This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json) Hash identifier: GucpNMXP8EG344KeTWbKED3FK1xXhRqwx1B0F/11o9I= Subject key identifier: 10:90:D3:C6:1C:09:D9:E8:0D:E1:17:E5:BD:51:80:F4:FB:00:89:7F Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019AF61C96572A1CFC71711B45608EDC5EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft Manifest number: 0D8A Signing time: Sun 07 Dec 2025 00:00:59 +0000 Manifest this update: Sun 07 Dec 2025 00:00:59 +0000 Manifest next update: Mon 08 Dec 2025 00:00:59 +0000 Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: kxdoDZ3dQ72Ia8wkDbuq028Lvtdek6xHM80/jLz/Qt4=) 2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:96:57:2a:1c:fc:71:71:1b:45:60:8e:dc:5e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Dec 7 00:00:59 2025 GMT Not After : Dec 8 00:00:59 2025 GMT Subject: CN=1090d3c61c09d9e80de117e5bd5180f4fb00897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:db:0c:18:c4:61:ad:17:38:66:db:32:d2: 91:d5:e4:ce:71:da:a7:4a:71:96:fc:44:dd:5c:b3: dc:80:bd:64:e3:95:39:37:61:e3:ae:40:79:a6:d3: a4:12:e2:86:02:8a:08:59:25:17:02:61:d8:ba:4a: 7b:83:e8:68:98:73:93:19:38:3b:aa:14:e7:83:23: 16:6a:cb:27:3b:58:67:ff:a4:19:ff:69:c8:ac:1e: 31:54:21:01:aa:41:29:64:83:01:ba:44:8b:64:08: e9:8d:fc:31:f7:1f:b1:14:08:e4:7c:3a:cc:f3:52: 8f:f7:05:42:96:0e:bd:69:17:fb:43:f4:0d:d1:9c: ec:bb:68:b7:0a:82:36:86:ab:94:ac:2a:c2:70:be: ab:9c:5e:59:79:65:11:49:22:5f:1e:8f:7f:a2:2c: 69:0e:9a:8b:fd:19:6c:20:10:f5:d9:ed:82:7c:00: 42:40:57:6f:fa:ff:16:de:52:0d:51:0f:63:3e:7d: a2:1f:61:c3:92:8f:22:9b:97:3d:47:33:24:57:51: 5c:eb:bf:89:5d:ec:75:f9:e8:e4:60:df:f7:92:fc: 26:ae:ca:c4:33:32:bf:9b:db:86:77:f7:d5:e5:63: ea:d6:37:3f:f4:93:65:61:8d:1c:8f:fa:56:1f:3b: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:90:D3:C6:1C:09:D9:E8:0D:E1:17:E5:BD:51:80:F4:FB:00:89:7F X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4b:12:b8:29:58:3b:c3:ca:7d:38:a6:e0:bb:de:de:45:a0: c3:76:e2:cd:2e:5b:d0:54:5f:94:ba:40:9f:d8:8c:de:e5:da: 7c:df:e6:49:df:1c:17:da:aa:0c:7d:c5:a6:6c:b9:35:e6:68: ab:e3:9d:3f:ee:a9:18:3e:e8:ca:fc:41:db:14:1f:1b:3c:64: 75:e7:83:a5:93:1f:25:07:fe:a4:49:fe:f9:c4:80:8e:07:be: b1:f4:7c:2e:8b:6f:92:db:47:8d:7e:f0:25:73:c4:24:aa:4a: 91:75:fe:ab:d4:54:79:95:3f:cb:08:41:0e:02:13:fd:58:44: 04:d0:c4:f3:bb:b9:74:94:ca:b1:fb:3c:c2:37:65:ad:db:29: 75:b5:2b:79:9e:86:1d:b0:12:7c:66:30:d5:3f:f2:69:95:45: b8:9c:2d:51:48:53:c3:5b:c2:ba:6a:af:98:02:e8:1a:a8:98: 70:35:78:af:41:52:41:85:ad:f2:91:5a:ea:d8:08:a6:ea:91: 56:5d:c6:25:e4:c4:ab:dd:41:f5:0d:23:b7:cc:ed:1e:d9:d3: d4:7f:ae:6e:25:ab:b0:c4:f5:2e:c2:53:f6:0f:5b:85:a7:58: 58:50:cc:33:87:b9:27:09:30:53:a8:c3:4b:97:ef:04:6c:7f: 67:98:a7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJZXKhz8cXEbRWCO3F7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjUxMjA3MDAwMDU5WhcNMjUxMjA4MDAwMDU5WjAzMTEwLwYDVQQD EygxMDkwZDNjNjFjMDlkOWU4MGRlMTE3ZTViZDUxODBmNGZiMDA4OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5/bDBjEYa0XOGbbMtKR1eTOcdqn SnGW/ETdXLPcgL1k45U5N2HjrkB5ptOkEuKGAooIWSUXAmHYukp7g+homHOTGTg7 qhTngyMWassnO1hn/6QZ/2nIrB4xVCEBqkEpZIMBukSLZAjpjfwx9x+xFAjkfDrM 81KP9wVClg69aRf7Q/QN0Zzsu2i3CoI2hquUrCrCcL6rnF5ZeWURSSJfHo9/oixp DpqL/RlsIBD12e2CfABCQFdv+v8W3lINUQ9jPn2iH2HDko8im5c9RzMkV1Fc67+J Xex1+ejkYN/3kvwmrsrEMzK/m9uGd/fV5WPq1jc/9JNlYY0cj/pWHzuBRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCQ08YcCdnoDeEX5b1RgPT7AIl/MB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEsSuClY O8PKfTim4Lve3kWgw3bizS5b0FRflLpAn9iM3uXafN/mSd8cF9qqDH3Fpmy5NeZo q+OdP+6pGD7oyvxB2xQfGzxkdeeDpZMfJQf+pEn++cSAjge+sfR8LotvkttHjX7w JXPEJKpKkXX+q9RUeZU/ywhBDgIT/VhEBNDE87u5dJTKsfs8wjdlrdspdbUreZ6G HbASfGYw1T/yaZVFuJwtUUhTw1vCumqvmALoGqiYcDV4r0FSQYWt8pFa6tgIpuqR Vl3GJeTEq91B9Q0jt8ztHtnT1H+ubiWrsMT1LsJT9g9bhadYWFDMM4e5JwkwU6jD S5fvBGx/Z5inNw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:55:08 2025 by rpki-client