94OUEsAynIC4H0IY/7Q48w42QZ8V 1/V2PmmWlvQsXOim3bSJoDs/P574ygjf8FAZcxYwDap6Y4Vslwc+qwX+SOBszrtx hImEYQYwmYlktEjqHa9+NLKfhzpyq9X7Y3weX0NZCbD50UiM2Rg4IGqHRbLtgKr/ 5yep5N0H8pUhoOaW6uJWAJc+WlNcosU5LA3FrXWajq2ZCmUk7arWWAFe9vwTWNAS j6JZZFivbOnw6XJFJG5jL/lfMZMowSB4mS74IobYt/jH10NW6P2o2HumrYSCwgOH cObo6uGsYKAeeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:22:11 2025 by rpki-client