This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json) Hash identifier: LJkPTB2l+cp5ouB7GesPkBSeWbbS+vZ+8hryCvMI5As= Subject key identifier: 48:11:69:AA:E2:1D:5A:97:E2:08:87:46:ED:F1:89:EE:07:AA:C9:6F Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2 Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2 Certificate serial: 019B41366BBB749C2A3688555E5E5F483330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 14:00:44 +0000 Manifest this update: Sun 21 Dec 2025 14:00:44 +0000 Manifest next update: Mon 22 Dec 2025 14:00:44 +0000 Files and hashes: 1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=) 2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: eE6E6vGHUsFqSu+yK6fJ7IO7etaZa9eEIQ2FImL196Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:6b:bb:74:9c:2a:36:88:55:5e:5e:5f:48:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2 Validity Not Before: Dec 21 14:00:44 2025 GMT Not After : Dec 22 14:00:44 2025 GMT Subject: CN=481169aae21d5a97e2088746edf189ee07aac96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:a4:48:b0:2b:44:f9:ed:26:a5:b8:65:9b: 56:50:e5:00:42:d3:42:12:e6:a8:40:1d:62:e1:ca: 1c:03:d6:b0:9a:4a:39:3e:5d:bf:fe:60:7f:b2:0c: ed:e9:d7:8e:25:44:15:86:4c:a9:e7:1c:0c:0d:1c: 18:be:0f:97:5e:fd:84:8f:3c:bb:99:75:81:dd:27: b0:74:d7:cd:af:54:75:fb:52:88:53:62:aa:b7:9a: b5:d6:38:e0:5e:1a:b8:53:eb:c4:b6:af:17:f4:86: 9e:d6:10:5a:32:d5:03:87:6f:1c:62:69:f7:36:af: bc:b2:93:da:ff:29:f9:00:ff:fa:76:d9:18:71:a2: 4a:75:73:53:af:25:9f:99:e9:e7:fe:88:f8:76:4d: 26:b7:ed:85:8e:ab:8a:cc:91:8e:f1:1f:40:86:6c: 90:d4:40:b6:9a:be:a1:5a:b9:35:4b:17:ba:b4:bb: c9:12:b9:dd:0f:74:01:26:23:c7:6f:7d:93:9b:06: a8:a0:76:b5:42:94:38:74:e3:21:ce:29:ec:8e:e1: da:9e:3a:ce:f6:98:a2:c1:29:0d:5f:75:9a:1b:2a: bf:04:3a:5a:13:ad:c1:4a:18:6a:f0:07:c9:85:66: c9:7d:9f:d5:65:60:05:50:e5:91:f7:64:ab:ce:08: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:11:69:AA:E2:1D:5A:97:E2:08:87:46:ED:F1:89:EE:07:AA:C9:6F X509v3 Authority Key Identifier: keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:74:3a:b8:44:32:45:1e:de:9b:7b:2c:51:70:9a:46:b0:cd: 98:21:0b:93:13:47:96:f0:d4:4e:a0:55:b3:be:96:f1:7e:3a: 56:93:97:bc:f7:e6:35:cd:65:41:0c:95:90:ed:ee:3c:91:ec: 24:e3:ba:d5:06:e8:2d:8a:2f:f9:de:50:d8:80:74:1f:2a:72: 54:d7:e9:cd:e0:d4:21:99:78:09:cb:84:4c:ae:75:f6:e7:34: a4:26:a0:3e:38:f6:d3:5e:55:01:7b:57:a6:94:9f:74:20:d6: a8:61:f4:51:78:53:05:2d:16:9a:ea:b9:48:e0:ad:fa:10:c2: 01:78:b7:25:b7:1e:49:08:c3:87:37:b7:78:f5:aa:27:12:65: 50:ad:39:e6:91:5d:0a:a5:63:c0:2b:95:04:8a:22:49:08:ee: 72:24:94:13:4d:76:58:0a:d5:89:6d:14:70:09:ad:40:8e:af: b9:46:c8:4b:c4:91:9c:7c:7e:68:b5:e8:e6:31:68:bc:0c:d2: 28:74:70:f3:7a:47:27:01:e9:d1:d4:13:e6:b8:97:bc:59:58: 94:c2:6c:37:2d:1a:a0:f2:5a:c6:35:1c:18:c6:d4:fc:17:1c: 17:15:ae:33:39:b3:2c:f5:62:7b:68:58:7f:1f:9f:17:e9:bf: 09:30:44:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNmu7dJwqNohVXl5fSDMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzVkMzcyMDM5YjFhYjJkNDE2YWQ4M2JmNjkxNDA1ODQx MWMyYTIwHhcNMjUxMjIxMTQwMDQ0WhcNMjUxMjIyMTQwMDQ0WjAzMTEwLwYDVQQD Eyg0ODExNjlhYWUyMWQ1YTk3ZTIwODg3NDZlZGYxODllZTA3YWFjOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78GkSLArRPntJqW4ZZtWUOUAQtNC EuaoQB1i4cocA9awmko5Pl2//mB/sgzt6deOJUQVhkyp5xwMDRwYvg+XXv2Ejzy7 mXWB3SewdNfNr1R1+1KIU2Kqt5q11jjgXhq4U+vEtq8X9Iae1hBaMtUDh28cYmn3 Nq+8spPa/yn5AP/6dtkYcaJKdXNTryWfmenn/oj4dk0mt+2FjquKzJGO8R9AhmyQ 1EC2mr6hWrk1Sxe6tLvJErndD3QBJiPHb32TmwaooHa1QpQ4dOMhzinsjuHanjrO 9piiwSkNX3WaGyq/BDpaE63BShhq8AfJhWbJfZ/VZWAFUOWR92SrzgjYLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgRaariHVqX4giHRu3xie4HqslvMB8GA1UdIwQY MBaAFHt103IDmxqy1Batg79pFAWEEcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2Yt NmIwMDM4ODc1YTE0LzEvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2YtNmIwMDM4ODc1YTE0 LzEvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHQ6uEQy RR7em3ssUXCaRrDNmCELkxNHlvDUTqBVs76W8X46VpOXvPfmNc1lQQyVkO3uPJHs JOO61QboLYov+d5Q2IB0HypyVNfpzeDUIZl4CcuETK519uc0pCagPjj2015VAXtX ppSfdCDWqGH0UXhTBS0Wmuq5SOCt+hDCAXi3JbceSQjDhze3ePWqJxJlUK055pFd CqVjwCuVBIoiSQjuciSUE012WArViW0UcAmtQI6vuUbIS8SRnHx+aLXo5jFovAzS KHRw83pHJwHp0dQT5riXvFlYlMJsNy0aoPJaxjUcGMbU/BccFxWuMzmzLPVie2hY fx+fF+m/CTBEpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:24 2025 by rpki-client