This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft File: E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json) Hash identifier: mdAtGx+UBekqYaE+414EFUtjQHGf3fu5GKtxn2W3RrM= Subject key identifier: 94:C9:45:69:C2:82:EE:23:BA:64:9D:FE:B4:5A:75:2A:A7:C3:19:7B Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62 Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862 Certificate serial: 019B2BF9051D807DC5D7AAF9D7AD71312BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft Manifest number: 06B8 Signing time: Wed 17 Dec 2025 11:01:38 +0000 Manifest this update: Wed 17 Dec 2025 11:01:38 +0000 Manifest next update: Thu 18 Dec 2025 11:01:38 +0000 Files and hashes: 1: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (hash: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=) 2: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: WF77Ku5SOfzXoEGK7ah3DohHrv27SKSyZ+j8Ses7D60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:05:1d:80:7d:c5:d7:aa:f9:d7:ad:71:31:2b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862 Validity Not Before: Dec 17 11:01:38 2025 GMT Not After : Dec 18 11:01:38 2025 GMT Subject: CN=94c94569c282ee23ba649dfeb45a752aa7c3197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:28:9f:41:97:d5:b3:fd:28:d0:ee:db:7d: 24:99:7b:ad:20:79:e4:ee:1b:a4:4e:6f:b2:f4:e7: e2:79:36:d8:78:43:11:44:23:6f:71:67:82:ec:cc: dd:ee:60:24:47:df:5e:81:0e:f2:ee:ee:26:16:87: d9:29:3a:47:db:d8:b8:5c:c1:26:71:4f:6d:fb:ed: 6c:64:90:bb:2a:2c:cd:19:76:4a:03:7b:b4:00:38: 19:ff:68:c1:be:e6:e5:d6:99:62:9d:97:02:b3:36: 83:5c:08:67:7f:ee:d2:8d:e8:5e:fe:47:67:0e:bf: a2:ea:ef:b4:41:cf:9b:f6:96:a3:3d:5a:94:0a:50: f2:ce:71:8a:58:3d:e5:5c:51:54:9d:3a:25:01:3e: d7:72:70:a1:82:5f:ff:9c:2b:53:3c:7c:5b:36:92: 94:b6:1b:e0:df:d5:f8:65:1a:30:a4:46:0a:53:08: 1a:17:5d:b6:cf:07:b7:9f:db:9d:d0:9b:bd:89:f2: d2:57:f5:67:9e:52:93:03:16:89:88:12:03:f1:91: 9c:13:d5:44:a0:19:3f:bd:fd:de:6b:f2:56:db:f4: 94:a1:67:9f:45:15:5c:85:d6:13:79:a2:d9:61:63: 73:b8:66:5e:2f:13:18:62:7f:96:9b:6f:06:76:11: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C9:45:69:C2:82:EE:23:BA:64:9D:FE:B4:5A:75:2A:A7:C3:19:7B X509v3 Authority Key Identifier: keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:fc:57:f2:35:73:3a:63:1b:53:c4:fc:5e:94:8e:5b:f5: fd:ec:07:ab:2a:81:a5:12:eb:d9:b3:ad:a0:48:55:13:e8:cb: 17:3d:c5:69:84:fc:93:d6:b3:0f:f4:e1:b2:e6:24:d6:56:e6: 25:3f:6a:fd:02:0f:7d:38:ca:c3:be:b3:e8:72:67:2b:b9:ad: 8f:81:f8:26:38:d6:1e:c8:04:8b:b3:9f:25:d6:5c:a3:8e:f1: d1:2e:2e:68:59:e4:98:4b:42:61:26:11:fc:d8:2b:7b:85:e4: 1d:d2:d2:17:57:4f:4d:00:1d:53:b4:a0:36:99:87:88:2c:20: d5:a3:04:5c:bc:c6:bd:3f:56:09:9e:66:b2:d3:34:ef:d0:d3: 3c:d8:9b:e7:45:6a:95:b5:d8:fe:55:16:1b:a6:95:a5:be:a7: 63:6d:56:99:ab:0b:69:08:ec:ef:7e:b2:1a:83:23:57:84:85: 60:95:e0:4b:ee:62:e1:eb:a1:fa:37:0d:1b:7d:ff:16:d2:53: e8:a1:19:d1:93:89:23:98:66:28:81:b1:fe:38:ad:46:3a:1f: aa:13:7f:2f:09:ec:f6:e8:e3:bf:31:91:96:c4:7c:bc:ca:bc: f1:44:68:22:01:1e:32:f3:6c:c4:80:91:5a:8c:db:02:36:e2: f7:85:27:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+QUdgH3F16r5161xMSvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNWQ0NGY5MDI5ZTFiNWQ3NDNjZmNlNTgxMWVmZTVlMjZm OGM4NjIwHhcNMjUxMjE3MTEwMTM4WhcNMjUxMjE4MTEwMTM4WjAzMTEwLwYDVQQD Eyg5NGM5NDU2OWMyODJlZTIzYmE2NDlkZmViNDVhNzUyYWE3YzMxOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssson0GX1bP9KNDu230kmXutIHnk 7hukTm+y9OfieTbYeEMRRCNvcWeC7Mzd7mAkR99egQ7y7u4mFofZKTpH29i4XMEm cU9t++1sZJC7KizNGXZKA3u0ADgZ/2jBvubl1plinZcCszaDXAhnf+7Sjehe/kdn Dr+i6u+0Qc+b9pajPVqUClDyznGKWD3lXFFUnTolAT7XcnChgl//nCtTPHxbNpKU thvg39X4ZRowpEYKUwgaF122zwe3n9ud0Ju9ifLSV/VnnlKTAxaJiBID8ZGcE9VE oBk/vf3ea/JW2/SUoWefRRVchdYTeaLZYWNzuGZeLxMYYn+Wm28GdhFeEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTJRWnCgu4jumSd/rRadSqnwxl7MB8GA1UdIwQY MBaAFBNdRPkCnhtddDz85YEe/l4m+MhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUt ZDBkMzNiMTY2OGE1LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUtZDBkMzNiMTY2OGE1 LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORH8V/I1 czpjG1PE/F6Ujlv1/ewHqyqBpRLr2bOtoEhVE+jLFz3FaYT8k9azD/ThsuYk1lbm JT9q/QIPfTjKw76z6HJnK7mtj4H4JjjWHsgEi7OfJdZco47x0S4uaFnkmEtCYSYR /Ngre4XkHdLSF1dPTQAdU7SgNpmHiCwg1aMEXLzGvT9WCZ5mstM079DTPNib50Vq lbXY/lUWG6aVpb6nY21WmasLaQjs736yGoMjV4SFYJXgS+5i4euh+jcNG33/FtJT 6KEZ0ZOJI5hmKIGx/jitRjofqhN/Lwns9ujjvzGRlsR8vMq88URoIgEeMvNsxICR WozbAjbi94Un7w== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:06 2025 by rpki-client