This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft File: E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json) Hash identifier: hVyRp/zeZs57piSn2HeD/7ra02xHXWtAXExt4GN83Cw= Subject key identifier: 09:31:9D:C9:1C:16:B3:62:3F:7A:AD:EC:72:E7:72:01:9D:0D:FD:92 Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019AF46560B782C486A7861C67B7169FB619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft Manifest number: 09F1 Signing time: Sat 06 Dec 2025 16:01:15 +0000 Manifest this update: Sat 06 Dec 2025 16:01:15 +0000 Manifest next update: Sun 07 Dec 2025 16:01:15 +0000 Files and hashes: 1: 1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa (hash: 2BmEhsjJ5rUlKnSSBB9lDoAty6aoaTeOv+q+nl7pHv4=) 2: AIDwhYtyDr1czK0xp6zgJHM-y84.roa (hash: sgZfjjv0bVGaN6bohtogbdcEvOly414BvXtxWyPZ3v4=) 3: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: OzMeQuG1chln5jHy5mKlutwLCk9yGbU5m3yxO77JxuE=) 4: cauVP0qGPVnPB7MP3t-ZroS6zrE.roa (hash: WnaZ9/rzxCTX29Tua4ayJ4e4SO3kQaIXgKPs+WVTc7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:60:b7:82:c4:86:a7:86:1c:67:b7:16:9f:b6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Dec 6 16:01:15 2025 GMT Not After : Dec 7 16:01:15 2025 GMT Subject: CN=09319dc91c16b3623f7aadec72e772019d0dfd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:1c:f0:01:71:d2:d0:40:e9:de:f7:0a:94: 9d:50:39:fc:63:dc:03:fb:d7:8b:e8:5f:8e:4b:79: 3c:f7:b4:da:06:9c:a2:33:20:66:da:8a:f3:37:b9: ed:cd:f5:df:20:34:e1:ac:e7:df:56:0b:7d:7e:8c: e9:36:c7:25:eb:5c:a6:16:30:a3:c7:97:49:4b:c0: c8:65:df:8c:5f:f6:c2:34:85:d2:9c:f2:e6:01:76: 64:6f:79:a6:da:df:c3:43:17:05:5e:ed:be:6c:f5: f0:bb:f2:6c:cf:ba:c0:2c:41:e7:19:44:79:3e:62: c3:50:02:fc:51:48:b4:cc:31:27:52:85:2a:59:bd: eb:ec:ed:5f:88:b6:ad:03:3c:15:02:d2:be:bd:53: 82:df:6e:46:25:7e:7c:b9:70:20:02:0f:13:6d:c3: a2:8b:9a:d0:4e:8e:f2:bd:31:44:0f:ff:44:52:c8: ee:12:5a:8f:ea:82:d4:6b:fe:13:e5:69:8f:38:47: 34:41:86:28:9b:64:f6:99:bb:a0:e3:1f:0e:6f:a8: 08:00:dd:3a:0b:26:81:c2:bc:6a:ad:ce:37:c5:8e: 15:ae:29:d1:39:2d:3a:45:3e:70:83:85:b5:b4:58: 60:2c:07:fb:3e:7b:e9:e2:a4:06:3c:8c:a7:24:08: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:31:9D:C9:1C:16:B3:62:3F:7A:AD:EC:72:E7:72:01:9D:0D:FD:92 X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e7:e5:52:3a:83:76:2a:21:b7:3c:3c:d7:23:18:ad:0d:8e: a8:ec:d6:9f:91:38:c2:b4:03:ac:bb:1a:9d:dc:b2:98:0f:4b: 0c:eb:78:2c:29:02:34:f7:ab:cb:f3:66:b9:b3:a4:1d:c4:b9: 27:ac:97:59:fe:6e:6d:79:7c:b0:67:58:2b:db:49:25:54:9d: 09:9f:2f:08:43:e9:6a:05:d1:a0:74:68:11:2f:e6:84:80:2f: 11:b9:57:9b:a4:64:a4:8e:e1:3d:9c:ea:7e:e7:04:e7:1a:d4: fb:87:0b:6b:7e:7f:36:b4:85:1e:3f:74:5f:ca:50:55:d6:b2: a5:1e:5c:df:2b:b4:68:19:ef:33:17:bf:2a:16:a9:f0:7c:a8: 84:fe:e2:b6:2c:17:b3:80:b7:47:7f:a0:d0:10:19:a0:8a:21: d9:62:fc:e3:ce:06:3a:56:fc:63:98:dc:24:5c:f4:e4:c8:9c: 78:3b:e7:bd:4a:b6:e4:17:9a:d9:49:c6:92:62:c0:6b:48:27: e2:e8:19:07:57:b2:e7:1c:9e:51:54:74:e6:eb:05:11:03:c9: e5:66:00:75:3e:44:65:e9:62:f6:3b:6b:ed:c6:a9:ca:e6:b8: 7c:06:0b:78:25:47:ce:c3:11:07:29:c4:f4:e8:0d:56:91:6d: e8:3c:25:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWC3gsSGp4YcZ7cWn7YZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjUxMjA2MTYwMTE1WhcNMjUxMjA3MTYwMTE1WjAzMTEwLwYDVQQD EygwOTMxOWRjOTFjMTZiMzYyM2Y3YWFkZWM3MmU3NzIwMTlkMGRmZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6gc8AFx0tBA6d73CpSdUDn8Y9wD +9eL6F+OS3k897TaBpyiMyBm2orzN7ntzfXfIDThrOffVgt9fozpNscl61ymFjCj x5dJS8DIZd+MX/bCNIXSnPLmAXZkb3mm2t/DQxcFXu2+bPXwu/Jsz7rALEHnGUR5 PmLDUAL8UUi0zDEnUoUqWb3r7O1fiLatAzwVAtK+vVOC325GJX58uXAgAg8TbcOi i5rQTo7yvTFED/9EUsjuElqP6oLUa/4T5WmPOEc0QYYom2T2mbug4x8Ob6gIAN06 CyaBwrxqrc43xY4VrinROS06RT5wg4W1tFhgLAf7Pnvp4qQGPIynJAgSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkxnckcFrNiP3qt7HLncgGdDf2SMB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+flUjqD diohtzw81yMYrQ2OqOzWn5E4wrQDrLsandyymA9LDOt4LCkCNPery/NmubOkHcS5 J6yXWf5ubXl8sGdYK9tJJVSdCZ8vCEPpagXRoHRoES/mhIAvEblXm6RkpI7hPZzq fucE5xrU+4cLa35/NrSFHj90X8pQVdaypR5c3yu0aBnvMxe/Khap8HyohP7itiwX s4C3R3+g0BAZoIoh2WL8484GOlb8Y5jcJFz05MiceDvnvUq25Bea2UnGkmLAa0gn 4ugZB1ey5xyeUVR05usFEQPJ5WYAdT5EZeli9jtr7capyua4fAYLeCVHzsMRBynE 9OgNVpFt6Dwlfw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:39 2025 by rpki-client