This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json) Hash identifier: EPAiuLqlSwkRrxW+tAwcY2bCibuzV4vIUGUzvp1qIQ0= Subject key identifier: 1C:7D:43:EF:4E:E3:C9:B0:F4:9F:0F:A0:84:5C:B1:07:12:B2:AA:91 Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Certificate serial: 019AF12E572207D41768B958F1A345803A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft Manifest number: 0C1C Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: EoSS0vgrO6Ik6/3gAQWHB+sjQCifDnC2Uu7g6o6+wwA=) 2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:57:22:07:d4:17:68:b9:58:f1:a3:45:80:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=1c7d43ef4ee3c9b0f49f0fa0845cb10712b2aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:36:a1:5d:4b:eb:20:ec:95:00:d1:d7:c0: 54:9c:bc:12:44:53:7b:fc:e6:ed:04:a2:5b:60:04: a8:05:52:b0:40:21:49:ba:6a:d9:7b:97:85:76:64: fa:94:2c:69:3a:c8:9f:53:4f:b8:b6:c4:2a:c7:54: 93:32:b6:9e:c7:ab:e2:e8:63:a8:8d:3a:0f:7c:d6: dd:ee:c3:9f:e4:2c:a2:e2:9f:1f:78:e5:28:ff:a7: 44:0a:3b:df:83:93:ca:fc:e2:36:f7:99:9e:ba:28: e7:7e:b0:8a:63:52:80:d4:bb:34:f6:fe:7a:8d:06: a9:58:5b:72:4a:b8:c2:1a:ee:d4:8e:4e:85:a7:57: ee:69:a3:e2:f5:78:17:ce:c1:5c:31:4e:50:f9:de: 0e:fc:75:ab:c9:4e:a2:9d:e6:39:c8:5b:2a:60:03: 84:28:dc:39:b7:10:a8:dc:03:07:c9:04:f7:51:b3: cc:8c:73:7e:05:bd:f0:a9:ba:72:62:07:e5:0b:b6: fd:e2:62:a6:9d:1c:8e:88:20:6d:5d:a1:be:4d:5c: 0d:88:12:c6:df:9a:06:0f:40:3f:91:ba:92:28:46: 21:45:20:3c:16:e0:bb:f6:9a:e0:ef:78:1a:b6:b8: 5a:3f:35:83:97:5e:65:46:47:d3:5b:07:36:c7:c2: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:43:EF:4E:E3:C9:B0:F4:9F:0F:A0:84:5C:B1:07:12:B2:AA:91 X509v3 Authority Key Identifier: keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8f:68:ab:fd:67:f8:b8:ab:2e:07:39:7a:59:80:05:e8:6f: dc:e5:24:b8:e5:65:f7:68:af:3d:4b:6e:b4:6b:c7:01:b1:fa: 1c:15:a6:ca:73:dd:b2:fb:6d:56:da:0e:69:cb:fc:16:12:96: 40:1a:b6:9a:f9:06:87:04:31:e0:af:92:d6:55:49:09:07:4b: 8a:54:97:8e:6f:61:08:69:e5:97:61:3b:2f:88:50:ce:76:7a: 60:9a:4f:c8:50:f0:f9:18:bd:58:96:be:f7:1c:eb:f9:98:a4: 03:a4:2c:98:c1:f6:83:f5:bf:99:f0:ad:84:74:b0:ce:64:33: 72:1f:c6:5d:97:4d:3b:5a:a1:61:59:a5:a0:05:b0:8a:90:e8: 9a:9a:c7:01:5e:1a:53:c3:bd:24:35:18:7f:0e:2e:77:29:5b: e8:61:6e:ea:51:9a:2d:9d:d1:33:f2:da:09:dd:08:52:50:e5: 81:80:68:41:cf:e1:99:a4:b6:45:11:2e:8d:9b:71:15:e6:6c: e9:1f:86:cd:1d:61:78:d4:21:ea:c2:c8:d4:21:de:97:60:05: bd:95:d8:1d:5b:d1:8e:66:cb:04:b9:e1:84:d4:a1:c4:90:44: 38:6e:8a:f2:44:18:3d:6b:86:25:b5:e6:d1:22:22:0c:29:58: 54:9c:a1:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlciB9QXaLlY8aNFgDpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi ODg2N2IwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD EygxYzdkNDNlZjRlZTNjOWIwZjQ5ZjBmYTA4NDVjYjEwNzEyYjJhYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1242oV1L6yDslQDR18BUnLwSRFN7 /ObtBKJbYASoBVKwQCFJumrZe5eFdmT6lCxpOsifU0+4tsQqx1STMraex6vi6GOo jToPfNbd7sOf5Cyi4p8feOUo/6dECjvfg5PK/OI295meuijnfrCKY1KA1Ls09v56 jQapWFtySrjCGu7Ujk6Fp1fuaaPi9XgXzsFcMU5Q+d4O/HWryU6ineY5yFsqYAOE KNw5txCo3AMHyQT3UbPMjHN+Bb3wqbpyYgflC7b94mKmnRyOiCBtXaG+TVwNiBLG 35oGD0A/kbqSKEYhRSA8FuC79prg73gatrhaPzWDl15lRkfTWwc2x8I08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx9Q+9O48mw9J8PoIRcsQcSsqqRMB8GA1UdIwQY MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI49oq/1n +LirLgc5elmABehv3OUkuOVl92ivPUtutGvHAbH6HBWmynPdsvttVtoOacv8FhKW QBq2mvkGhwQx4K+S1lVJCQdLilSXjm9hCGnll2E7L4hQznZ6YJpPyFDw+Ri9WJa+ 9xzr+ZikA6QsmMH2g/W/mfCthHSwzmQzch/GXZdNO1qhYVmloAWwipDomprHAV4a U8O9JDUYfw4udylb6GFu6lGaLZ3RM/LaCd0IUlDlgYBoQc/hmaS2RREujZtxFeZs 6R+GzR1heNQh6sLI1CHel2AFvZXYHVvRjmbLBLnhhNShxJBEOG6K8kQYPWuGJbXm 0SIiDClYVJyhyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:04 2025 by rpki-client