This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft File: e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json) Hash identifier: adb7vIfCEXgr/4IJnAjtYviAKWiBtlMD3NIXpTJlO2A= Subject key identifier: 36:64:8F:C6:E2:43:3C:33:6E:25:E9:2C:36:61:D6:E4:21:50:FB:56 Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66 Certificate issuer: /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466 Certificate serial: 019AF27716C674D7F1D3E34D509599AD7F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft Manifest number: 0364 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: Hw3AK4jHG5G4gZPWwggiNUzP+bXmhRtwOBVl7NW7mSI=) 2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:16:c6:74:d7:f1:d3:e3:4d:50:95:99:ad:7f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=36648fc6e2433c336e25e92c3661d6e42150fb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:84:40:58:04:04:c8:6b:c4:e0:f2:98:c3: 72:af:84:22:91:f7:9c:bd:3e:98:36:69:5b:e6:3b: dc:42:0d:09:dd:6e:22:4a:58:de:21:c1:1c:62:6d: 1a:42:27:fc:04:70:ef:9c:6e:86:35:00:de:4e:00: a2:a4:5d:78:04:4f:6b:71:38:15:f1:a8:4a:a4:89: 06:cd:1b:c4:13:e8:44:50:d1:df:8a:19:1d:9c:33: 44:4d:54:94:83:0c:47:a7:36:d6:4c:ff:75:00:87: 4a:51:89:d5:ff:67:66:c5:18:7e:70:70:5a:43:b7: d3:3e:f9:3d:8c:ae:e3:71:cb:ad:df:4f:2c:5b:3c: 87:03:36:45:9b:ff:73:56:18:fa:ad:6f:b7:5d:c6: 99:e2:18:6a:85:86:bc:1c:93:68:d9:77:bf:d1:d9: b2:6f:c4:19:cb:b3:bc:d4:f9:dc:54:70:75:32:74: 87:56:59:19:0b:1d:32:7e:c3:b1:44:2c:25:fa:5d: c0:e6:9e:e7:ea:f0:c8:2f:c5:f5:66:d0:fb:b7:22: ae:a3:e8:9f:17:5b:6f:63:4b:84:ba:a9:95:46:7c: 47:37:ac:41:4b:ac:8d:73:07:eb:da:c8:0d:3d:1f: 9e:02:da:64:1b:80:51:f3:bd:40:a6:95:ba:f2:e9: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:8F:C6:E2:43:3C:33:6E:25:E9:2C:36:61:D6:E4:21:50:FB:56 X509v3 Authority Key Identifier: keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b7:bf:b0:76:d6:c0:d0:d1:41:83:d9:f0:4f:7c:88:f1:5a: f3:8e:9b:c4:6b:fc:bf:02:96:40:a6:69:1e:89:66:7a:e3:1e: bf:79:09:64:44:92:8f:4a:c1:a2:2a:6d:0c:77:5e:3d:24:ba: a0:fe:d3:e8:37:92:49:4e:a0:ff:e0:00:68:01:9d:b4:97:1d: 54:fc:8e:fe:25:00:55:e5:7a:59:89:11:a0:c6:78:52:ea:6f: 13:22:20:16:8f:2f:81:95:87:82:51:e0:aa:c6:ba:67:f3:6c: a9:aa:ec:ad:a9:dc:e4:8c:b9:be:e0:ee:c9:f4:ae:4d:bc:9f: 98:60:8b:3c:e6:1f:40:6d:e0:70:29:a6:93:b9:bc:6a:7e:fa: f3:93:8e:57:e8:8e:80:3e:01:a2:f6:3b:5c:f5:76:d4:fc:f7: d8:b7:b4:da:8e:37:ae:e4:a4:16:d0:ec:34:b2:3e:fe:60:fc: 51:a6:c4:44:0b:ff:1d:dd:57:5e:c8:3b:43:c8:74:03:d4:51: 39:fb:90:4d:fe:35:fd:fb:a1:5d:d1:4d:dc:5b:78:33:f0:9d: af:f7:11:b2:7e:3e:91:5e:c6:ac:44:26:0f:24:bd:82:8a:6e: 00:c5:14:1f:c1:ca:ba:4c:f0:b0:87:ab:a5:77:ff:5f:31:eb: 97:a8:cf:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxbGdNfx0+NNUJWZrX+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNjYxNDI0MGJjMGY3NmIwMmY5ZTNhM2Y0MDYwYWI0OTM2 ZmY0NjYwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EygzNjY0OGZjNmUyNDMzYzMzNmUyNWU5MmMzNjYxZDZlNDIxNTBmYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKEQFgEBMhrxODymMNyr4Qikfec vT6YNmlb5jvcQg0J3W4iSljeIcEcYm0aQif8BHDvnG6GNQDeTgCipF14BE9rcTgV 8ahKpIkGzRvEE+hEUNHfihkdnDNETVSUgwxHpzbWTP91AIdKUYnV/2dmxRh+cHBa Q7fTPvk9jK7jccut308sWzyHAzZFm/9zVhj6rW+3XcaZ4hhqhYa8HJNo2Xe/0dmy b8QZy7O81PncVHB1MnSHVlkZCx0yfsOxRCwl+l3A5p7n6vDIL8X1ZtD7tyKuo+if F1tvY0uEuqmVRnxHN6xBS6yNcwfr2sgNPR+eAtpkG4BR871AppW68unubwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZkj8biQzwzbiXpLDZh1uQhUPtWMB8GA1UdIwQY MBaAFHtmFCQLwPdrAvnjo/QGCrSTb/RmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYt ODBjN2FmODdjYzg1LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYtODBjN2FmODdjYzg1 LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLe/sHbW wNDRQYPZ8E98iPFa846bxGv8vwKWQKZpHolmeuMev3kJZESSj0rBoiptDHdePSS6 oP7T6DeSSU6g/+AAaAGdtJcdVPyO/iUAVeV6WYkRoMZ4UupvEyIgFo8vgZWHglHg qsa6Z/Nsqarsranc5Iy5vuDuyfSuTbyfmGCLPOYfQG3gcCmmk7m8an7685OOV+iO gD4BovY7XPV21Pz32Le02o43ruSkFtDsNLI+/mD8UabERAv/Hd1XXsg7Q8h0A9RR OfuQTf41/fuhXdFN3Ft4M/Cdr/cRsn4+kV7GrEQmDyS9gopuAMUUH8HKukzwsIer pXf/XzHrl6jPxw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:33 2025 by rpki-client