This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json) Hash identifier: ADVkdIgxnCusL28L3bISN/9DoQ7VmDQNIMDe63SmV0g= Subject key identifier: 9C:1D:11:27:9A:9C:F0:20:EE:E5:6E:2D:CA:7D:8B:5D:77:D3:02:F8 Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Certificate serial: 019B3CB553D64F55F197005195028F4F9933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 17:01:14 +0000 Manifest this update: Sat 20 Dec 2025 17:01:14 +0000 Manifest next update: Sun 21 Dec 2025 17:01:14 +0000 Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: X0DcNv6rBUTyntxCu0+aIl1jQye3nVJMlA8jElFr4Do=) 2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:53:d6:4f:55:f1:97:00:51:95:02:8f:4f:99:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Validity Not Before: Dec 20 17:01:14 2025 GMT Not After : Dec 21 17:01:14 2025 GMT Subject: CN=9c1d11279a9cf020eee56e2dca7d8b5d77d302f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:32:fa:54:64:9a:02:5b:e1:98:a4:14:66: c7:1c:ca:53:4a:f4:f6:53:71:77:81:1e:d8:c2:e3: e1:41:39:23:6c:25:0d:2d:f5:b2:ac:40:27:59:85: a6:b4:ad:68:42:d4:0d:de:c9:46:eb:b5:f7:06:e3: fb:16:96:e4:d6:fb:08:2a:12:34:ea:9b:fe:5f:b0: 0f:2c:21:da:32:33:6d:4c:1a:d4:df:0e:a0:af:e9: 47:22:89:47:83:c1:79:2f:cc:f4:bd:23:4b:e4:be: 15:81:d3:3e:ea:bc:03:fd:ac:ad:a1:7a:2c:08:69: 7b:02:c6:2d:d4:6e:26:9f:9c:1b:4d:d9:e1:5e:57: 33:86:54:d2:74:7d:c0:bc:1d:63:b3:18:4f:aa:c3: 66:33:8d:f3:47:f6:16:5e:4b:04:86:e1:04:87:6e: 11:45:2b:35:94:04:56:c5:d0:f0:b9:75:e4:08:3f: 89:7f:d9:5d:88:88:65:81:96:fa:ae:2a:92:1c:e5: 70:88:6d:ef:83:c5:71:3b:77:e1:b8:f8:e0:2f:30: 15:cf:d1:27:39:8b:73:b2:f2:bf:6b:c3:98:72:6d: ad:34:7b:4c:e2:3f:1f:3e:ad:ca:a2:c5:59:6b:a8: f7:eb:b3:5b:58:6a:5c:17:52:67:2f:c8:c4:92:87: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1D:11:27:9A:9C:F0:20:EE:E5:6E:2D:CA:7D:8B:5D:77:D3:02:F8 X509v3 Authority Key Identifier: keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ad:e0:bb:ae:b8:0a:62:47:77:86:a9:52:79:d6:61:46:18: c6:b0:bd:0e:f5:76:b4:be:c1:fc:7b:b4:c1:fe:fa:c2:63:e1: b6:f3:7d:f8:b0:40:f5:85:7b:4f:cf:6b:20:68:a0:14:6b:06: 8c:09:6f:c4:dc:6d:17:df:45:97:9d:77:61:1b:9d:ab:b1:7e: f6:3d:3d:91:99:4b:46:60:3e:83:d5:59:ca:f5:d1:e4:72:1e: b7:7c:c0:0a:2f:9f:e2:10:b1:9d:43:49:89:36:f1:80:3e:b2: 46:9a:f6:4e:a6:79:a6:27:77:7b:07:e5:d0:1d:20:fa:4a:ac: 33:12:87:2d:83:7c:fc:64:de:57:db:52:6c:6a:49:15:0e:8b: af:51:9a:c2:ad:75:ce:5a:d9:36:df:88:65:22:cb:c8:5b:26: 66:d8:c1:01:81:ba:22:e0:85:82:61:3e:f1:31:f4:02:29:e3: cb:b1:24:b6:b0:89:bf:73:bd:bb:39:45:71:ac:cd:73:a6:8e: 2a:33:d9:7f:ee:83:2b:55:de:81:76:f4:94:2c:cf:7e:c2:8f: ab:92:1b:92:81:16:c6:7f:1d:05:9a:30:b3:c0:57:52:67:93: 76:53:96:68:fb:07:8c:24:7e:f0:c2:11:51:de:5e:6e:88:e4: fd:54:85:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVPWT1XxlwBRlQKPT5kzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx ZDA5Y2EwHhcNMjUxMjIwMTcwMTE0WhcNMjUxMjIxMTcwMTE0WjAzMTEwLwYDVQQD Eyg5YzFkMTEyNzlhOWNmMDIwZWVlNTZlMmRjYTdkOGI1ZDc3ZDMwMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEYy+lRkmgJb4ZikFGbHHMpTSvT2 U3F3gR7YwuPhQTkjbCUNLfWyrEAnWYWmtK1oQtQN3slG67X3BuP7Fpbk1vsIKhI0 6pv+X7APLCHaMjNtTBrU3w6gr+lHIolHg8F5L8z0vSNL5L4VgdM+6rwD/aytoXos CGl7AsYt1G4mn5wbTdnhXlczhlTSdH3AvB1jsxhPqsNmM43zR/YWXksEhuEEh24R RSs1lARWxdDwuXXkCD+Jf9ldiIhlgZb6riqSHOVwiG3vg8VxO3fhuPjgLzAVz9En OYtzsvK/a8OYcm2tNHtM4j8fPq3KosVZa6j367NbWGpcF1JnL8jEkodIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwdESeanPAg7uVuLcp9i1130wL4MB8GA1UdIwQY MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH63gu664 CmJHd4apUnnWYUYYxrC9DvV2tL7B/Hu0wf76wmPhtvN9+LBA9YV7T89rIGigFGsG jAlvxNxtF99Fl513YRudq7F+9j09kZlLRmA+g9VZyvXR5HIet3zACi+f4hCxnUNJ iTbxgD6yRpr2TqZ5pid3ewfl0B0g+kqsMxKHLYN8/GTeV9tSbGpJFQ6Lr1Gawq11 zlrZNt+IZSLLyFsmZtjBAYG6IuCFgmE+8TH0Ainjy7EktrCJv3O9uzlFcazNc6aO KjPZf+6DK1XegXb0lCzPfsKPq5IbkoEWxn8dBZows8BXUmeTdlOWaPsHjCR+8MIR Ud5ebojk/VSFEg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:14 2025 by rpki-client