This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json) Hash identifier: oath3VU0aSpeZHPRuWWFV/gDhc6BTWNRG/xb0e7mGjg= Subject key identifier: 99:94:87:F7:0E:22:2E:A2:D0:99:24:F6:E2:FD:FD:E1:5F:1B:1A:1E Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56 Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256 Certificate serial: 019AF2097529437D196501488F2C83466C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: fWjkFb5CJW3JWMOdTdt53M3Ygm6cSNpuy4LCcfLlxyU=) 2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:75:29:43:7d:19:65:01:48:8f:2c:83:46:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=999487f70e222ea2d09924f6e2fdfde15f1b1a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:98:18:47:74:c5:df:7f:d9:cb:d9:26:17: 5d:93:d3:d7:9e:1a:6d:9f:a6:84:a4:83:15:bb:d9: 8f:33:68:bc:f8:3d:96:4d:0e:0f:16:eb:4d:76:3b: 6b:b7:06:ae:cd:89:b2:ee:ce:be:2e:92:f4:ff:0f: da:d6:d0:f2:60:c7:10:03:18:fd:f3:34:df:f3:00: 36:6c:78:a0:6d:5b:4c:78:b3:ae:97:cc:dc:df:30: c4:ce:df:fd:b3:4a:72:f1:14:11:2b:ce:7d:7a:52: 00:24:e0:4e:26:9d:72:03:b9:5b:90:93:db:0e:32: 6b:f9:22:7c:52:8a:2c:4f:38:35:f6:23:12:fa:6b: 3f:b5:ee:3c:83:77:73:74:4c:d5:fc:c7:88:9c:43: ce:7d:89:bb:e0:cf:11:72:c8:a8:1e:ef:52:b5:b3: 82:84:f6:13:85:55:03:f4:7a:4e:17:2a:d8:32:c3: 92:db:42:00:d6:d7:0f:43:b0:b3:5a:cd:3c:f7:5f: 28:2a:3f:ba:14:8f:cd:b4:23:26:76:fe:7f:76:99: 62:c1:d9:0e:77:01:07:ac:d9:b9:05:21:cb:9c:97: 5d:14:1f:67:eb:80:bc:59:61:fe:85:6e:84:15:da: 97:9f:53:5b:ff:f3:92:bc:95:c7:59:80:61:0b:54: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:87:F7:0E:22:2E:A2:D0:99:24:F6:E2:FD:FD:E1:5F:1B:1A:1E X509v3 Authority Key Identifier: keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b5:f5:d0:08:a1:c2:20:04:44:81:ab:70:fa:94:a0:04:70: a4:9c:5f:5a:ec:ef:64:ea:91:cd:5a:ca:2a:04:36:3c:b1:33: 9a:16:4a:fa:2f:04:22:9a:e9:ee:2d:4c:bb:fa:33:b3:99:88: ec:89:00:17:29:83:b0:b6:15:df:22:52:19:ea:b7:27:71:32: 79:80:09:9c:16:37:8a:52:aa:79:71:74:f0:80:5d:bc:83:30: 46:9e:01:a7:ff:91:15:1a:81:a7:56:2f:87:e6:00:ee:fb:72: b4:c1:f9:e5:dd:fd:48:0a:7a:c1:62:b3:5c:fe:85:05:e9:da: c8:f7:95:74:71:b4:4f:5d:6c:75:fa:12:0c:56:ef:66:c4:ad: ea:91:a1:9d:0e:75:2d:17:c1:84:46:e7:5d:15:3e:6a:57:7b: 0a:a2:d1:bd:8c:d0:c2:9a:eb:fd:ff:85:a6:0a:26:4e:5c:51: 8c:49:3a:eb:72:89:f9:e0:ee:f5:35:e0:11:e0:22:8f:3a:06: 32:93:c0:92:a1:08:6f:de:dc:69:6d:3d:cb:62:7d:07:3b:d4: 1e:94:f1:94:be:0c:12:bc:d5:38:0d:62:e7:c0:7d:a1:ff:6f: 05:a7:cf:06:0e:f7:50:ab:de:be:90:9a:ba:13:86:dd:96:aa: 24:df:45:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXUpQ30ZZQFIjyyDRmyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx NWUyNTYwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD Eyg5OTk0ODdmNzBlMjIyZWEyZDA5OTI0ZjZlMmZkZmRlMTVmMWIxYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsaYGEd0xd9/2cvZJhddk9PXnhpt n6aEpIMVu9mPM2i8+D2WTQ4PFutNdjtrtwauzYmy7s6+LpL0/w/a1tDyYMcQAxj9 8zTf8wA2bHigbVtMeLOul8zc3zDEzt/9s0py8RQRK859elIAJOBOJp1yA7lbkJPb DjJr+SJ8UoosTzg19iMS+ms/te48g3dzdEzV/MeInEPOfYm74M8RcsioHu9StbOC hPYThVUD9HpOFyrYMsOS20IA1tcPQ7CzWs08918oKj+6FI/NtCMmdv5/dpliwdkO dwEHrNm5BSHLnJddFB9n64C8WWH+hW6EFdqXn1Nb//OSvJXHWYBhC1Q7ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmUh/cOIi6i0Jkk9uL9/eFfGxoeMB8GA1UdIwQY MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7X10Aih wiAERIGrcPqUoARwpJxfWuzvZOqRzVrKKgQ2PLEzmhZK+i8EIprp7i1Mu/ozs5mI 7IkAFymDsLYV3yJSGeq3J3EyeYAJnBY3ilKqeXF08IBdvIMwRp4Bp/+RFRqBp1Yv h+YA7vtytMH55d39SAp6wWKzXP6FBenayPeVdHG0T11sdfoSDFbvZsSt6pGhnQ51 LRfBhEbnXRU+ald7CqLRvYzQwprr/f+FpgomTlxRjEk663KJ+eDu9TXgEeAijzoG MpPAkqEIb97caW09y2J9BzvUHpTxlL4MErzVOA1i58B9of9vBafPBg73UKvevpCa uhOG3ZaqJN9FOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:55 2025 by rpki-client