This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json) Hash identifier: E5VEUgmNjpLUPfaOUv8zQghUHL+Lj5Lh0YGMUiQn4kM= Subject key identifier: 17:A8:62:A5:F7:43:3F:86:1E:C0:A3:A6:35:F2:34:FD:11:73:64:F0 Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Certificate serial: 019B53AB2B8C345F5B17FC7865D7F9D2074C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft Manifest number: 08C7 Signing time: Thu 25 Dec 2025 04:01:25 +0000 Manifest this update: Thu 25 Dec 2025 04:01:25 +0000 Manifest next update: Fri 26 Dec 2025 04:01:25 +0000 Files and hashes: 1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=) 2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: I8o32ZZeEoEifwVIVlm2W3VCn7ItU15AMZfylbSu9p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:2b:8c:34:5f:5b:17:fc:78:65:d7:f9:d2:07:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Validity Not Before: Dec 25 04:01:25 2025 GMT Not After : Dec 26 04:01:25 2025 GMT Subject: CN=17a862a5f7433f861ec0a3a635f234fd117364f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:65:76:a4:a4:94:bf:b1:d8:76:c3:10:64: 4c:a9:dc:c4:37:20:b4:49:ab:9e:23:23:4f:7a:7a: ad:72:58:6a:b5:d9:2a:34:af:a8:a3:4f:70:c4:a9: 23:16:ba:89:a4:bc:4b:82:3c:46:fc:11:e2:86:35: 67:14:2b:f4:13:9b:9f:f4:53:56:6d:c4:82:d4:f0: 33:00:e5:82:22:77:3b:74:47:57:43:1f:b4:df:3a: db:3d:6f:c8:df:d2:8a:9f:f8:c4:3a:ca:53:37:f1: 3b:81:e8:c1:c5:0a:32:24:5a:27:7c:6d:ea:75:c9: b0:10:28:bc:ec:24:6d:4d:b6:1d:de:28:9e:2c:0c: 41:40:f5:8b:d1:f8:d7:b8:a6:0e:e3:1b:8b:72:29: b7:c5:bd:bd:1c:ef:c3:3a:de:b2:22:23:56:fe:48: 95:f0:5e:0c:22:9d:a9:61:88:36:93:79:99:c4:51: 90:ec:30:a4:d6:36:77:f0:45:3e:10:5d:c8:fc:be: 05:39:6c:75:3d:b3:45:33:10:a0:72:9d:7a:cf:c8: 9b:d8:9d:93:16:90:74:57:cc:e1:b1:b4:51:20:79: 45:7d:ae:b9:f1:b8:bb:d4:f6:9e:48:79:90:d5:8b: 5e:33:b2:69:9f:10:b5:58:c0:09:c2:a1:50:0b:2e: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A8:62:A5:F7:43:3F:86:1E:C0:A3:A6:35:F2:34:FD:11:73:64:F0 X509v3 Authority Key Identifier: keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9b:53:61:11:6a:df:63:35:aa:d1:6c:0f:a9:8e:26:62:2d: 01:c8:e1:d2:9f:24:c1:f7:71:8e:27:3c:8d:68:8c:4e:59:83: 93:4d:b9:b2:46:5b:43:69:1e:70:fe:5b:5b:02:d4:a1:91:e0: b7:7c:14:dd:45:af:99:a2:42:d1:88:f4:b8:79:b3:4c:90:66: 46:88:df:ac:5f:b3:5e:31:31:45:da:5d:7c:70:41:e7:ba:f4: bd:c1:98:ca:6f:e8:13:8d:b1:e6:eb:40:1f:20:fc:f8:fa:8a: b1:23:94:86:88:3b:e6:d7:88:b1:9a:7b:47:0a:29:60:d9:f8: c2:9e:78:4c:2e:70:54:0a:94:99:87:f7:28:6b:1d:55:56:4b: d2:5c:c5:08:72:cb:d4:30:86:80:3a:5f:33:24:6a:40:77:c4: c2:98:6f:13:24:46:d5:ac:3f:24:00:99:a4:55:36:c9:24:30: 22:88:a0:7a:0f:d2:ba:59:03:83:5f:71:b0:91:54:d5:ba:59: 21:0b:2f:7e:6e:bc:22:49:d7:b6:47:fa:12:0c:71:e8:ce:65: 5c:3c:ac:a8:3a:a8:7c:f7:4d:44:b8:9a:38:26:5d:a1:c2:68: 85:9d:45:f2:7d:30:9c:94:f9:cc:e3:09:6c:8d:42:e6:7e:50: 8c:66:be:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqyuMNF9bF/x4Zdf50gdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5 NWJlYTIwHhcNMjUxMjI1MDQwMTI1WhcNMjUxMjI2MDQwMTI1WjAzMTEwLwYDVQQD EygxN2E4NjJhNWY3NDMzZjg2MWVjMGEzYTYzNWYyMzRmZDExNzM2NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0lldqSklL+x2HbDEGRMqdzENyC0 SaueIyNPenqtclhqtdkqNK+oo09wxKkjFrqJpLxLgjxG/BHihjVnFCv0E5uf9FNW bcSC1PAzAOWCInc7dEdXQx+03zrbPW/I39KKn/jEOspTN/E7gejBxQoyJFonfG3q dcmwECi87CRtTbYd3iieLAxBQPWL0fjXuKYO4xuLcim3xb29HO/DOt6yIiNW/kiV 8F4MIp2pYYg2k3mZxFGQ7DCk1jZ38EU+EF3I/L4FOWx1PbNFMxCgcp16z8ib2J2T FpB0V8zhsbRRIHlFfa658bi71PaeSHmQ1YteM7JpnxC1WMAJwqFQCy4JlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeoYqX3Qz+GHsCjpjXyNP0Rc2TwMB8GA1UdIwQY MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt YmY5MjRhODI1ZjU4LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4 LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZtTYRFq 32M1qtFsD6mOJmItAcjh0p8kwfdxjic8jWiMTlmDk025skZbQ2kecP5bWwLUoZHg t3wU3UWvmaJC0Yj0uHmzTJBmRojfrF+zXjExRdpdfHBB57r0vcGYym/oE42x5utA HyD8+PqKsSOUhog75teIsZp7RwopYNn4wp54TC5wVAqUmYf3KGsdVVZL0lzFCHLL 1DCGgDpfMyRqQHfEwphvEyRG1aw/JACZpFU2ySQwIoigeg/SulkDg19xsJFU1bpZ IQsvfm68IknXtkf6Egxx6M5lXDysqDqofPdNRLiaOCZdocJohZ1F8n0wnJT5zOMJ bI1C5n5QjGa+GA== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:36 2025 by rpki-client