This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json) Hash identifier: WzUDdKp+x9+pfyyeGl5lA9evFlXp7ba6CEhIKeqsAV4= Subject key identifier: 2D:94:E3:5C:A6:D5:41:31:58:F0:F2:73:1B:5B:6E:B3:B5:3F:FD:19 Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d Certificate serial: 019AF38950A8ACE876C115BF15EE5D9772E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft Manifest number: 1732 Signing time: Sat 06 Dec 2025 12:00:53 +0000 Manifest this update: Sat 06 Dec 2025 12:00:53 +0000 Manifest next update: Sun 07 Dec 2025 12:00:53 +0000 Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: 8uf2kZYyjxmBRPqVL1ik3bqdaFY28Yl5jT29bEeFTNs=) 2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:50:a8:ac:e8:76:c1:15:bf:15:ee:5d:97:72:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139ca3799553b9e180d334442323003513485e2d Validity Not Before: Dec 6 12:00:53 2025 GMT Not After : Dec 7 12:00:53 2025 GMT Subject: CN=2d94e35ca6d5413158f0f2731b5b6eb3b53ffd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:62:32:4a:42:bd:39:3b:a9:75:e5:db:a5: 41:4f:31:cd:27:03:80:7f:6f:f6:ab:4e:0e:d6:16: db:e6:8a:a2:7a:f9:b6:0d:27:e6:be:7d:3c:04:b4: 10:11:44:f0:a2:8b:e4:11:ce:3c:54:d0:10:3e:68: f8:0a:32:ca:3b:b3:64:ce:c5:37:23:83:09:c1:66: ed:6c:fe:21:21:62:0c:7a:28:f9:16:b7:dc:46:95: 5f:34:3e:92:3c:52:fd:74:de:63:e0:5d:11:b4:ac: 5f:db:cc:80:d8:d6:9a:37:da:f9:3d:07:94:c1:18: 08:ad:87:ef:af:67:ae:84:e9:b1:5d:59:0a:cd:f0: b7:c9:b9:7c:55:30:1c:b4:89:8b:56:85:4f:16:82: df:85:d9:b7:fb:b7:d0:5a:ed:a4:ac:90:9a:2f:52: dc:45:24:4d:69:4f:9b:ef:d4:41:a3:37:01:2e:bc: 8a:f8:68:f8:5b:76:b5:70:6a:62:42:f1:d1:b5:5c: e7:90:59:af:a1:99:c6:fc:98:18:86:9e:6b:24:26: 61:f8:27:c4:a3:d7:88:f9:a6:21:96:83:85:c9:0a: 28:18:e9:7d:0e:7b:cf:d3:05:85:c0:a3:d9:44:ba: 04:4a:be:fe:f2:eb:54:13:ec:48:33:2b:ef:c7:b3: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:94:E3:5C:A6:D5:41:31:58:F0:F2:73:1B:5B:6E:B3:B5:3F:FD:19 X509v3 Authority Key Identifier: keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:fc:9c:02:0d:dd:0a:07:39:fa:68:8c:e1:48:88:ad:53: f2:2b:a8:1a:40:24:9f:ed:e6:e0:e7:03:f9:ff:f6:a6:9f:33: e4:cb:64:99:cb:14:3f:b4:9c:55:18:7e:2c:29:d9:15:d9:96: 03:65:e5:2c:28:78:6c:66:25:0f:a2:80:74:9d:7c:e1:08:1a: 80:43:62:4c:8a:64:06:f0:bc:b6:b9:22:50:78:bb:21:df:1d: 9d:ff:1c:36:c7:05:a0:f5:c6:30:3b:41:05:bd:4d:75:19:58: 77:f0:dc:cf:8d:ab:b4:fe:b9:32:39:fe:ff:0b:e4:2a:35:47: e4:0d:14:be:51:0e:35:67:a2:c8:ab:f1:f4:5b:22:b9:e4:33: 80:97:3a:2f:a7:fd:db:6b:18:82:19:07:90:d7:05:28:4e:9c: b8:4c:95:7b:3a:8d:01:95:fd:51:23:40:c5:13:84:77:b4:fd: 32:f7:eb:12:bc:b1:ea:a9:63:9a:ce:7f:4f:66:71:dd:35:e0: 29:31:06:c3:41:29:7d:39:42:47:e5:ae:d7:27:50:38:57:8f: 06:48:8f:d2:d3:9f:5e:2b:55:fd:e5:35:f2:0b:c4:8a:3d:5f: 22:93:63:fb:84:b5:19:d1:47:fa:bd:f9:55:fd:39:f9:30:67: 35:7b:ce:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVCorOh2wRW/Fe5dl3LpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWNhMzc5OTU1M2I5ZTE4MGQzMzQ0NDIzMjMwMDM1MTM0 ODVlMmQwHhcNMjUxMjA2MTIwMDUzWhcNMjUxMjA3MTIwMDUzWjAzMTEwLwYDVQQD EygyZDk0ZTM1Y2E2ZDU0MTMxNThmMGYyNzMxYjViNmViM2I1M2ZmZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqxiMkpCvTk7qXXl26VBTzHNJwOA f2/2q04O1hbb5oqievm2DSfmvn08BLQQEUTwoovkEc48VNAQPmj4CjLKO7NkzsU3 I4MJwWbtbP4hIWIMeij5FrfcRpVfND6SPFL9dN5j4F0RtKxf28yA2NaaN9r5PQeU wRgIrYfvr2euhOmxXVkKzfC3ybl8VTActImLVoVPFoLfhdm3+7fQWu2krJCaL1Lc RSRNaU+b79RBozcBLryK+Gj4W3a1cGpiQvHRtVznkFmvoZnG/JgYhp5rJCZh+CfE o9eI+aYhloOFyQooGOl9DnvP0wWFwKPZRLoESr7+8utUE+xIMyvvx7OMNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2U41ym1UExWPDycxtbbrO1P/0ZMB8GA1UdIwQY MBaAFBOco3mVU7nhgNM0RCMjADUTSF4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEt YTVmZTQ4NDYxNmFkLzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEtYTVmZTQ4NDYxNmFk LzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzb8nAIN 3QoHOfpojOFIiK1T8iuoGkAkn+3m4OcD+f/2pp8z5MtkmcsUP7ScVRh+LCnZFdmW A2XlLCh4bGYlD6KAdJ184QgagENiTIpkBvC8trkiUHi7Id8dnf8cNscFoPXGMDtB Bb1NdRlYd/Dcz42rtP65Mjn+/wvkKjVH5A0UvlEONWeiyKvx9FsiueQzgJc6L6f9 22sYghkHkNcFKE6cuEyVezqNAZX9USNAxROEd7T9MvfrEryx6qljms5/T2Zx3TXg KTEGw0EpfTlCR+Wu1ydQOFePBkiP0tOfXitV/eU18gvEij1fIpNj+4S1GdFH+r35 Vf05+TBnNXvOew== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:22 2025 by rpki-client