This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json) Hash identifier: Vfvadx8bqjie0sFTiX3bQeBm2l2EFcAgHE/3mmfa8C0= Subject key identifier: EB:7F:AE:B5:CC:84:62:24:FD:F8:F4:F6:38:A8:DE:3B:E1:3D:BE:DD Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394 Certificate serial: 019AF5AE5ECAD63CC3176F5B13347904CBCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 22:00:36 +0000 Manifest this update: Sat 06 Dec 2025 22:00:36 +0000 Manifest next update: Sun 07 Dec 2025 22:00:36 +0000 Files and hashes: 1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: 55ozu96IzVEz60jTjxPzph4MXQsklH09YDILcngrE+g=) 2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5e:ca:d6:3c:c3:17:6f:5b:13:34:79:04:cb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394 Validity Not Before: Dec 6 22:00:36 2025 GMT Not After : Dec 7 22:00:36 2025 GMT Subject: CN=eb7faeb5cc846224fdf8f4f638a8de3be13dbedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:e0:6e:6f:24:f7:db:b2:92:df:ab:7c:81: da:78:36:cc:36:bc:6d:84:bb:a6:ba:a7:91:09:f2: c9:28:58:aa:28:0d:3d:a9:7e:52:76:d6:bb:7b:4e: 0c:b7:b8:70:c2:c8:b5:2e:a5:79:06:93:ad:cf:84: c2:39:1c:71:35:b0:1d:f6:39:11:72:bc:75:8f:48: 1c:66:27:6a:86:8e:c3:b8:87:05:d3:33:75:b5:94: 94:7f:42:64:fd:c6:15:d4:03:b0:f0:fc:36:d2:bc: f7:fa:a8:23:45:20:6c:22:3b:1f:25:06:c6:35:ce: 43:99:bb:f5:91:c0:7a:95:6c:ee:b3:d6:1f:8d:f6: 46:2b:3d:50:a6:2c:fb:f7:15:a8:9c:58:77:3b:b4: 8c:77:0c:e4:74:a1:ba:4d:d9:b1:de:64:4b:97:d5: 3a:ec:4d:89:e6:64:54:72:e7:ed:a3:52:e6:26:ce: 0b:0f:ce:7f:a4:82:d4:34:0e:fd:e4:56:1c:fa:35: 8c:08:56:84:56:5a:ac:b6:b5:ca:a8:99:02:ea:be: 1f:79:50:26:9f:53:57:16:35:ef:c6:31:7f:48:68: 1a:3d:fd:66:83:a9:53:91:ca:41:9e:3d:d3:f6:d0: 63:db:d2:8a:80:01:0e:76:c0:1f:34:08:f8:2f:73: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:AE:B5:CC:84:62:24:FD:F8:F4:F6:38:A8:DE:3B:E1:3D:BE:DD X509v3 Authority Key Identifier: keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:bb:17:a7:63:44:ce:51:73:a9:e9:68:b0:b9:84:3a:31: 80:d5:9e:d0:76:a4:50:96:7d:5d:28:b4:af:11:1b:15:dd:01: 0e:d4:b5:00:90:7b:51:e1:b4:2b:a6:6d:3b:fa:a1:d5:40:72: e1:c7:1a:41:41:c7:3e:7a:f0:ad:f8:69:cf:33:d8:96:f4:31: 65:c2:f0:3f:71:3c:36:04:c0:28:a8:ce:15:e2:a0:58:d8:97: 24:57:c4:b2:81:9d:3b:4b:26:1b:b5:30:84:4e:4c:fc:a6:79: ae:38:0d:b7:8b:7d:4a:48:e3:3f:20:8a:08:8d:1e:b9:21:70: 31:42:4b:57:52:ae:22:f1:1e:0c:3e:17:3a:3f:39:7a:4d:67: 8e:fc:34:2b:7a:19:5f:73:bd:44:89:fe:05:2a:e1:66:5c:59: 8f:28:02:41:48:5d:6f:2a:ee:28:e0:95:87:c9:30:57:cc:3a: ed:d6:26:e0:c8:c9:e2:b0:d1:0c:ea:bb:05:1c:97:48:44:ac: 3d:e9:b5:ce:a5:1d:a2:57:22:28:46:58:82:97:e1:7c:35:c5: 96:6a:ba:f5:7a:2f:69:a0:67:b8:42:a0:5c:dc:ec:cf:ec:0f: 6e:76:03:8c:3a:74:25:6e:45:7a:18:aa:85:26:fc:7d:89:a2: a3:0b:2e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rl7K1jzDF29bEzR5BMvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi OTczOTQwHhcNMjUxMjA2MjIwMDM2WhcNMjUxMjA3MjIwMDM2WjAzMTEwLwYDVQQD EyhlYjdmYWViNWNjODQ2MjI0ZmRmOGY0ZjYzOGE4ZGUzYmUxM2RiZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hrgbm8k99uykt+rfIHaeDbMNrxt hLumuqeRCfLJKFiqKA09qX5Sdta7e04Mt7hwwsi1LqV5BpOtz4TCORxxNbAd9jkR crx1j0gcZidqho7DuIcF0zN1tZSUf0Jk/cYV1AOw8Pw20rz3+qgjRSBsIjsfJQbG Nc5Dmbv1kcB6lWzus9YfjfZGKz1Qpiz79xWonFh3O7SMdwzkdKG6Tdmx3mRLl9U6 7E2J5mRUcufto1LmJs4LD85/pILUNA795FYc+jWMCFaEVlqstrXKqJkC6r4feVAm n1NXFjXvxjF/SGgaPf1mg6lTkcpBnj3T9tBj29KKgAEOdsAfNAj4L3Pq/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt/rrXMhGIk/fj09jio3jvhPb7dMB8GA1UdIwQY MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt MDM0YmNmNGViZGNiLzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuy7F6dj RM5Rc6npaLC5hDoxgNWe0HakUJZ9XSi0rxEbFd0BDtS1AJB7UeG0K6ZtO/qh1UBy 4ccaQUHHPnrwrfhpzzPYlvQxZcLwP3E8NgTAKKjOFeKgWNiXJFfEsoGdO0smG7Uw hE5M/KZ5rjgNt4t9SkjjPyCKCI0euSFwMUJLV1KuIvEeDD4XOj85ek1njvw0K3oZ X3O9RIn+BSrhZlxZjygCQUhdbyruKOCVh8kwV8w67dYm4MjJ4rDRDOq7BRyXSESs Pem1zqUdolciKEZYgpfhfDXFlmq69XovaaBnuEKgXNzsz+wPbnYDjDp0JW5Fehiq hSb8fYmiowsuMg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:36 2025 by rpki-client