This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json) Hash identifier: 6lbtUS7NCPyVIsbvlStnXj7RiTEMxd1LPR0QITX4Flo= Subject key identifier: 6A:49:6C:2D:AE:29:5A:B5:C5:CC:06:BE:72:F8:1D:4A:96:C0:02:F3 Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Certificate serial: 019B6EB40C228E83C6754203C142CCE5F274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft Manifest number: 0792 Signing time: Tue 30 Dec 2025 10:00:51 +0000 Manifest this update: Tue 30 Dec 2025 10:00:51 +0000 Manifest next update: Wed 31 Dec 2025 10:00:51 +0000 Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=) 2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: StARFOMeD+CbUvXgcXMbYgWEhKsHIdTMAIyKudbURvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:0c:22:8e:83:c6:75:42:03:c1:42:cc:e5:f2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Validity Not Before: Dec 30 10:00:51 2025 GMT Not After : Dec 31 10:00:51 2025 GMT Subject: CN=6a496c2dae295ab5c5cc06be72f81d4a96c002f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:a9:77:d7:a3:03:09:34:e0:5a:30:35:25: ad:07:61:3d:1e:9a:27:61:dd:14:a7:7e:5b:e1:e9: c2:2b:af:e1:48:1d:f5:73:ec:a1:44:41:83:ae:22: 87:ac:9e:d1:0a:6b:f7:90:db:b6:8a:4a:bb:6c:45: 61:21:7d:a3:04:b3:33:61:39:1d:ed:b4:cb:1d:57: 99:79:81:f1:1b:3a:cd:fe:e5:6d:9d:99:0e:4c:26: 69:92:6e:03:27:78:bd:6d:29:1d:36:85:06:37:f6: 34:31:85:38:da:e4:26:1c:09:bb:25:cd:95:60:9b: 68:bf:c3:73:30:05:8f:d6:14:0b:32:ed:b8:a2:08: a7:27:ad:57:1d:a3:44:c1:cd:6a:7e:59:ab:fd:ba: 70:82:c1:ea:d4:52:a1:3e:f1:eb:31:71:56:43:3b: 4b:80:c1:3f:45:8c:14:97:56:6a:e5:2a:3c:85:ea: 26:9b:6c:83:dc:16:83:86:0e:30:8f:11:f3:25:9e: ac:bb:ec:e1:a1:80:bf:bf:76:81:7e:1a:6f:17:41: ce:5d:4d:cf:20:2d:19:cd:12:4e:21:f6:55:96:45: 15:20:33:fd:28:f1:37:21:b1:48:46:e0:8f:14:3f: 4c:12:72:b2:31:fb:a9:57:0d:cd:f2:68:67:41:be: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:6C:2D:AE:29:5A:B5:C5:CC:06:BE:72:F8:1D:4A:96:C0:02:F3 X509v3 Authority Key Identifier: keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:02:b4:23:72:f3:54:61:d6:c2:ba:b9:d7:68:44:11:7f:fd: 6f:e8:e6:16:38:9e:5c:e2:00:89:67:c2:52:f7:90:c8:9e:c2: 38:54:96:3e:55:e4:1f:42:53:1f:b1:76:6d:a4:9b:ba:ea:fc: f7:98:d8:0f:35:0c:3b:9a:4a:e4:24:f6:69:26:0f:f5:73:f4: 22:d2:62:66:0c:2d:9c:84:7a:bd:2f:f2:fe:47:ea:a1:9f:e9: f8:66:73:ba:df:df:6b:52:2c:df:95:d4:e8:35:85:fc:5a:c4: 03:81:1f:0d:9d:66:28:6d:65:a0:7c:24:d8:f5:34:7e:ee:d0: 11:50:b1:3e:5d:e2:ca:e7:66:f0:93:80:af:2f:c4:88:2a:0f: 5a:14:59:25:6a:ce:bb:d6:92:ab:17:92:0a:e7:91:aa:73:fb: 50:64:a2:85:68:37:ce:00:6e:f0:54:75:24:d4:2e:3d:7e:d9: 4e:f7:a5:7f:28:86:d8:07:5c:97:74:e1:55:09:9f:b5:b7:d8: 05:fa:43:58:af:45:7f:e6:47:07:b9:2f:45:59:13:57:8d:bb: 17:f9:e0:19:5e:a9:8a:3c:18:ed:2d:93:8b:59:10:49:d4:a3: 83:48:5a:62:15:f0:ee:b3:d1:33:e2:0d:4a:75:b0:1f:35:d9: d5:88:3d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutAwijoPGdUIDwULM5fJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4 NWNkYTIwHhcNMjUxMjMwMTAwMDUxWhcNMjUxMjMxMTAwMDUxWjAzMTEwLwYDVQQD Eyg2YTQ5NmMyZGFlMjk1YWI1YzVjYzA2YmU3MmY4MWQ0YTk2YzAwMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVOpd9ejAwk04FowNSWtB2E9Hpon Yd0Up35b4enCK6/hSB31c+yhREGDriKHrJ7RCmv3kNu2ikq7bEVhIX2jBLMzYTkd 7bTLHVeZeYHxGzrN/uVtnZkOTCZpkm4DJ3i9bSkdNoUGN/Y0MYU42uQmHAm7Jc2V YJtov8NzMAWP1hQLMu24oginJ61XHaNEwc1qflmr/bpwgsHq1FKhPvHrMXFWQztL gME/RYwUl1Zq5So8heomm2yD3BaDhg4wjxHzJZ6su+zhoYC/v3aBfhpvF0HOXU3P IC0ZzRJOIfZVlkUVIDP9KPE3IbFIRuCPFD9MEnKyMfupVw3N8mhnQb6R4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpJbC2uKVq1xcwGvnL4HUqWwALzMB8GA1UdIwQY MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It MmU5YjJkODhkNTQ3LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3 LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQK0I3Lz VGHWwrq512hEEX/9b+jmFjieXOIAiWfCUveQyJ7COFSWPlXkH0JTH7F2baSbuur8 95jYDzUMO5pK5CT2aSYP9XP0ItJiZgwtnIR6vS/y/kfqoZ/p+GZzut/fa1Is35XU 6DWF/FrEA4EfDZ1mKG1loHwk2PU0fu7QEVCxPl3iyudm8JOAry/EiCoPWhRZJWrO u9aSqxeSCueRqnP7UGSihWg3zgBu8FR1JNQuPX7ZTvelfyiG2Adcl3ThVQmftbfY BfpDWK9Ff+ZHB7kvRVkTV427F/ngGV6pijwY7S2Ti1kQSdSjg0haYhXw7rPRM+IN SnWwHzXZ1Yg9nw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:28 2025 by rpki-client