This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json) Hash identifier: gim2EGIgC3YSN6q3bDjp3EmJxvwzZJ9s6hV6c9kJzqQ= Subject key identifier: 22:40:37:1A:50:BF:86:0C:17:8F:A4:49:28:8B:84:AE:16:35:57:73 Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5 Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5 Certificate serial: 019AF1641FF70FC46EF337B4A837EAAAAD9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft Manifest number: 0631 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: hleFa4Rh+NJ8ZD6HhoI6BUKiJxaLwzmrxa0ndZIyM0k=) 2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1f:f7:0f:c4:6e:f3:37:b4:a8:37:ea:aa:ad:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5 Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=2240371a50bf860c178fa449288b84ae16355773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:8d:6f:ea:e8:ea:16:2e:36:49:ef:04:7b: c0:ce:1b:0d:3e:b5:2d:b9:58:2f:d2:e6:c9:24:11: 37:03:b2:5d:90:07:bb:f1:e8:e6:d2:e5:5b:a5:d6: 12:c7:20:e5:13:8c:76:ea:a9:d9:97:dd:26:81:a2: ea:1d:0a:b0:38:20:60:49:f3:0c:00:61:1f:83:33: ab:c3:4e:ca:90:f0:fb:c6:f3:1a:a3:23:2c:72:2f: 76:00:c7:84:98:67:66:8e:82:69:46:04:d7:e7:1a: 8c:10:09:38:ab:31:51:da:dc:50:17:55:a4:52:bb: 46:c1:fa:17:32:7b:a6:8e:f9:46:7e:0e:99:34:c0: 71:a6:4c:e8:49:1e:b8:45:ba:18:71:63:4e:c1:0d: bf:e1:c4:75:01:73:e8:e7:8e:ef:90:2f:54:c2:ac: 07:04:38:eb:48:d3:10:9c:eb:10:7f:e5:5c:88:56: 99:f1:6e:ee:f6:2d:5f:89:f7:3d:cb:91:2b:18:b3: 23:04:68:cd:b7:91:67:22:1f:6c:77:96:b4:6a:7c: 15:67:ce:ac:9e:14:9e:65:c4:40:aa:e0:c1:02:69: 44:2e:42:99:83:18:12:f3:4c:06:ac:d2:d1:4f:2f: f6:ab:31:6f:9d:53:0c:3c:e7:ff:cc:2b:78:ac:0c: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:37:1A:50:BF:86:0C:17:8F:A4:49:28:8B:84:AE:16:35:57:73 X509v3 Authority Key Identifier: keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:83:e7:7e:22:36:dd:bb:9b:46:e5:eb:aa:52:b9:f7:2f:08: 96:bf:95:53:10:31:90:40:d3:cf:1f:f2:10:08:1b:49:f7:d3: 2a:42:da:86:f4:fd:24:6a:99:c6:c4:86:41:11:5b:54:f2:31: 09:45:01:45:a7:52:6e:13:9f:c3:85:f0:b2:a0:d5:be:5f:36: fa:11:0d:91:4b:67:37:b0:29:96:92:32:7e:3a:05:fb:52:c3: fb:31:f3:5d:7f:22:c6:29:24:cf:26:0b:6a:2d:0a:7f:f0:8a: 91:b4:f5:2a:68:93:d4:fb:5b:fe:ae:2d:60:1b:9e:dd:bf:a9: 4f:e3:73:08:3e:73:54:a2:64:18:c9:f2:6c:09:db:7d:27:c1: 21:25:7b:1a:22:1f:69:78:01:86:06:c2:30:0f:6b:ce:01:ff: 4f:f0:90:be:de:bc:71:4e:4d:90:90:df:12:2d:0b:ab:f5:a4: d2:9c:89:5e:7c:b2:f3:9c:72:8d:22:d9:03:65:2f:71:57:24: fb:14:c7:35:4e:d4:d5:09:63:af:3e:75:23:ba:a2:f2:e4:7d: 4e:c1:e8:59:cc:2f:5a:93:b1:ea:a1:9b:1f:b8:e8:fe:06:95: c5:cb:56:fd:80:8c:cc:1e:b7:3d:db:02:45:2e:8b:b6:6a:29: 26:d3:b3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB/3D8Ru8ze0qDfqqq2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh Y2E2YjUwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EygyMjQwMzcxYTUwYmY4NjBjMTc4ZmE0NDkyODhiODRhZTE2MzU1NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX2Nb+ro6hYuNknvBHvAzhsNPrUt uVgv0ubJJBE3A7JdkAe78ejm0uVbpdYSxyDlE4x26qnZl90mgaLqHQqwOCBgSfMM AGEfgzOrw07KkPD7xvMaoyMsci92AMeEmGdmjoJpRgTX5xqMEAk4qzFR2txQF1Wk UrtGwfoXMnumjvlGfg6ZNMBxpkzoSR64RboYcWNOwQ2/4cR1AXPo547vkC9UwqwH BDjrSNMQnOsQf+VciFaZ8W7u9i1fifc9y5ErGLMjBGjNt5FnIh9sd5a0anwVZ86s nhSeZcRAquDBAmlELkKZgxgS80wGrNLRTy/2qzFvnVMMPOf/zCt4rAyb2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJANxpQv4YMF4+kSSiLhK4WNVdzMB8GA1UdIwQY MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYPnfiI2 3bubRuXrqlK59y8Ilr+VUxAxkEDTzx/yEAgbSffTKkLahvT9JGqZxsSGQRFbVPIx CUUBRadSbhOfw4XwsqDVvl82+hENkUtnN7AplpIyfjoF+1LD+zHzXX8ixikkzyYL ai0Kf/CKkbT1KmiT1Ptb/q4tYBue3b+pT+NzCD5zVKJkGMnybAnbfSfBISV7GiIf aXgBhgbCMA9rzgH/T/CQvt68cU5NkJDfEi0Lq/Wk0pyJXnyy85xyjSLZA2UvcVck +xTHNU7U1Qljrz51I7qi8uR9TsHoWcwvWpOx6qGbH7jo/gaVxctW/YCMzB63PdsC RS6LtmopJtOzWg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:51 2025 by rpki-client