This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json) Hash identifier: gxj9IJBQm9oAmWFQREfIqN2WObJSLbK+6+/C7xiHhy8= Subject key identifier: CE:84:3A:9D:2A:28:76:73:2E:B0:7F:EE:2A:6B:74:14:CA:1E:41:69 Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2 Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2 Certificate serial: 019AF2095FBF920093B556924AF577BB9130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=) 2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: rJIUgiWCPIu/rNUUjuxP3dW00XCaell6rCEYSNTSvxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5f:bf:92:00:93:b5:56:92:4a:f5:77:bb:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=ce843a9d2a2876732eb07fee2a6b7414ca1e4169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:f6:99:6b:de:d9:c6:67:f0:d5:bb:c9:1b: c3:00:54:db:6c:07:b1:c4:6c:18:d9:b1:58:0a:8d: a1:1a:33:90:ca:81:b2:14:f5:7d:93:c2:5b:67:68: 5f:16:dd:a9:f2:c0:b6:12:93:f3:0e:b2:d0:7b:0c: 25:e1:57:15:6d:55:bc:98:80:0a:e8:59:31:5e:65: f1:12:24:e9:5b:72:7e:c8:bc:58:96:bc:f9:9e:e5: 7e:6c:68:0c:c8:df:c5:68:cb:29:9e:a7:3e:aa:b3: db:49:c8:ce:b5:e4:b2:17:73:fc:93:bc:0c:f7:cc: fc:9b:09:10:16:14:92:67:92:13:3d:87:bb:36:a5: e0:ba:54:b3:a1:30:fe:01:ad:b0:53:18:11:66:8e: 2e:af:9e:a3:40:60:f6:b9:57:6c:95:c3:7a:12:07: 99:ec:3d:d6:a0:07:d2:8f:3d:53:1b:76:6d:38:bc: 59:04:64:e5:c8:e4:87:9f:5b:45:34:5b:68:56:ac: 2f:e0:04:ab:e0:79:d5:d4:75:98:41:6d:be:bd:2a: 9f:6b:54:74:da:80:f0:b9:7f:1f:96:0b:70:43:aa: c7:b9:49:9d:de:da:5a:02:d1:77:f9:ce:3a:12:73: 42:31:c4:8b:90:39:99:9b:26:71:73:be:72:85:93: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:84:3A:9D:2A:28:76:73:2E:B0:7F:EE:2A:6B:74:14:CA:1E:41:69 X509v3 Authority Key Identifier: keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:54:d3:b9:c1:72:ac:c3:7b:c3:f0:e7:23:a3:a1:ab:3b:c5: 77:d5:0a:23:c2:db:3e:8b:2b:11:18:fd:09:6e:8b:42:5e:9b: 29:e5:64:21:95:87:3a:6f:08:e4:4d:1f:f6:41:41:8f:73:bb: c9:6a:77:4d:41:97:5e:91:3f:27:ff:4f:eb:98:b6:b7:23:41: d8:6d:81:0c:b5:8c:9f:53:68:81:38:90:8e:a3:67:32:da:4d: 08:d8:3b:f1:c3:ef:22:8a:30:23:9d:ba:68:05:73:2a:f8:4f: 78:96:ae:c9:44:25:a1:5d:ca:41:82:ac:1b:c8:a6:28:1e:86: 96:5b:48:38:66:36:12:28:f4:37:21:8a:29:07:5c:15:f3:d4: a4:38:3d:22:12:d4:3f:6a:6a:ed:fb:1b:52:7c:a2:bb:b8:1b: 0e:4f:dd:be:24:94:6e:60:4e:0d:78:70:b3:b6:4e:93:de:7e: 63:3f:14:8c:5b:31:ff:f6:94:8a:b6:e1:54:e9:94:63:b6:18: 3d:78:bf:00:c4:8a:c1:ec:c7:ac:85:d5:ed:4d:8a:78:80:ab: b9:32:80:33:17:3e:e9:ad:07:d7:4e:fb:7c:e0:20:3e:76:4a: d8:5f:82:c2:4b:58:83:9a:58:3a:50:7c:fb:d5:ee:af:67:60: 35:07:dd:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV+/kgCTtVaSSvV3u5EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzVkMzcyMDM5YjFhYjJkNDE2YWQ4M2JmNjkxNDA1ODQx MWMyYTIwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhjZTg0M2E5ZDJhMjg3NjczMmViMDdmZWUyYTZiNzQxNGNhMWU0MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHn2mWve2cZn8NW7yRvDAFTbbAex xGwY2bFYCo2hGjOQyoGyFPV9k8JbZ2hfFt2p8sC2EpPzDrLQewwl4VcVbVW8mIAK 6FkxXmXxEiTpW3J+yLxYlrz5nuV+bGgMyN/FaMspnqc+qrPbScjOteSyF3P8k7wM 98z8mwkQFhSSZ5ITPYe7NqXgulSzoTD+Aa2wUxgRZo4ur56jQGD2uVdslcN6EgeZ 7D3WoAfSjz1TG3ZtOLxZBGTlyOSHn1tFNFtoVqwv4ASr4HnV1HWYQW2+vSqfa1R0 2oDwuX8flgtwQ6rHuUmd3tpaAtF3+c46EnNCMcSLkDmZmyZxc75yhZMWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6EOp0qKHZzLrB/7iprdBTKHkFpMB8GA1UdIwQY MBaAFHt103IDmxqy1Batg79pFAWEEcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2Yt NmIwMDM4ODc1YTE0LzEvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NTZlN2QtNmI5My00MmZiLTk5M2YtNmIwMDM4ODc1YTE0 LzEvZTNYVGNnT2JHckxVRnEyRHYya1VCWVFSd3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFTTucFy rMN7w/DnI6OhqzvFd9UKI8LbPosrERj9CW6LQl6bKeVkIZWHOm8I5E0f9kFBj3O7 yWp3TUGXXpE/J/9P65i2tyNB2G2BDLWMn1NogTiQjqNnMtpNCNg78cPvIoowI526 aAVzKvhPeJauyUQloV3KQYKsG8imKB6GlltIOGY2Eij0NyGKKQdcFfPUpDg9IhLU P2pq7fsbUnyiu7gbDk/dviSUbmBODXhws7ZOk95+Yz8UjFsx//aUirbhVOmUY7YY PXi/AMSKwezHrIXV7U2KeICruTKAMxc+6a0H1077fOAgPnZK2F+CwktYg5pYOlB8 +9Xur2dgNQfdNw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:05 2025 by rpki-client