This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json) Hash identifier: GoP373L9pYccmxTmASWOyR/v4b8fhEiFpWdeFZbCmkM= Subject key identifier: 65:4E:BE:1D:BF:ED:3C:D6:32:4E:04:95:EE:7A:FB:13:A0:CC:77:6A Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Certificate serial: 019B405B368F1F8E4C1130F433341F1631F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:01:18 +0000 Manifest this update: Sun 21 Dec 2025 10:01:18 +0000 Manifest next update: Mon 22 Dec 2025 10:01:18 +0000 Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: y0lWIbWNeXZ3Pt6h9DZmZncBCJ7Nlnw3oBrf3MsUg7s=) 2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:36:8f:1f:8e:4c:11:30:f4:33:34:1f:16:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Validity Not Before: Dec 21 10:01:18 2025 GMT Not After : Dec 22 10:01:18 2025 GMT Subject: CN=654ebe1dbfed3cd6324e0495ee7afb13a0cc776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:62:f1:58:54:c2:1a:c0:7e:ca:37:ca:4c: bb:0e:0b:79:9d:38:b2:4a:10:4d:e5:4d:0a:de:5e: d1:86:c8:51:4a:80:b2:7c:ab:8f:d6:8a:b4:05:7e: d8:ee:2d:15:15:b3:ae:53:e6:11:63:04:88:d3:b8: 94:ea:3c:0e:1c:49:82:1f:5a:dd:9f:9d:23:ac:fb: 56:6c:a7:b2:67:b3:7a:31:20:3d:2b:22:a0:78:29: 7e:b1:7f:4a:44:eb:87:ba:6f:74:19:03:80:c1:41: 71:f5:17:36:e9:29:8c:2b:7a:d6:2d:d7:72:10:6d: 1b:0a:54:73:6d:95:e3:eb:99:01:30:a3:b1:8e:23: 08:d8:83:09:4b:90:c6:8a:1d:77:a2:9b:ce:df:74: 40:5c:fa:5d:33:de:71:ad:fc:19:37:70:96:2a:74: 9f:ca:d8:0f:6d:ce:6c:f2:d9:c0:f1:cb:12:8b:ce: f1:7f:30:cf:59:8d:4b:82:14:8a:f1:33:54:a9:bd: f3:17:57:d1:38:68:0d:90:66:c4:41:26:fe:e4:ab: 1e:bf:91:91:3b:38:2c:aa:8b:57:e1:b5:fd:94:7c: 60:ff:f9:37:9e:27:d3:40:0c:45:2d:69:57:73:c0: 18:0a:29:d0:76:01:8a:59:e5:55:61:7b:38:d7:a4: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:BE:1D:BF:ED:3C:D6:32:4E:04:95:EE:7A:FB:13:A0:CC:77:6A X509v3 Authority Key Identifier: keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:13:74:21:e2:66:77:a7:52:67:06:e8:00:3b:6a:9c:e5:41: 26:8c:4c:a8:cb:b3:0f:02:27:54:82:b7:0c:cb:95:95:88:1d: e6:00:93:c8:68:bd:d3:92:5f:d7:86:a5:c5:be:b7:01:af:6f: 56:02:f8:b9:10:24:6f:28:31:da:d2:69:f5:24:c7:32:fa:d0: fc:a6:79:8f:5e:eb:52:8c:07:9f:94:9c:99:99:9a:3d:13:2c: 9d:11:d5:45:9f:97:b6:43:bf:bd:69:52:17:76:5d:09:94:7c: ba:67:94:ab:39:dc:e0:b9:35:83:6b:4c:d8:fe:5f:80:08:3f: d2:f7:a2:aa:3e:97:c9:cc:6b:e7:87:2a:93:e4:a3:5f:63:43: f7:45:57:cb:fc:e0:15:18:7e:3c:97:76:e0:59:b5:db:67:0e: b3:6d:c6:95:29:32:e6:d9:eb:54:ec:b7:1b:fa:24:77:a0:7d: 5d:99:8e:bc:c7:8f:50:a3:d0:53:ba:22:47:ff:2a:6b:ff:a0: 95:c6:ef:32:e4:91:23:dc:b4:74:96:cc:4b:fb:82:f1:c4:b1: 8b:3b:8b:4f:f5:a1:dd:82:38:f6:d7:b7:8b:bc:48:1c:fd:75: 27:fe:48:a5:db:2e:e4:eb:28:ba:65:89:60:cc:eb:db:e8:c9: fb:0f:ff:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWzaPH45METD0MzQfFjH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj NTQ3Y2YwHhcNMjUxMjIxMTAwMTE4WhcNMjUxMjIyMTAwMTE4WjAzMTEwLwYDVQQD Eyg2NTRlYmUxZGJmZWQzY2Q2MzI0ZTA0OTVlZTdhZmIxM2EwY2M3NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXBi8VhUwhrAfso3yky7Dgt5nTiy ShBN5U0K3l7RhshRSoCyfKuP1oq0BX7Y7i0VFbOuU+YRYwSI07iU6jwOHEmCH1rd n50jrPtWbKeyZ7N6MSA9KyKgeCl+sX9KROuHum90GQOAwUFx9Rc26SmMK3rWLddy EG0bClRzbZXj65kBMKOxjiMI2IMJS5DGih13opvO33RAXPpdM95xrfwZN3CWKnSf ytgPbc5s8tnA8csSi87xfzDPWY1LghSK8TNUqb3zF1fROGgNkGbEQSb+5Ksev5GR OzgsqotX4bX9lHxg//k3nifTQAxFLWlXc8AYCinQdgGKWeVVYXs416RLPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVOvh2/7TzWMk4Ele56+xOgzHdqMB8GA1UdIwQY MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0 LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxN0IeJm d6dSZwboADtqnOVBJoxMqMuzDwInVIK3DMuVlYgd5gCTyGi905Jf14alxb63Aa9v VgL4uRAkbygx2tJp9STHMvrQ/KZ5j17rUowHn5ScmZmaPRMsnRHVRZ+XtkO/vWlS F3ZdCZR8umeUqznc4Lk1g2tM2P5fgAg/0veiqj6Xycxr54cqk+SjX2ND90VXy/zg FRh+PJd24Fm122cOs23GlSky5tnrVOy3G/okd6B9XZmOvMePUKPQU7oiR/8qa/+g lcbvMuSRI9y0dJbMS/uC8cSxizuLT/Wh3YI49te3i7xIHP11J/5Ipdsu5OsoumWJ YMzr2+jJ+w//iw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:26:48 2025 by rpki-client