This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json) Hash identifier: WpqQ9VMzLjo3ka+ie7XToIqUPjvJ4Z6oM4ggyLxJJEs= Subject key identifier: 8C:E3:D4:EA:15:1E:07:FE:9E:A1:35:50:CF:80:4B:4C:8D:6D:1A:79 Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Certificate serial: 019B7591C23B1E275CBA278751442427BFDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 18:00:45 +0000 Manifest this update: Wed 31 Dec 2025 18:00:45 +0000 Manifest next update: Thu 01 Jan 2026 18:00:45 +0000 Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: +WQIfOUFXDnXPSqjC93cHfisYLaM2LWl8WH3wL799k0=) 2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:c2:3b:1e:27:5c:ba:27:87:51:44:24:27:bf:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Validity Not Before: Dec 31 18:00:45 2025 GMT Not After : Jan 1 18:00:45 2026 GMT Subject: CN=8ce3d4ea151e07fe9ea13550cf804b4c8d6d1a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:06:d5:79:47:81:e6:4a:95:dd:ff:dc:3f:18: 77:fc:9b:0a:93:37:56:6d:ac:32:52:71:9a:5f:d8: 4e:66:c9:0d:bc:f9:46:3a:29:3f:50:44:c7:47:97: 15:ba:f7:36:ad:c4:eb:b5:0f:40:37:04:5b:50:40: d3:97:24:37:0a:b8:bb:e0:73:96:da:6f:da:32:2e: c3:01:5a:e0:96:52:52:97:0a:e6:8e:77:3d:62:53: cf:72:f3:59:9f:c9:84:58:d3:aa:d0:12:09:64:af: c6:a7:30:04:ac:bc:eb:73:ed:7a:39:4b:58:78:78: 90:c0:98:40:28:50:32:6a:d1:e9:33:05:f0:e3:76: cb:b1:70:c2:b5:82:ff:b4:c1:86:20:97:51:18:01: 2e:26:9d:a2:5e:b4:36:45:8e:db:fd:3b:90:97:26: b7:5e:2d:83:12:f2:a4:06:c2:5c:50:ef:0b:16:b1: 6b:5b:21:e5:d0:1f:b2:2f:c4:b0:59:c4:79:fd:89: fd:06:7e:c8:20:03:f9:aa:c7:b9:e9:aa:a8:1a:af: e9:56:06:55:8c:7a:1d:96:0c:7d:8a:8c:53:2d:58: 7f:0c:b0:de:7a:4c:84:bd:7c:82:83:98:28:de:d6: 3e:e6:d9:f0:55:15:30:e3:d9:44:a2:81:ec:3e:6e: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:D4:EA:15:1E:07:FE:9E:A1:35:50:CF:80:4B:4C:8D:6D:1A:79 X509v3 Authority Key Identifier: keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:79:2a:db:ff:7d:2f:ba:a6:85:8a:b2:e8:88:e9:a4:ee: d5:3d:c4:fd:1c:d9:3d:7b:a7:3c:76:cf:f3:6a:69:18:cb:39: bf:c7:9d:c0:d2:34:e5:9c:73:db:25:aa:ab:58:c9:9f:a5:11: 84:05:c2:5d:fa:f0:98:71:e4:b4:cd:15:ea:f2:74:24:ed:9d: 9b:ec:e3:0d:99:b5:3a:76:ad:4e:19:35:d5:e3:13:b3:90:41: 9c:8c:fb:a9:a7:42:92:43:06:44:7a:7d:a2:d5:09:db:3e:32: 73:ea:b8:4f:65:2b:2b:61:9c:77:12:0f:c1:a2:c6:37:07:70: 54:06:64:77:c4:35:0f:ec:45:04:45:29:b2:dc:71:36:95:c6: 54:fb:c7:37:91:4c:f9:44:15:a7:fc:bd:5d:ad:1b:e4:63:98: 73:cb:ba:14:60:ce:f1:31:ab:8b:2b:9c:3b:28:71:83:2f:20: 90:ce:ce:d4:d0:04:d1:39:6e:4e:bd:5c:dc:e4:b3:fb:66:0d: 39:f3:e5:f9:25:51:03:c4:9c:ef:19:3a:c3:78:8f:66:9e:48: 44:91:93:98:da:b2:b5:16:e4:85:bc:88:df:32:41:36:09:1e: eb:46:a7:96:75:8f:4e:23:af:e7:f2:44:60:2c:58:52:ee:73: d9:b2:a6:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kcI7HidcuieHUUQkJ7/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5 MWI5ZDQwHhcNMjUxMjMxMTgwMDQ1WhcNMjYwMTAxMTgwMDQ1WjAzMTEwLwYDVQQD Eyg4Y2UzZDRlYTE1MWUwN2ZlOWVhMTM1NTBjZjgwNGI0YzhkNmQxYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AbVeUeB5kqV3f/cPxh3/JsKkzdW bawyUnGaX9hOZskNvPlGOik/UETHR5cVuvc2rcTrtQ9ANwRbUEDTlyQ3Cri74HOW 2m/aMi7DAVrgllJSlwrmjnc9YlPPcvNZn8mEWNOq0BIJZK/GpzAErLzrc+16OUtY eHiQwJhAKFAyatHpMwXw43bLsXDCtYL/tMGGIJdRGAEuJp2iXrQ2RY7b/TuQlya3 Xi2DEvKkBsJcUO8LFrFrWyHl0B+yL8SwWcR5/Yn9Bn7IIAP5qse56aqoGq/pVgZV jHodlgx9ioxTLVh/DLDeekyEvXyCg5go3tY+5tnwVRUw49lEooHsPm6kJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzj1OoVHgf+nqE1UM+AS0yNbRp5MB8GA1UdIwQY MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4 LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW155Ktv/ fS+6poWKsuiI6aTu1T3E/RzZPXunPHbP82ppGMs5v8edwNI05Zxz2yWqq1jJn6UR hAXCXfrwmHHktM0V6vJ0JO2dm+zjDZm1OnatThk11eMTs5BBnIz7qadCkkMGRHp9 otUJ2z4yc+q4T2UrK2GcdxIPwaLGNwdwVAZkd8Q1D+xFBEUpstxxNpXGVPvHN5FM +UQVp/y9Xa0b5GOYc8u6FGDO8TGriyucOyhxgy8gkM7O1NAE0TluTr1c3OSz+2YN OfPl+SVRA8Sc7xk6w3iPZp5IRJGTmNqytRbkhbyI3zJBNgke60anlnWPTiOv5/JE YCxYUu5z2bKm8Q== -----END CERTIFICATE-----Generated at Thu Jan 1 00:26:54 2026 by rpki-client