This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft File: EneXY60_H0taSgVSxgOUlrz_OlQ.mft (raw, json) Hash identifier: 18wVISVW4yMkwnXUWiP7ixDoC0fonYI8LsNecjdTNh8= Subject key identifier: 0C:FC:57:8F:B6:89:8F:95:4C:2A:6B:30:A9:A3:FE:33:D7:B2:0A:6B Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54 Certificate issuer: /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54 Certificate serial: 019AF1D233EAB37E2DBD8B61556FB66E1108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft Manifest number: 064F Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: EneXY60_H0taSgVSxgOUlrz_OlQ.crl (hash: sU197RMCaflExyOpfLUB3cH6Li40DvOWFFDEg3eL4hk=) 2: X6geWX5nM159UJnYLrAlkyag0CM.roa (hash: i2/ukSqH8f8rPwnYXz8bpqJPbVxP6Pdogw7nGkBUWWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:33:ea:b3:7e:2d:bd:8b:61:55:6f:b6:6e:11:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=0cfc578fb6898f954c2a6b30a9a3fe33d7b20a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:ea:e0:4f:79:52:d5:1d:87:3d:90:a7:57: 8a:5e:82:d3:a9:ec:56:0d:c0:84:4f:52:e4:a7:dc: ee:72:78:03:c7:00:b5:c7:2e:2e:cf:12:e3:ff:6e: e6:b2:06:b2:07:10:b5:92:cb:49:1e:d1:39:13:8a: b8:b2:c1:04:a1:c9:19:6d:66:f7:39:93:9e:e6:1c: a7:f3:e3:50:26:02:bb:8f:fa:4d:1f:db:e3:12:c7: a3:c1:52:95:db:d1:b8:ce:2f:52:db:06:66:f6:56: 35:53:71:30:13:3d:ae:a5:ba:2a:36:0c:9c:7c:dc: dc:2f:0e:e5:02:cb:e4:47:97:9d:e3:8d:6d:b5:9b: 25:11:eb:48:29:87:60:f8:4d:64:29:7c:df:43:09: 67:85:11:8d:47:13:0c:7e:7b:93:fb:f0:5e:5a:27: 29:ab:15:8a:cd:37:bc:14:63:b3:d3:b3:38:b1:e6: d5:db:14:d0:74:9b:c3:ce:55:cd:cf:41:95:8d:d3: eb:a8:43:f8:66:5b:87:e6:b0:20:e5:fb:4f:8a:d0: 1d:55:77:38:18:cf:0b:ae:90:7e:b8:5f:f2:f0:f8: 18:50:02:2c:52:62:d4:c5:a2:ec:bd:1e:00:f9:3b: 49:e1:1c:76:3d:3c:62:a9:92:61:0b:ca:ba:60:8d: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:57:8F:B6:89:8F:95:4C:2A:6B:30:A9:A3:FE:33:D7:B2:0A:6B X509v3 Authority Key Identifier: keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:58:f2:5f:b7:ca:67:74:60:8c:21:37:d9:e2:4f:4b:00:88: 5d:82:7a:d1:f7:55:7a:ab:dc:c0:9d:7b:51:fe:18:c5:80:8a: 48:c7:85:83:5a:c2:e2:bf:8b:9f:d2:a2:53:39:ba:31:32:40: bc:b9:0c:b6:a8:40:c0:a4:0d:69:1e:06:ab:e2:78:c3:69:f5: 18:e8:ff:d7:68:c2:64:c3:93:33:5a:1e:4f:60:2f:33:07:d0: e4:5c:68:4b:e9:67:8d:b5:15:51:73:e2:aa:6c:12:37:ae:92: 6a:0c:06:dd:55:7b:a3:b3:f1:59:a7:94:35:2f:73:48:ee:41: ca:86:15:e3:73:8f:9a:66:c4:ca:97:50:df:9d:33:2f:30:f3: ff:e1:47:87:15:f1:13:3b:ff:65:7b:a8:f5:b0:6f:aa:12:02: 26:9b:2d:bf:a5:de:83:a3:a4:de:e3:6f:8d:7f:98:5d:86:a9: e7:aa:5f:e4:32:20:dc:a4:9b:c8:42:12:01:b9:90:fb:5c:ee: 3b:f8:36:ba:e7:db:43:a6:4d:05:c2:f6:cb:52:ba:10:44:db: 21:14:c0:c7:a1:fe:a8:3f:94:ff:58:ac:60:b7:5c:8e:0d:c0: b5:3d:08:3a:9b:03:fa:7a:e1:21:14:f0:15:a8:4d:58:4c:6b: 10:57:6c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jPqs34tvYthVW+2bhEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzc5NzYzYWQzZjFmNGI1YTRhMDU1MmM2MDM5NDk2YmNm ZjNhNTQwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EygwY2ZjNTc4ZmI2ODk4Zjk1NGMyYTZiMzBhOWEzZmUzM2Q3YjIwYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Hq4E95UtUdhz2Qp1eKXoLTqexW DcCET1Lkp9zucngDxwC1xy4uzxLj/27msgayBxC1kstJHtE5E4q4ssEEockZbWb3 OZOe5hyn8+NQJgK7j/pNH9vjEsejwVKV29G4zi9S2wZm9lY1U3EwEz2upboqNgyc fNzcLw7lAsvkR5ed441ttZslEetIKYdg+E1kKXzfQwlnhRGNRxMMfnuT+/BeWicp qxWKzTe8FGOz07M4sebV2xTQdJvDzlXNz0GVjdPrqEP4ZluH5rAg5ftPitAdVXc4 GM8LrpB+uF/y8PgYUAIsUmLUxaLsvR4A+TtJ4Rx2PTxiqZJhC8q6YI1FhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz8V4+2iY+VTCprMKmj/jPXsgprMB8GA1UdIwQY MBaAFBJ3l2OtPx9LWkoFUsYDlJa8/zpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5lWFk2MF9IMHRhU2dWU3hnT1VscnpfT2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGE4ZmEtMGZjOS00YTk3LWFhZGUt MmFjNjI2NTdmNDYzLzEvRW5lWFk2MF9IMHRhU2dWU3hnT1VscnpfT2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGE4ZmEtMGZjOS00YTk3LWFhZGUtMmFjNjI2NTdmNDYz LzEvRW5lWFk2MF9IMHRhU2dWU3hnT1VscnpfT2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1jyX7fK Z3RgjCE32eJPSwCIXYJ60fdVeqvcwJ17Uf4YxYCKSMeFg1rC4r+Ln9KiUzm6MTJA vLkMtqhAwKQNaR4Gq+J4w2n1GOj/12jCZMOTM1oeT2AvMwfQ5FxoS+lnjbUVUXPi qmwSN66SagwG3VV7o7PxWaeUNS9zSO5ByoYV43OPmmbEypdQ350zLzDz/+FHhxXx Ezv/ZXuo9bBvqhICJpstv6Xeg6Ok3uNvjX+YXYap56pf5DIg3KSbyEISAbmQ+1zu O/g2uufbQ6ZNBcL2y1K6EETbIRTAx6H+qD+U/1isYLdcjg3AtT0IOpsD+nrhIRTw FahNWExrEFdsQA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:38 2025 by rpki-client