This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft File: E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json) Hash identifier: CcLv+f0evZhHr4/2ksJlDVN1H4XfNPpWUnmos5x64kQ= Subject key identifier: 62:6F:5A:75:99:FA:EB:39:ED:6D:9D:C5:CA:C2:BA:D8:20:CC:65:71 Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51 Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051 Certificate serial: 019AF23FBF65183469576C63216BA95FE030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft Manifest number: 16A5 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: WvCFjqzcbA703CKPBWzquCef4quDe0MBuT/JfD3uA8M=) 2: NqA4au-1_FHTNTD3PbPf44VlPQw.roa (hash: tZmyHlgbPB86inFat8ThR1i4AUrklKSpxKPNfScJNO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bf:65:18:34:69:57:6c:63:21:6b:a9:5f:e0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=626f5a7599faeb39ed6d9dc5cac2bad820cc6571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:7b:e0:4f:df:bd:ac:15:de:4c:0a:f6:d5: 77:ff:fd:ff:f3:6a:c8:60:82:38:f9:f0:d4:ed:c1: da:3c:bc:f8:2b:a3:3f:75:aa:bd:ea:95:75:75:95: 11:86:16:52:90:6b:c5:73:d7:1b:42:b7:01:a2:ec: e0:41:67:74:fd:c8:e7:ff:cd:ab:05:de:bd:d9:fc: 1c:d1:b0:5e:1f:7f:da:c6:5c:90:2b:ae:d4:bb:e1: af:c6:37:58:11:7e:46:33:a6:5b:ff:7d:70:02:dd: 02:b7:c5:27:82:f3:8d:6b:20:19:38:a5:59:ef:16: 0c:ec:dd:b8:69:f1:c2:29:ae:d7:af:be:c1:69:58: f3:e5:68:ae:84:6f:91:0b:30:50:6e:8b:d4:c9:71: 6c:ee:40:61:2b:a8:35:af:eb:b1:80:05:9b:6e:82: 4b:14:23:bc:e9:e8:e9:db:c1:53:42:81:57:9c:6e: de:bf:1b:1c:7f:08:61:a5:64:55:cc:7f:d0:89:35: 95:9c:54:05:61:87:6f:5e:cc:38:e7:d8:cc:be:e6: 3b:cf:cb:e4:ce:fb:50:44:fa:ad:9c:1d:6a:f8:66: f5:0e:59:ff:df:dc:99:b8:75:86:8c:67:4e:2e:33: a2:d6:6f:2a:2d:5c:94:97:09:2e:f8:2e:b6:ef:f5: 90:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:5A:75:99:FA:EB:39:ED:6D:9D:C5:CA:C2:BA:D8:20:CC:65:71 X509v3 Authority Key Identifier: keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c5:0b:11:ff:10:d5:d5:71:d8:35:3d:e1:3c:e5:20:ed:c0: 1b:31:f3:c9:f5:9c:0e:15:6d:c3:0b:e7:21:ab:72:d1:62:15: 2a:58:34:60:72:a5:48:66:c9:92:bd:12:85:f4:42:e0:67:ce: d0:3c:4b:7e:42:ec:46:37:9b:02:24:f7:b0:ce:8a:16:9e:6a: aa:1d:aa:73:7c:cd:ed:c8:f2:11:9d:5e:be:a4:52:74:23:2d: 24:c4:47:58:37:b6:21:3e:bd:05:f7:38:4a:df:a4:bd:14:33: 44:ac:23:67:75:88:30:68:52:d9:91:0f:1b:79:f0:28:cb:74: d7:1d:a1:e2:51:81:6d:97:8a:0b:11:16:3d:b2:9f:b4:3a:dd: 95:46:99:71:26:91:07:0c:46:95:6f:ca:ec:13:a0:37:d0:07: 3f:3b:0c:91:6d:a9:cb:80:72:d0:59:3f:78:d4:b3:ef:c9:2a: aa:f9:ec:14:24:da:0e:d0:cf:37:03:be:4c:a2:61:d1:c5:ec: 24:67:11:31:3a:de:5b:a0:87:fb:65:6b:d5:e0:d3:d7:48:79: a4:41:a1:6e:a7:73:40:3a:a0:db:62:42:75:3a:46:76:da:b2: 64:f6:ce:96:72:57:9a:33:59:e7:46:88:15:a7:49:64:12:2e: fd:ca:28:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP79lGDRpV2xjIWupX+AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGJjN2U2ZmRmYmY3MzhkMjNmYzVlZTVlNWFjYjUyYmVm YmMwNTEwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD Eyg2MjZmNWE3NTk5ZmFlYjM5ZWQ2ZDlkYzVjYWMyYmFkODIwY2M2NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMl74E/fvawV3kwK9tV3//3/82rI YII4+fDU7cHaPLz4K6M/daq96pV1dZURhhZSkGvFc9cbQrcBouzgQWd0/cjn/82r Bd692fwc0bBeH3/axlyQK67Uu+GvxjdYEX5GM6Zb/31wAt0Ct8UngvONayAZOKVZ 7xYM7N24afHCKa7Xr77BaVjz5WiuhG+RCzBQbovUyXFs7kBhK6g1r+uxgAWbboJL FCO86ejp28FTQoFXnG7evxscfwhhpWRVzH/QiTWVnFQFYYdvXsw459jMvuY7z8vk zvtQRPqtnB1q+Gb1Dln/39yZuHWGjGdOLjOi1m8qLVyUlwku+C627/WQ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJvWnWZ+us57W2dxcrCutggzGVxMB8GA1UdIwQY MBaAFBNLx+b9+/c40j/F7l5ay1K++8BRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTB2SDV2Mzc5empTUDhYdVhsckxVcjc3d0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MDIwZDgtMDY4NC00NGY2LTg0ZDEt ZDFkMGY5NmNhZDFlLzEvRTB2SDV2Mzc5empTUDhYdVhsckxVcjc3d0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MDIwZDgtMDY4NC00NGY2LTg0ZDEtZDFkMGY5NmNhZDFl LzEvRTB2SDV2Mzc5empTUDhYdVhsckxVcjc3d0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsULEf8Q 1dVx2DU94TzlIO3AGzHzyfWcDhVtwwvnIaty0WIVKlg0YHKlSGbJkr0ShfRC4GfO 0DxLfkLsRjebAiT3sM6KFp5qqh2qc3zN7cjyEZ1evqRSdCMtJMRHWDe2IT69Bfc4 St+kvRQzRKwjZ3WIMGhS2ZEPG3nwKMt01x2h4lGBbZeKCxEWPbKftDrdlUaZcSaR BwxGlW/K7BOgN9AHPzsMkW2py4By0Fk/eNSz78kqqvnsFCTaDtDPNwO+TKJh0cXs JGcRMTreW6CH+2Vr1eDT10h5pEGhbqdzQDqg22JCdTpGdtqyZPbOlnJXmjNZ50aI FadJZBIu/cooOA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:50 2025 by rpki-client