This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json) Hash identifier: B8MJKFwE1/+pbeoQiT6DCpA+DKn6IgBfsCWbzJ7TFJ4= Subject key identifier: 08:29:E6:7D:F8:ED:65:99:35:3E:F4:23:06:AC:62:D8:55:16:88:7A Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1 Certificate serial: 019AF3898560970257EBDD7E3BC6E36A7B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:01:07 +0000 Manifest this update: Sat 06 Dec 2025 12:01:07 +0000 Manifest next update: Sun 07 Dec 2025 12:01:07 +0000 Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=) 2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: zCfQxzOa4r/lojSx9dcDSYkhVYZ0qYqPDCfbRM+NviA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:85:60:97:02:57:eb:dd:7e:3b:c6:e3:6a:7b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1 Validity Not Before: Dec 6 12:01:07 2025 GMT Not After : Dec 7 12:01:07 2025 GMT Subject: CN=0829e67df8ed6599353ef42306ac62d85516887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:0c:e7:3d:17:1c:12:12:14:eb:47:db:d9: 53:fd:09:e9:a9:a4:96:52:2e:d5:0a:51:e3:6c:18: 35:be:ee:64:7b:b2:75:03:fe:bb:46:8b:52:b1:93: 8e:4a:3f:64:b9:a5:ab:b8:4d:b6:65:4b:62:d9:67: 2b:b9:e7:78:88:b8:95:20:52:76:b8:06:d2:59:33: a2:c2:80:fd:6a:39:d5:15:8f:ad:63:ea:79:b8:c5: ce:e4:08:cd:b5:2c:52:bc:0d:dd:6d:5d:dd:74:6f: 39:1b:49:e3:25:3a:54:c8:58:42:cb:95:ee:cd:7e: 06:b0:c7:d7:37:03:f8:55:2c:8b:63:9f:aa:68:ff: 72:72:d3:6d:6d:c9:c6:4b:a7:08:40:e7:21:95:c5: f0:1e:14:22:08:f1:b5:2e:67:ea:fa:63:94:d2:64: 7e:3a:6d:6b:31:ab:f6:2c:56:31:48:34:92:33:b1: 0b:23:12:e8:aa:df:59:67:df:3f:af:77:f5:92:78: f4:da:2b:1c:d2:46:21:ec:61:84:b6:e1:68:b0:0e: 99:c5:8e:ed:9d:20:01:3c:c6:f8:3a:5b:90:0c:0a: e9:d1:d8:f6:25:19:b9:ee:28:e9:e4:84:66:ad:14: c0:41:c9:26:84:68:27:53:3a:ab:39:9b:64:bc:08: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:29:E6:7D:F8:ED:65:99:35:3E:F4:23:06:AC:62:D8:55:16:88:7A X509v3 Authority Key Identifier: keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:38:44:b5:66:fe:94:76:d2:cb:b9:d0:d4:85:a6:7c:0a:9e: c2:60:3e:8b:ee:eb:31:5b:26:82:d4:70:68:73:d6:e8:c3:47: 57:21:86:eb:c2:ed:67:37:c1:d3:42:91:93:03:19:9a:a0:d1: 27:15:bc:e3:5c:92:b5:17:e1:f1:49:1f:65:ce:3b:31:9d:89: 4f:01:76:2a:82:21:40:c5:bf:c8:b7:08:1e:62:c9:10:c3:71: ad:42:34:13:c3:a5:fb:0d:e7:04:4c:ea:6e:6b:10:fd:c8:87: 96:e7:4e:df:2d:8f:2d:f1:76:55:7e:c7:5d:f6:3d:1d:f9:59: d9:88:ae:7d:57:90:51:d5:e4:95:73:6e:22:79:02:ef:e4:a0: 58:4f:d6:2e:06:83:8a:85:7e:78:b8:1b:6e:37:96:2a:5d:a2: 67:fe:b6:a8:0b:89:02:33:5e:01:a2:a6:39:68:ad:a9:a1:78: 20:e4:ec:af:ab:4b:8f:17:97:11:4d:35:7b:ed:de:0d:78:0f: d4:e4:a9:52:00:4b:92:24:83:27:84:b8:26:db:5a:93:39:ef: ea:7b:69:91:24:2f:33:99:f4:c2:30:37:23:e6:ce:03:4c:68: c4:bc:b1:92:56:50:79:78:8a:d7:7e:9e:6a:49:3d:4e:54:d7: a9:1d:d8:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYVglwJX691+O8bjansvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzA0MDA3ZTIxMzVjOGIxMjc4MDM1YmE3NjQyYjk5MTU5 NDQ0YjEwHhcNMjUxMjA2MTIwMTA3WhcNMjUxMjA3MTIwMTA3WjAzMTEwLwYDVQQD EygwODI5ZTY3ZGY4ZWQ2NTk5MzUzZWY0MjMwNmFjNjJkODU1MTY4ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj0M5z0XHBISFOtH29lT/QnpqaSW Ui7VClHjbBg1vu5ke7J1A/67RotSsZOOSj9kuaWruE22ZUti2Wcrued4iLiVIFJ2 uAbSWTOiwoD9ajnVFY+tY+p5uMXO5AjNtSxSvA3dbV3ddG85G0njJTpUyFhCy5Xu zX4GsMfXNwP4VSyLY5+qaP9yctNtbcnGS6cIQOchlcXwHhQiCPG1Lmfq+mOU0mR+ Om1rMav2LFYxSDSSM7ELIxLoqt9ZZ98/r3f1knj02isc0kYh7GGEtuFosA6ZxY7t nSABPMb4OluQDArp0dj2JRm57ijp5IRmrRTAQckmhGgnUzqrOZtkvAj8kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgp5n347WWZNT70IwasYthVFoh6MB8GA1UdIwQY MBaAFHpwQAfiE1yLEngDW6dkK5kVlESxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEt Zjc3MTBhMDMwZmEyLzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEtZjc3MTBhMDMwZmEy LzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazhEtWb+ lHbSy7nQ1IWmfAqewmA+i+7rMVsmgtRwaHPW6MNHVyGG68LtZzfB00KRkwMZmqDR JxW841yStRfh8UkfZc47MZ2JTwF2KoIhQMW/yLcIHmLJEMNxrUI0E8Ol+w3nBEzq bmsQ/ciHludO3y2PLfF2VX7HXfY9HflZ2YiufVeQUdXklXNuInkC7+SgWE/WLgaD ioV+eLgbbjeWKl2iZ/62qAuJAjNeAaKmOWitqaF4IOTsr6tLjxeXEU01e+3eDXgP 1OSpUgBLkiSDJ4S4Jttakznv6ntpkSQvM5n0wjA3I+bOA0xoxLyxklZQeXiK136e akk9TlTXqR3YBw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:26 2025 by rpki-client