This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json) Hash identifier: ZS/R4bG9/4iPI2EN266rw55WVKpXTVbQnewH3S5GllM= Subject key identifier: CB:19:E5:8A:BC:F2:31:57:AB:40:07:72:DB:6A:53:7D:8E:36:4F:31 Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d Certificate serial: 019B2B8B118D78A4F3B8CB866B281B78A2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft Manifest number: 174F Signing time: Wed 17 Dec 2025 09:01:32 +0000 Manifest this update: Wed 17 Dec 2025 09:01:32 +0000 Manifest next update: Thu 18 Dec 2025 09:01:32 +0000 Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: ubw5MwYOIYZCq5mj7VRBQgUbdMGtXPLNarTKRnIuwjY=) 2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:11:8d:78:a4:f3:b8:cb:86:6b:28:1b:78:a2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139ca3799553b9e180d334442323003513485e2d Validity Not Before: Dec 17 09:01:32 2025 GMT Not After : Dec 18 09:01:32 2025 GMT Subject: CN=cb19e58abcf23157ab400772db6a537d8e364f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:c5:71:b4:ce:cd:d2:38:48:1f:e1:49:09: 8c:99:53:d9:b0:e9:58:82:41:16:67:85:42:00:ad: 2a:7f:11:ce:99:82:14:45:2c:f1:66:c0:68:71:ab: 60:9b:58:8b:7f:dd:70:80:4b:90:c9:70:9c:2a:e1: 77:94:d3:a7:07:db:fe:18:d9:53:e9:34:b1:7a:9f: d9:31:77:f3:a8:c2:25:5f:a9:0e:c3:c8:b5:40:7c: 57:c4:0f:0e:7e:d0:b7:d4:bb:64:74:78:79:c5:71: 52:bd:9e:d6:99:20:85:80:0c:95:da:90:1c:62:6c: 0d:df:56:d8:c3:0a:bc:0e:ea:c3:50:2b:d6:c5:ec: 3a:65:97:3d:04:55:d4:18:ec:82:d8:32:ea:20:77: d8:75:88:73:04:11:2b:e1:a0:08:a8:69:a2:4a:19: be:24:03:b7:1e:f1:2c:3d:87:9b:ac:e0:ea:f7:0f: 63:01:65:a5:94:e7:0e:a0:22:30:be:52:d8:f9:29: 77:29:86:8b:f9:f1:1b:a7:98:48:88:19:38:14:26: c6:85:c7:4a:25:14:0a:b0:0d:e1:56:ca:0a:3e:be: 34:30:bb:2a:e2:1c:f5:ad:48:02:7d:b0:d0:66:3d: 23:b7:b7:7d:c4:e4:fa:0a:76:31:08:b3:51:6f:09: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:E5:8A:BC:F2:31:57:AB:40:07:72:DB:6A:53:7D:8E:36:4F:31 X509v3 Authority Key Identifier: keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cb:f8:07:fa:b6:0f:c0:bc:b9:7d:e7:f7:05:58:7f:c5:9d: 4b:0b:91:d6:81:a1:db:95:da:f3:a9:2e:f7:59:89:97:de:a3: f3:e6:ab:be:d6:83:a8:b9:c6:93:c4:18:a2:09:ca:17:74:d2: 72:51:a2:8e:cc:9e:b8:e0:8f:04:9f:e4:22:5a:7a:44:13:ca: b7:d9:41:06:16:e6:b5:b7:5e:0e:4a:cb:d0:cf:f2:f1:cc:41: bf:aa:62:39:a8:a2:e7:2b:57:a0:d1:27:f1:55:76:d4:33:23: 64:d5:e8:38:6d:8f:3b:d5:34:fa:cb:0c:8b:64:e4:51:1e:3c: 5c:87:ed:56:a2:09:a3:e5:6d:25:76:e4:cc:04:56:52:1c:8b: da:ac:17:ed:23:7b:70:7c:fd:dd:6f:32:24:aa:bb:ad:fa:7e: 8a:72:65:bd:d3:b7:31:c6:66:d9:cf:91:20:41:dd:4c:9c:6b: 17:2c:3e:b0:b0:12:e0:b0:e6:9f:33:bc:47:13:2d:7a:88:1a: 80:3e:24:54:31:23:5e:75:4c:15:03:7d:07:52:f3:a0:12:4a: cd:d8:3f:9a:6a:6a:d1:0c:54:34:a1:a9:9e:49:9f:54:51:b5: 80:83:08:51:97:25:93:7e:73:b8:fd:f4:45:41:59:2d:9a:88: 38:76:34:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrixGNeKTzuMuGaygbeKLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWNhMzc5OTU1M2I5ZTE4MGQzMzQ0NDIzMjMwMDM1MTM0 ODVlMmQwHhcNMjUxMjE3MDkwMTMyWhcNMjUxMjE4MDkwMTMyWjAzMTEwLwYDVQQD EyhjYjE5ZTU4YWJjZjIzMTU3YWI0MDA3NzJkYjZhNTM3ZDhlMzY0ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwHFcbTOzdI4SB/hSQmMmVPZsOlY gkEWZ4VCAK0qfxHOmYIURSzxZsBocatgm1iLf91wgEuQyXCcKuF3lNOnB9v+GNlT 6TSxep/ZMXfzqMIlX6kOw8i1QHxXxA8OftC31LtkdHh5xXFSvZ7WmSCFgAyV2pAc YmwN31bYwwq8DurDUCvWxew6ZZc9BFXUGOyC2DLqIHfYdYhzBBEr4aAIqGmiShm+ JAO3HvEsPYebrODq9w9jAWWllOcOoCIwvlLY+Sl3KYaL+fEbp5hIiBk4FCbGhcdK JRQKsA3hVsoKPr40MLsq4hz1rUgCfbDQZj0jt7d9xOT6CnYxCLNRbwlDGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsZ5Yq88jFXq0AHcttqU32ONk8xMB8GA1UdIwQY MBaAFBOco3mVU7nhgNM0RCMjADUTSF4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEt YTVmZTQ4NDYxNmFkLzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEtYTVmZTQ4NDYxNmFk LzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8v4B/q2 D8C8uX3n9wVYf8WdSwuR1oGh25Xa86ku91mJl96j8+arvtaDqLnGk8QYognKF3TS clGijsyeuOCPBJ/kIlp6RBPKt9lBBhbmtbdeDkrL0M/y8cxBv6piOaii5ytXoNEn 8VV21DMjZNXoOG2PO9U0+ssMi2TkUR48XIftVqIJo+VtJXbkzARWUhyL2qwX7SN7 cHz93W8yJKq7rfp+inJlvdO3McZm2c+RIEHdTJxrFyw+sLAS4LDmnzO8RxMteoga gD4kVDEjXnVMFQN9B1LzoBJKzdg/mmpq0QxUNKGpnkmfVFG1gIMIUZclk35zuP30 RUFZLZqIOHY0hA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:36 2025 by rpki-client