This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json) Hash identifier: 1TG6akfrEzml8yy9noe859CEt82xwEuHjKNU+hrioPk= Subject key identifier: CA:6F:8A:03:63:8D:89:74:D9:E1:98:4C:34:70:FD:5C:2F:B3:E3:05 Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7 Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7 Certificate serial: 019B3CEC66EC5D0F1095F7BBE472224E40EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft Manifest number: 04E2 Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=) 2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=) 3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: mZwe9Ubdpast1jUcRW4hq3aTh64BwTpUaxtr0xvoLWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:66:ec:5d:0f:10:95:f7:bb:e4:72:22:4e:40:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7 Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=ca6f8a03638d8974d9e1984c3470fd5c2fb3e305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:a4:28:44:b5:d7:5e:f4:32:00:51:ac:5d: a9:2b:d3:15:88:18:b5:19:50:27:7b:cd:79:ca:eb: dc:10:c3:5d:02:92:4c:a9:ba:a8:f3:ef:de:ec:9d: 1a:16:be:6e:a3:89:4e:e7:eb:ff:f3:5e:db:04:cf: fb:4a:b7:c2:4b:62:f9:54:e7:24:f6:42:69:cc:9f: 30:45:bf:a0:06:4d:b0:aa:77:a9:f4:fa:62:cb:a3: ba:ae:28:b0:24:d5:c3:21:70:5f:65:3d:3a:db:f0: a1:09:ef:00:d7:05:83:67:3b:f8:a6:c4:97:04:9b: 54:d7:8e:8d:87:a6:1c:9b:60:e2:41:81:2e:4a:cc: 1c:70:1f:1d:6f:ff:c5:de:d9:cb:6c:92:bf:32:ff: 91:50:c3:66:a2:cc:17:78:34:8f:15:d8:f1:b2:d2: 10:ff:c1:a6:9b:97:61:d4:4c:33:8c:aa:77:41:98: 57:ae:17:26:6d:01:f0:8b:41:06:49:e6:eb:74:40: 71:8f:a6:8b:d6:52:0b:47:7f:fa:2e:1a:3f:8d:9b: 55:71:31:ff:3d:20:9a:e9:66:4d:41:0f:4c:db:29: 27:40:bb:a0:3c:a9:7e:d8:7d:e1:21:18:17:29:6f: e9:99:1f:d5:d9:8f:76:70:13:48:f3:d6:88:aa:f5: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6F:8A:03:63:8D:89:74:D9:E1:98:4C:34:70:FD:5C:2F:B3:E3:05 X509v3 Authority Key Identifier: keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:33:c6:6c:d5:6c:7e:5e:12:40:76:db:b0:d4:7d:f2:4c: 21:ca:1b:c1:23:37:c1:8a:4f:f6:16:13:c1:41:06:29:f4:c1: f5:85:e6:0d:66:ae:80:6f:c2:e2:93:15:84:0b:0e:ed:10:3a: 65:12:52:2d:5f:54:05:fd:11:1a:43:2d:0e:0f:ae:09:16:a8: a4:d7:03:23:d7:46:a9:ab:11:ba:61:a7:27:2b:f4:46:70:f3: 28:87:b9:30:fd:e6:70:f4:42:c2:5a:4e:2d:ec:52:aa:a5:05: e8:b5:3c:e7:c2:f4:f1:b0:6f:67:5a:ff:f1:f0:40:39:eb:63: 27:44:e7:7c:53:2d:85:4b:35:a7:cf:f6:d2:77:c2:de:34:4a: 2e:75:44:10:dd:15:f8:81:83:73:07:be:2c:25:07:13:f5:ac: 36:f5:be:7f:36:40:e7:3d:94:17:b4:64:9b:89:30:83:61:34: 5f:9c:f7:c6:3a:bf:7d:b6:04:0d:3d:bc:ac:56:ea:4d:cf:2c: 72:40:13:b1:35:76:f6:63:b4:ec:99:ff:08:c2:6d:d7:61:9d: 21:41:d8:1c:32:ff:5c:cf:55:68:1b:88:43:15:a4:f1:e0:fa: e7:0a:55:f7:69:a5:c6:fa:5f:82:64:95:ca:28:23:a7:13:cc: a9:0c:4d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GbsXQ8Qlfe75HIiTkDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNGQzMWFiMThlNDFmOGQ5NTlhMDlkNTU2NjBkZDMyYWE5 YzQ1ZjcwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD EyhjYTZmOGEwMzYzOGQ4OTc0ZDllMTk4NGMzNDcwZmQ1YzJmYjNlMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJmkKES11170MgBRrF2pK9MViBi1 GVAne815yuvcEMNdApJMqbqo8+/e7J0aFr5uo4lO5+v/817bBM/7SrfCS2L5VOck 9kJpzJ8wRb+gBk2wqnep9Ppiy6O6riiwJNXDIXBfZT062/ChCe8A1wWDZzv4psSX BJtU146Nh6Ycm2DiQYEuSswccB8db//F3tnLbJK/Mv+RUMNmoswXeDSPFdjxstIQ /8Gmm5dh1EwzjKp3QZhXrhcmbQHwi0EGSebrdEBxj6aL1lILR3/6Lho/jZtVcTH/ PSCa6WZNQQ9M2yknQLugPKl+2H3hIRgXKW/pmR/V2Y92cBNI89aIqvW6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpvigNjjYl02eGYTDRw/Vwvs+MFMB8GA1UdIwQY MBaAFHtNMasY5B+NlZoJ1VZg3TKqnEX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAt YmZmMDIzYjM0NGY3LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAtYmZmMDIzYjM0NGY3 LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmAzxmzV bH5eEkB227DUffJMIcobwSM3wYpP9hYTwUEGKfTB9YXmDWaugG/C4pMVhAsO7RA6 ZRJSLV9UBf0RGkMtDg+uCRaopNcDI9dGqasRumGnJyv0RnDzKIe5MP3mcPRCwlpO LexSqqUF6LU858L08bBvZ1r/8fBAOetjJ0TnfFMthUs1p8/20nfC3jRKLnVEEN0V +IGDcwe+LCUHE/WsNvW+fzZA5z2UF7Rkm4kwg2E0X5z3xjq/fbYEDT28rFbqTc8s ckATsTV29mO07Jn/CMJt12GdIUHYHDL/XM9VaBuIQxWk8eD65wpV92mlxvpfgmSV yigjpxPMqQxNGA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:52:15 2025 by rpki-client