This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft File: E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json) Hash identifier: CxdXO90jJg3CUZqAe2KqSaZcRonuqPrJygZHjbn6Ojk= Subject key identifier: 79:B2:5C:88:35:FD:4D:DC:62:55:7E:10:D9:2C:9D:82:5F:3B:DD:9D Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F Certificate issuer: /CN=13ec2551332a0c32fb7725d069582d6b50be369f Certificate serial: 019B32D71AEB75F0785823B15EF89D7554A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft Manifest number: 0A63 Signing time: Thu 18 Dec 2025 19:01:56 +0000 Manifest this update: Thu 18 Dec 2025 19:01:56 +0000 Manifest next update: Fri 19 Dec 2025 19:01:56 +0000 Files and hashes: 1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: GTKPCfxuJozkzdLU5MDaTLX3p0UkcPyJZRbq4192RUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1a:eb:75:f0:78:58:23:b1:5e:f8:9d:75:54:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f Validity Not Before: Dec 18 19:01:56 2025 GMT Not After : Dec 19 19:01:56 2025 GMT Subject: CN=79b25c8835fd4ddc62557e10d92c9d825f3bdd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:d2:02:90:9e:ee:90:ea:35:45:85:f9:7b: dd:00:0c:62:56:c6:6e:cc:74:fb:3d:aa:50:70:e1: 91:74:37:ca:37:62:bf:b8:ab:ef:76:13:6d:ce:4f: 0a:2a:ed:0e:96:72:e8:22:1f:52:09:26:2e:cd:57: 91:17:ec:c0:71:96:62:e2:0a:85:5c:ce:56:4b:88: 3d:5b:02:c8:94:f2:b9:6f:ce:8b:ef:cd:05:53:b0: ff:7d:01:b8:3b:48:cc:99:c5:a5:08:c4:45:f0:51: 8f:d9:7b:20:84:e2:62:d7:8b:25:9d:3a:64:74:c7: 64:8f:66:f5:04:36:50:da:07:83:39:fc:d6:78:50: 70:df:70:2f:c7:a5:7d:e2:bc:67:0a:0e:89:e5:b1: b6:f1:e9:ad:51:d4:75:8e:d3:30:4d:da:b9:09:f3: 19:5e:c3:f5:74:97:93:e3:b1:10:f6:7e:b9:68:aa: e4:5d:4e:bd:99:e8:7b:18:47:b5:20:78:b3:33:f9: f1:da:e5:c1:f5:70:0f:e1:19:30:ba:66:03:79:f8: 86:a4:7c:f9:3f:f9:a8:71:13:9f:53:ad:d1:9c:ce: 34:98:41:bf:74:1e:35:47:48:0f:de:e9:23:1d:d4: fb:c9:af:0f:0a:20:98:f7:f8:94:77:7c:8c:0f:7a: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B2:5C:88:35:FD:4D:DC:62:55:7E:10:D9:2C:9D:82:5F:3B:DD:9D X509v3 Authority Key Identifier: keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5d:e0:85:32:7f:f9:48:f5:8d:97:f1:71:fe:cc:4c:30:04: a5:cf:ae:ce:e3:d9:93:3f:1a:d6:73:18:19:97:7e:24:83:06: aa:a8:f9:05:e0:df:3b:46:83:7c:6c:83:de:53:e9:a2:c7:90: 96:e2:a7:d1:af:ef:ac:3f:55:0e:e3:11:3f:14:cc:4b:ca:fd: d6:c3:e2:a1:a2:93:68:52:25:2a:27:0f:a5:57:d5:39:ea:9c: 9e:b7:43:44:82:b1:75:18:54:e4:17:d9:7b:f8:2e:5c:45:e3: df:b0:97:56:fe:18:f9:64:03:64:10:35:30:06:74:37:d0:19: a3:b8:b8:1c:fc:58:69:05:24:41:a6:26:4a:ba:60:50:52:74: 17:56:04:8c:6d:01:f1:6c:42:f3:58:56:8f:2b:82:9e:7c:d1: b2:c9:4b:44:d3:12:4e:5f:2c:e2:c1:19:3f:96:5e:ae:8b:ff: f1:3d:01:c8:83:b4:ed:69:fa:6d:f1:db:4b:9c:c3:72:8a:f0: 5c:9e:c0:80:fa:f5:af:23:19:01:87:a1:68:63:eb:96:34:f5: 26:49:aa:ca:fd:91:c7:03:c1:f5:da:5b:cb:a4:05:5d:66:b7: ac:47:b8:d4:d6:69:af:4b:31:9c:15:6c:75:a8:85:22:93:a1: b3:b2:d1:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xrrdfB4WCOxXviddVSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWMyNTUxMzMyYTBjMzJmYjc3MjVkMDY5NTgyZDZiNTBi ZTM2OWYwHhcNMjUxMjE4MTkwMTU2WhcNMjUxMjE5MTkwMTU2WjAzMTEwLwYDVQQD Eyg3OWIyNWM4ODM1ZmQ0ZGRjNjI1NTdlMTBkOTJjOWQ4MjVmM2JkZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCzSApCe7pDqNUWF+XvdAAxiVsZu zHT7PapQcOGRdDfKN2K/uKvvdhNtzk8KKu0OlnLoIh9SCSYuzVeRF+zAcZZi4gqF XM5WS4g9WwLIlPK5b86L780FU7D/fQG4O0jMmcWlCMRF8FGP2XsghOJi14slnTpk dMdkj2b1BDZQ2geDOfzWeFBw33Avx6V94rxnCg6J5bG28emtUdR1jtMwTdq5CfMZ XsP1dJeT47EQ9n65aKrkXU69meh7GEe1IHizM/nx2uXB9XAP4RkwumYDefiGpHz5 P/mocROfU63RnM40mEG/dB41R0gP3ukjHdT7ya8PCiCY9/iUd3yMD3p1RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmyXIg1/U3cYlV+ENksnYJfO92dMB8GA1UdIwQY MBaAFBPsJVEzKgwy+3cl0GlYLWtQvjafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGIt MmVlNTY1MTQxYjMyLzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGItMmVlNTY1MTQxYjMy LzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa13ghTJ/ +Uj1jZfxcf7MTDAEpc+uzuPZkz8a1nMYGZd+JIMGqqj5BeDfO0aDfGyD3lPposeQ luKn0a/vrD9VDuMRPxTMS8r91sPioaKTaFIlKicPpVfVOeqcnrdDRIKxdRhU5BfZ e/guXEXj37CXVv4Y+WQDZBA1MAZ0N9AZo7i4HPxYaQUkQaYmSrpgUFJ0F1YEjG0B 8WxC81hWjyuCnnzRsslLRNMSTl8s4sEZP5Zerov/8T0ByIO07Wn6bfHbS5zDcorw XJ7AgPr1ryMZAYehaGPrljT1Jkmqyv2RxwPB9dpby6QFXWa3rEe41NZpr0sxnBVs daiFIpOhs7LRwg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:41 2025 by rpki-client