This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json) Hash identifier: 4wOJcGBAgpoeQiHzM1q7tqRryDxq8iia8xMj5X/QLxM= Subject key identifier: 80:5A:D6:6B:CD:EB:55:A6:C1:1C:23:33:B3:8B:DA:50:72:23:97:10 Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Certificate serial: 019AF1D23C871375B14DC50908F5D7F3B102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft Manifest number: 149F Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: HQNAnhRm4ib+fYygVKRVrY+gmFbC8EWSnI7r6yBznE0=) 2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:87:13:75:b1:4d:c5:09:08:f5:d7:f3:b1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=805ad66bcdeb55a6c11c2333b38bda5072239710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:4d:6a:6c:7e:ba:7d:cf:86:6f:c4:1f:75: 5a:f3:11:bc:3e:94:2e:0c:02:b8:ee:86:36:04:7b: f6:6a:9b:48:1b:a3:b2:e3:c6:d3:7b:20:2f:38:32: 32:70:77:bd:3c:bc:61:e3:42:16:95:2c:79:86:b3: 35:9e:ca:1d:ea:96:d4:04:b0:35:05:9b:e0:f7:fb: a1:9c:0c:92:1b:ad:c7:4b:36:7f:df:e5:27:0e:18: f4:11:24:98:3e:58:57:25:19:19:55:76:15:c5:3a: 62:de:f1:14:da:cb:59:41:b8:5e:fb:1e:61:ee:a2: 96:45:93:c2:0c:0b:df:b9:cf:94:2b:e2:57:c7:5a: c0:bf:ff:64:a4:a3:1c:87:38:59:40:64:a0:59:1f: 5b:64:40:1c:ed:cb:b0:e2:a2:a2:68:48:f5:de:d1: 57:6c:95:53:16:eb:4d:6f:f9:7b:9e:58:4a:dd:bc: 2e:b2:07:8f:f4:9e:14:c7:77:91:58:b6:be:dd:b6: 5a:45:56:25:76:5c:37:1b:5a:ba:1f:75:e7:3a:08: 31:cb:c7:b7:b9:93:0f:0e:cf:6b:a3:54:e4:f1:37: 19:24:9b:a5:be:69:8b:06:97:8b:41:5d:3d:76:08: 79:39:bb:f6:41:b7:c5:1f:a9:24:89:dc:e8:c0:de: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5A:D6:6B:CD:EB:55:A6:C1:1C:23:33:B3:8B:DA:50:72:23:97:10 X509v3 Authority Key Identifier: keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3a:57:3e:38:19:d5:60:12:5c:f7:85:7f:0c:5e:ca:d3:36: ac:55:a1:35:b7:18:78:33:66:0f:04:e7:76:c1:5d:ac:0e:82: a7:d1:d2:6c:71:45:2a:02:20:37:fd:2a:13:08:e1:0f:39:68: 52:6b:e3:7e:22:15:36:c5:3d:e2:8f:9e:f5:18:98:ec:df:18: 17:a3:f4:2d:7d:9c:96:9a:1f:08:2c:a3:39:c6:38:e4:c7:07: dc:aa:23:d8:d1:3a:7b:e3:bd:a0:a9:cf:b2:1e:25:e3:7f:80: 41:b9:16:13:ab:ae:f5:a5:10:53:43:3a:cc:7f:04:66:31:52: 88:8a:e6:0a:b6:3f:d4:46:04:87:3a:e7:77:d3:b8:17:11:4d: d7:6e:1d:49:c1:13:0e:4c:2d:96:08:56:87:ec:cc:91:3c:fe: ea:fc:13:b5:cd:84:e0:91:c0:93:72:ee:a2:3c:91:29:c0:63: 57:36:b3:21:c3:4f:3b:ec:4a:44:bb:a2:4e:72:1e:a5:7e:c5: 0d:71:13:f2:a8:81:6a:6f:35:9b:78:23:f1:60:d1:65:e6:f6: de:c5:2e:9f:20:c0:01:82:8b:99:56:41:10:6b:b6:0d:bc:4a: fc:ae:ba:df:fe:69:8b:30:44:96:e1:b7:36:45:5e:7e:40:d5: c3:63:28:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jyHE3WxTcUJCPXX87ECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5 NjM0NTIwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg4MDVhZDY2YmNkZWI1NWE2YzExYzIzMzNiMzhiZGE1MDcyMjM5NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfxNamx+un3Phm/EH3Va8xG8PpQu DAK47oY2BHv2aptIG6Oy48bTeyAvODIycHe9PLxh40IWlSx5hrM1nsod6pbUBLA1 BZvg9/uhnAySG63HSzZ/3+UnDhj0ESSYPlhXJRkZVXYVxTpi3vEU2stZQbhe+x5h 7qKWRZPCDAvfuc+UK+JXx1rAv/9kpKMchzhZQGSgWR9bZEAc7cuw4qKiaEj13tFX bJVTFutNb/l7nlhK3bwusgeP9J4Ux3eRWLa+3bZaRVYldlw3G1q6H3XnOggxy8e3 uZMPDs9ro1Tk8TcZJJulvmmLBpeLQV09dgh5Obv2QbfFH6kkidzowN5CNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBa1mvN61WmwRwjM7OL2lByI5cQMB8GA1UdIwQY MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt ZDQxYmNjOTI4Mzc1LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1 LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDpXPjgZ 1WASXPeFfwxeytM2rFWhNbcYeDNmDwTndsFdrA6Cp9HSbHFFKgIgN/0qEwjhDzlo UmvjfiIVNsU94o+e9RiY7N8YF6P0LX2clpofCCyjOcY45McH3Koj2NE6e+O9oKnP sh4l43+AQbkWE6uu9aUQU0M6zH8EZjFSiIrmCrY/1EYEhzrnd9O4FxFN124dScET DkwtlghWh+zMkTz+6vwTtc2E4JHAk3LuojyRKcBjVzazIcNPO+xKRLuiTnIepX7F DXET8qiBam81m3gj8WDRZeb23sUunyDAAYKLmVZBEGu2DbxK/K663/5pizBEluG3 NkVefkDVw2Mo6g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:58 2025 by rpki-client