This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json) Hash identifier: 5WwUXlvAaiGXN56Bt15LmNOPM+hxCdloyee5LxmX/nk= Subject key identifier: A4:8B:A2:BA:54:55:03:B5:49:0E:BE:9A:2F:98:74:20:F4:BB:F9:A8 Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411 Certificate serial: 019AF23F85FA73F8A12B683F4074C0F5D13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: xwXKKUumN9sLGnGu0exKzJkEgCeCk7pebqkkQlNiThw=) 2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:85:fa:73:f8:a1:2b:68:3f:40:74:c0:f5:d1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411 Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=a48ba2ba545503b5490ebe9a2f987420f4bbf9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:a0:5f:d4:53:55:17:18:30:2f:ec:b0:a9: a6:16:3b:89:04:87:11:aa:f6:96:76:c3:79:b7:ee: 9e:0b:1c:59:83:fb:1b:b5:c6:a4:de:63:e1:2c:78: 4a:7f:6d:14:e4:ce:9e:9a:c7:8e:44:62:63:df:f4: 2e:2f:fb:c5:1b:0a:c9:41:b2:f9:f8:78:b1:65:19: d2:3a:f2:83:69:a0:75:a2:ec:a8:5c:9b:12:93:49: a5:17:f2:15:74:6c:7b:05:6c:7b:62:a7:79:b5:ad: 4a:df:c9:38:96:52:59:34:fa:ef:76:bb:e4:18:23: ab:b8:76:64:c4:df:dd:99:d4:de:96:66:01:b5:58: eb:93:48:6b:ad:d0:20:d5:bf:8d:62:66:28:8a:70: 6f:21:44:97:48:2a:ea:05:3a:1b:ac:14:89:9e:e4: 80:af:65:ae:ab:59:9f:07:63:79:67:a8:d8:e2:71: 5d:93:74:5d:09:fa:59:3f:0b:a3:53:44:73:17:3e: f4:0c:cb:30:b4:75:3a:7a:be:07:66:5d:24:b7:e4: f7:14:ed:92:05:61:54:7f:54:51:2d:5f:c1:36:78: 9f:8a:d2:2a:ab:5d:ed:73:01:79:96:e8:85:09:26: be:e4:37:61:8a:37:c9:99:1c:f4:84:5f:ee:06:28: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8B:A2:BA:54:55:03:B5:49:0E:BE:9A:2F:98:74:20:F4:BB:F9:A8 X509v3 Authority Key Identifier: keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:b3:c7:04:00:08:e6:90:59:9c:9b:d1:2e:44:78:ce:64: 0c:eb:a4:83:f7:6a:15:33:c0:18:f9:42:75:83:75:30:b9:a9: c4:32:a4:75:a6:3c:bf:68:ca:16:5a:cf:e1:ae:21:3a:1f:25: 04:ba:88:09:64:06:07:81:6a:2e:32:c4:1d:f6:60:c4:ce:a7: 09:05:73:c2:52:b4:0d:27:b1:cf:03:bf:fe:a9:03:f6:75:f9: 3b:3c:dd:a3:b9:96:3c:3c:ee:cf:b7:f6:58:4d:8c:46:52:6e: aa:08:ac:9b:bc:43:a2:44:cd:80:d4:dc:b8:82:1f:79:73:15: 0a:1e:60:80:75:fe:4d:ad:6e:c6:ad:81:a1:70:e8:52:32:1d: 24:ae:42:73:7a:88:32:47:a0:46:bb:6b:dc:10:93:9f:52:bc: 24:e4:16:00:87:c8:c8:af:1e:67:0a:3e:11:ec:6b:0b:12:63: 8d:19:ad:50:21:72:60:b8:58:9e:7a:bd:cc:31:b0:84:f9:66: 8e:87:d0:ac:e2:15:8d:c6:57:76:19:a3:d1:41:73:c7:9e:03: e1:32:da:7e:51:14:ed:ab:cb:23:f7:a9:25:89:fd:34:19:a8: 3f:14:a1:0b:72:32:0c:52:2b:02:84:bb:40:af:c0:1c:e4:e3: c8:d2:f2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4X6c/ihK2g/QHTA9dE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODI3YWNjNjgwYWEyOWRkYWM4MjM4ODlkODc4NjNlNDE0 YjI0MTEwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD EyhhNDhiYTJiYTU0NTUwM2I1NDkwZWJlOWEyZjk4NzQyMGY0YmJmOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ygX9RTVRcYMC/ssKmmFjuJBIcR qvaWdsN5t+6eCxxZg/sbtcak3mPhLHhKf20U5M6emseORGJj3/QuL/vFGwrJQbL5 +HixZRnSOvKDaaB1ouyoXJsSk0mlF/IVdGx7BWx7Yqd5ta1K38k4llJZNPrvdrvk GCOruHZkxN/dmdTelmYBtVjrk0hrrdAg1b+NYmYoinBvIUSXSCrqBTobrBSJnuSA r2Wuq1mfB2N5Z6jY4nFdk3RdCfpZPwujU0RzFz70DMswtHU6er4HZl0kt+T3FO2S BWFUf1RRLV/BNnifitIqq13tcwF5luiFCSa+5DdhijfJmRz0hF/uBigfewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSLorpUVQO1SQ6+mi+YdCD0u/moMB8GA1UdIwQY MBaAFHuCesxoCqKd2sgjiJ2Hhj5BSyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUt ZTRkNDU5NzFiMTNkLzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUtZTRkNDU5NzFiMTNk LzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx2zxwQA COaQWZyb0S5EeM5kDOukg/dqFTPAGPlCdYN1MLmpxDKkdaY8v2jKFlrP4a4hOh8l BLqICWQGB4FqLjLEHfZgxM6nCQVzwlK0DSexzwO//qkD9nX5Ozzdo7mWPDzuz7f2 WE2MRlJuqgism7xDokTNgNTcuIIfeXMVCh5ggHX+Ta1uxq2BoXDoUjIdJK5Cc3qI MkegRrtr3BCTn1K8JOQWAIfIyK8eZwo+EexrCxJjjRmtUCFyYLhYnnq9zDGwhPlm jofQrOIVjcZXdhmj0UFzx54D4TLaflEU7avLI/epJYn9NBmoPxShC3IyDFIrAoS7 QK/AHOTjyNLyJw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:47 2025 by rpki-client