This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft File: E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json) Hash identifier: 7Y49Nrn6q1sQxGmt4dcKVXp5twRhxdRSU4P3GW/T/nY= Subject key identifier: DE:3B:30:2E:B6:65:C4:C2:15:82:35:19:20:0F:61:5D:84:DE:E4:64 Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F Certificate issuer: /CN=13ec2551332a0c32fb7725d069582d6b50be369f Certificate serial: 019AF12E4969FE229F15C7E1906D065F3B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft Manifest number: 0A41 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: prpSYEEuQDfz4f7WWnwLRhCOVgf2P2H689Yd74uVc0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:49:69:fe:22:9f:15:c7:e1:90:6d:06:5f:3b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=de3b302eb665c4c215823519200f615d84dee464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:2d:c9:fb:9b:47:75:28:5d:45:96:6d:81: df:72:fb:67:74:ed:21:6d:0e:33:f3:22:1e:e8:f5: 21:ed:28:1c:16:96:d1:ae:0c:3b:87:65:67:88:5a: 2f:d4:8c:97:c3:15:bd:ea:63:31:58:e0:19:cb:ab: ef:9d:c4:15:d2:b5:90:c3:98:71:9f:41:e1:04:fa: 4f:86:16:86:16:0c:7f:ef:28:bd:45:ad:ab:c5:67: 55:16:a2:d3:58:c0:d1:6b:53:41:29:20:b6:42:a1: 68:67:47:82:d2:50:9d:ba:6a:9f:f2:0e:f9:89:3f: 7f:dc:43:06:da:43:bd:03:9d:4f:27:cf:fb:11:b8: 73:7d:e2:05:49:0c:a1:72:f1:1a:7e:b2:c9:1c:b8: 11:3a:12:a4:9a:7d:b9:18:57:b2:af:6d:63:2d:55: 0b:5c:e5:0f:5b:a7:cd:da:07:9c:67:ab:d1:7d:db: 0b:fb:82:49:a9:8a:f4:7a:32:94:78:d8:7d:a8:46: f8:58:01:e5:79:32:f4:d0:60:74:92:db:64:f2:0d: 8c:4e:07:90:cc:fd:85:c9:04:1f:8c:48:73:39:81: 83:75:81:bf:78:fa:d1:7d:3d:8d:a5:c0:cf:aa:d2: 1a:52:30:57:2a:83:e1:f7:d3:01:7d:77:1b:e1:02: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3B:30:2E:B6:65:C4:C2:15:82:35:19:20:0F:61:5D:84:DE:E4:64 X509v3 Authority Key Identifier: keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f3:68:15:95:8f:22:d1:a3:25:ed:39:a0:d7:f2:f6:12:6b: 0a:bd:dc:b8:ac:85:70:0c:79:17:0d:67:c0:21:3e:62:f6:3c: 5c:b1:34:e3:7f:32:18:ca:aa:cf:9c:e8:a4:5d:4e:a9:35:9e: 16:0f:09:4e:fd:cf:bd:23:b6:2a:09:74:ce:b5:da:44:6e:4c: f7:3f:76:07:29:fd:d8:29:1a:bc:8f:8c:9a:2b:07:ec:b3:26: 4c:8b:1c:54:43:8e:ff:ef:ee:1d:09:2d:5d:5c:04:48:6f:08: f4:20:15:ec:99:65:dc:8c:2e:a7:6f:83:2d:ac:5d:79:8c:d9: 43:94:ce:b3:34:3c:7e:bc:94:c7:67:16:e0:ad:f8:70:c0:52: 50:6c:1e:b0:2a:6a:a9:b1:89:ab:ea:4d:5f:be:92:86:bd:b7: 3c:1c:03:ab:e0:61:f9:7a:cb:44:f7:e0:73:3b:8e:52:fe:a8: 95:f4:ae:5c:11:d3:f1:06:13:ba:36:eb:59:5a:0b:7d:c0:8e: 26:e6:c1:17:85:94:75:00:61:a5:e0:2e:60:cf:f1:6a:ca:62: c4:61:52:b0:53:a8:61:24:43:e4:cb:65:85:6a:21:55:28:c5: f9:09:3b:ad:92:45:25:fd:04:03:ad:99:10:ad:fa:41:34:03: 9a:73:ce:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLklp/iKfFcfhkG0GXzsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWMyNTUxMzMyYTBjMzJmYjc3MjVkMDY5NTgyZDZiNTBi ZTM2OWYwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EyhkZTNiMzAyZWI2NjVjNGMyMTU4MjM1MTkyMDBmNjE1ZDg0ZGVlNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf8tyfubR3UoXUWWbYHfcvtndO0h bQ4z8yIe6PUh7SgcFpbRrgw7h2VniFov1IyXwxW96mMxWOAZy6vvncQV0rWQw5hx n0HhBPpPhhaGFgx/7yi9Ra2rxWdVFqLTWMDRa1NBKSC2QqFoZ0eC0lCdumqf8g75 iT9/3EMG2kO9A51PJ8/7EbhzfeIFSQyhcvEafrLJHLgROhKkmn25GFeyr21jLVUL XOUPW6fN2gecZ6vRfdsL+4JJqYr0ejKUeNh9qEb4WAHleTL00GB0kttk8g2MTgeQ zP2FyQQfjEhzOYGDdYG/ePrRfT2NpcDPqtIaUjBXKoPh99MBfXcb4QJjTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN47MC62ZcTCFYI1GSAPYV2E3uRkMB8GA1UdIwQY MBaAFBPsJVEzKgwy+3cl0GlYLWtQvjafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGIt MmVlNTY1MTQxYjMyLzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGItMmVlNTY1MTQxYjMy LzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfNoFZWP ItGjJe05oNfy9hJrCr3cuKyFcAx5Fw1nwCE+YvY8XLE0438yGMqqz5zopF1OqTWe Fg8JTv3PvSO2Kgl0zrXaRG5M9z92Byn92CkavI+MmisH7LMmTIscVEOO/+/uHQkt XVwESG8I9CAV7Jll3Iwup2+DLaxdeYzZQ5TOszQ8fryUx2cW4K34cMBSUGwesCpq qbGJq+pNX76Shr23PBwDq+Bh+XrLRPfgczuOUv6olfSuXBHT8QYTujbrWVoLfcCO JubBF4WUdQBhpeAuYM/xaspixGFSsFOoYSRD5MtlhWohVSjF+Qk7rZJFJf0EA62Z EK36QTQDmnPOdA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:36 2025 by rpki-client