This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json) Hash identifier: 64lyevcUsP3LvSY8nCvkaGvwQagOf6JqcG4G/JlRLwY= Subject key identifier: 23:5A:E0:71:56:D5:46:8E:AE:23:C5:59:93:29:9A:9B:CC:D3:83:86 Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169 Certificate serial: 019B68E95CEBFDDB935D4C60F3AA4EA5A26A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft Manifest number: 179B Signing time: Mon 29 Dec 2025 07:01:22 +0000 Manifest this update: Mon 29 Dec 2025 07:01:22 +0000 Manifest next update: Tue 30 Dec 2025 07:01:22 +0000 Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: b5T2uDaaLkgwFdNvRfeL0FeS0kfUJ47+bjwfEoKiXf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:5c:eb:fd:db:93:5d:4c:60:f3:aa:4e:a5:a2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169 Validity Not Before: Dec 29 07:01:22 2025 GMT Not After : Dec 30 07:01:22 2025 GMT Subject: CN=235ae07156d5468eae23c55993299a9bccd38386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:e9:84:59:f4:2c:16:cb:8a:8c:11:c2:e7: 50:99:01:9e:00:21:cd:6b:0e:63:06:e2:d9:a8:7c: 3f:72:c3:51:7e:28:c1:bf:ee:02:5d:aa:04:2b:c9: 70:0e:23:78:b3:04:83:af:a2:ed:9a:54:9b:a4:36: fd:4c:fd:cd:04:01:62:8b:c7:be:da:16:42:0e:be: 96:f1:04:48:5d:31:e5:13:e6:fb:5f:54:b3:b1:e3: 1f:81:1b:8f:ae:f0:66:43:b6:ff:64:39:a7:46:f6: bd:93:2f:55:39:a1:73:79:98:65:63:e7:41:77:fc: b4:95:6c:5f:aa:4f:94:19:b2:00:38:bd:7c:e9:b3: 4d:1b:3e:2e:bb:65:74:f8:e3:93:8b:d2:f2:b8:e6: fa:dd:16:2e:68:c9:02:d1:3a:50:2e:a5:7d:0e:67: 94:cc:22:62:48:e7:47:52:a8:52:3c:1b:05:0d:ff: 92:e9:40:80:b8:71:75:db:cf:fb:af:56:5a:ff:36: 9b:8f:44:42:46:d2:10:65:9d:0f:ff:31:4a:e5:76: 2c:91:87:4b:09:e5:95:e0:53:6e:30:6d:68:fc:fd: d6:42:65:c2:09:06:e3:d9:5b:3a:56:33:27:2d:24: ee:f7:32:37:33:8c:9a:4d:0b:e5:65:18:1b:13:5e: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:E0:71:56:D5:46:8E:AE:23:C5:59:93:29:9A:9B:CC:D3:83:86 X509v3 Authority Key Identifier: keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c9:57:e9:c6:08:71:9e:f8:17:16:82:cb:90:fc:77:39:21: 36:4f:64:e4:98:ef:e5:24:0f:1a:da:fd:59:dd:5c:50:69:bd: bc:13:0f:17:a6:b8:e7:86:ba:4a:af:64:9c:78:08:cc:7a:2f: 7b:26:68:19:59:85:e3:6b:e7:36:b4:ff:43:f3:ac:e5:06:6f: 9e:64:c9:f9:6a:35:8c:6e:8e:f9:f0:4d:ac:93:13:6e:b3:cb: ca:d1:79:12:e3:ca:81:43:72:ea:03:3f:76:33:42:b8:e5:45: cc:5a:d1:57:22:be:3a:f1:6b:e5:9d:65:e9:67:51:e6:95:e8: f8:c6:bd:9f:fe:44:c7:ad:74:c2:50:86:0c:c9:a1:5d:fb:ff: 29:a0:68:18:e2:1b:2e:19:88:11:9f:59:71:fa:c0:99:99:3e: 5f:15:63:68:a5:3d:11:ef:d8:d5:36:3a:8a:d0:38:59:2e:eb: 34:b7:04:78:b0:a5:48:21:22:4c:c1:bc:8b:4f:6e:a6:6e:d4: 8c:33:00:b6:f1:69:96:0d:77:39:28:b9:d1:ad:e4:16:e8:ee: 61:5d:27:a4:57:e0:b8:30:c9:ab:df:48:3a:ea:40:cd:e1:f8: 23:f5:70:49:87:72:59:67:05:67:63:9e:be:ef:6a:a0:5c:08: 75:6d:f9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6Vzr/duTXUxg86pOpaJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzg3M2Y4OWMyYTk4NTMyN2VhNzk5NjI2NzQyM2E3NzUx YzYxNjkwHhcNMjUxMjI5MDcwMTIyWhcNMjUxMjMwMDcwMTIyWjAzMTEwLwYDVQQD EygyMzVhZTA3MTU2ZDU0NjhlYWUyM2M1NTk5MzI5OWE5YmNjZDM4Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArarphFn0LBbLiowRwudQmQGeACHN aw5jBuLZqHw/csNRfijBv+4CXaoEK8lwDiN4swSDr6LtmlSbpDb9TP3NBAFii8e+ 2hZCDr6W8QRIXTHlE+b7X1SzseMfgRuPrvBmQ7b/ZDmnRva9ky9VOaFzeZhlY+dB d/y0lWxfqk+UGbIAOL186bNNGz4uu2V0+OOTi9LyuOb63RYuaMkC0TpQLqV9DmeU zCJiSOdHUqhSPBsFDf+S6UCAuHF128/7r1Za/zabj0RCRtIQZZ0P/zFK5XYskYdL CeWV4FNuMG1o/P3WQmXCCQbj2Vs6VjMnLSTu9zI3M4yaTQvlZRgbE17JNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNa4HFW1UaOriPFWZMpmpvM04OGMB8GA1UdIwQY MBaAFHt4c/icKphTJ+p5liZ0I6d1HGFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82MzM0YWUtODY2MS00YjFjLTg0MzAt OWI5ZGY0NDNjODYzLzEvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82MzM0YWUtODY2MS00YjFjLTg0MzAtOWI5ZGY0NDNjODYz LzEvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPslX6cYI cZ74FxaCy5D8dzkhNk9k5Jjv5SQPGtr9Wd1cUGm9vBMPF6a454a6Sq9knHgIzHov eyZoGVmF42vnNrT/Q/Os5QZvnmTJ+Wo1jG6O+fBNrJMTbrPLytF5EuPKgUNy6gM/ djNCuOVFzFrRVyK+OvFr5Z1l6WdR5pXo+Ma9n/5Ex610wlCGDMmhXfv/KaBoGOIb LhmIEZ9ZcfrAmZk+XxVjaKU9Ee/Y1TY6itA4WS7rNLcEeLClSCEiTMG8i09upm7U jDMAtvFplg13OSi50a3kFujuYV0npFfguDDJq99IOupAzeH4I/VwSYdyWWcFZ2Oe vu9qoFwIdW35bw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:15:21 2025 by rpki-client