This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json) Hash identifier: 8L0iYH2N0u3VbwoDvp0Iu4cmnCK+cRx4T07IQUw58pc= Subject key identifier: B2:42:E0:ED:D6:63:C2:E9:84:E3:E1:C7:F2:7A:4F:BA:99:11:9E:52 Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5 Certificate serial: 019AF1D181F119E9A9832E34DEBB1B551C51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft Manifest number: 038A Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=) 2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: oXzMzCq0j+hY3+7JfgkUqAVDzkaTNbN1Q4Tpi9FmpJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:81:f1:19:e9:a9:83:2e:34:de:bb:1b:55:1c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13701ebe06799de0969899205150e532deffe7b5 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=b242e0edd663c2e984e3e1c7f27a4fba99119e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:77:8c:7d:01:de:51:af:63:8e:e1:fc:a4: ed:f7:c7:12:ab:9f:0b:34:88:35:04:55:10:c4:85: ba:82:7e:59:73:32:dd:11:5b:18:f0:ae:fd:ed:cb: e9:a7:da:29:2e:05:18:82:c1:3d:a5:77:12:f7:73: 5f:68:73:21:d6:0b:68:b5:40:b4:1d:de:9e:2a:92: ba:f6:34:f8:ef:0d:31:89:e0:5e:a9:69:2b:78:30: 80:f3:f8:3d:cd:2d:2a:f4:b5:38:3f:41:39:ee:32: 54:bd:20:dd:72:31:f1:27:df:5c:e3:ca:73:49:61: 65:f3:68:27:0d:bf:01:a4:4a:c6:6b:8f:fd:f2:61: e8:1d:d1:c5:be:ee:23:14:1e:b1:a4:13:3d:1e:64: 9b:70:e1:dd:8b:92:5c:1c:1a:1d:dc:ff:6a:a5:46: 0f:c1:e1:b5:47:d6:86:2f:e8:1a:6c:80:37:84:96: 4e:c5:b0:40:71:d3:da:91:2e:46:3c:9d:9a:1e:b1: 3f:ba:f4:ad:f6:8f:7c:6b:c0:86:e5:3c:8a:e4:c8: 15:20:8d:67:ce:56:fc:5b:fb:27:bc:3a:ce:fe:71: f4:c9:3a:09:fe:55:2d:48:3b:78:51:00:65:dd:75: 29:b1:49:e8:b6:f1:20:a3:9a:2e:cd:b1:bc:21:5b: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:42:E0:ED:D6:63:C2:E9:84:E3:E1:C7:F2:7A:4F:BA:99:11:9E:52 X509v3 Authority Key Identifier: keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:15:a9:12:eb:fd:2b:9e:09:3e:ab:b2:20:17:2c:15:bd:bb: 7b:df:3f:57:ab:36:2b:6a:9c:32:ec:51:e4:bb:02:b0:37:19: f0:81:17:42:47:60:2c:ac:da:d0:62:98:5d:b2:bc:02:53:89: 09:ae:6d:4d:c5:b6:45:6d:31:f6:2c:1e:37:1f:15:67:4e:16: 97:bd:b7:e0:22:e9:be:a8:00:68:a1:b9:a6:98:5f:7e:f8:15: 2b:29:68:bc:9c:ee:ab:91:5a:73:88:87:d7:44:90:6a:8e:23: 16:ec:67:67:c5:80:37:39:2a:8a:97:bb:c0:19:c9:e7:91:1b: 5a:4a:42:b6:22:fc:b5:e7:e3:6a:cc:24:f5:1a:f2:e9:1e:b2: 30:f8:dc:fb:d7:44:c1:de:ef:4e:c9:94:61:a1:92:2b:c9:c9: 71:c4:1d:c7:62:a9:ba:21:b1:4f:39:b5:e8:01:00:3e:ba:e5: 9b:80:1c:60:de:a4:3b:56:5b:99:48:24:7d:7f:d6:6c:12:14: 9e:2b:00:5f:8d:3b:d6:98:71:f3:aa:a8:a9:1d:8b:60:3d:d7: 49:91:69:c4:b0:c7:ee:30:f4:7a:dc:06:1d:2a:ad:21:22:a3: 12:8f:be:c2:97:b5:f2:0c:0a:89:50:3b:ed:22:7d:6f:05:c4: a2:39:d3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YHxGempgy403rsbVRxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm ZmU3YjUwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EyhiMjQyZTBlZGQ2NjNjMmU5ODRlM2UxYzdmMjdhNGZiYTk5MTE5ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQF3jH0B3lGvY47h/KTt98cSq58L NIg1BFUQxIW6gn5ZczLdEVsY8K797cvpp9opLgUYgsE9pXcS93NfaHMh1gtotUC0 Hd6eKpK69jT47w0xieBeqWkreDCA8/g9zS0q9LU4P0E57jJUvSDdcjHxJ99c48pz SWFl82gnDb8BpErGa4/98mHoHdHFvu4jFB6xpBM9HmSbcOHdi5JcHBod3P9qpUYP weG1R9aGL+gabIA3hJZOxbBAcdPakS5GPJ2aHrE/uvSt9o98a8CG5TyK5MgVII1n zlb8W/snvDrO/nH0yToJ/lUtSDt4UQBl3XUpsUnotvEgo5ouzbG8IVtXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJC4O3WY8LphOPhx/J6T7qZEZ5SMB8GA1UdIwQY MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRWpEuv9 K54JPquyIBcsFb27e98/V6s2K2qcMuxR5LsCsDcZ8IEXQkdgLKza0GKYXbK8AlOJ Ca5tTcW2RW0x9iweNx8VZ04Wl7234CLpvqgAaKG5pphffvgVKylovJzuq5Fac4iH 10SQao4jFuxnZ8WANzkqipe7wBnJ55EbWkpCtiL8tefjaswk9Rry6R6yMPjc+9dE wd7vTsmUYaGSK8nJccQdx2KpuiGxTzm16AEAPrrlm4AcYN6kO1ZbmUgkfX/WbBIU nisAX4071phx86qoqR2LYD3XSZFpxLDH7jD0etwGHSqtISKjEo++wpe18gwKiVA7 7SJ9bwXEojnTjg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:11 2025 by rpki-client