This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft File: E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json) Hash identifier: iuixx+gkZKHHB3IiDmNDaQzUz6emG4Q/wZFHlAS398k= Subject key identifier: 3E:75:2B:65:67:1B:4E:D5:E4:C4:E5:7D:75:66:43:D2:ED:30:29:03 Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 Certificate issuer: /CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Certificate serial: 019AF1D18DEB3B88FF728831E54165A5F3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft Manifest number: 08F7 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: arE8op+5pUWu9k1dSAkheLIg6QcAF524FLVTXW9Hfjg=) 2: PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa (hash: I/FNz1fCzuds8tR/gTE3VhldOpz6XGiv0J7vXLKi7Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8d:eb:3b:88:ff:72:88:31:e5:41:65:a5:f3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=3e752b65671b4ed5e4c4e57d756643d2ed302903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:90:d9:6e:a4:ac:6b:da:94:00:3f:7d:5b: 67:8e:7c:25:5a:28:ef:84:61:a9:b1:49:cb:9b:ce: da:9b:fe:bb:86:1e:61:8b:b1:72:f5:8b:ab:18:25: 9c:a0:fb:5c:98:04:1b:03:bc:43:08:d6:e7:9e:87: 46:f8:06:f0:20:4b:3d:00:70:d5:9e:cb:3c:9d:0d: 68:ce:49:c8:b4:2e:8f:b2:cd:82:ce:d8:3d:46:c1: 30:b8:5a:5f:f0:48:20:cb:bc:e3:ef:6b:87:7c:02: 9c:77:20:2e:3f:5c:f7:4a:44:69:af:4e:0e:1f:f3: 9d:cc:45:f8:3e:ab:45:de:4b:fd:b3:1f:86:b6:9b: 9c:74:20:24:2e:1d:9c:07:b6:c2:d8:c5:3b:fa:d8: da:66:65:07:b3:72:a4:c6:d9:85:d7:d8:df:cb:bf: 73:d0:c3:ee:18:51:65:79:35:5a:65:30:2f:55:78: 08:5a:4d:b2:22:b2:b3:b3:17:5f:95:ac:68:e2:a5: bd:40:2f:34:d5:ed:a2:b5:74:a3:85:03:1e:b6:d3: 79:14:d4:85:5f:45:0e:7b:d1:56:34:9e:e2:ba:c1: 58:b9:58:a3:6a:6e:79:db:18:c3:ad:61:04:3b:97: 23:9f:1c:f6:72:8f:1b:96:99:2d:1a:2f:5f:e8:65: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:2B:65:67:1B:4E:D5:E4:C4:E5:7D:75:66:43:D2:ED:30:29:03 X509v3 Authority Key Identifier: keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:10:f3:22:dc:f1:b5:c9:9c:d9:88:80:f5:9d:35:0e:ae:69: 61:48:b3:74:90:15:47:b9:3d:40:f6:25:1e:e0:73:b6:46:87: 8f:a6:c8:36:c5:01:8e:c0:cc:0c:2e:dc:6e:08:21:84:29:e9: 51:6e:d4:ac:ee:d4:88:59:5d:db:ee:df:16:05:b5:9f:11:e8: bc:e1:c3:af:46:31:bf:75:06:65:b8:a1:3b:9d:a5:c9:9d:db: c9:d6:16:69:da:a0:0e:53:d6:b0:42:33:7c:c7:1e:6e:68:4a: 4d:40:ef:7a:60:28:31:dc:11:54:86:b7:21:14:dd:09:17:9e: 3a:fb:18:84:5e:36:4d:fc:35:2c:2c:a7:a0:6b:51:a1:cf:fb: b2:d9:1d:63:1e:5f:67:15:7f:1a:21:20:8e:3d:ba:67:ba:57: d5:57:04:21:4a:c1:6e:ff:a0:37:44:6a:35:a0:fd:cb:9d:71: 32:32:3f:1f:5c:30:53:54:e5:06:11:5a:22:dd:56:af:13:65: 6e:c5:e5:47:d2:7c:e6:03:bf:e5:c9:59:31:92:ca:5d:4c:99: 17:cb:45:5f:31:ad:bd:3d:2f:84:76:92:71:16:a1:e1:b2:8a: b9:e4:1c:c9:c9:40:89:65:1d:a2:cc:ef:ea:cc:b0:2a:5f:1b: 00:9f:db:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y3rO4j/cogx5UFlpfO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWRmYjkxMGZmZmU0N2Q1MWFkOWQwZjg4M2IxYjY0OTY2 OWUxMzUwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygzZTc1MmI2NTY3MWI0ZWQ1ZTRjNGU1N2Q3NTY2NDNkMmVkMzAyOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FuQ2W6krGvalAA/fVtnjnwlWijv hGGpsUnLm87am/67hh5hi7Fy9YurGCWcoPtcmAQbA7xDCNbnnodG+AbwIEs9AHDV nss8nQ1ozknItC6Pss2Cztg9RsEwuFpf8Eggy7zj72uHfAKcdyAuP1z3SkRpr04O H/OdzEX4PqtF3kv9sx+GtpucdCAkLh2cB7bC2MU7+tjaZmUHs3KkxtmF19jfy79z 0MPuGFFleTVaZTAvVXgIWk2yIrKzsxdflaxo4qW9QC801e2itXSjhQMettN5FNSF X0UOe9FWNJ7iusFYuVijam552xjDrWEEO5cjnxz2co8blpktGi9f6GVxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD51K2VnG07V5MTlfXVmQ9LtMCkDMB8GA1UdIwQY MBaAFBPt+5EP/+R9Ua2dD4g7G2SWaeE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGIt ZDE0MWE4NjkyMDM5LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGItZDE0MWE4NjkyMDM5 LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxDzItzx tcmc2YiA9Z01Dq5pYUizdJAVR7k9QPYlHuBztkaHj6bINsUBjsDMDC7cbgghhCnp UW7UrO7UiFld2+7fFgW1nxHovOHDr0Yxv3UGZbihO52lyZ3bydYWadqgDlPWsEIz fMcebmhKTUDvemAoMdwRVIa3IRTdCReeOvsYhF42Tfw1LCynoGtRoc/7stkdYx5f ZxV/GiEgjj26Z7pX1VcEIUrBbv+gN0RqNaD9y51xMjI/H1wwU1TlBhFaIt1WrxNl bsXlR9J85gO/5clZMZLKXUyZF8tFXzGtvT0vhHaScRah4bKKueQcyclAiWUdoszv 6sywKl8bAJ/bSw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:21 2025 by rpki-client