This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft File: E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json) Hash identifier: MThxnHAlqmH+QOQnPcr3g13qqM6j+6vRkm2Ph4jmgIw= Subject key identifier: 89:C3:28:7E:18:64:E3:C8:02:78:05:1E:C6:E4:00:EF:99:F9:0E:3E Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78 Certificate issuer: /CN=137b9e0a673e1407bf3e659f2ea625378eb63278 Certificate serial: 019B337B4666E52BE562932908D4F1E4FB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft Manifest number: 0850 Signing time: Thu 18 Dec 2025 22:01:15 +0000 Manifest this update: Thu 18 Dec 2025 22:01:15 +0000 Manifest next update: Fri 19 Dec 2025 22:01:15 +0000 Files and hashes: 1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: aqFcWxHgNu1tc3mLj3MPTquTMAqduHaBEfRNiNQBP8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:46:66:e5:2b:e5:62:93:29:08:d4:f1:e4:fb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278 Validity Not Before: Dec 18 22:01:15 2025 GMT Not After : Dec 19 22:01:15 2025 GMT Subject: CN=89c3287e1864e3c80278051ec6e400ef99f90e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:6c:ff:26:8f:5e:13:c3:79:c2:9e:a1:68: 09:72:dc:54:b4:2b:1e:2d:db:89:0a:a8:b1:03:eb: 41:38:52:7f:f1:92:7f:ad:56:f5:2d:0a:6d:c2:19: cb:67:b9:ff:94:f2:19:f6:d9:16:a7:a6:57:be:1e: c2:1f:6d:02:e9:41:c0:b2:8c:56:7c:49:2e:9c:16: 7b:4b:0d:dd:89:9b:da:e2:11:de:7d:b1:65:4c:3e: 79:21:fb:b9:35:74:66:21:27:5b:6a:d4:a6:8e:77: e7:20:60:1a:a0:cd:21:80:8d:d9:80:d5:b8:65:79: 4b:cd:4f:76:43:7d:63:d9:0d:5c:62:8e:1c:2d:fa: 82:50:4c:05:8e:3b:17:bd:e7:52:dd:6d:45:83:44: a1:86:f6:d0:bb:ff:ea:e7:04:b3:4c:45:6c:1d:d1: 06:cb:0e:7a:d5:75:f8:d6:71:c0:20:7a:8e:d8:3a: 10:c2:ea:5d:9e:42:32:47:bc:94:e9:04:d2:e6:bc: d0:af:9e:11:63:50:f1:c1:5a:1b:f3:8d:04:8d:69: 8e:78:10:b4:53:87:72:90:58:42:2a:e7:21:cc:bc: 20:a7:5f:66:79:5d:78:2f:84:43:19:c3:fc:ad:8b: e4:7e:9f:30:d6:ad:af:d1:5c:00:3f:16:db:1d:8f: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C3:28:7E:18:64:E3:C8:02:78:05:1E:C6:E4:00:EF:99:F9:0E:3E X509v3 Authority Key Identifier: keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6c:24:57:6e:be:cf:cd:5e:53:b5:da:1d:58:21:a6:36:16: b3:2a:43:19:19:d1:57:20:50:53:06:4d:44:e2:0f:b9:a8:2a: a8:4b:c9:82:2d:16:e6:6a:01:76:e6:e1:d7:4c:72:cb:f9:77: 68:55:af:46:b9:26:74:f8:23:eb:c8:9e:cc:b8:f8:26:04:69: 8d:f6:b5:b5:ff:34:59:c5:4e:d8:1e:1b:1e:d8:e4:55:7c:a6: ec:b2:3d:06:b1:dd:e5:c1:09:6b:6c:fd:c1:a9:a2:74:e5:61: b7:40:3d:e2:7e:f6:aa:c0:90:51:48:92:4a:e4:65:42:e2:3e: 1b:27:5e:52:e7:0c:65:c9:47:02:81:fc:50:b7:3f:22:37:eb: bb:b5:29:21:c2:ae:c0:3c:06:34:67:b9:7c:f6:69:e8:28:cd: 10:cc:fc:f8:8a:25:0e:bc:5d:d9:36:bf:8e:8a:8e:7d:43:47: dd:44:94:c3:7b:d0:c9:3a:82:2a:71:2a:6f:bf:09:6b:15:06: eb:bf:b0:1d:75:4e:f5:7e:5f:a7:18:64:e4:53:88:71:bf:1b: 6b:c2:d4:f6:80:41:c1:06:c4:9f:fe:e6:9a:a9:7e:f0:84:74: 81:93:df:6c:11:9a:d9:62:aa:72:b3:dc:86:86:b5:f6:d9:5e: a6:22:b8:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0Zm5SvlYpMpCNTx5PsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2I5ZTBhNjczZTE0MDdiZjNlNjU5ZjJlYTYyNTM3OGVi NjMyNzgwHhcNMjUxMjE4MjIwMTE1WhcNMjUxMjE5MjIwMTE1WjAzMTEwLwYDVQQD Eyg4OWMzMjg3ZTE4NjRlM2M4MDI3ODA1MWVjNmU0MDBlZjk5ZjkwZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgFs/yaPXhPDecKeoWgJctxUtCse LduJCqixA+tBOFJ/8ZJ/rVb1LQptwhnLZ7n/lPIZ9tkWp6ZXvh7CH20C6UHAsoxW fEkunBZ7Sw3diZva4hHefbFlTD55Ifu5NXRmISdbatSmjnfnIGAaoM0hgI3ZgNW4 ZXlLzU92Q31j2Q1cYo4cLfqCUEwFjjsXvedS3W1Fg0ShhvbQu//q5wSzTEVsHdEG yw561XX41nHAIHqO2DoQwupdnkIyR7yU6QTS5rzQr54RY1DxwVob840EjWmOeBC0 U4dykFhCKuchzLwgp19meV14L4RDGcP8rYvkfp8w1q2v0VwAPxbbHY8vwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInDKH4YZOPIAngFHsbkAO+Z+Q4+MB8GA1UdIwQY MBaAFBN7ngpnPhQHvz5lny6mJTeOtjJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZDAwMWMtMzMzOC00MGE3LWFmMWYt MzYxZWJhMzAzNTVlLzEvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mZDAwMWMtMzMzOC00MGE3LWFmMWYtMzYxZWJhMzAzNTVl LzEvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2wkV26+ z81eU7XaHVghpjYWsypDGRnRVyBQUwZNROIPuagqqEvJgi0W5moBdubh10xyy/l3 aFWvRrkmdPgj68iezLj4JgRpjfa1tf80WcVO2B4bHtjkVXym7LI9BrHd5cEJa2z9 wamidOVht0A94n72qsCQUUiSSuRlQuI+GydeUucMZclHAoH8ULc/Ijfru7UpIcKu wDwGNGe5fPZp6CjNEMz8+IolDrxd2Ta/joqOfUNH3USUw3vQyTqCKnEqb78JaxUG 67+wHXVO9X5fpxhk5FOIcb8ba8LU9oBBwQbEn/7mmql+8IR0gZPfbBGa2WKqcrPc hoa19tlepiK4YA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:10:16 2025 by rpki-client