This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json) Hash identifier: m5DzfHpmkQWH+37NbwY6jJ7oxCbF9Gy1M3REvThWJ7Q= Subject key identifier: 36:D3:83:FD:4A:1C:D9:20:DA:BB:B9:4B:21:C7:2A:B0:88:05:71:76 Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f Certificate serial: 019AF31C0162443D9E15EFE3C68DC4B8154F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft Manifest number: 0307 Signing time: Sat 06 Dec 2025 10:01:30 +0000 Manifest this update: Sat 06 Dec 2025 10:01:30 +0000 Manifest next update: Sun 07 Dec 2025 10:01:30 +0000 Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: Qo1dBwjD71ZRE8cHKxWSI86lDUZBJlLBzOBgC9Ch8Ks=) 2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:01:62:44:3d:9e:15:ef:e3:c6:8d:c4:b8:15:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f Validity Not Before: Dec 6 10:01:30 2025 GMT Not After : Dec 7 10:01:30 2025 GMT Subject: CN=36d383fd4a1cd920dabbb94b21c72ab088057176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:3a:12:e9:2f:65:e6:de:ef:28:24:f1:a9: b7:8e:8b:dd:e5:74:40:4b:e8:ce:e9:39:4e:93:0b: e7:b4:1b:76:98:da:24:7e:78:8f:94:22:40:a9:8c: 01:64:cb:83:0d:71:b5:12:c7:b2:55:0b:87:97:63: d8:9f:69:00:8d:44:bc:36:8e:6a:1a:2c:10:04:20: 7f:b7:90:e1:47:cc:1f:57:14:74:89:02:85:68:a7: 3b:8b:dd:8d:20:37:2d:bb:fa:18:79:63:4a:85:49: 3c:a1:cd:05:2e:81:67:3e:e4:7d:bf:7c:2d:88:b8: 4f:0f:6a:cf:67:a1:fa:61:1e:aa:68:ae:d6:4f:e0: 12:19:59:cd:01:01:d6:35:c2:16:b5:bd:b2:e2:19: 26:af:53:0e:1f:ec:93:f9:70:ca:69:14:96:3f:a7: 50:4b:ee:d0:46:4a:ed:81:cb:23:e6:d0:4f:ab:54: d2:63:09:03:c8:e7:b9:1c:4e:63:a0:cc:ed:3d:75: 7d:37:34:f8:d0:05:d1:78:91:db:86:01:b4:20:3b: 31:19:37:e4:6b:76:8c:05:b4:1a:76:1a:fc:1b:f3: c3:e9:00:4d:02:9c:06:8c:2c:7e:18:a4:be:ef:57: 92:2f:e6:af:60:3c:4f:b4:d6:bb:c0:b8:d0:4f:ee: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:83:FD:4A:1C:D9:20:DA:BB:B9:4B:21:C7:2A:B0:88:05:71:76 X509v3 Authority Key Identifier: keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:93:ab:c4:87:57:e3:77:c3:06:4e:97:ff:87:05:18:1b:9b: 1c:ed:5b:67:9c:ee:4f:43:4d:9e:56:34:73:82:3a:1b:1f:b0: e9:8e:5c:a7:42:41:88:7c:6f:4d:4b:1b:67:44:67:d1:22:6d: 3d:68:07:c1:39:1a:91:39:f3:a9:b5:01:27:88:9a:98:bb:62: 65:4a:38:d0:13:54:61:a0:c9:e1:09:dd:bf:d9:c9:bb:5c:be: 76:0d:b9:b2:7c:da:54:35:63:21:92:5f:9f:d0:93:38:48:00: 93:38:b2:36:69:01:9f:9c:bf:bf:2b:56:d2:b1:46:f2:f6:cd: d9:ff:08:17:48:62:8f:c9:6e:fd:7e:14:e1:aa:2b:73:00:2c: 7e:7a:aa:c8:85:d5:a1:0c:b3:4c:88:c0:ba:05:fe:ce:44:ab: 83:47:29:36:1a:ab:1c:fd:68:61:76:d1:33:ce:be:f4:20:fe: cf:d5:13:93:cf:13:5c:25:0e:64:05:a3:8d:c5:ce:de:7c:8e: bf:d9:0d:7c:c6:b6:cd:a5:09:94:e0:99:ef:da:25:af:03:26: 26:6a:10:1f:c9:19:95:bd:0e:9c:61:b8:70:1d:16:06:6e:bb: ae:e9:fb:6c:1a:5a:c7:25:a5:5c:a6:d2:76:8a:a5:67:ae:99: 80:75:90:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAFiRD2eFe/jxo3EuBVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw YTgyNWYwHhcNMjUxMjA2MTAwMTMwWhcNMjUxMjA3MTAwMTMwWjAzMTEwLwYDVQQD EygzNmQzODNmZDRhMWNkOTIwZGFiYmI5NGIyMWM3MmFiMDg4MDU3MTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru86EukvZebe7ygk8am3jovd5XRA S+jO6TlOkwvntBt2mNokfniPlCJAqYwBZMuDDXG1EseyVQuHl2PYn2kAjUS8No5q GiwQBCB/t5DhR8wfVxR0iQKFaKc7i92NIDctu/oYeWNKhUk8oc0FLoFnPuR9v3wt iLhPD2rPZ6H6YR6qaK7WT+ASGVnNAQHWNcIWtb2y4hkmr1MOH+yT+XDKaRSWP6dQ S+7QRkrtgcsj5tBPq1TSYwkDyOe5HE5joMztPXV9NzT40AXReJHbhgG0IDsxGTfk a3aMBbQadhr8G/PD6QBNApwGjCx+GKS+71eSL+avYDxPtNa7wLjQT+6tgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbTg/1KHNkg2ru5SyHHKrCIBXF2MB8GA1UdIwQY MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJOrxIdX 43fDBk6X/4cFGBubHO1bZ5zuT0NNnlY0c4I6Gx+w6Y5cp0JBiHxvTUsbZ0Rn0SJt PWgHwTkakTnzqbUBJ4iamLtiZUo40BNUYaDJ4Qndv9nJu1y+dg25snzaVDVjIZJf n9CTOEgAkziyNmkBn5y/vytW0rFG8vbN2f8IF0hij8lu/X4U4aorcwAsfnqqyIXV oQyzTIjAugX+zkSrg0cpNhqrHP1oYXbRM86+9CD+z9UTk88TXCUOZAWjjcXO3nyO v9kNfMa2zaUJlOCZ79olrwMmJmoQH8kZlb0OnGG4cB0WBm67run7bBpaxyWlXKbS doqlZ66ZgHWQEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:32:09 2025 by rpki-client