This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json) Hash identifier: LSpAM4nhNz89t93eJO95vxS1XBIeSLZitAfHkGeg/yM= Subject key identifier: 62:15:FC:4D:A4:6C:99:75:89:24:64:A0:83:CB:C7:DC:E1:FA:24:B2 Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d Certificate serial: 019AF23FDEC2D56EDE6BBA264A509FD3444B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft Manifest number: 02ED Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: Ourccdk960bH3jm2xBMt5B2PBZ37Vf3/XxRMoaH6eHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:de:c2:d5:6e:de:6b:ba:26:4a:50:9f:d3:44:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=6215fc4da46c9975892464a083cbc7dce1fa24b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:24:22:d9:f0:36:29:ed:5e:5f:60:2b:88: df:83:ba:07:ca:6b:5a:e9:93:b8:66:c4:f3:13:06: 44:19:02:51:56:92:fb:fb:8a:7b:cc:75:6c:cd:eb: ff:e2:44:ae:d6:cc:fd:1b:fa:b6:b4:7e:f5:49:9d: 25:4b:3a:e8:ea:98:21:db:fd:4d:e4:ed:9f:d8:a7: 1c:13:4a:0c:df:2f:11:a4:03:1c:06:9c:95:9a:20: 1b:e4:8b:ff:e6:57:c6:04:72:0b:ce:a7:42:de:87: 74:4f:cf:c9:77:f8:43:48:2b:49:b6:ca:3c:a6:30: b6:60:e0:33:42:57:74:ff:27:7b:30:36:ac:50:01: 54:87:62:7c:79:f5:3d:38:f4:d2:52:13:85:bf:de: ff:5c:40:9e:47:13:6a:fe:91:9f:e4:8b:ff:81:e7: e5:a2:8b:ed:29:8a:26:a6:67:23:b8:cd:76:99:37: 8c:45:34:b9:5a:1c:57:13:4d:f2:75:57:0e:50:ce: 0d:04:63:44:f8:17:48:38:97:90:9f:23:db:7c:8b: e0:02:a3:9e:9b:76:6f:8c:39:6a:cb:f5:27:3f:45: a5:ea:a9:9c:ce:97:62:72:1f:30:ae:05:ca:4e:fc: 0b:85:9e:50:6f:55:f0:30:ec:88:b2:9e:a6:ad:f8: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:15:FC:4D:A4:6C:99:75:89:24:64:A0:83:CB:C7:DC:E1:FA:24:B2 X509v3 Authority Key Identifier: keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7a:8b:70:d6:2e:c7:0a:03:94:f2:f1:a1:a3:73:36:1a:5e: c4:4e:c0:26:6e:f4:af:fa:a1:c4:79:8d:80:7c:53:1e:95:3c: 01:9b:5b:9c:81:a8:b7:c7:58:c4:59:55:aa:98:06:de:34:7e: 2d:ae:15:58:ef:04:fb:39:98:fa:d7:8d:00:4b:d1:7a:a2:e5: 89:63:5e:e8:e1:48:7f:ea:75:47:9b:05:a8:99:6c:51:3f:dd: 76:35:46:68:ac:15:40:a8:92:35:82:9c:cd:83:de:39:84:e2: 0e:73:d8:ea:b1:2a:37:fc:05:f5:6b:e4:6b:d5:2b:40:0b:e7: 06:5b:1a:9a:9c:4f:51:71:79:1a:27:0f:89:76:44:00:54:7b: 61:c7:10:c0:38:b8:b9:19:e7:8e:0f:71:95:df:a0:7f:45:19: d4:42:b0:72:69:48:5c:18:97:31:33:6b:17:e3:81:73:84:ef: 07:27:b4:67:93:b5:a3:47:f2:2d:dd:83:42:0b:bf:47:f8:b1: 9a:f3:96:58:75:25:55:c2:7c:58:c2:af:6d:59:5c:13:6b:30: f1:83:23:7c:7d:ba:b4:25:1c:68:47:80:76:9b:75:ac:d1:d1: 6b:24:bd:d0:d8:71:3f:59:6f:98:fc:76:b8:6c:9f:bc:d9:e4: d1:a4:dc:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP97C1W7ea7omSlCf00RLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYmJhYmUxZmEyOWNjZGFmY2JkNGY5NGI1YzdlNGQwZDFm ODk0N2QwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg2MjE1ZmM0ZGE0NmM5OTc1ODkyNDY0YTA4M2NiYzdkY2UxZmEyNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygEkItnwNintXl9gK4jfg7oHymta 6ZO4ZsTzEwZEGQJRVpL7+4p7zHVszev/4kSu1sz9G/q2tH71SZ0lSzro6pgh2/1N 5O2f2KccE0oM3y8RpAMcBpyVmiAb5Iv/5lfGBHILzqdC3od0T8/Jd/hDSCtJtso8 pjC2YOAzQld0/yd7MDasUAFUh2J8efU9OPTSUhOFv97/XECeRxNq/pGf5Iv/gefl oovtKYompmcjuM12mTeMRTS5WhxXE03ydVcOUM4NBGNE+BdIOJeQnyPbfIvgAqOe m3ZvjDlqy/UnP0Wl6qmczpdich8wrgXKTvwLhZ5Qb1XwMOyIsp6mrfiyOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIV/E2kbJl1iSRkoIPLx9zh+iSyMB8GA1UdIwQY MBaAFBO7q+H6Kcza/L1PlLXH5NDR+JR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAt NDA3MThlMGUzMjhkLzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAtNDA3MThlMGUzMjhk LzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXqLcNYu xwoDlPLxoaNzNhpexE7AJm70r/qhxHmNgHxTHpU8AZtbnIGot8dYxFlVqpgG3jR+ La4VWO8E+zmY+teNAEvReqLliWNe6OFIf+p1R5sFqJlsUT/ddjVGaKwVQKiSNYKc zYPeOYTiDnPY6rEqN/wF9Wvka9UrQAvnBlsampxPUXF5GicPiXZEAFR7YccQwDi4 uRnnjg9xld+gf0UZ1EKwcmlIXBiXMTNrF+OBc4TvBye0Z5O1o0fyLd2DQgu/R/ix mvOWWHUlVcJ8WMKvbVlcE2sw8YMjfH26tCUcaEeAdpt1rNHRayS90NhxP1lvmPx2 uGyfvNnk0aTc+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:14 2025 by rpki-client