This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json) Hash identifier: MqOeOnPqeqRGPFRfNlqU7yBaCPIOPCV6XA6xzO24ofY= Subject key identifier: 43:16:7D:E7:98:19:09:4B:BC:F4:BA:8F:0B:BC:12:15:AB:47:A1:29 Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08 Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908 Certificate serial: 019AF23FDA3F8AD2D100425244DB09BFF9F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft Manifest number: 0351 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=) 2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: LiOzMHcXoNG1nvfY8qV96w4117V7EwhjWIupxP8G68E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:da:3f:8a:d2:d1:00:42:52:44:db:09:bf:f9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=43167de79819094bbcf4ba8f0bbc1215ab47a129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a6:0f:60:8f:6b:66:ec:f3:0d:88:92:51:de: 13:c5:fd:9f:8a:30:d5:ae:4c:3f:23:f2:cf:15:b6: fe:7e:55:f6:b5:b6:b6:97:51:12:6e:a9:f6:54:a1: 8b:cb:35:05:48:1c:8d:6e:d8:8a:2e:40:1a:c7:e6: d1:c2:08:48:23:f6:68:6f:cc:d5:bb:ce:c3:4b:ad: 23:ba:04:3d:4f:bc:67:f4:fe:3a:34:c5:62:ba:1f: e2:c6:51:df:15:6e:04:bb:8f:0a:26:4f:57:ff:2f: 4f:92:97:f3:d7:6a:6a:36:c2:21:ad:43:24:c5:25: 52:60:85:74:8f:57:42:ec:ae:a7:a3:1c:9a:68:01: f3:5e:53:3e:fe:2d:f4:26:19:e3:bd:0f:5b:7e:45: d4:14:dc:c9:c7:de:e2:0b:87:2e:41:31:24:c6:9d: 73:f5:b9:1e:83:39:78:f0:b8:47:9a:9c:fa:fd:83: af:4f:7a:dd:be:aa:e8:05:65:30:72:62:34:29:c1: 64:d0:6e:2a:2f:13:63:2a:e1:a3:ad:05:6f:2d:14: a7:f9:fb:d4:5e:90:b2:89:ef:ce:fc:78:20:3d:aa: 66:b9:95:94:89:5d:0e:99:f5:0f:be:1d:d3:80:b8: 45:24:9c:3e:57:1f:45:44:45:06:41:d5:96:db:55: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:7D:E7:98:19:09:4B:BC:F4:BA:8F:0B:BC:12:15:AB:47:A1:29 X509v3 Authority Key Identifier: keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:16:c0:93:f5:2d:78:83:e6:e5:08:ee:d8:40:61:b0:10: 14:a9:26:f2:4c:ff:c4:6f:b2:73:61:1d:41:47:bd:8c:e1:6c: be:ba:4e:31:6f:4b:9a:7b:9b:01:d9:e5:c5:d2:25:97:cc:88: 78:0e:b3:bd:29:92:39:76:7d:15:8a:b0:56:99:1b:4c:2a:2f: f2:6e:bd:91:f4:82:61:6d:16:b7:d6:b2:4b:6d:45:03:af:ff: 8a:31:e4:16:d2:ba:b8:c9:a8:75:27:aa:d3:72:d3:03:b4:a5: 4e:04:c8:d8:41:bb:27:9b:48:7e:6e:95:f3:e2:e3:a3:67:8e: 16:2c:98:b1:ee:58:a5:59:14:1b:87:f8:2f:6c:a7:2b:df:70: 55:24:48:41:c4:9c:de:5b:4e:2a:56:b8:59:73:31:2e:35:59: e5:3f:5e:b1:82:82:bf:8a:1f:fc:06:0b:d6:5c:74:32:d6:a8: ee:57:c6:7e:ba:18:e5:c0:d7:10:e1:2b:35:f4:f7:cc:38:8a: 5d:dc:c8:5e:4a:62:d4:b0:e3:06:66:95:e1:ca:6c:b0:28:0a: 17:0c:ab:5a:81:82:c0:bd:d0:11:c7:cc:d6:e9:02:e4:48:36: d9:24:1e:c2:11:f4:10:2f:e8:a3:8d:2b:80:7e:f7:43:fa:c0: cc:9c:6c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9o/itLRAEJSRNsJv/nyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTVkZDE0YmRlOTMyMzcyZGM4YjU5MzJjYzU0ZDYwOGRi YmU5MDgwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg0MzE2N2RlNzk4MTkwOTRiYmNmNGJhOGYwYmJjMTIxNWFiNDdhMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6YPYI9rZuzzDYiSUd4Txf2fijDV rkw/I/LPFbb+flX2tba2l1ESbqn2VKGLyzUFSByNbtiKLkAax+bRwghII/Zob8zV u87DS60jugQ9T7xn9P46NMViuh/ixlHfFW4Eu48KJk9X/y9Pkpfz12pqNsIhrUMk xSVSYIV0j1dC7K6noxyaaAHzXlM+/i30JhnjvQ9bfkXUFNzJx97iC4cuQTEkxp1z 9bkegzl48LhHmpz6/YOvT3rdvqroBWUwcmI0KcFk0G4qLxNjKuGjrQVvLRSn+fvU XpCyie/O/HggPapmuZWUiV0OmfUPvh3TgLhFJJw+Vx9FREUGQdWW21WFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMWfeeYGQlLvPS6jwu8EhWrR6EpMB8GA1UdIwQY MBaAFBPl3RS96TI3Lci1kyzFTWCNu+kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTgzNTgtMTU3ZC00YzZiLWI3ZTUt YWZmNjE0NTFlODRlLzEvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTgzNTgtMTU3ZC00YzZiLWI3ZTUtYWZmNjE0NTFlODRl LzEvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/EWwJP1 LXiD5uUI7thAYbAQFKkm8kz/xG+yc2EdQUe9jOFsvrpOMW9LmnubAdnlxdIll8yI eA6zvSmSOXZ9FYqwVpkbTCov8m69kfSCYW0Wt9ayS21FA6//ijHkFtK6uMmodSeq 03LTA7SlTgTI2EG7J5tIfm6V8+Ljo2eOFiyYse5YpVkUG4f4L2ynK99wVSRIQcSc 3ltOKla4WXMxLjVZ5T9esYKCv4of/AYL1lx0Mtao7lfGfroY5cDXEOErNfT3zDiK XdzIXkpi1LDjBmaV4cpssCgKFwyrWoGCwL3QEcfM1ukC5Eg22SQewhH0EC/oo40r gH73Q/rAzJxsEg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:43 2025 by rpki-client