This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json) Hash identifier: DpF4+FkdGsluqirh3Oxun3kVd0eXeSY5C92eQPfQiVI= Subject key identifier: 4C:5D:0C:D0:ED:02:C5:61:15:ED:63:FA:A2:7C:29:04:E7:6E:B1:3E Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5 Certificate serial: 019B544F2E70E5BAF8D288E589A91964235F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft Manifest number: 03BD Signing time: Thu 25 Dec 2025 07:00:33 +0000 Manifest this update: Thu 25 Dec 2025 07:00:33 +0000 Manifest next update: Fri 26 Dec 2025 07:00:33 +0000 Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=) 2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: ICL5FE6srXMLbNn49gAOFvIswtrzSKEIaxmuSRSXUpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:2e:70:e5:ba:f8:d2:88:e5:89:a9:19:64:23:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13701ebe06799de0969899205150e532deffe7b5 Validity Not Before: Dec 25 07:00:33 2025 GMT Not After : Dec 26 07:00:33 2025 GMT Subject: CN=4c5d0cd0ed02c56115ed63faa27c2904e76eb13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:21:cb:6c:0e:61:a9:76:29:46:05:bf:81: 48:c5:0b:e9:f9:39:5e:33:54:0d:72:31:a4:8d:c8: 72:43:56:ed:2f:49:e0:cc:e8:dd:38:22:d3:fd:6d: 55:0a:50:b8:9e:5f:02:21:63:89:63:1a:8f:60:d5: af:e8:10:5c:19:ed:58:cf:90:8f:98:1b:b3:b5:de: 9d:7d:8d:e6:2d:8b:62:7a:58:13:5b:4e:09:d7:bd: af:da:54:d2:c3:4d:a9:c9:8c:47:12:42:f8:1b:40: 78:73:cb:54:49:ad:d0:fd:80:38:1b:5c:18:f0:f3: 1f:61:44:f5:8f:dd:cd:99:d6:22:aa:e3:4d:97:26: 3d:85:8f:dd:dc:20:db:eb:a4:4f:a6:62:75:b5:84: 87:29:13:e7:9c:75:59:a3:67:19:17:d1:1a:75:f7: 61:3d:db:67:71:e8:35:35:0e:7f:a1:79:80:75:3d: 39:92:1d:e2:dc:41:63:40:51:c7:4d:a4:09:6a:96: 8d:70:2b:db:23:f4:e3:25:aa:60:aa:da:2e:b1:95: 35:57:39:5e:13:a4:99:f6:bc:f1:7a:32:04:32:bc: 48:4d:ec:56:61:b1:ad:5f:c2:9d:db:e8:33:02:75: 81:62:ff:f1:a8:85:1c:63:b8:36:a4:c6:25:e7:05: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5D:0C:D0:ED:02:C5:61:15:ED:63:FA:A2:7C:29:04:E7:6E:B1:3E X509v3 Authority Key Identifier: keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4d:cc:70:b2:fa:ba:ef:8d:e3:bc:ef:71:8f:17:36:a2:1b: 89:5e:aa:92:1a:f4:56:b0:26:c0:0d:f2:c5:1a:c8:aa:30:71: 9b:6b:12:a5:23:9b:0d:b8:90:a3:db:4e:be:6b:cf:e1:6f:56: bc:12:b1:64:31:90:59:64:78:6f:8a:b0:34:e1:03:66:ad:18: 8e:f5:26:89:a7:01:12:52:2d:66:f1:41:14:24:10:e7:6f:df: 83:d3:0a:95:ae:f7:41:0b:17:3e:8f:8a:46:5a:d9:b4:e6:72: 06:1c:2f:0a:2b:2f:e8:14:bd:b1:72:28:73:30:e3:8f:1a:6a: 14:cf:11:08:b3:ae:33:e9:7a:4b:72:99:e0:3b:bb:90:42:4a: 73:ed:71:62:31:da:46:de:2a:57:09:3a:0d:9f:6d:0d:e3:8b: a3:b1:29:8e:c8:26:a5:2d:bd:c4:55:d1:d8:12:6b:32:cd:2d: 7e:89:e1:47:7e:3a:64:c7:9c:32:c0:64:16:8b:33:41:05:9e: 33:df:f0:25:86:c2:52:a9:9d:a4:34:d7:ac:77:13:22:4b:55: 22:a6:c8:db:7c:e5:29:92:7b:28:49:c2:a4:df:18:24:97:eb: c4:f7:ad:b8:03:c4:35:b8:32:19:90:19:ac:94:fa:25:18:e7: 35:6e:88:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUTy5w5br40ojliakZZCNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm ZmU3YjUwHhcNMjUxMjI1MDcwMDMzWhcNMjUxMjI2MDcwMDMzWjAzMTEwLwYDVQQD Eyg0YzVkMGNkMGVkMDJjNTYxMTVlZDYzZmFhMjdjMjkwNGU3NmViMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0khy2wOYal2KUYFv4FIxQvp+Tle M1QNcjGkjchyQ1btL0ngzOjdOCLT/W1VClC4nl8CIWOJYxqPYNWv6BBcGe1Yz5CP mBuztd6dfY3mLYtielgTW04J172v2lTSw02pyYxHEkL4G0B4c8tUSa3Q/YA4G1wY 8PMfYUT1j93NmdYiquNNlyY9hY/d3CDb66RPpmJ1tYSHKRPnnHVZo2cZF9Eadfdh Pdtnceg1NQ5/oXmAdT05kh3i3EFjQFHHTaQJapaNcCvbI/TjJapgqtousZU1Vzle E6SZ9rzxejIEMrxITexWYbGtX8Kd2+gzAnWBYv/xqIUcY7g2pMYl5wXPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExdDNDtAsVhFe1j+qJ8KQTnbrE+MB8GA1UdIwQY MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk3McLL6 uu+N47zvcY8XNqIbiV6qkhr0VrAmwA3yxRrIqjBxm2sSpSObDbiQo9tOvmvP4W9W vBKxZDGQWWR4b4qwNOEDZq0YjvUmiacBElItZvFBFCQQ52/fg9MKla73QQsXPo+K RlrZtOZyBhwvCisv6BS9sXIoczDjjxpqFM8RCLOuM+l6S3KZ4Du7kEJKc+1xYjHa Rt4qVwk6DZ9tDeOLo7EpjsgmpS29xFXR2BJrMs0tfonhR346ZMecMsBkFoszQQWe M9/wJYbCUqmdpDTXrHcTIktVIqbI23zlKZJ7KEnCpN8YJJfrxPetuAPENbgyGZAZ rJT6JRjnNW6IGA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:17:55 2025 by rpki-client