This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json) Hash identifier: Cg31u8osAKPBMZirVd+w30wOfbmEoePlsZGBRP7wVlU= Subject key identifier: AC:5A:81:72:B9:C9:3D:0C:45:4E:AB:D2:11:5D:24:B9:DB:CD:CE:B9 Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda Certificate serial: 019AF2096075BB3E90C98F798879E88FBD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft Manifest number: 0DE5 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: cb9CPIExAx33d5c3EYnp/u3RBgNV1MkM5aE7K79nv08=) 2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:60:75:bb:3e:90:c9:8f:79:88:79:e8:8f:bd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=ac5a8172b9c93d0c454eabd2115d24b9dbcdceb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:5e:70:77:ac:c9:1e:21:06:2a:91:31:65: d8:7b:ac:2d:c0:4c:a3:f8:a0:d3:17:6d:49:05:d6: 13:2b:b7:ad:ce:e1:b5:04:f4:6a:3a:6e:43:de:b1: 2b:a4:4a:65:03:53:cd:5a:64:f1:fc:78:fc:a0:2e: 5d:82:f9:93:e0:73:d8:9a:f6:2b:cb:c7:73:51:c8: ef:3e:8c:47:18:20:ec:fa:4f:98:f6:e6:f1:00:02: a8:ed:88:a6:d8:af:d1:52:3c:52:63:18:61:85:14: 5d:55:c4:9e:56:a9:9f:4c:92:13:34:85:f2:83:6b: c2:0a:32:c6:c6:10:79:e9:bb:41:a7:64:cc:91:b7: fe:97:f9:35:a0:f3:49:26:7e:a7:7c:6b:9f:7c:87: fd:05:c7:22:16:3d:10:16:ed:8b:5f:35:37:96:6d: 4c:57:62:21:93:67:af:f8:16:2f:3c:f6:7b:60:34: a7:b8:b8:57:75:dc:5f:02:09:db:29:bd:1a:33:5c: 32:b3:51:0f:ad:6b:29:af:f2:68:30:df:2a:4c:b0: 76:14:8f:87:96:46:6a:7b:ac:ba:4e:64:6c:56:8e: 0a:8f:ad:6f:17:fc:f8:60:7b:17:bf:69:2b:b5:ce: fa:99:3d:b6:0f:22:c1:fd:b1:b2:7e:75:9d:1e:14: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:81:72:B9:C9:3D:0C:45:4E:AB:D2:11:5D:24:B9:DB:CD:CE:B9 X509v3 Authority Key Identifier: keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:df:60:1d:e5:73:dc:47:1f:fe:34:3b:95:0a:b7:1e:36: 51:53:d1:6c:ab:6f:91:db:38:71:93:c1:4d:b5:4d:7f:02:62: 0e:99:d9:77:d5:f9:d3:51:0c:35:28:01:96:6a:b2:81:16:52: c8:f7:c0:e9:12:98:83:53:44:2f:37:7a:20:fc:d9:9e:bf:f5: 66:a7:d2:7e:b8:2a:87:38:f7:c5:04:54:d0:4d:be:ca:44:51: 8c:8d:cd:2f:ed:21:cd:2d:69:de:e6:17:50:05:95:79:4f:05: 07:90:76:c7:90:7a:82:59:16:dd:bc:8c:fe:d1:bd:86:32:d4: 6b:68:e8:06:30:ec:bd:29:83:7d:8b:7c:b7:cb:df:bc:fe:6c: 8c:1e:8c:39:b3:15:47:ff:34:e4:ca:f3:3b:6b:c2:b5:d2:61: 36:82:81:94:58:32:03:0d:01:59:97:c1:45:ca:97:00:b9:67: 60:ee:05:b4:fe:20:08:ff:00:1f:7d:df:aa:b8:b5:4e:22:b5: be:57:aa:60:5e:c5:8d:b7:a7:05:a7:88:35:48:fd:46:62:55: c1:0f:5d:b4:7a:21:07:0c:ae:e7:8d:77:98:95:37:b1:07:d1: 4e:9b:98:fb:fc:f2:06:4d:a9:ad:2e:e4:0a:4e:8e:64:6c:8b: a6:24:f9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWB1uz6QyY95iHnoj70rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2 NTBmZGEwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhhYzVhODE3MmI5YzkzZDBjNDU0ZWFiZDIxMTVkMjRiOWRiY2RjZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIpecHesyR4hBiqRMWXYe6wtwEyj +KDTF21JBdYTK7etzuG1BPRqOm5D3rErpEplA1PNWmTx/Hj8oC5dgvmT4HPYmvYr y8dzUcjvPoxHGCDs+k+Y9ubxAAKo7Yim2K/RUjxSYxhhhRRdVcSeVqmfTJITNIXy g2vCCjLGxhB56btBp2TMkbf+l/k1oPNJJn6nfGuffIf9BcciFj0QFu2LXzU3lm1M V2Ihk2ev+BYvPPZ7YDSnuLhXddxfAgnbKb0aM1wys1EPrWspr/JoMN8qTLB2FI+H lkZqe6y6TmRsVo4Kj61vF/z4YHsXv2krtc76mT22DyLB/bGyfnWdHhRH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxagXK5yT0MRU6r0hFdJLnbzc65MB8GA1UdIwQY MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4 LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa7fYB3l c9xHH/40O5UKtx42UVPRbKtvkds4cZPBTbVNfwJiDpnZd9X501EMNSgBlmqygRZS yPfA6RKYg1NELzd6IPzZnr/1ZqfSfrgqhzj3xQRU0E2+ykRRjI3NL+0hzS1p3uYX UAWVeU8FB5B2x5B6glkW3byM/tG9hjLUa2joBjDsvSmDfYt8t8vfvP5sjB6MObMV R/805MrzO2vCtdJhNoKBlFgyAw0BWZfBRcqXALlnYO4FtP4gCP8AH33fqri1TiK1 vleqYF7FjbenBaeINUj9RmJVwQ9dtHohBwyu5413mJU3sQfRTpuY+/zyBk2prS7k Ck6OZGyLpiT5SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:24 2025 by rpki-client