This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json) Hash identifier: sUwBkFZXkVaWds94JZiXurYz8OocC8TQXC087PW+q10= Subject key identifier: 55:AE:5D:E3:39:83:9E:20:75:55:5F:C0:8C:49:08:DF:85:4A:B3:BE Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35 Certificate serial: 019AF16494940B433AEDB4687E9243F822E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft Manifest number: 16BA Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: HvFtl78ZM+9xecBBhJjD+TSRA/D+ABs0mIElNOG3u+8=) 2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:94:94:0b:43:3a:ed:b4:68:7e:92:43:f8:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35 Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=55ae5de339839e2075555fc08c4908df854ab3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:cb:67:5a:f2:32:ce:12:ba:b7:d6:4f:fa: 79:d8:52:58:47:0c:aa:b8:be:e9:e5:d7:2e:3f:81: e6:6c:d3:b4:65:69:1a:33:c9:92:a0:f6:8e:48:a5: 61:f3:8e:77:84:ac:4d:90:71:26:6e:66:75:ad:00: 74:4a:2b:22:44:fa:3f:db:b3:7d:2a:5e:17:89:70: ae:a9:b5:bf:62:f0:4b:83:c9:c1:48:4b:7b:6f:59: 9f:ec:eb:f0:08:79:cb:1e:40:7d:85:be:21:3e:95: 57:56:85:aa:24:02:f3:8f:55:ea:cf:38:a6:27:7f: 1a:22:26:13:09:cf:b1:24:f7:27:fd:83:54:36:82: 15:93:97:8a:47:cf:ae:04:e1:1e:8a:24:7f:78:71: 00:70:3b:ec:7e:60:50:e9:63:4d:3d:de:05:b7:3a: c6:38:8d:9e:80:03:d5:a8:ff:02:85:ac:b6:57:53: d6:eb:61:8c:b4:14:f4:f3:ac:8a:7a:5b:3a:fc:06: e9:e9:4e:78:75:7c:ba:fa:5e:b3:a3:f9:13:bd:4c: 24:06:8e:f7:40:bd:b4:4d:98:c7:3d:d8:c6:53:79: e5:be:be:00:fa:d6:5f:8b:1f:1c:18:5e:f1:6f:ed: 0d:eb:b2:b2:b0:df:ac:68:a4:5e:15:30:d8:0d:68: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:5D:E3:39:83:9E:20:75:55:5F:C0:8C:49:08:DF:85:4A:B3:BE X509v3 Authority Key Identifier: keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f0:59:ee:e1:58:83:3d:09:cb:d1:ed:b6:8e:c5:ba:dd:a4: f8:92:af:92:ff:e6:27:c0:b1:8a:68:4f:22:9b:0d:d2:97:41: 12:b5:3f:43:fe:df:00:b3:c8:d9:e8:f1:5a:6d:a9:dc:1d:90: 02:e9:39:73:6d:35:74:41:03:53:55:02:2a:78:68:52:25:bd: e6:a4:70:50:5c:df:e1:96:d0:4f:76:7e:b7:e0:71:a0:ce:95: 58:9b:28:bb:84:67:87:60:8e:9d:b7:64:31:42:fe:6b:de:0c: 00:80:0a:0d:a8:7c:ef:57:4b:9b:71:11:3f:04:36:c9:b4:dd: cc:5f:58:0f:c6:45:c6:ff:6b:29:57:95:2a:2a:02:05:ed:ea: 78:ff:66:91:ec:ce:64:76:8b:56:a4:54:48:28:b1:63:7b:de: 71:96:1f:0b:b9:dc:22:8e:c0:0d:bd:82:4a:65:00:e0:46:93: fa:6b:33:12:09:7f:4f:7a:27:e9:7b:30:cc:a7:10:40:e4:20: ec:e4:25:80:9a:ce:dc:5d:d8:8f:22:fe:40:4b:27:01:be:f4: 95:2b:fa:1a:e7:a1:16:39:cd:ca:e9:a9:e7:a7:ab:2d:f0:e7: 56:81:e2:f8:33:79:0c:b6:a5:81:bf:19:1f:c0:dc:93:07:4c: ac:70:de:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJSUC0M67bRofpJD+CLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0 NTVmMzUwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD Eyg1NWFlNWRlMzM5ODM5ZTIwNzU1NTVmYzA4YzQ5MDhkZjg1NGFiM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkTLZ1ryMs4SurfWT/p52FJYRwyq uL7p5dcuP4HmbNO0ZWkaM8mSoPaOSKVh8453hKxNkHEmbmZ1rQB0SisiRPo/27N9 Kl4XiXCuqbW/YvBLg8nBSEt7b1mf7OvwCHnLHkB9hb4hPpVXVoWqJALzj1Xqzzim J38aIiYTCc+xJPcn/YNUNoIVk5eKR8+uBOEeiiR/eHEAcDvsfmBQ6WNNPd4FtzrG OI2egAPVqP8Chay2V1PW62GMtBT086yKels6/Abp6U54dXy6+l6zo/kTvUwkBo73 QL20TZjHPdjGU3nlvr4A+tZfix8cGF7xb+0N67KysN+saKReFTDYDWjmMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWuXeM5g54gdVVfwIxJCN+FSrO+MB8GA1UdIwQY MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5 LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPBZ7uFY gz0Jy9Htto7Fut2k+JKvkv/mJ8CximhPIpsN0pdBErU/Q/7fALPI2ejxWm2p3B2Q Auk5c201dEEDU1UCKnhoUiW95qRwUFzf4ZbQT3Z+t+BxoM6VWJsou4Rnh2COnbdk MUL+a94MAIAKDah871dLm3ERPwQ2ybTdzF9YD8ZFxv9rKVeVKioCBe3qeP9mkezO ZHaLVqRUSCixY3vecZYfC7ncIo7ADb2CSmUA4EaT+mszEgl/T3on6XswzKcQQOQg 7OQlgJrO3F3YjyL+QEsnAb70lSv6GuehFjnNyump56erLfDnVoHi+DN5DLalgb8Z H8DckwdMrHDebg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:35 2025 by rpki-client