This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json) Hash identifier: d1NRKe65mDDH/0Apm3KLFvSCeDaFgLhZgefwaL5EhE0= Subject key identifier: 12:94:65:C3:6B:FA:FA:DF:1C:99:F3:99:8B:31:94:7E:0D:1F:6A:3F Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019B416D2A88DB06DC68133A11C27F9D3AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft Manifest number: 0DB1 Signing time: Sun 21 Dec 2025 15:00:31 +0000 Manifest this update: Sun 21 Dec 2025 15:00:31 +0000 Manifest next update: Mon 22 Dec 2025 15:00:31 +0000 Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: Y444ZgqrdKQtXIFL2AXhbpnrEz5xRdeGOr2CklAJNsM=) 2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:2a:88:db:06:dc:68:13:3a:11:c2:7f:9d:3a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Dec 21 15:00:31 2025 GMT Not After : Dec 22 15:00:31 2025 GMT Subject: CN=129465c36bfafadf1c99f3998b31947e0d1f6a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:da:fa:9f:05:d5:c1:2a:92:c1:1d:cc:e9: be:e4:d0:48:d4:1b:19:b0:97:74:bc:21:9d:33:37: d4:fb:71:c5:75:a4:1b:96:ba:39:a6:66:66:6f:2b: 0f:20:b5:21:b7:dc:84:8a:3d:ea:f5:41:07:ca:f3: 68:ca:68:da:61:bf:5d:0b:5a:b2:05:ff:ac:cb:3b: 5f:f3:52:a9:da:65:e9:89:8b:2d:4b:79:8a:51:f5: 1e:ed:90:a5:3c:62:85:48:a6:d9:27:b2:5d:98:66: e4:50:7b:b4:f7:ef:42:98:f0:ce:43:48:ea:d8:8c: 35:5b:10:11:d8:21:3a:94:57:41:d9:bb:db:7f:86: 75:9e:9c:a4:60:6c:f4:2d:c6:b2:58:4f:55:3e:19: f7:e4:e4:bd:1c:1d:d5:42:ab:d1:31:a9:77:85:cf: 9e:a1:97:94:c7:0c:ba:1f:60:98:11:0a:77:63:0b: 4b:aa:30:c6:8b:d5:51:50:df:41:74:49:a2:5a:7d: 9c:81:53:68:20:6c:c4:53:20:a0:b5:db:60:2f:b3: c3:4b:4d:35:67:fc:9b:df:eb:41:01:4c:90:f8:b8: 3a:ee:e5:d0:35:3d:99:9e:b6:23:9d:67:6d:5b:bc: 1f:88:17:ef:a8:f0:4f:f7:c3:c0:96:3c:12:c6:4e: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:94:65:C3:6B:FA:FA:DF:1C:99:F3:99:8B:31:94:7E:0D:1F:6A:3F X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d1:b0:40:28:20:18:c3:e4:5d:da:38:e9:73:21:04:d4:da: 3c:b4:b5:74:8f:4b:4a:4d:b2:11:0d:c2:fb:bd:2e:0b:15:c7: 14:bf:8e:9a:69:75:c3:c7:06:d9:ef:11:da:f4:af:38:22:c9: 43:f3:3c:81:77:49:5f:1e:22:03:6e:53:85:b6:eb:e6:d8:58: b5:d9:9d:f9:03:87:74:c3:1b:ba:2b:d7:2f:60:80:b2:99:3f: 28:b2:36:45:1d:09:e0:d7:3a:56:0b:7e:4e:70:8a:4f:de:1d: 33:c6:32:06:82:2b:a2:52:8b:c7:4e:f4:3c:95:63:1c:36:94: b3:6e:f3:63:59:af:c4:5c:43:96:48:cc:cb:c1:a4:d2:99:55: de:aa:e6:b1:72:78:d7:f1:b4:b2:8e:79:ff:e6:42:aa:61:cd: fb:b6:47:91:df:77:40:48:1e:1b:a6:da:d7:92:0f:4c:43:02: 44:2c:5b:84:3e:03:75:33:13:0b:f5:55:ed:9d:d5:e6:3b:28: 2e:48:d2:a8:9b:fb:7a:f6:35:72:d6:ea:d4:4e:1f:e2:a9:81: 30:83:7f:0a:6c:c0:08:c3:0d:dd:f3:a5:51:89:90:57:c3:18: d9:88:a7:68:9c:9f:16:22:f0:0f:20:fa:45:84:3b:6b:1f:c0: 8a:d5:4f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbSqI2wbcaBM6EcJ/nTrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjUxMjIxMTUwMDMxWhcNMjUxMjIyMTUwMDMxWjAzMTEwLwYDVQQD EygxMjk0NjVjMzZiZmFmYWRmMWM5OWYzOTk4YjMxOTQ3ZTBkMWY2YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy/a+p8F1cEqksEdzOm+5NBI1BsZ sJd0vCGdMzfU+3HFdaQblro5pmZmbysPILUht9yEij3q9UEHyvNoymjaYb9dC1qy Bf+syztf81Kp2mXpiYstS3mKUfUe7ZClPGKFSKbZJ7JdmGbkUHu09+9CmPDOQ0jq 2Iw1WxAR2CE6lFdB2bvbf4Z1npykYGz0LcayWE9VPhn35OS9HB3VQqvRMal3hc+e oZeUxwy6H2CYEQp3YwtLqjDGi9VRUN9BdEmiWn2cgVNoIGzEUyCgtdtgL7PDS001 Z/yb3+tBAUyQ+Lg67uXQNT2ZnrYjnWdtW7wfiBfvqPBP98PAljwSxk5wbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKUZcNr+vrfHJnzmYsxlH4NH2o/MB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9GwQCgg GMPkXdo46XMhBNTaPLS1dI9LSk2yEQ3C+70uCxXHFL+Omml1w8cG2e8R2vSvOCLJ Q/M8gXdJXx4iA25Thbbr5thYtdmd+QOHdMMbuivXL2CAspk/KLI2RR0J4Nc6Vgt+ TnCKT94dM8YyBoIrolKLx070PJVjHDaUs27zY1mvxFxDlkjMy8Gk0plV3qrmsXJ4 1/G0so55/+ZCqmHN+7ZHkd93QEgeG6ba15IPTEMCRCxbhD4DdTMTC/VV7Z3V5jso LkjSqJv7evY1ctbq1E4f4qmBMIN/CmzACMMN3fOlUYmQV8MY2YinaJyfFiLwDyD6 RYQ7ax/AitVPLA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:16:56 2025 by rpki-client