This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json) Hash identifier: tfCnrd43x+i1+EibgONsGUE9aLbprU1P8EQ/4wj2raE= Subject key identifier: C0:86:AA:63:C8:6E:53:7B:8B:C3:75:DA:B5:5F:92:1D:A8:59:38:8D Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5 Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5 Certificate serial: 019B330D1854E4F51F097019D9E7E006E665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft Manifest number: 0653 Signing time: Thu 18 Dec 2025 20:00:54 +0000 Manifest this update: Thu 18 Dec 2025 20:00:54 +0000 Manifest next update: Fri 19 Dec 2025 20:00:54 +0000 Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: P2Hfpkaf3KWCr2rnKfaUPVPHN3tnKuaDEgx0viJDRYM=) 2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:18:54:e4:f5:1f:09:70:19:d9:e7:e0:06:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5 Validity Not Before: Dec 18 20:00:54 2025 GMT Not After : Dec 19 20:00:54 2025 GMT Subject: CN=c086aa63c86e537b8bc375dab55f921da859388d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:d8:96:8e:d1:40:60:20:27:6a:1d:99:de: 68:ae:09:67:ef:87:28:18:4e:e3:5b:0b:f4:8b:cf: 35:a5:4b:d5:25:1e:74:b2:5e:00:85:50:fc:4c:28: ce:74:00:fb:89:ee:40:71:8b:24:4d:fc:47:d6:df: d0:55:e6:d8:52:97:4a:e6:21:3f:92:68:5e:e2:cb: 04:e7:cb:5a:7b:4a:75:be:ef:fd:fd:59:b7:ef:01: c7:03:86:02:a0:e4:95:e8:8c:2a:23:fc:57:3e:20: 17:b5:11:28:16:11:e3:88:75:25:9e:37:8e:9e:82: 3e:49:e8:89:e2:11:cc:c4:6a:5f:d3:c1:24:f5:34: 70:04:c4:14:69:68:37:e0:f3:39:a5:7f:5c:fc:01: d9:1b:65:8b:f5:17:5b:1c:42:b2:7d:51:17:81:e9: e0:d2:36:c6:1e:fc:55:54:e3:9a:b4:50:b8:c3:15: 9a:9d:31:d8:07:e6:a6:6b:fe:61:b5:33:9a:4b:51: 20:04:ef:77:97:77:eb:1c:7d:a8:4a:0e:5b:63:73: 30:8b:98:fe:0c:10:b8:0f:79:84:e3:14:e9:ce:25: 81:f1:8e:dc:82:2b:3a:de:2e:9a:a7:d8:f5:e4:14: 33:f3:73:87:db:28:86:e8:be:8d:e9:12:0e:7a:8f: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:AA:63:C8:6E:53:7B:8B:C3:75:DA:B5:5F:92:1D:A8:59:38:8D X509v3 Authority Key Identifier: keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7e:c1:56:58:51:76:3e:ba:94:ac:41:4a:76:52:87:30:62: 1e:18:59:91:00:24:47:08:99:ea:4d:1a:6b:eb:04:5a:f2:60: c0:e5:34:d6:3a:88:5a:c0:8d:f4:d4:00:57:59:3e:2e:af:80: d3:e4:87:be:cd:7a:d9:08:4b:01:20:2b:ff:4f:b9:7d:d1:d1: aa:ef:6f:fa:33:22:40:fa:1a:f2:cc:83:91:5e:55:13:93:8d: 5d:16:0a:c0:e9:1f:f5:3f:15:3c:28:e1:03:61:0c:9b:fb:ee: d0:47:80:13:9d:f7:d9:8d:4d:93:2f:c5:e3:36:d7:ee:6c:f4: 74:f8:74:d8:e8:88:57:99:f1:21:6b:3e:3c:85:2b:7f:c5:e3: 95:9f:59:9f:e6:7e:f2:08:5c:df:9d:12:e1:90:ff:f7:aa:b5: 1a:da:d1:47:5f:90:38:26:24:d6:f4:6c:6c:92:39:90:53:7b: 94:da:96:7e:cb:c6:09:6b:96:29:f2:ac:69:58:15:4b:82:56: 1b:96:4b:18:b3:a7:3b:34:69:74:20:35:f1:15:89:89:2b:ba: 39:da:25:82:65:d7:07:cb:a2:5f:25:d7:03:de:ec:e3:12:69: 28:c6:25:fd:e7:41:c3:9e:59:65:8e:d2:18:87:ae:3e:6b:d1: cd:50:35:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDRhU5PUfCXAZ2efgBuZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh Y2E2YjUwHhcNMjUxMjE4MjAwMDU0WhcNMjUxMjE5MjAwMDU0WjAzMTEwLwYDVQQD EyhjMDg2YWE2M2M4NmU1MzdiOGJjMzc1ZGFiNTVmOTIxZGE4NTkzODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KTYlo7RQGAgJ2odmd5orgln74co GE7jWwv0i881pUvVJR50sl4AhVD8TCjOdAD7ie5AcYskTfxH1t/QVebYUpdK5iE/ kmhe4ssE58tae0p1vu/9/Vm37wHHA4YCoOSV6IwqI/xXPiAXtREoFhHjiHUlnjeO noI+SeiJ4hHMxGpf08Ek9TRwBMQUaWg34PM5pX9c/AHZG2WL9RdbHEKyfVEXgeng 0jbGHvxVVOOatFC4wxWanTHYB+ama/5htTOaS1EgBO93l3frHH2oSg5bY3Mwi5j+ DBC4D3mE4xTpziWB8Y7cgis63i6ap9j15BQz83OH2yiG6L6N6RIOeo+oSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCGqmPIblN7i8N12rVfkh2oWTiNMB8GA1UdIwQY MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH7BVlhR dj66lKxBSnZShzBiHhhZkQAkRwiZ6k0aa+sEWvJgwOU01jqIWsCN9NQAV1k+Lq+A 0+SHvs162QhLASAr/0+5fdHRqu9v+jMiQPoa8syDkV5VE5ONXRYKwOkf9T8VPCjh A2EMm/vu0EeAE5332Y1Nky/F4zbX7mz0dPh02OiIV5nxIWs+PIUrf8XjlZ9Zn+Z+ 8ghc350S4ZD/96q1GtrRR1+QOCYk1vRsbJI5kFN7lNqWfsvGCWuWKfKsaVgVS4JW G5ZLGLOnOzRpdCA18RWJiSu6OdolgmXXB8uiXyXXA97s4xJpKMYl/edBw55ZZY7S GIeuPmvRzVA1MA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:09 2025 by rpki-client