This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json) Hash identifier: r07qNP1FB7QjyoRqZp3zcL547dfPDmS93FmhSuqypUw= Subject key identifier: A1:C9:1F:00:99:81:21:64:BC:D3:A7:76:1C:C4:78:6B:3D:AF:C1:4C Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b Certificate serial: 019B34C4DBA87FD034E61E15C5EB104000A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft Manifest number: 14B7 Signing time: Fri 19 Dec 2025 04:01:15 +0000 Manifest this update: Fri 19 Dec 2025 04:01:15 +0000 Manifest next update: Sat 20 Dec 2025 04:01:15 +0000 Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: Pc5QtPqi3Gl+Z5CP89HREpNGlMs/3s/R09KGWJKBpac=) 2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:db:a8:7f:d0:34:e6:1e:15:c5:eb:10:40:00:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b Validity Not Before: Dec 19 04:01:15 2025 GMT Not After : Dec 20 04:01:15 2025 GMT Subject: CN=a1c91f0099812164bcd3a7761cc4786b3dafc14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:8a:59:b9:43:48:e3:68:c5:de:f2:b8:5a: e3:6d:fc:f9:75:4b:22:ad:49:51:34:fe:6b:b0:56: bd:d0:5c:9e:fd:0c:59:55:1d:dc:79:2c:15:a5:86: 3f:8c:82:6f:2a:25:bf:26:2d:c6:20:ee:23:d7:7d: fa:7c:c3:ed:31:28:86:31:66:7d:77:3c:a5:dd:f2: 26:c0:be:b7:b1:55:8a:3e:19:dd:3b:b2:13:a8:98: f6:df:40:ed:6a:48:2a:b0:9b:28:fa:ac:a3:03:b2: c2:9b:61:d9:e4:09:69:a6:7e:d2:66:a8:5c:82:30: 86:0a:8c:59:4e:6a:d2:0e:a9:f4:4c:eb:90:c4:77: 97:fa:84:8d:20:c0:04:a9:30:d9:19:ce:26:1d:03: b9:b7:b5:f9:18:ad:4b:9b:dc:ca:4d:26:ff:a8:f3: cc:42:3d:9d:73:f9:ec:80:d5:1e:f2:c3:0c:2d:d9: a9:d0:63:30:28:75:03:2c:1d:f4:33:4d:d4:d8:4e: 98:be:00:3c:70:03:32:2a:8a:78:00:4d:c0:af:bd: 51:6c:fd:b8:0d:9b:0d:00:cd:a4:06:fa:23:bf:0b: 40:84:76:72:15:fe:1c:c9:e7:db:15:67:7e:35:70: b9:5d:b1:8f:68:d7:5d:1b:af:30:6a:73:65:c6:bf: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:1F:00:99:81:21:64:BC:D3:A7:76:1C:C4:78:6B:3D:AF:C1:4C X509v3 Authority Key Identifier: keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0c:f8:04:07:f4:21:b4:c9:02:b7:1d:32:0c:3a:29:9f:2e: 7f:2d:d7:80:ca:c0:24:73:bd:bd:e2:2c:d6:22:35:e4:23:72: 96:29:f3:5e:01:d4:6f:66:cf:92:e1:f0:26:ca:1a:f4:f3:f2: 9b:9c:c0:47:d5:35:b2:6d:07:b9:20:40:4c:75:ca:d8:71:98: b4:90:a3:b3:8b:06:62:d1:e4:11:69:9f:98:f8:60:1c:1d:fb: cb:99:e5:cd:c9:71:1d:ac:1a:11:5a:5e:ba:e2:a5:59:70:4c: 03:27:37:87:5b:21:82:f5:79:f1:47:9a:fc:bd:1c:48:a6:32: e1:60:4f:3c:49:5c:5f:a3:73:22:69:4c:07:4c:97:26:0f:4a: 23:3d:6d:5e:3f:26:ce:da:8c:7b:71:ed:51:49:d3:7b:1f:50: 63:12:b2:11:bb:3d:29:76:57:bc:08:ff:65:12:84:f4:8a:3e: 7e:fc:9c:66:41:ff:62:64:28:bd:01:6f:95:ef:73:cb:2a:84: f2:49:39:b0:f1:ec:09:b6:10:df:d5:de:6b:e9:9b:55:e2:30: 2b:c1:a2:cb:13:0a:42:7c:76:71:f0:80:ea:79:bb:35:0c:00: 30:29:bd:6a:ac:51:cf:22:d9:9d:59:e6:27:8e:7c:d3:8a:7a: d8:3b:e5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xNuof9A05h4VxesQQACkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjg5YjgwMTg2MzMyZDQ0MWJiMDUxNWM0NzI2MWM1ZmZh MDYxNmIwHhcNMjUxMjE5MDQwMTE1WhcNMjUxMjIwMDQwMTE1WjAzMTEwLwYDVQQD EyhhMWM5MWYwMDk5ODEyMTY0YmNkM2E3NzYxY2M0Nzg2YjNkYWZjMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSKWblDSONoxd7yuFrjbfz5dUsi rUlRNP5rsFa90Fye/QxZVR3ceSwVpYY/jIJvKiW/Ji3GIO4j1336fMPtMSiGMWZ9 dzyl3fImwL63sVWKPhndO7ITqJj230DtakgqsJso+qyjA7LCm2HZ5Alppn7SZqhc gjCGCoxZTmrSDqn0TOuQxHeX+oSNIMAEqTDZGc4mHQO5t7X5GK1Lm9zKTSb/qPPM Qj2dc/nsgNUe8sMMLdmp0GMwKHUDLB30M03U2E6YvgA8cAMyKop4AE3Ar71RbP24 DZsNAM2kBvojvwtAhHZyFf4cyefbFWd+NXC5XbGPaNddG68wanNlxr9EhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHJHwCZgSFkvNOndhzEeGs9r8FMMB8GA1UdIwQY MBaAFBO4m4AYYzLUQbsFFcRyYcX/oGFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUt YzE5MjMyYmRhNDMwLzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUtYzE5MjMyYmRhNDMw LzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAz4BAf0 IbTJArcdMgw6KZ8ufy3XgMrAJHO9veIs1iI15CNylinzXgHUb2bPkuHwJsoa9PPy m5zAR9U1sm0HuSBATHXK2HGYtJCjs4sGYtHkEWmfmPhgHB37y5nlzclxHawaEVpe uuKlWXBMAyc3h1shgvV58Uea/L0cSKYy4WBPPElcX6NzImlMB0yXJg9KIz1tXj8m ztqMe3HtUUnTex9QYxKyEbs9KXZXvAj/ZRKE9Io+fvycZkH/YmQovQFvle9zyyqE 8kk5sPHsCbYQ39Xea+mbVeIwK8GiyxMKQnx2cfCA6nm7NQwAMCm9aqxRzyLZnVnm J45804p62Dvlzg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:41:23 2025 by rpki-client