This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft File: E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json) Hash identifier: +M4iypoPH008SDasIsWSEUSYZxFNXTcMnAOJjRMW790= Subject key identifier: E6:F6:E3:CF:84:FD:52:C2:03:75:74:72:B2:C1:4F:83:7F:B1:2A:14 Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C Certificate issuer: /CN=13970fb946daf9b9efe3b609f289cae019fc618c Certificate serial: 019AF4659F6875EBEB0E2A7F5BFDE3D52921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft Manifest number: 11BE Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: 6LoWEPXV0BJ5G/D3puL3lqmAxpnYFaS5SXm3gqjXByE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9f:68:75:eb:eb:0e:2a:7f:5b:fd:e3:d5:29:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=e6f6e3cf84fd52c203757472b2c14f837fb12a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:10:97:53:2d:d8:33:fe:77:ad:49:de:f3: 73:76:72:f5:1c:62:ef:81:41:7e:bd:34:4f:d8:3d: 51:64:04:58:a9:2e:97:0c:9c:e2:7b:54:4c:c9:10: e7:f1:95:99:d8:1e:98:ec:ba:b6:90:71:94:27:fa: dc:99:de:3c:0b:f3:5e:64:44:89:8a:97:0a:82:16: 73:5f:a4:f2:48:b9:0a:68:8f:56:70:af:8a:2d:7e: 14:2e:16:8a:f5:6b:cb:96:7c:2f:14:14:e0:88:c9: f0:89:7b:02:90:94:68:2b:10:f5:5a:9b:18:94:3f: b5:be:fb:e9:73:b9:8b:cb:53:c2:ad:7d:f6:c1:a9: 3f:15:88:c5:8e:0e:ee:63:79:22:67:cc:4b:27:c0: a8:b6:5f:b8:65:4c:71:97:06:29:47:7e:9d:be:78: f3:58:c0:73:05:60:8a:ac:bf:8a:7c:93:06:9f:23: b7:74:3b:d8:d2:a4:7a:f2:34:3a:67:65:20:07:af: 32:30:cf:3a:ea:6a:e1:74:79:50:61:ca:7c:56:38: a7:ba:73:1a:83:3f:63:fd:ee:40:48:8c:76:43:e6: 3b:f6:be:06:2a:0c:f0:d8:ac:d2:85:aa:bf:5b:e5: a2:3b:b1:c0:fe:91:fc:d3:ff:7e:50:4c:c7:95:d0: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F6:E3:CF:84:FD:52:C2:03:75:74:72:B2:C1:4F:83:7F:B1:2A:14 X509v3 Authority Key Identifier: keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:8e:37:24:ca:89:93:d1:23:cf:11:21:44:b0:9d:02:1d: 8e:38:2d:e3:f9:6e:22:18:1d:e0:22:5e:c7:07:03:04:55:89: 55:57:8d:ec:e1:14:d2:61:4d:66:5c:f6:b4:15:42:52:2a:88: 55:3a:de:01:8e:d3:e3:ee:e8:d5:63:fb:8e:87:0b:03:a8:c3: 25:ea:25:df:e3:ca:1f:b4:c9:09:cf:1c:a1:00:b9:a9:da:a7: a7:ae:d5:e8:cf:a2:eb:53:5b:41:b7:f1:0b:09:75:89:3c:d5: 45:90:51:70:0c:14:89:68:62:c0:db:4c:59:f7:af:32:75:1d: 91:63:8a:63:99:0d:a0:3b:e6:ab:9e:d2:f9:c1:52:a8:b5:9d: a3:f0:1e:30:13:a1:46:93:27:aa:c7:89:bc:b8:ee:de:1b:37: 92:82:3d:80:12:41:0b:90:b0:30:9e:ea:9d:8d:86:20:12:e0: 9a:ce:48:49:77:f8:db:28:84:ac:a8:64:6e:2c:70:79:56:8a: c1:0a:ae:74:b8:da:b9:88:32:c4:07:19:61:50:20:f7:e4:af: d1:d3:60:58:64:3f:bc:87:f0:7b:56:43:9e:60:95:9c:a5:bd: ba:c7:99:78:c4:50:69:84:10:0e:d6:5c:92:98:79:c4:d1:bb: 46:f8:cb:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZ9odevrDip/W/3j1SkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTcwZmI5NDZkYWY5YjllZmUzYjYwOWYyODljYWUwMTlm YzYxOGMwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD EyhlNmY2ZTNjZjg0ZmQ1MmMyMDM3NTc0NzJiMmMxNGY4MzdmYjEyYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmwQl1Mt2DP+d61J3vNzdnL1HGLv gUF+vTRP2D1RZARYqS6XDJzie1RMyRDn8ZWZ2B6Y7Lq2kHGUJ/rcmd48C/NeZESJ ipcKghZzX6TySLkKaI9WcK+KLX4ULhaK9WvLlnwvFBTgiMnwiXsCkJRoKxD1WpsY lD+1vvvpc7mLy1PCrX32wak/FYjFjg7uY3kiZ8xLJ8Cotl+4ZUxxlwYpR36dvnjz WMBzBWCKrL+KfJMGnyO3dDvY0qR68jQ6Z2UgB68yMM866mrhdHlQYcp8VjinunMa gz9j/e5ASIx2Q+Y79r4GKgzw2KzShaq/W+WiO7HA/pH80/9+UEzHldD55QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb248+E/VLCA3V0crLBT4N/sSoUMB8GA1UdIwQY MBaAFBOXD7lG2vm57+O2CfKJyuAZ/GGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMt MzdiNjFlYzJjMGQ1LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMtMzdiNjFlYzJjMGQ1 LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKOONyTK iZPRI88RIUSwnQIdjjgt4/luIhgd4CJexwcDBFWJVVeN7OEU0mFNZlz2tBVCUiqI VTreAY7T4+7o1WP7jocLA6jDJeol3+PKH7TJCc8coQC5qdqnp67V6M+i61NbQbfx Cwl1iTzVRZBRcAwUiWhiwNtMWfevMnUdkWOKY5kNoDvmq57S+cFSqLWdo/AeMBOh RpMnqseJvLju3hs3koI9gBJBC5CwMJ7qnY2GIBLgms5ISXf42yiErKhkbixweVaK wQqudLjauYgyxAcZYVAg9+Sv0dNgWGQ/vIfwe1ZDnmCVnKW9useZeMRQaYQQDtZc kph5xNG7RvjLyw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:04 2025 by rpki-client