This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json) Hash identifier: EFC1CWGB7NMuUJMe9sYzDWqWlt/em+8zuSd0BZBrTo0= Subject key identifier: 92:5C:F5:27:4F:73:24:4D:11:65:48:AF:7F:79:4C:CB:B1:09:CB:70 Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Certificate serial: 019B3BD98BEEE7A28522A13449944FE87BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft Manifest number: 16F7 Signing time: Sat 20 Dec 2025 13:01:11 +0000 Manifest this update: Sat 20 Dec 2025 13:01:11 +0000 Manifest next update: Sun 21 Dec 2025 13:01:11 +0000 Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=) 2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: AnBryg3CPJMiTUe3IZW/bxmWS0RO9zYaB3sHu77d20E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:8b:ee:e7:a2:85:22:a1:34:49:94:4f:e8:7b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Validity Not Before: Dec 20 13:01:11 2025 GMT Not After : Dec 21 13:01:11 2025 GMT Subject: CN=925cf5274f73244d116548af7f794ccbb109cb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:5a:65:e0:77:b0:00:40:f3:e1:ad:d2:37: 72:2f:91:a9:a4:f7:0b:cd:c5:d6:2d:1a:be:21:7e: c6:3d:73:1e:cb:5f:26:ef:6b:ea:6b:f1:b8:11:56: 49:9a:3b:61:08:de:f3:1e:0a:e6:ae:19:6c:44:b5: 35:ba:49:21:af:d1:7f:c7:79:ff:2b:d6:75:e9:8b: 6e:5f:48:9d:53:ca:c9:77:07:51:fe:eb:7e:af:8d: de:85:8c:73:c9:48:d3:19:f9:e4:c1:76:2f:15:33: 3d:c9:25:62:9d:8d:3a:bf:a9:04:f1:cb:b4:2e:22: 62:9a:0f:5c:a7:d1:3c:6f:4e:58:08:56:b0:a4:b5: f9:09:3c:1a:25:92:5c:ff:88:37:ba:eb:21:be:56: ba:ef:bf:f7:57:22:a3:8a:2a:67:ff:30:1a:37:bd: 19:da:6f:28:81:c0:86:d3:f6:31:a4:70:b3:1d:9d: 59:57:31:29:40:dd:29:16:01:90:fe:eb:cd:55:2d: ab:6a:3b:14:61:eb:ab:15:7f:f9:f1:6b:5c:cb:46: 7b:98:fd:e2:0b:91:3c:df:eb:ac:dd:b6:16:7f:75: 65:ac:fb:06:19:d6:3a:e4:d6:70:9e:ad:1a:f8:34: c2:bb:f3:ac:99:a4:15:15:2b:8a:b0:40:30:07:a0: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:F5:27:4F:73:24:4D:11:65:48:AF:7F:79:4C:CB:B1:09:CB:70 X509v3 Authority Key Identifier: keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a0:a6:65:c9:4d:e5:83:9b:08:c3:1f:98:a4:5e:a5:2a:35: a0:16:b0:69:53:84:04:7a:fd:e3:34:f5:47:7a:fe:9b:c1:2e: ec:5b:4a:9c:5f:d0:1b:da:a5:3a:29:6f:f3:a9:e3:51:97:0c: 40:31:14:70:fb:1b:04:1a:ab:84:3f:d9:8c:d7:b6:f8:ab:29: 3d:69:b3:39:1e:f9:0c:1c:10:f5:7a:53:e4:5b:3a:4c:d8:9f: 2d:82:46:0b:7b:13:4e:4e:20:97:33:f1:84:50:b1:89:1b:b9: 72:e5:eb:ae:c9:05:81:48:9e:3f:69:ce:a0:9f:ff:17:8d:c2: e1:8b:b8:b4:84:aa:c4:0d:b6:7b:2e:aa:6f:3b:09:d3:d5:f9: 2a:ca:d8:75:79:44:bc:90:f9:48:41:80:10:de:b2:1a:4d:5b: b6:bf:5d:1f:e1:df:1e:af:57:99:7e:75:26:05:23:57:db:15: 8a:40:38:1f:82:a4:06:d5:16:f9:9a:8f:39:38:c1:f9:9b:bd: 33:4d:d5:b2:9a:09:08:35:01:f7:7e:d4:c8:a9:df:6c:fd:f6: 30:64:30:c8:92:ac:f5:d3:cb:95:74:eb:d1:da:1d:a7:95:60: 36:ea:fe:b4:f1:ed:64:63:85:d6:a5:be:60:77:81:dc:23:61: fe:66:7f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Yvu56KFIqE0SZRP6HuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzc4NDU5OTU3NzZjZjZmMmEwODM3ZjdhZDRjMWE5MWJj OTdkODIwHhcNMjUxMjIwMTMwMTExWhcNMjUxMjIxMTMwMTExWjAzMTEwLwYDVQQD Eyg5MjVjZjUyNzRmNzMyNDRkMTE2NTQ4YWY3Zjc5NGNjYmIxMDljYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnxaZeB3sABA8+Gt0jdyL5GppPcL zcXWLRq+IX7GPXMey18m72vqa/G4EVZJmjthCN7zHgrmrhlsRLU1ukkhr9F/x3n/ K9Z16YtuX0idU8rJdwdR/ut+r43ehYxzyUjTGfnkwXYvFTM9ySVinY06v6kE8cu0 LiJimg9cp9E8b05YCFawpLX5CTwaJZJc/4g3uushvla677/3VyKjiipn/zAaN70Z 2m8ogcCG0/YxpHCzHZ1ZVzEpQN0pFgGQ/uvNVS2rajsUYeurFX/58Wtcy0Z7mP3i C5E83+us3bYWf3VlrPsGGdY65NZwnq0a+DTCu/OsmaQVFSuKsEAwB6CLlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJc9SdPcyRNEWVIr395TMuxCctwMB8GA1UdIwQY MBaAFHJ3hFmVd2z28qCDf3rUwakbyX2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgt ZWVlNmJhMTgyOWI0LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgtZWVlNmJhMTgyOWI0 LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaCmZclN 5YObCMMfmKRepSo1oBawaVOEBHr94zT1R3r+m8Eu7FtKnF/QG9qlOilv86njUZcM QDEUcPsbBBqrhD/ZjNe2+KspPWmzOR75DBwQ9XpT5Fs6TNifLYJGC3sTTk4glzPx hFCxiRu5cuXrrskFgUieP2nOoJ//F43C4Yu4tISqxA22ey6qbzsJ09X5KsrYdXlE vJD5SEGAEN6yGk1btr9dH+HfHq9XmX51JgUjV9sVikA4H4KkBtUW+ZqPOTjB+Zu9 M03VspoJCDUB937UyKnfbP32MGQwyJKs9dPLlXTr0dodp5VgNur+tPHtZGOF1qW+ YHeB3CNh/mZ/Xg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:38 2025 by rpki-client