This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json) Hash identifier: XxG0lUOjGJogW5AJvFxyi6/q18IC00oorONAsBs1rLs= Subject key identifier: 6B:25:55:B9:8F:5A:3F:D9:15:5B:4F:13:E0:4F:B3:87:6A:59:66:10 Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b Certificate serial: 019AF31D147EAB244FDF0396F80662D35F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft Manifest number: 10CB Signing time: Sat 06 Dec 2025 10:02:40 +0000 Manifest this update: Sat 06 Dec 2025 10:02:40 +0000 Manifest next update: Sun 07 Dec 2025 10:02:40 +0000 Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: WbLaf118ouxUOQYso4UhWRsv0q1ySUY4J06nGwMcwRM=) 2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:14:7e:ab:24:4f:df:03:96:f8:06:62:d3:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b Validity Not Before: Dec 6 10:02:40 2025 GMT Not After : Dec 7 10:02:40 2025 GMT Subject: CN=6b2555b98f5a3fd9155b4f13e04fb3876a596610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:9f:07:7d:71:11:83:4a:60:b8:88:ae:83: e8:69:bb:16:d8:65:61:83:73:21:c5:bb:7a:57:19: fe:39:f2:66:3e:0e:d6:e2:96:14:6b:a5:ba:64:34: f3:b4:29:71:5c:3d:24:7e:d7:aa:23:ed:9f:26:c4: 30:bf:0b:4a:82:e8:7a:e5:48:a8:57:dc:8a:c2:5a: d9:2a:55:ff:e9:11:48:84:7c:de:2b:d8:5d:77:2c: 5b:d2:b4:65:2a:f3:c7:ec:b5:01:b6:a9:9f:30:1c: 15:be:93:a2:68:62:35:bc:eb:40:51:47:b0:d4:c5: fb:f2:13:28:19:d6:ef:01:74:49:85:11:8b:0a:00: 4b:a1:d2:bc:af:9d:41:08:08:ae:ef:db:4e:5a:7d: 2e:84:5c:e4:2c:84:94:aa:91:e8:da:58:d0:09:2f: 98:33:a2:7f:12:f1:28:1f:00:09:04:7a:5a:10:c3: 6b:cd:8b:89:56:98:ee:52:1b:70:ea:02:48:11:cf: d8:e1:f8:2e:6a:03:fe:89:a9:ee:4b:7c:39:1e:d1: e2:f1:a7:06:6e:24:6f:71:6f:5c:db:ef:2d:03:b3: 56:be:eb:e1:d2:6d:c1:32:9e:d2:e1:6c:f5:24:38: c4:4c:8c:cd:33:45:91:49:22:21:76:ce:55:9d:07: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:25:55:B9:8F:5A:3F:D9:15:5B:4F:13:E0:4F:B3:87:6A:59:66:10 X509v3 Authority Key Identifier: keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8d:5b:de:25:f7:d9:21:69:d0:b0:30:c2:41:9c:be:a0:01: f9:10:a1:f5:bf:27:b5:69:23:08:16:25:bb:e5:b8:ad:0e:0a: 9c:5b:8d:34:00:f6:7d:0d:89:92:e2:5c:ae:0d:58:e3:a4:8f: de:01:9d:57:89:16:c8:b0:aa:82:bd:76:6a:e6:f4:86:bb:d8: bd:d1:a5:d4:01:fe:22:cb:e4:f4:5d:d7:e0:19:bc:27:ef:d4: 4c:75:79:e0:84:4b:43:1d:21:9c:74:be:2f:1c:bc:52:c0:c2: ed:fe:f3:85:b0:4b:66:36:25:87:06:4b:a3:e2:6a:8c:a8:34: a3:c0:71:c0:8d:a6:87:70:62:30:58:31:0c:72:01:db:e4:ad: 0b:b7:c0:eb:a0:fa:62:e3:d2:43:40:e6:12:67:70:ed:dd:7f: 37:12:69:29:7f:99:f8:2b:89:50:9e:16:ef:94:55:39:ec:93: a5:1e:b9:48:92:e6:bd:12:6b:9d:9d:1d:cc:3a:7e:14:32:1a: 22:6e:c5:d1:97:d7:7b:9d:5f:87:5a:51:84:e1:1d:82:09:6a: d3:65:13:49:2c:54:e4:fb:d3:80:3c:d9:c0:08:db:37:57:5b: 7e:33:f0:5e:10:d3:ff:e7:1f:3e:ce:b4:a9:a0:c0:1f:29:6f: bc:46:0a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRR+qyRP3wOW+AZi01+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzgzN2Q1ZDE3OTY5ZDJiYzBkNDRlNTYzNGE5NGJmN2Qz NGU5MGIwHhcNMjUxMjA2MTAwMjQwWhcNMjUxMjA3MTAwMjQwWjAzMTEwLwYDVQQD Eyg2YjI1NTViOThmNWEzZmQ5MTU1YjRmMTNlMDRmYjM4NzZhNTk2NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyafB31xEYNKYLiIroPoabsW2GVh g3Mhxbt6Vxn+OfJmPg7W4pYUa6W6ZDTztClxXD0kfteqI+2fJsQwvwtKguh65Uio V9yKwlrZKlX/6RFIhHzeK9hddyxb0rRlKvPH7LUBtqmfMBwVvpOiaGI1vOtAUUew 1MX78hMoGdbvAXRJhRGLCgBLodK8r51BCAiu79tOWn0uhFzkLISUqpHo2ljQCS+Y M6J/EvEoHwAJBHpaEMNrzYuJVpjuUhtw6gJIEc/Y4fguagP+ianuS3w5HtHi8acG biRvcW9c2+8tA7NWvuvh0m3BMp7S4Wz1JDjETIzNM0WRSSIhds5VnQcunwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGslVbmPWj/ZFVtPE+BPs4dqWWYQMB8GA1UdIwQY MBaAFBN4N9XReWnSvA1E5WNKlL99NOkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAt NGRiM2YxODhmNWI2LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAtNGRiM2YxODhmNWI2 LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI1b3iX3 2SFp0LAwwkGcvqAB+RCh9b8ntWkjCBYlu+W4rQ4KnFuNNAD2fQ2JkuJcrg1Y46SP 3gGdV4kWyLCqgr12aub0hrvYvdGl1AH+Isvk9F3X4Bm8J+/UTHV54IRLQx0hnHS+ Lxy8UsDC7f7zhbBLZjYlhwZLo+JqjKg0o8BxwI2mh3BiMFgxDHIB2+StC7fA66D6 YuPSQ0DmEmdw7d1/NxJpKX+Z+CuJUJ4W75RVOeyTpR65SJLmvRJrnZ0dzDp+FDIa Im7F0ZfXe51fh1pRhOEdgglq02UTSSxU5PvTgDzZwAjbN1dbfjPwXhDT/+cfPs60 qaDAHylvvEYKqA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:34 2025 by rpki-client