This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft File: e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json) Hash identifier: B9+7rpNFFG7f/ZJ47AL8tGX/5vbEpuiwbIczhr6UxWY= Subject key identifier: 8E:F1:16:1D:64:53:0B:1D:64:17:4C:34:BF:BC:B7:F4:9B:FA:EF:63 Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Certificate serial: 019B38A0FD99EBE8F0C179F772534FF96FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft Manifest number: 037D Signing time: Fri 19 Dec 2025 22:00:33 +0000 Manifest this update: Fri 19 Dec 2025 22:00:33 +0000 Manifest next update: Sat 20 Dec 2025 22:00:33 +0000 Files and hashes: 1: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (hash: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=) 2: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: YIGCNLTj/XiK8szgNS0pdTcNOTBlDs2TrUzEAyav7+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:fd:99:eb:e8:f0:c1:79:f7:72:53:4f:f9:6f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Validity Not Before: Dec 19 22:00:33 2025 GMT Not After : Dec 20 22:00:33 2025 GMT Subject: CN=8ef1161d64530b1d64174c34bfbcb7f49bfaef63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:c2:20:c4:d2:1e:fc:d3:61:3e:93:fa:5f: de:97:19:78:24:1d:ab:99:a0:32:8d:b7:1f:72:50: 4c:16:46:df:1e:00:70:2b:bf:8d:3d:bb:a9:5c:ec: 8a:21:16:fb:2e:47:bb:74:26:f6:ba:13:95:06:c7: 83:24:de:0f:85:55:a7:0e:f8:7f:38:9e:4e:4c:7c: 0b:3a:71:ac:3d:21:7b:d1:e3:00:7f:ea:af:cd:da: ec:3b:76:f9:ff:5a:6f:f8:14:b3:ea:9b:9e:6a:57: 57:75:1a:c7:ce:b9:59:b6:fc:e5:55:fe:0a:fe:3a: a0:ff:f2:d3:1e:bb:b6:66:c7:0d:a7:87:f3:b5:ae: c4:cf:8c:b7:9f:58:4f:73:ac:d9:54:b4:16:32:75: a0:57:6c:fe:16:b1:61:76:57:53:a6:21:1d:38:bd: ef:d6:69:1f:eb:52:c2:b6:63:46:70:ef:c7:86:1f: fd:67:2f:72:4e:ae:15:65:d2:8f:1d:2f:c8:9d:5b: 77:54:21:f4:ab:5e:5b:0f:e6:1c:d9:f1:44:21:ca: a9:85:48:4c:3f:b4:66:75:0c:99:2b:c5:45:29:23: cc:7f:fd:4d:6b:81:4e:72:34:8e:c3:be:91:b4:3c: bf:9f:e3:ae:4b:76:53:9f:30:06:24:d7:91:53:8a: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F1:16:1D:64:53:0B:1D:64:17:4C:34:BF:BC:B7:F4:9B:FA:EF:63 X509v3 Authority Key Identifier: keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:15:83:b7:cb:86:36:67:f3:0c:29:39:5f:0e:12:89:04:c7: a3:c3:95:32:23:ec:18:b4:91:94:8d:f4:af:dd:5e:13:58:10: 16:5f:34:81:50:21:07:80:85:cd:93:b2:ba:97:43:9b:32:0a: db:de:98:96:b5:d6:f7:e5:db:ea:6e:99:39:25:c1:28:34:06: dc:29:77:70:13:7b:e1:44:20:06:6c:8d:b7:27:63:d2:76:ff: 3a:6f:8e:c9:f9:a7:2a:ba:26:47:26:7c:28:ee:a7:62:af:f1: 7f:37:c3:4d:b0:34:d0:a9:34:10:c3:29:96:26:31:1d:2e:98: 2b:86:b9:99:89:15:75:9a:01:4a:fa:8a:7d:e5:6c:db:df:2d: 3a:2d:4b:8b:97:57:84:01:68:21:97:77:3c:b2:c6:75:dd:f1: 62:6b:6b:2e:57:bd:78:5a:3e:c5:9e:67:44:d6:07:4b:55:54: 08:86:b9:a9:8c:36:0f:86:17:09:e6:67:d4:b7:b6:4f:02:4e: cc:e9:aa:5c:4b:99:08:ba:71:da:28:00:ce:66:69:6b:4d:57: 38:99:c3:04:a0:6a:ab:0b:b5:78:64:ee:af:75:07:a0:da:f1: 35:eb:14:b2:ac:a6:59:c2:c3:eb:6d:92:62:51:99:66:4c:08: 7d:02:aa:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oP2Z6+jwwXn3clNP+W/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl MjVjYjUwHhcNMjUxMjE5MjIwMDMzWhcNMjUxMjIwMjIwMDMzWjAzMTEwLwYDVQQD Eyg4ZWYxMTYxZDY0NTMwYjFkNjQxNzRjMzRiZmJjYjdmNDliZmFlZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuufCIMTSHvzTYT6T+l/elxl4JB2r maAyjbcfclBMFkbfHgBwK7+NPbupXOyKIRb7Lke7dCb2uhOVBseDJN4PhVWnDvh/ OJ5OTHwLOnGsPSF70eMAf+qvzdrsO3b5/1pv+BSz6puealdXdRrHzrlZtvzlVf4K /jqg//LTHru2ZscNp4fzta7Ez4y3n1hPc6zZVLQWMnWgV2z+FrFhdldTpiEdOL3v 1mkf61LCtmNGcO/Hhh/9Zy9yTq4VZdKPHS/InVt3VCH0q15bD+Yc2fFEIcqphUhM P7RmdQyZK8VFKSPMf/1Na4FOcjSOw76RtDy/n+OuS3ZTnzAGJNeRU4pT6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7xFh1kUwsdZBdMNL+8t/Sb+u9jMB8GA1UdIwQY MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt MmI3YzFlZGYxMTZhLzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBWDt8uG NmfzDCk5Xw4SiQTHo8OVMiPsGLSRlI30r91eE1gQFl80gVAhB4CFzZOyupdDmzIK 296YlrXW9+Xb6m6ZOSXBKDQG3Cl3cBN74UQgBmyNtydj0nb/Om+OyfmnKromRyZ8 KO6nYq/xfzfDTbA00Kk0EMMpliYxHS6YK4a5mYkVdZoBSvqKfeVs298tOi1Li5dX hAFoIZd3PLLGdd3xYmtrLle9eFo+xZ5nRNYHS1VUCIa5qYw2D4YXCeZn1Le2TwJO zOmqXEuZCLpx2igAzmZpa01XOJnDBKBqqwu1eGTur3UHoNrxNesUsqymWcLD622S YlGZZkwIfQKqjg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:51 2025 by rpki-client