This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json) Hash identifier: aqZSqk6YpDDmT+eLTAOzNW8xFNPfpacjTnURgJjcV+I= Subject key identifier: C1:A6:AD:C1:73:12:A8:BC:2D:01:8B:06:BE:53:A5:5C:FA:32:6F:8E Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b Certificate serial: 019AF1D25DB01B085154BB5A0DA86F8F1539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft Manifest number: 0B82 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: g4YykCYwfJD33eg/zHxVp+jwIgRKJpL/q0qLs5RN+W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5d:b0:1b:08:51:54:bb:5a:0d:a8:6f:8f:15:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=c1a6adc17312a8bc2d018b06be53a55cfa326f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:2f:ba:bb:7e:39:39:95:8e:fa:f0:c3:45: 01:24:2b:52:20:7a:7d:0c:40:54:4c:fa:24:7f:d6: 6a:9c:1f:89:f7:e9:18:7a:34:49:9b:87:22:86:b5: 7e:dd:bf:5a:da:92:12:b3:76:68:a0:23:87:63:78: fa:f9:39:76:18:6d:3f:bb:16:7b:f9:10:f9:23:82: 4d:30:61:5c:1e:f1:c9:40:df:19:8d:e3:ad:1d:9a: 9c:c5:c7:f5:52:4e:19:ba:f0:fa:31:fc:9c:bd:8a: e3:e0:00:80:db:38:1a:81:78:51:e7:18:64:23:93: 80:0f:5b:d8:11:6f:8e:f9:9f:c2:a0:e3:7e:00:06: 6b:7d:d4:da:47:b9:48:76:46:ee:81:d2:8e:3d:25: 49:8b:d1:ee:28:4d:49:c3:1c:f6:ed:b8:b4:57:22: 05:2b:b7:c3:72:5b:cd:ad:e0:ae:3a:f0:a1:f9:2d: 0a:5c:82:ca:4d:06:fb:fd:6d:b7:48:d9:0a:0c:bc: 48:83:a8:fd:06:39:ea:43:b7:51:8a:c7:ef:d4:21: 58:97:41:43:00:04:8d:5c:32:1a:e6:94:f9:05:82: 96:88:1c:d6:f6:58:96:95:d2:78:c4:57:13:f7:74: eb:1a:4f:0b:c3:f1:1b:a5:ba:0a:05:26:b5:63:2c: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:AD:C1:73:12:A8:BC:2D:01:8B:06:BE:53:A5:5C:FA:32:6F:8E X509v3 Authority Key Identifier: keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:92:b6:43:98:7e:1f:ae:5f:bf:53:31:d9:b6:13:47:ab:e8: 85:fc:72:c2:ee:f7:8b:4f:b5:0d:55:7a:41:84:ed:95:fe:88: 6f:d9:a2:ed:0f:b8:74:40:02:5a:6d:ae:b8:3c:5a:5a:26:6e: be:5d:17:ce:65:63:94:8b:35:a9:ae:fd:74:ae:19:7a:6e:f2: c7:7c:e5:c7:fb:fa:4b:a1:d0:d8:75:a5:58:98:76:35:01:a1: dc:d7:f3:d1:55:78:75:ed:a5:07:9f:0a:96:af:3d:ea:88:ac: ef:ba:8f:d6:af:be:dc:d3:a5:6b:5e:44:88:97:f2:b7:34:15: 59:09:11:a2:91:1b:db:cd:70:cf:fd:05:b0:60:31:47:a0:73: e9:01:1a:8d:c6:a8:a3:2e:38:b5:cf:48:9b:72:bf:99:65:ad: bc:2e:e0:1d:64:26:c7:6c:10:94:a1:e9:d7:c2:6e:77:db:89: 0b:53:f1:de:99:bc:2a:a8:57:45:bf:53:36:55:0b:4e:50:3e: 00:e7:bd:05:34:67:e4:2e:46:44:d8:a8:a7:b0:dd:72:13:b8: 85:2e:ae:a1:dd:b0:4f:b5:a5:b4:ec:59:a0:d1:5c:24:d0:e3: 44:14:ad:1b:24:a2:60:64:24:5f:0b:8b:f9:4d:4e:24:2b:15: 1b:1c:94:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l2wGwhRVLtaDahvjxU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl MDEzNWIwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EyhjMWE2YWRjMTczMTJhOGJjMmQwMThiMDZiZTUzYTU1Y2ZhMzI2ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TIvurt+OTmVjvrww0UBJCtSIHp9 DEBUTPokf9ZqnB+J9+kYejRJm4cihrV+3b9a2pISs3ZooCOHY3j6+Tl2GG0/uxZ7 +RD5I4JNMGFcHvHJQN8ZjeOtHZqcxcf1Uk4ZuvD6MfycvYrj4ACA2zgagXhR5xhk I5OAD1vYEW+O+Z/CoON+AAZrfdTaR7lIdkbugdKOPSVJi9HuKE1Jwxz27bi0VyIF K7fDclvNreCuOvCh+S0KXILKTQb7/W23SNkKDLxIg6j9BjnqQ7dRisfv1CFYl0FD AASNXDIa5pT5BYKWiBzW9liWldJ4xFcT93TrGk8Lw/EbpboKBSa1YywqAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGmrcFzEqi8LQGLBr5TpVz6Mm+OMB8GA1UdIwQY MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJK2Q5h+ H65fv1Mx2bYTR6vohfxywu73i0+1DVV6QYTtlf6Ib9mi7Q+4dEACWm2uuDxaWiZu vl0XzmVjlIs1qa79dK4Zem7yx3zlx/v6S6HQ2HWlWJh2NQGh3Nfz0VV4de2lB58K lq896ois77qP1q++3NOla15EiJfytzQVWQkRopEb281wz/0FsGAxR6Bz6QEajcao oy44tc9Im3K/mWWtvC7gHWQmx2wQlKHp18Jud9uJC1Px3pm8KqhXRb9TNlULTlA+ AOe9BTRn5C5GRNiop7DdchO4hS6uod2wT7WltOxZoNFcJNDjRBStGySiYGQkXwuL +U1OJCsVGxyU6g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:34 2025 by rpki-client