This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json) Hash identifier: /qofMwY9VfBq4UuHwlcz04oBwUmK6M6g2BKpTGOCVic= Subject key identifier: F5:48:2A:0F:A9:0A:F7:18:41:3A:7F:A4:DA:6D:B2:02:BD:06:7F:D2 Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b Certificate serial: 019AF5099AD827AF49D6025A16499E6F0D92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft Manifest number: 1496 Signing time: Sat 06 Dec 2025 19:00:38 +0000 Manifest this update: Sat 06 Dec 2025 19:00:38 +0000 Manifest next update: Sun 07 Dec 2025 19:00:38 +0000 Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: a75PZXPi50tLbhpLycUBgmFOHrpQFl2WmUi2BOooJu0=) 2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:9a:d8:27:af:49:d6:02:5a:16:49:9e:6f:0d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b Validity Not Before: Dec 6 19:00:38 2025 GMT Not After : Dec 7 19:00:38 2025 GMT Subject: CN=f5482a0fa90af718413a7fa4da6db202bd067fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:b4:50:9a:92:d9:e0:ba:89:c3:aa:a3:6c: d2:48:b0:47:af:71:c2:e1:b8:80:4b:58:f1:25:bf: ac:76:63:70:c8:86:b7:d4:eb:e7:ef:cf:06:ef:a3: 62:b4:f7:5e:1f:7c:52:a1:bc:5a:f7:38:0b:e1:35: 52:c5:33:fa:80:9e:ea:fb:0c:62:97:21:f0:9a:47: 10:aa:56:f3:df:67:17:5b:43:8b:c6:e7:0b:79:20: 8d:6c:e1:85:d7:d4:83:99:27:b5:fe:e4:7d:2b:b2: 2a:0b:14:22:e5:5d:68:e6:f9:8e:22:13:f9:ca:ba: 7e:19:71:fc:c0:a0:f0:73:0b:b9:e9:6e:c1:a2:58: 05:77:2c:93:bf:a6:3d:3e:e1:89:2d:21:98:32:cc: 28:13:34:d4:c8:80:62:ce:29:a5:00:77:d0:e0:74: 06:b2:77:8a:15:95:53:8a:f0:25:21:bc:19:86:47: 63:75:53:bc:0f:38:7f:3d:c7:a6:b8:c2:04:27:e3: 70:ef:97:3c:e1:72:d2:76:2c:33:24:e5:6c:f0:6d: 10:1a:88:f5:5f:0d:78:54:fd:b8:e7:de:03:58:87: cb:68:bc:f8:75:b6:a9:dd:4e:e3:93:41:4b:62:bb: 76:12:ad:46:1c:39:fa:5e:9c:1a:1d:60:38:2a:88: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:2A:0F:A9:0A:F7:18:41:3A:7F:A4:DA:6D:B2:02:BD:06:7F:D2 X509v3 Authority Key Identifier: keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:a1:3a:fc:3e:83:76:3f:dd:75:3e:8c:0f:72:19:de:de: 75:af:c5:5f:47:db:ee:27:c6:71:e6:99:27:4b:97:cb:45:dd: 55:53:17:3c:36:04:cb:11:3a:b1:11:7a:a5:9a:ff:03:86:d5: 2b:86:65:9f:3b:40:ed:a1:03:4d:92:da:2b:6d:f4:08:1f:4e: 61:8b:53:eb:4f:bd:21:25:96:a7:8c:00:97:cd:89:bf:a6:2b: 5e:bb:d2:77:08:95:79:05:d2:a5:79:75:cc:59:17:ce:19:c0: 1e:d2:37:eb:d7:fc:fd:00:92:54:1a:27:1b:6d:87:62:3f:24: 2a:c4:9a:f7:04:ae:4d:c0:38:c1:b0:2c:e8:42:b3:96:8e:0c: 84:64:9e:30:70:f5:da:f2:48:5a:ed:21:2e:24:f6:3a:a9:83: a6:e7:6f:7a:b7:a3:54:21:8c:70:ab:a2:b6:77:50:26:9a:9d: 5e:7a:15:77:cd:83:47:9f:f9:f0:16:86:70:41:6f:57:55:ab: d5:22:9a:b2:37:b1:87:5b:f8:c5:71:e3:ee:8b:37:6b:59:51: 3b:74:52:ad:aa:f2:f5:8e:ab:09:f2:74:ea:95:b9:03:32:5f: 0a:75:5d:bc:7f:f2:52:6c:37:56:c2:62:81:f6:ef:07:53:96: 0e:c0:65:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZrYJ69J1gJaFkmebw2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjg5YjgwMTg2MzMyZDQ0MWJiMDUxNWM0NzI2MWM1ZmZh MDYxNmIwHhcNMjUxMjA2MTkwMDM4WhcNMjUxMjA3MTkwMDM4WjAzMTEwLwYDVQQD EyhmNTQ4MmEwZmE5MGFmNzE4NDEzYTdmYTRkYTZkYjIwMmJkMDY3ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszu0UJqS2eC6icOqo2zSSLBHr3HC 4biAS1jxJb+sdmNwyIa31Ovn788G76NitPdeH3xSobxa9zgL4TVSxTP6gJ7q+wxi lyHwmkcQqlbz32cXW0OLxucLeSCNbOGF19SDmSe1/uR9K7IqCxQi5V1o5vmOIhP5 yrp+GXH8wKDwcwu56W7BolgFdyyTv6Y9PuGJLSGYMswoEzTUyIBizimlAHfQ4HQG sneKFZVTivAlIbwZhkdjdVO8Dzh/PcemuMIEJ+Nw75c84XLSdiwzJOVs8G0QGoj1 Xw14VP24594DWIfLaLz4dbap3U7jk0FLYrt2Eq1GHDn6XpwaHWA4KoiGcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVIKg+pCvcYQTp/pNptsgK9Bn/SMB8GA1UdIwQY MBaAFBO4m4AYYzLUQbsFFcRyYcX/oGFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUt YzE5MjMyYmRhNDMwLzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUtYzE5MjMyYmRhNDMw LzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWmhOvw+ g3Y/3XU+jA9yGd7eda/FX0fb7ifGceaZJ0uXy0XdVVMXPDYEyxE6sRF6pZr/A4bV K4ZlnztA7aEDTZLaK230CB9OYYtT60+9ISWWp4wAl82Jv6YrXrvSdwiVeQXSpXl1 zFkXzhnAHtI369f8/QCSVBonG22HYj8kKsSa9wSuTcA4wbAs6EKzlo4MhGSeMHD1 2vJIWu0hLiT2OqmDpudverejVCGMcKuitndQJpqdXnoVd82DR5/58BaGcEFvV1Wr 1SKasjexh1v4xXHj7os3a1lRO3RSrary9Y6rCfJ06pW5AzJfCnVdvH/yUmw3VsJi gfbvB1OWDsBldg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:31 2025 by rpki-client