This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft File: E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json) Hash identifier: TwYidUK25D0LAcyjkiJFOVnSzvfqisCXWHpdguPAPqE= Subject key identifier: C2:C8:2C:11:62:D6:5F:EE:76:58:0D:34:1B:03:83:8B:AF:6B:85:11 Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F Certificate issuer: /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Certificate serial: 019B334418AB3A3122A6621197F761A19C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 21:00:59 +0000 Manifest this update: Thu 18 Dec 2025 21:00:59 +0000 Manifest next update: Fri 19 Dec 2025 21:00:59 +0000 Files and hashes: 1: C_P_x6vKlP69WHS2Io3yN0V9nik.roa (hash: wJLlFgwQydtIFLoCnksnZpJrvv41uQQpAj8CsBJriq4=) 2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: gbJiq91OrBfSlodS3TTycQGE8MVC/kM3F/1yTXBUz1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:18:ab:3a:31:22:a6:62:11:97:f7:61:a1:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Validity Not Before: Dec 18 21:00:59 2025 GMT Not After : Dec 19 21:00:59 2025 GMT Subject: CN=c2c82c1162d65fee76580d341b03838baf6b8511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:a6:21:c7:85:16:1e:a3:06:a7:a9:52:42: 29:41:7d:16:f1:77:79:36:e4:2d:6d:56:d6:81:91: 67:d1:5f:fb:58:da:0c:7e:60:8c:b2:b7:60:9f:9c: e3:4a:3f:0a:ef:6f:01:5f:0e:d5:b8:b3:de:67:68: b7:0e:8d:63:37:b2:2e:3b:3b:99:99:80:e3:5e:7d: 93:5f:13:65:2e:f2:d3:2d:5b:23:4b:51:42:ce:2c: 57:dc:6a:01:3a:61:99:36:d3:4c:57:cb:f1:e4:21: 22:98:8a:11:4a:b8:02:66:b1:ba:e0:5a:7f:4e:10: 9e:cc:d4:cc:40:89:27:1b:62:86:bc:cc:02:8f:2a: 9a:e3:58:a3:b2:01:fa:03:10:dc:08:4f:a3:31:e7: 7f:ad:0e:0a:d1:6c:65:e0:7f:b6:38:66:d5:4f:1e: 70:87:d6:c7:c3:f3:7e:7b:5f:67:bd:57:42:cb:e1: 02:71:7b:42:e0:2e:d1:54:d0:46:4e:49:72:19:03: e0:37:84:7f:3a:0a:e4:f1:f7:e7:a7:c4:8a:3c:f3: 15:bc:61:75:68:bd:79:88:ca:c2:71:20:04:70:0c: fa:b9:b5:0f:a4:61:fe:68:58:ab:02:6b:70:06:e6: 5e:4b:f4:b9:c5:80:f6:21:e8:1e:b2:e0:63:43:ba: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:2C:11:62:D6:5F:EE:76:58:0D:34:1B:03:83:8B:AF:6B:85:11 X509v3 Authority Key Identifier: keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:60:85:67:9a:8e:38:84:f8:4a:c1:01:ea:c2:0c:5e:0d:fc: e0:a4:d5:c7:7d:c9:71:2c:0c:58:26:88:c1:a6:94:d0:7a:95: fb:ed:1c:99:23:db:45:8d:9a:58:99:0e:13:5a:94:22:89:85: 06:08:cd:fa:e4:b9:b2:3c:19:99:f9:9c:e2:e6:4a:d3:0e:c7: b5:8f:99:cc:2f:9a:56:c2:f4:1b:8f:ac:fd:d6:bc:85:05:1e: 0a:65:3b:19:10:42:31:e6:09:c7:95:08:b4:10:12:ca:b2:f1: a4:9e:49:ce:b5:f5:36:fc:06:81:de:19:96:a5:50:bb:ff:7c: b9:1c:14:c7:67:fe:c3:e6:ab:7a:53:5e:7e:08:8a:dc:1b:a5: fd:43:df:24:1f:0c:c8:81:18:e6:49:ba:80:1b:65:af:1d:44: 86:9d:19:5e:23:88:eb:bd:c3:1f:1c:dc:2f:2b:98:da:d6:0f: 59:94:3b:51:27:b4:f2:9e:bf:43:3d:d7:2a:a3:5c:07:7d:55: a0:84:e6:60:5e:5f:51:fb:f5:42:0c:64:d5:c6:d5:99:70:8a: 78:11:38:d3:0f:2a:68:25:60:fa:bb:f8:51:24:00:25:bc:45: d0:4b:22:98:25:6f:16:35:7f:ce:86:06:9e:69:66:16:a2:04: 94:05:72:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBirOjEipmIRl/dhoZyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmM0ODMxNTk3ZmUxNmU5ZWUyODgyZDdiNWEwZGY4YTc2 ZTRmN2YwHhcNMjUxMjE4MjEwMDU5WhcNMjUxMjE5MjEwMDU5WjAzMTEwLwYDVQQD EyhjMmM4MmMxMTYyZDY1ZmVlNzY1ODBkMzQxYjAzODM4YmFmNmI4NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze6mIceFFh6jBqepUkIpQX0W8Xd5 NuQtbVbWgZFn0V/7WNoMfmCMsrdgn5zjSj8K728BXw7VuLPeZ2i3Do1jN7IuOzuZ mYDjXn2TXxNlLvLTLVsjS1FCzixX3GoBOmGZNtNMV8vx5CEimIoRSrgCZrG64Fp/ ThCezNTMQIknG2KGvMwCjyqa41ijsgH6AxDcCE+jMed/rQ4K0Wxl4H+2OGbVTx5w h9bHw/N+e19nvVdCy+ECcXtC4C7RVNBGTklyGQPgN4R/Ogrk8ffnp8SKPPMVvGF1 aL15iMrCcSAEcAz6ubUPpGH+aFirAmtwBuZeS/S5xYD2IegesuBjQ7rviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLILBFi1l/udlgNNBsDg4uva4URMB8GA1UdIwQY MBaAFBNsSDFZf+FunuKILXtaDfinbk9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEt Y2U1OWIwYzU0ZWVhLzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEtY2U1OWIwYzU0ZWVh LzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2CFZ5qO OIT4SsEB6sIMXg384KTVx33JcSwMWCaIwaaU0HqV++0cmSPbRY2aWJkOE1qUIomF BgjN+uS5sjwZmfmc4uZK0w7HtY+ZzC+aVsL0G4+s/da8hQUeCmU7GRBCMeYJx5UI tBASyrLxpJ5JzrX1NvwGgd4ZlqVQu/98uRwUx2f+w+arelNefgiK3Bul/UPfJB8M yIEY5km6gBtlrx1Ehp0ZXiOI673DHxzcLyuY2tYPWZQ7USe08p6/Qz3XKqNcB31V oITmYF5fUfv1Qgxk1cbVmXCKeBE40w8qaCVg+rv4USQAJbxF0EsimCVvFjV/zoYG nmlmFqIElAVyQg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:41:57 2025 by rpki-client