This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json) Hash identifier: k3Ykai2WezdOQvjVAQSht7sMKZgmDcBSR7JkeXUvneg= Subject key identifier: 62:23:10:16:75:F1:CA:DB:B1:16:B2:E6:3C:61:E2:DF:6E:8B:14:30 Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11 Certificate serial: 019AF31B232291B14DA5C906717F0F680EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft Manifest number: 0E32 Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: WmjN0t6n/7NUlsC5h5Tep42W8PAJ/mzY1bLV2zk6q74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:23:22:91:b1:4d:a5:c9:06:71:7f:0f:68:0e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11 Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=6223101675f1cadbb116b2e63c61e2df6e8b1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:d3:f1:02:e8:1c:bf:76:8c:e5:8c:08:ad: 29:af:fe:44:a2:46:32:d7:6c:41:db:e0:90:15:42: 27:86:0d:1b:37:dd:6c:82:ff:d3:dd:76:66:28:58: 00:a4:53:90:fe:e2:72:32:52:f9:75:4f:ad:db:16: 19:75:84:83:2f:45:3f:d9:d4:d8:2f:f5:c4:6f:1f: 0f:0a:19:4a:be:fe:24:7b:76:3a:39:35:8e:be:c7: 6d:bd:53:50:5e:fc:5c:76:6d:56:46:43:b1:78:5d: c1:96:49:ea:1d:98:00:da:8c:4e:c4:ec:cd:78:8d: f3:93:b3:57:b4:2c:83:58:14:05:46:fd:bf:08:72: 22:fd:df:8d:70:0b:bb:72:32:cf:3b:06:12:3e:9e: c6:ea:45:a3:c5:09:b3:14:a7:87:17:e6:c3:7d:1a: 58:28:75:56:6c:8c:76:8a:dd:2a:77:02:f8:1d:a1: 07:ec:2f:30:d5:23:d6:f1:bd:a5:cc:4d:a5:98:0e: e3:25:39:31:e2:6d:d0:40:1f:b4:be:ec:36:03:42: ab:f3:91:1f:3e:86:fd:b3:a7:d5:a6:b1:03:ff:61: ce:49:23:6e:fa:64:a3:f8:97:e9:1f:b6:0d:44:29: 88:36:be:5c:75:8d:13:dc:ab:ef:f9:0c:57:c1:98: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:23:10:16:75:F1:CA:DB:B1:16:B2:E6:3C:61:E2:DF:6E:8B:14:30 X509v3 Authority Key Identifier: keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0f:e9:b7:29:41:16:85:57:99:83:1e:1a:67:cb:fb:fd:56: 70:74:ad:3b:48:bd:c7:2e:7e:ce:4e:e0:ea:7e:fd:47:90:85: e4:81:9f:bd:b6:74:88:5f:9f:c8:4b:03:1d:d2:27:fc:53:fb: ca:7b:56:df:dd:ca:5a:bf:f9:78:00:c4:89:73:48:71:9a:2e: fd:19:ac:16:73:29:99:07:c1:24:5d:ee:d8:19:22:b4:0c:c4: 89:e2:3c:8c:ee:0b:1e:63:d3:90:a1:d7:a8:9c:53:92:7c:5f: 76:0a:71:af:ea:87:75:7b:7f:96:69:19:82:46:67:6d:76:fe: 4b:52:7a:41:1e:cc:1c:d7:52:ee:c0:33:a4:9c:ec:0a:12:a5: 29:4c:82:30:11:5f:d7:26:ed:3d:4e:c6:63:81:d5:e9:eb:c5: 64:cb:1b:3b:92:f6:91:9d:64:b7:3f:f4:f7:76:be:78:d3:fa: 84:00:a9:58:d9:7b:61:16:f7:f6:46:62:7c:fa:e4:59:f9:40: 64:3d:9d:28:f8:d6:7b:2a:dd:bf:d2:9d:96:2c:43:79:bf:c2: 5c:db:90:d1:ee:c8:e7:ab:f2:a9:74:6d:ec:eb:5e:8f:38:3b: 4a:70:f5:e5:e4:d3:d3:99:78:d5:4f:b9:8b:b9:fb:99:5e:fb: b7:48:11:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyMikbFNpckGcX8PaA6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1 MDNlMTEwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD Eyg2MjIzMTAxNjc1ZjFjYWRiYjExNmIyZTYzYzYxZTJkZjZlOGIxNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK/T8QLoHL92jOWMCK0pr/5EokYy 12xB2+CQFUInhg0bN91sgv/T3XZmKFgApFOQ/uJyMlL5dU+t2xYZdYSDL0U/2dTY L/XEbx8PChlKvv4ke3Y6OTWOvsdtvVNQXvxcdm1WRkOxeF3BlknqHZgA2oxOxOzN eI3zk7NXtCyDWBQFRv2/CHIi/d+NcAu7cjLPOwYSPp7G6kWjxQmzFKeHF+bDfRpY KHVWbIx2it0qdwL4HaEH7C8w1SPW8b2lzE2lmA7jJTkx4m3QQB+0vuw2A0Kr85Ef Pob9s6fVprED/2HOSSNu+mSj+JfpH7YNRCmINr5cdY0T3Kvv+QxXwZjqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIjEBZ18crbsRay5jxh4t9uixQwMB8GA1UdIwQY MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5 LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ/ptylB FoVXmYMeGmfL+/1WcHStO0i9xy5+zk7g6n79R5CF5IGfvbZ0iF+fyEsDHdIn/FP7 yntW393KWr/5eADEiXNIcZou/RmsFnMpmQfBJF3u2BkitAzEieI8jO4LHmPTkKHX qJxTknxfdgpxr+qHdXt/lmkZgkZnbXb+S1J6QR7MHNdS7sAzpJzsChKlKUyCMBFf 1ybtPU7GY4HV6evFZMsbO5L2kZ1ktz/093a+eNP6hACpWNl7YRb39kZifPrkWflA ZD2dKPjWeyrdv9KdlixDeb/CXNuQ0e7I56vyqXRt7Otejzg7SnD15eTT05l41U+5 i7n7mV77t0gRlg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:59 2025 by rpki-client