This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json) Hash identifier: ToToKELxxbVzU1j0TvTXYEryg0E+rH00OjMVXSReN3E= Subject key identifier: F0:C3:44:C4:78:18:10:55:71:9E:DA:F0:E5:78:2B:F2:9D:26:48:20 Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Certificate serial: 019B3AFD69836E9FA129D1D42999ABDC206F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft Manifest number: 0E68 Signing time: Sat 20 Dec 2025 09:00:44 +0000 Manifest this update: Sat 20 Dec 2025 09:00:44 +0000 Manifest next update: Sun 21 Dec 2025 09:00:44 +0000 Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=) 2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: byRk0O/ZD3VQ20yVjm92IBkU4DDiZtchj9p009fiPeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:69:83:6e:9f:a1:29:d1:d4:29:99:ab:dc:20:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Validity Not Before: Dec 20 09:00:44 2025 GMT Not After : Dec 21 09:00:44 2025 GMT Subject: CN=f0c344c478181055719edaf0e5782bf29d264820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:82:92:77:fb:71:7f:02:0b:f3:f7:58:46: 12:b6:b3:f3:52:6c:20:4c:42:f0:d4:de:ad:aa:5f: 0d:a2:88:61:e3:de:30:88:a5:0b:e7:6a:ee:9e:0f: f5:83:4d:5e:95:67:3b:7c:bd:bd:66:be:e6:d5:8e: 37:7a:08:e6:93:1f:66:8a:78:26:d4:4b:09:b0:00: 88:f5:ce:a6:67:46:35:20:7c:b7:b4:49:4e:9b:aa: 6d:a6:db:b6:63:81:32:b8:68:b6:8a:f4:06:94:7b: 9b:b9:8d:77:de:69:61:ce:33:cf:a2:0c:84:d4:85: f7:02:1e:40:31:b2:08:18:02:8c:e4:2d:f1:0f:cd: cb:6c:f3:95:80:72:ea:2f:32:dd:da:49:79:36:1e: aa:21:e5:d0:51:2a:5c:72:40:fd:b0:b0:3e:bc:77: 3f:31:d2:ba:94:7b:da:67:7c:dd:c6:fb:e9:b2:ed: 52:d8:ad:97:52:c7:23:96:15:d5:d5:f2:37:5d:f7: b8:c6:6c:3d:92:49:bc:9f:a3:c1:5d:14:86:80:50: ce:93:08:6a:ca:af:33:d4:b6:8a:d0:cd:81:00:f1: ed:af:19:86:84:67:13:c7:32:01:a0:40:b3:5a:d7: 83:50:38:96:39:cf:6f:cb:61:cb:58:9f:7e:47:7d: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:44:C4:78:18:10:55:71:9E:DA:F0:E5:78:2B:F2:9D:26:48:20 X509v3 Authority Key Identifier: keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:26:60:f3:c4:2b:08:d7:3c:69:bc:5c:93:09:2e:c2:a7:15: b8:0c:dc:bb:0e:2b:5e:66:cd:c1:b1:4e:af:4f:e0:0a:e1:bc: a1:ab:9a:e8:8e:65:d8:9f:54:10:84:2a:2e:1b:18:97:cc:5e: ea:dd:ce:ea:0c:7f:e7:a6:5d:1f:7f:84:61:4f:32:13:be:4f: ad:5e:36:26:e5:9a:a5:2f:1e:bf:ac:73:c8:fb:99:a9:9b:6b: 39:9a:4e:e4:4a:87:e4:b8:ed:87:8e:82:2e:2c:43:28:b6:ab: 17:06:08:bd:5f:ed:0a:35:e2:20:b9:2d:82:12:b3:89:85:77: 78:76:7c:7e:19:7b:be:b4:27:3f:a8:f5:1a:96:86:a1:78:e8: 25:48:3b:84:f5:a4:49:00:10:2b:79:7e:68:70:96:52:8a:bd: ae:75:c8:86:25:ce:02:dd:9e:9f:82:22:1f:06:c0:c2:4b:86: c4:84:89:41:d3:9b:f0:88:53:b3:63:93:49:d5:a9:22:ca:1a: d3:d8:2e:49:53:ff:07:66:41:f5:05:f2:9e:3d:e1:f9:a8:3a: ac:6b:10:47:aa:3b:91:1a:11:0a:42:76:a5:b4:8c:f4:58:52: 80:c7:51:12:e4:2b:7f:41:4a:67:5c:ab:35:24:97:84:af:24: 2c:38:4b:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/WmDbp+hKdHUKZmr3CBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi MjliMjEwHhcNMjUxMjIwMDkwMDQ0WhcNMjUxMjIxMDkwMDQ0WjAzMTEwLwYDVQQD EyhmMGMzNDRjNDc4MTgxMDU1NzE5ZWRhZjBlNTc4MmJmMjlkMjY0ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+Cknf7cX8CC/P3WEYStrPzUmwg TELw1N6tql8Noohh494wiKUL52rung/1g01elWc7fL29Zr7m1Y43egjmkx9mingm 1EsJsACI9c6mZ0Y1IHy3tElOm6ptptu2Y4EyuGi2ivQGlHubuY133mlhzjPPogyE 1IX3Ah5AMbIIGAKM5C3xD83LbPOVgHLqLzLd2kl5Nh6qIeXQUSpcckD9sLA+vHc/ MdK6lHvaZ3zdxvvpsu1S2K2XUscjlhXV1fI3Xfe4xmw9kkm8n6PBXRSGgFDOkwhq yq8z1LaK0M2BAPHtrxmGhGcTxzIBoECzWteDUDiWOc9vy2HLWJ9+R31FeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDDRMR4GBBVcZ7a8OV4K/KdJkggMB8GA1UdIwQY MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSZg88Qr CNc8abxckwkuwqcVuAzcuw4rXmbNwbFOr0/gCuG8oaua6I5l2J9UEIQqLhsYl8xe 6t3O6gx/56ZdH3+EYU8yE75PrV42JuWapS8ev6xzyPuZqZtrOZpO5EqH5Ljth46C LixDKLarFwYIvV/tCjXiILktghKziYV3eHZ8fhl7vrQnP6j1GpaGoXjoJUg7hPWk SQAQK3l+aHCWUoq9rnXIhiXOAt2en4IiHwbAwkuGxISJQdOb8IhTs2OTSdWpIsoa 09guSVP/B2ZB9QXynj3h+ag6rGsQR6o7kRoRCkJ2pbSM9FhSgMdREuQrf0FKZ1yr NSSXhK8kLDhL3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 15:30:10 2025 by rpki-client