This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft File: E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json) Hash identifier: 3WARimblsQhc0X7LVUnTYwcXT4zs3/PlLO5UHrl8CWA= Subject key identifier: 11:F9:01:84:CB:18:A8:1D:77:7A:D3:7F:92:F9:1D:1E:68:16:87:15 Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F Certificate issuer: /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Certificate serial: 019B31554B296F9EB58F137E199213F1C478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 12:00:31 +0000 Manifest this update: Thu 18 Dec 2025 12:00:31 +0000 Manifest next update: Fri 19 Dec 2025 12:00:31 +0000 Files and hashes: 1: C_P_x6vKlP69WHS2Io3yN0V9nik.roa (hash: wJLlFgwQydtIFLoCnksnZpJrvv41uQQpAj8CsBJriq4=) 2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: NJTK44pX1ym0Rui0a1ZQW+BLbv/vp2fkY+ec+a7V7go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:4b:29:6f:9e:b5:8f:13:7e:19:92:13:f1:c4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Validity Not Before: Dec 18 12:00:31 2025 GMT Not After : Dec 19 12:00:31 2025 GMT Subject: CN=11f90184cb18a81d777ad37f92f91d1e68168715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:33:80:13:0c:b2:4e:b7:71:2b:dc:ce:25: ee:37:f3:e5:c1:3a:0f:07:07:27:e9:c8:f7:78:f8: 48:8e:e6:2e:ca:40:5b:d8:2b:41:cd:b6:60:49:e8: d5:aa:53:74:e4:1a:60:e3:cd:9b:6c:5a:1a:22:56: 6e:c6:0f:8b:99:36:b1:fb:98:51:a5:93:da:36:3f: e6:fb:31:23:d7:3e:3d:55:f6:7b:a7:e8:69:28:4b: 6d:0a:ec:2d:43:7c:ba:07:3c:32:27:90:aa:c6:6e: f7:5b:f0:77:d0:78:7c:34:5f:9c:b5:c5:5e:80:46: 50:a5:ff:09:3a:86:13:11:cd:d7:a8:87:50:b2:bc: fd:b0:c7:a9:a4:7c:9c:63:87:f7:d0:ab:7a:20:05: 49:28:d0:7e:40:5c:70:f1:ee:f0:8f:8a:8c:89:96: e1:36:1e:c5:3b:68:58:88:ce:8b:0a:79:ef:20:55: 46:12:ac:32:5a:21:ec:10:4c:36:85:9e:7b:b1:71: 40:8b:68:2d:82:41:37:7a:ad:4b:d9:08:9f:bb:94: 49:32:cf:57:37:fc:d8:c8:86:c1:0a:eb:ac:3e:df: 14:db:19:94:de:63:cc:f0:32:3d:a9:19:c5:47:b1: 52:79:e8:9e:1f:96:00:b3:84:dc:93:49:8e:a5:d5: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:01:84:CB:18:A8:1D:77:7A:D3:7F:92:F9:1D:1E:68:16:87:15 X509v3 Authority Key Identifier: keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f3:5b:87:a0:1d:4a:29:0f:9d:05:dd:20:30:e6:44:99:a6: a8:53:49:d9:de:05:82:78:f8:78:b5:ab:e2:d1:33:c7:2f:a4: c7:76:af:e3:c9:a5:51:79:cf:bf:79:4d:59:86:6c:f9:c5:11: b4:d6:ef:cb:a4:33:d9:10:46:93:76:00:c2:3b:b5:33:09:ec: d2:73:db:5e:58:19:bc:ff:27:e5:44:11:e8:05:59:5f:77:6d: da:2e:2c:5b:8d:d7:8d:73:9c:da:43:84:be:d6:df:8a:34:8b: 93:c3:df:af:74:a3:33:d6:e6:c3:06:25:b6:4a:f6:42:f7:ab: 31:a6:fe:01:3f:bf:12:52:77:8e:7f:16:40:3e:93:3d:b1:03: f4:a3:f3:7d:c8:86:25:56:0e:6d:c2:27:12:70:4a:b0:b2:b9: d6:62:a8:1e:b8:a5:b4:dc:50:7a:45:31:6d:cb:7a:66:ad:40: c9:3e:3d:a0:4d:fd:26:fb:ea:40:aa:38:a5:2b:c8:bd:3a:54: 69:cd:a5:1e:85:27:d7:13:03:8b:a0:bb:5e:cb:5b:bc:00:e0: 7d:78:fc:69:ef:ae:0f:67:9e:63:d4:9c:32:ae:0c:4f:38:e7: 5f:ab:b8:17:bd:37:9e:9a:ec:41:13:c0:de:0b:27:66:0c:83: 78:f3:63:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVUspb561jxN+GZIT8cR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmM0ODMxNTk3ZmUxNmU5ZWUyODgyZDdiNWEwZGY4YTc2 ZTRmN2YwHhcNMjUxMjE4MTIwMDMxWhcNMjUxMjE5MTIwMDMxWjAzMTEwLwYDVQQD EygxMWY5MDE4NGNiMThhODFkNzc3YWQzN2Y5MmY5MWQxZTY4MTY4NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3QzgBMMsk63cSvcziXuN/PlwToP Bwcn6cj3ePhIjuYuykBb2CtBzbZgSejVqlN05Bpg482bbFoaIlZuxg+LmTax+5hR pZPaNj/m+zEj1z49VfZ7p+hpKEttCuwtQ3y6BzwyJ5Cqxm73W/B30Hh8NF+ctcVe gEZQpf8JOoYTEc3XqIdQsrz9sMeppHycY4f30Kt6IAVJKNB+QFxw8e7wj4qMiZbh Nh7FO2hYiM6LCnnvIFVGEqwyWiHsEEw2hZ57sXFAi2gtgkE3eq1L2Qifu5RJMs9X N/zYyIbBCuusPt8U2xmU3mPM8DI9qRnFR7FSeeieH5YAs4Tck0mOpdWGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH5AYTLGKgdd3rTf5L5HR5oFocVMB8GA1UdIwQY MBaAFBNsSDFZf+FunuKILXtaDfinbk9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEt Y2U1OWIwYzU0ZWVhLzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEtY2U1OWIwYzU0ZWVh LzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfNbh6Ad SikPnQXdIDDmRJmmqFNJ2d4Fgnj4eLWr4tEzxy+kx3av48mlUXnPv3lNWYZs+cUR tNbvy6Qz2RBGk3YAwju1Mwns0nPbXlgZvP8n5UQR6AVZX3dt2i4sW43XjXOc2kOE vtbfijSLk8Pfr3SjM9bmwwYltkr2QverMab+AT+/ElJ3jn8WQD6TPbED9KPzfciG JVYObcInEnBKsLK51mKoHriltNxQekUxbct6Zq1AyT49oE39JvvqQKo4pSvIvTpU ac2lHoUn1xMDi6C7XstbvADgfXj8ae+uD2eeY9ScMq4MTzjnX6u4F703nprsQRPA 3gsnZgyDePNjLw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:09:12 2025 by rpki-client