This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft File: 0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json) Hash identifier: Fy9iLJC9HST/gK8du1pjUw8T0V+5mEqw7vlFlMd0kVc= Subject key identifier: 74:86:2C:C2:E9:E0:68:DE:39:C2:7F:2F:82:5F:22:C8:AD:56:81:A6 Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE Certificate issuer: /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Certificate serial: 019AF42DEBFC744AD08B7CAECB7E76C79B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft Manifest number: 0213 Signing time: Sat 06 Dec 2025 15:00:41 +0000 Manifest this update: Sat 06 Dec 2025 15:00:41 +0000 Manifest next update: Sun 07 Dec 2025 15:00:41 +0000 Files and hashes: 1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: znHFn+seDgJ8HHj5BlPkmFT0Ea3JyhdCGGj47RQFEO0=) 2: iBrr36_dEMFLFaR63rVxYsL0nrA.roa (hash: QjXP3L9aexbdxGC+T9YhEQ3e0t4EbvVU5SQA2xtPTEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:eb:fc:74:4a:d0:8b:7c:ae:cb:7e:76:c7:9b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Validity Not Before: Dec 6 15:00:41 2025 GMT Not After : Dec 7 15:00:41 2025 GMT Subject: CN=74862cc2e9e068de39c27f2f825f22c8ad5681a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:65:09:7e:80:1d:a9:e2:82:42:c0:bd:ca: 0e:47:d4:17:10:27:0d:41:af:0f:a0:8c:16:2c:a0: 2a:4d:68:6d:d2:32:e2:59:25:b8:e4:20:a3:47:7f: 8e:9e:0d:e3:10:7e:78:89:fd:39:38:33:f4:f7:e2: c4:47:58:c2:c9:3d:e2:0c:71:1a:95:c3:2d:b8:28: a9:ce:91:6b:e7:bc:24:43:e5:18:44:ca:60:2f:60: 93:51:97:f8:94:d5:d7:c7:94:eb:64:b9:7f:e1:0a: 67:46:3d:e0:e0:88:57:cf:51:1f:99:d7:d6:15:4d: d3:a9:89:7a:01:fc:4d:51:49:42:81:68:34:22:aa: 02:f5:e1:f3:62:88:5a:16:2e:4b:9c:05:ff:c7:67: 2f:f0:a7:fc:d6:e2:46:52:df:98:59:1c:a2:3b:d0: da:96:54:98:29:c3:3a:ce:9b:01:1b:6e:bb:09:c1: 45:30:41:b4:08:83:ad:a9:96:39:19:a8:de:87:47: fa:ce:4b:46:e4:43:d0:10:ad:d5:29:26:a0:4c:30: 49:2d:31:20:89:44:8f:f5:84:30:1f:55:ad:ad:0a: e3:ea:03:bf:68:ff:a1:8d:ca:b1:68:2d:f8:33:18: 1c:5c:85:9c:03:10:f7:c2:0f:cb:92:1c:a3:27:d0: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:86:2C:C2:E9:E0:68:DE:39:C2:7F:2F:82:5F:22:C8:AD:56:81:A6 X509v3 Authority Key Identifier: keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:00:ed:cc:a4:b1:ce:ca:bb:93:e8:a8:93:ec:57:e0:30:5a: 8c:1d:23:7d:de:c6:56:9a:0e:ba:4d:65:45:7a:ec:37:75:4f: 17:31:c6:20:df:18:58:b4:c9:ce:23:5c:1c:ff:9f:c0:e3:2a: 57:0f:bc:59:a9:2e:d2:c9:31:3a:6c:06:b3:8d:4d:0d:8b:1d: 56:0a:cf:67:d4:6d:25:d3:d6:f1:3f:79:2c:8e:66:e4:82:c0: 48:3e:ad:77:f9:f5:3a:00:67:48:01:29:0a:bb:a1:da:c1:a3: cd:30:ee:23:51:cd:7a:18:b8:4c:69:19:37:30:91:b0:27:15: 55:cb:62:b4:f3:3e:8d:54:94:15:c0:8a:09:b6:cc:60:ba:73: 09:88:36:38:9c:05:c3:5b:48:9a:5d:7b:7d:a1:48:00:6a:87: ea:6a:25:35:ca:af:d0:96:23:0b:a7:42:74:d3:ec:50:0b:a1: e6:f5:3b:0f:de:04:54:75:25:0e:73:8e:3f:47:42:e7:4a:1f: 31:6f:47:7d:66:2c:4f:b0:6a:29:c1:72:2f:7e:6d:49:e4:8e: 21:78:5a:a7:ff:f9:2c:7c:5e:25:fd:a3:f7:db:0a:48:24:ef: 15:22:3e:15:a9:9e:54:f9:de:cc:48:7d:b7:31:8f:a3:d5:87: 57:d6:4a:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lev8dErQi3yuy352x5tfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNGI2ZWE2MjgxNzljYTNhMGU0MWJmZmFlZWEyZDMzYTU1 NDYxZGUwHhcNMjUxMjA2MTUwMDQxWhcNMjUxMjA3MTUwMDQxWjAzMTEwLwYDVQQD Eyg3NDg2MmNjMmU5ZTA2OGRlMzljMjdmMmY4MjVmMjJjOGFkNTY4MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2hlCX6AHanigkLAvcoOR9QXECcN Qa8PoIwWLKAqTWht0jLiWSW45CCjR3+Ong3jEH54if05ODP09+LER1jCyT3iDHEa lcMtuCipzpFr57wkQ+UYRMpgL2CTUZf4lNXXx5TrZLl/4QpnRj3g4IhXz1EfmdfW FU3TqYl6AfxNUUlCgWg0IqoC9eHzYohaFi5LnAX/x2cv8Kf81uJGUt+YWRyiO9Da llSYKcM6zpsBG267CcFFMEG0CIOtqZY5Gajeh0f6zktG5EPQEK3VKSagTDBJLTEg iUSP9YQwH1WtrQrj6gO/aP+hjcqxaC34MxgcXIWcAxD3wg/LkhyjJ9Dk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSGLMLp4GjeOcJ/L4JfIsitVoGmMB8GA1UdIwQY MBaAFNBLbqYoF5yjoOQb/67qLTOlVGHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4Yzct ZWNjNzIyZjlkN2ZmLzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4YzctZWNjNzIyZjlkN2Zm LzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADADtzKSx zsq7k+iok+xX4DBajB0jfd7GVpoOuk1lRXrsN3VPFzHGIN8YWLTJziNcHP+fwOMq Vw+8Waku0skxOmwGs41NDYsdVgrPZ9RtJdPW8T95LI5m5ILASD6td/n1OgBnSAEp Cruh2sGjzTDuI1HNehi4TGkZNzCRsCcVVctitPM+jVSUFcCKCbbMYLpzCYg2OJwF w1tIml17faFIAGqH6molNcqv0JYjC6dCdNPsUAuh5vU7D94EVHUlDnOOP0dC50of MW9HfWYsT7BqKcFyL35tSeSOIXhap//5LHxeJf2j99sKSCTvFSI+FameVPnezEh9 tzGPo9WHV9ZKmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:23 2025 by rpki-client