This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft File: e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json) Hash identifier: wo80yl6xYDcexzVfEIJ9DF35TmiGHAFhsJLcWxJr1i8= Subject key identifier: 67:69:15:6B:A7:87:B6:62:95:E0:A0:5A:3F:E3:1B:6E:53:D1:D8:67 Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Certificate serial: 019B3C106258A20E12EC2A846EEAD7862DAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:01:05 +0000 Manifest this update: Sat 20 Dec 2025 14:01:05 +0000 Manifest next update: Sun 21 Dec 2025 14:01:05 +0000 Files and hashes: 1: Cia5lk6gl6DngDZPQZGa9LgelPc.roa (hash: qjIKCGU6Dk+2X2/DFgsh5pjmVsy6yBNlqK4sm1CVIEs=) 2: Lbnf37L0cOCr3IAAWKOV73UBuSA.roa (hash: F0DnyoLgnE4+CT+QkMCTrdUjM8hRrPUxywL+Wut5lCI=) 3: _6M7OFdfKNj70ch9yaeejGfETQc.roa (hash: zDHeyswKrEctPTqzGZks7RkAedK9Eb/kBe4tAXFfwiI=) 4: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: d5mDk58K7GsyqQNByql0jZWvB5r84arBrwxVB3G5UnM=) 5: nmsIxvxBY6tqKivZQl1HnVG3UO4.roa (hash: +FWrYX9XP4p2Wi+VL15AwTpXmf3rznCN8E5dnff8vtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:62:58:a2:0e:12:ec:2a:84:6e:ea:d7:86:2d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Validity Not Before: Dec 20 14:01:05 2025 GMT Not After : Dec 21 14:01:05 2025 GMT Subject: CN=6769156ba787b66295e0a05a3fe31b6e53d1d867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:1c:be:e4:1a:43:a1:eb:e2:f9:9c:c2:20: 2c:9e:9d:a1:cd:92:f9:c1:0f:16:a9:3f:44:2b:42: 9b:a0:08:e4:c9:0c:12:c2:24:42:84:b8:4c:41:9d: f2:bf:cb:89:94:c3:cb:95:09:e0:27:39:27:09:5e: d4:45:22:da:7d:7e:ae:b5:69:8a:bf:4e:55:db:46: 2d:7c:32:2a:9e:b2:68:93:08:de:68:b4:3f:1b:d1: 5b:45:a2:a4:69:09:91:d7:61:dd:b9:2c:b1:35:12: 18:dd:d5:e2:39:26:7c:9f:e6:31:a0:93:be:bc:ef: fb:09:bd:31:6e:57:51:09:a1:13:e6:a1:64:1e:84: de:92:e6:95:6f:08:50:2d:7d:0e:b9:28:ad:e5:12: 65:4c:8a:9a:0b:aa:73:1f:2e:65:13:2a:7e:f0:2e: d4:4d:80:1e:9d:26:9b:b3:2c:d4:dc:02:8e:9c:26: cd:60:24:b5:2a:aa:ca:82:0c:5f:38:b8:9f:32:33: 2e:e8:2c:5c:02:26:28:dc:f9:78:05:b6:91:0d:94: a0:75:96:df:25:cb:94:d5:9d:fe:5c:97:61:3f:02: 19:31:63:6e:c2:95:1c:09:ba:43:c2:9d:f6:64:ab: a7:ac:69:91:a1:2f:1f:d1:66:7b:d9:1c:03:63:62: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:15:6B:A7:87:B6:62:95:E0:A0:5A:3F:E3:1B:6E:53:D1:D8:67 X509v3 Authority Key Identifier: keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5a:a5:14:8f:26:0f:a7:71:7c:09:96:3f:65:90:3e:78:8a: 1b:d7:25:c1:ef:d1:5e:54:65:d3:38:c7:d9:1a:d8:13:8b:b5: 58:f8:46:92:c6:2e:8e:38:91:7b:a6:aa:e1:bd:f5:78:d2:86: c0:2a:56:7f:1a:13:0e:bb:7a:07:dd:04:c1:85:51:e6:40:9a: 33:de:0c:af:0d:91:fb:60:18:53:09:9a:8a:cd:61:58:43:1d: 3c:09:4d:cc:c5:3a:95:b9:f8:05:fa:d3:b6:1f:ce:9e:fa:38: 84:14:0f:67:5d:85:c8:d6:1b:bd:99:fb:40:10:0d:c9:02:9d: 69:7f:6c:01:9e:d4:6d:09:7c:2c:a7:4f:32:02:35:9d:08:ee: 9a:05:0d:cc:17:44:8c:9c:11:c2:59:3b:8c:25:ca:e6:4b:3c: eb:44:49:7f:83:f5:17:eb:6d:a5:ea:90:3c:98:f2:0b:df:df: 43:cd:65:56:7f:b7:71:01:b5:e6:36:1f:44:99:4c:89:7d:d3: 9c:df:f0:fd:40:cd:d6:00:21:63:0c:31:81:95:a7:4f:4e:d0: d0:ea:d7:75:3b:99:4b:12:bf:51:89:ca:95:fb:77:ff:77:f4: 50:9a:4b:cd:c3:0b:4d:2b:43:22:1d:68:8e:ec:ab:cb:eb:92: b4:22:bb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGJYog4S7CqEburXhi2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw NzgxOWYwHhcNMjUxMjIwMTQwMTA1WhcNMjUxMjIxMTQwMTA1WjAzMTEwLwYDVQQD Eyg2NzY5MTU2YmE3ODdiNjYyOTVlMGEwNWEzZmUzMWI2ZTUzZDFkODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3scvuQaQ6Hr4vmcwiAsnp2hzZL5 wQ8WqT9EK0KboAjkyQwSwiRChLhMQZ3yv8uJlMPLlQngJzknCV7URSLafX6utWmK v05V20YtfDIqnrJokwjeaLQ/G9FbRaKkaQmR12HduSyxNRIY3dXiOSZ8n+YxoJO+ vO/7Cb0xbldRCaET5qFkHoTekuaVbwhQLX0OuSit5RJlTIqaC6pzHy5lEyp+8C7U TYAenSabsyzU3AKOnCbNYCS1KqrKggxfOLifMjMu6CxcAiYo3Pl4BbaRDZSgdZbf JcuU1Z3+XJdhPwIZMWNuwpUcCbpDwp32ZKunrGmRoS8f0WZ72RwDY2KBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdpFWunh7ZileCgWj/jG25T0dhnMB8GA1UdIwQY MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt YTRkMGQxMGM5MDE2LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2 LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFqlFI8m D6dxfAmWP2WQPniKG9clwe/RXlRl0zjH2RrYE4u1WPhGksYujjiRe6aq4b31eNKG wCpWfxoTDrt6B90EwYVR5kCaM94Mrw2R+2AYUwmais1hWEMdPAlNzMU6lbn4BfrT th/Onvo4hBQPZ12FyNYbvZn7QBANyQKdaX9sAZ7UbQl8LKdPMgI1nQjumgUNzBdE jJwRwlk7jCXK5ks860RJf4P1F+ttpeqQPJjyC9/fQ81lVn+3cQG15jYfRJlMiX3T nN/w/UDN1gAhYwwxgZWnT07Q0OrXdTuZSxK/UYnKlft3/3f0UJpLzcMLTStDIh1o juyry+uStCK7rg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:22:52 2025 by rpki-client