This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json) Hash identifier: o9hGJs3wYhnIsvWrxw8nY4PEl33lKysh61h9ZX3IHBc= Subject key identifier: 2A:5D:3E:7B:23:65:1C:D2:2D:E9:2C:4C:54:28:D6:D2:C2:CF:52:40 Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019B3F7F293E3C2329CCECB3F6D050DF9FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft Manifest number: 0DB0 Signing time: Sun 21 Dec 2025 06:00:56 +0000 Manifest this update: Sun 21 Dec 2025 06:00:56 +0000 Manifest next update: Mon 22 Dec 2025 06:00:56 +0000 Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: 00GWi4jxFUa+Q7YBxjvDQR3DGk7mGuU+fQ01x3yMlrg=) 2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:29:3e:3c:23:29:cc:ec:b3:f6:d0:50:df:9f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Dec 21 06:00:56 2025 GMT Not After : Dec 22 06:00:56 2025 GMT Subject: CN=2a5d3e7b23651cd22de92c4c5428d6d2c2cf5240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:4d:51:40:7d:c9:59:bc:7f:11:c3:a2:c0: d5:95:7e:6f:fc:a6:c7:4e:d9:9b:6e:af:18:53:28: 9f:48:40:10:f9:42:93:38:f5:e6:fb:1c:6d:5c:f6: a7:c1:bb:05:1c:7d:00:a2:d2:66:59:61:93:51:60: 2a:b0:e9:9a:ea:0b:54:81:25:0e:95:b7:53:fe:de: dc:97:29:56:76:dd:26:d4:51:e1:ac:3b:06:b4:ef: da:70:d0:16:ba:d3:b7:14:ad:23:d9:42:fe:8c:f7: 92:8c:7b:3e:8a:ea:75:5a:32:40:91:15:b5:19:a3: d7:d3:ee:b5:dc:11:15:9b:a0:cb:55:8c:f8:8e:4a: d4:d4:99:94:dc:f8:7f:3a:1b:21:4d:af:00:75:d9: 84:b2:d8:9d:91:59:3c:5c:2c:9b:71:48:05:10:70: bf:8a:af:bc:53:6d:42:0b:c3:8f:b8:07:18:d1:d5: 0a:da:ac:19:46:07:b2:17:ea:39:21:d1:3c:82:e5: 9c:05:f8:02:60:b4:44:2a:cf:b4:33:7c:63:98:e0: 2a:52:47:42:1b:b6:76:7e:85:03:c7:85:11:ce:c9: b1:e0:79:e9:49:5a:da:32:1a:2f:68:9e:12:8a:d3: 33:96:50:de:65:6b:f4:ce:56:d4:20:73:fc:bb:fc: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:3E:7B:23:65:1C:D2:2D:E9:2C:4C:54:28:D6:D2:C2:CF:52:40 X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:15:f1:34:8c:ca:3e:ad:9c:dd:c3:22:26:5c:b8:19:e0:3c: 26:f8:55:bf:96:d3:86:00:b9:c3:07:8e:7c:48:e9:29:88:dc: 99:8d:9c:14:96:7c:07:33:90:10:45:d2:ec:20:7e:70:ef:fd: 02:bb:93:00:b4:13:f2:c9:b2:7d:b1:29:a4:01:3e:b2:da:c0: a6:0d:b0:24:8a:92:dc:99:e3:56:50:4b:82:46:77:af:8a:7d: 87:ba:2a:16:e2:5e:23:00:ac:b7:77:0c:c5:0a:e2:52:bb:63: e7:c5:d9:ba:24:ba:7c:71:a9:07:d4:66:93:9e:34:ee:8d:52: ae:50:ff:d8:7c:db:0e:5d:c8:fe:78:b2:a7:be:dd:2a:18:63: 06:60:44:f9:85:5b:ff:d9:f3:7d:51:18:6d:13:a5:99:6d:54: ff:b8:3f:7f:6d:07:b1:f2:7e:e0:7b:3f:01:e3:e6:c5:e6:90: a8:55:e3:8c:0c:13:77:a1:b6:64:0f:3f:d6:28:9b:73:65:7c: 1c:5b:ec:9d:96:b3:b3:5b:26:32:bb:ae:f7:7d:ad:62:43:49: ee:45:59:41:a6:ec:2f:d5:86:d8:c9:5c:6f:29:75:6b:1a:83: 1f:d5:04:fa:6a:3d:64:72:0b:aa:0a:0e:09:f2:b9:57:83:d6: 2d:98:69:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyk+PCMpzOyz9tBQ35/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjUxMjIxMDYwMDU2WhcNMjUxMjIyMDYwMDU2WjAzMTEwLwYDVQQD EygyYTVkM2U3YjIzNjUxY2QyMmRlOTJjNGM1NDI4ZDZkMmMyY2Y1MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBxNUUB9yVm8fxHDosDVlX5v/KbH Ttmbbq8YUyifSEAQ+UKTOPXm+xxtXPanwbsFHH0AotJmWWGTUWAqsOma6gtUgSUO lbdT/t7clylWdt0m1FHhrDsGtO/acNAWutO3FK0j2UL+jPeSjHs+iup1WjJAkRW1 GaPX0+613BEVm6DLVYz4jkrU1JmU3Ph/OhshTa8AddmEstidkVk8XCybcUgFEHC/ iq+8U21CC8OPuAcY0dUK2qwZRgeyF+o5IdE8guWcBfgCYLREKs+0M3xjmOAqUkdC G7Z2foUDx4URzsmx4HnpSVraMhovaJ4SitMzllDeZWv0zlbUIHP8u/ynwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpdPnsjZRzSLeksTFQo1tLCz1JAMB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxXxNIzK Pq2c3cMiJly4GeA8JvhVv5bThgC5wweOfEjpKYjcmY2cFJZ8BzOQEEXS7CB+cO/9 AruTALQT8smyfbEppAE+strApg2wJIqS3JnjVlBLgkZ3r4p9h7oqFuJeIwCst3cM xQriUrtj58XZuiS6fHGpB9Rmk5407o1SrlD/2HzbDl3I/niyp77dKhhjBmBE+YVb /9nzfVEYbROlmW1U/7g/f20HsfJ+4Hs/AePmxeaQqFXjjAwTd6G2ZA8/1iibc2V8 HFvsnZazs1smMruu932tYkNJ7kVZQabsL9WG2Mlcbyl1axqDH9UE+mo9ZHILqgoO CfK5V4PWLZhpZg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:23:22 2025 by rpki-client