This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft File: e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json) Hash identifier: L6N7qrQ/o7uZcOp7QG30ArXChF+kFK6cenSD7B6N5iY= Subject key identifier: B5:ED:46:1C:33:19:35:0F:AE:21:AA:17:01:00:7E:89:0C:4B:8B:8C Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Certificate serial: 019AF12E3CBCB4101CC297771A9D69901334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft Manifest number: 0358 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (hash: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=) 2: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: KPAR9b7dTIss02/lttR7AYxkthhfqpMAF8pBcYVPQLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3c:bc:b4:10:1c:c2:97:77:1a:9d:69:90:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=b5ed461c3319350fae21aa1701007e890c4b8b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:a2:06:25:77:08:f3:8d:96:0d:ba:7b:04: 90:f8:59:b2:c3:95:b0:a7:56:fd:5e:79:e3:fb:e9: 66:d4:6c:1e:d2:2b:7b:62:c0:0c:e6:6f:9e:0a:16: 76:aa:27:d1:b4:04:e2:3b:06:d0:bd:96:ae:26:25: e4:a8:d3:b5:bb:bb:f0:84:60:2c:b7:3f:b3:d1:8c: 04:b3:2c:1f:86:00:c8:a9:e0:c7:d2:d3:1d:ca:22: 1c:34:93:e4:54:d5:86:76:ac:43:e9:d7:f2:58:de: 25:1c:86:c3:35:ac:59:0f:0d:df:a7:fe:13:83:d4: 5f:3a:e0:86:57:68:27:f7:e4:b1:7c:7f:a2:df:8f: e7:d4:da:29:92:aa:cb:79:d2:45:ea:e0:61:ab:a5: 24:c0:0c:99:76:a7:b1:8f:f2:a1:5a:87:ec:55:dc: 5a:58:58:ef:0e:d5:bb:3d:64:71:d5:62:69:3f:3a: 8c:68:8b:ba:ac:b5:4c:29:d6:ff:48:f7:55:cb:f0: 57:98:4b:f6:f6:35:a9:25:f2:7c:c4:3b:9a:ad:fe: 29:f6:ba:f5:da:a9:d8:ce:53:d9:1d:66:f7:fb:f8: d4:e9:72:bc:9e:7a:98:aa:d6:b5:4c:f4:77:f8:35: b9:df:58:e0:b9:06:33:54:9f:1a:28:35:de:91:ec: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:46:1C:33:19:35:0F:AE:21:AA:17:01:00:7E:89:0C:4B:8B:8C X509v3 Authority Key Identifier: keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:de:4d:bf:d9:87:86:f5:b7:db:31:63:50:5c:70:45:38:51: f4:c8:bb:c4:ec:42:96:b2:87:19:e8:9e:fa:f5:7c:0a:da:ee: dd:95:05:2e:94:92:41:77:2d:c2:20:37:9a:86:b1:86:f0:c4: 12:a0:38:c0:9f:85:5a:d5:89:8a:5f:4a:43:33:e0:8c:9f:fa: 71:c7:5a:9b:33:c6:04:ac:32:69:69:32:ae:79:dd:26:48:8c: b7:b3:d2:19:2d:dd:8f:ea:fa:42:94:10:b6:de:1f:d1:a4:f1: 9c:91:89:a9:f8:ed:13:b4:93:5a:5a:8e:b2:38:48:72:a7:58: c6:01:65:19:68:0f:e2:d2:16:8a:f6:5e:65:38:ee:e6:96:2f: 30:f5:f2:71:67:19:43:f0:3a:f2:6b:96:2d:33:52:93:a6:2a: 20:01:58:49:02:44:37:79:77:ed:0d:e5:80:cc:c2:2b:3e:ee: 24:29:14:93:0b:18:67:c0:b3:84:f5:5e:ed:91:8c:cc:da:10: a8:33:89:cb:ba:26:4e:25:03:f5:c4:e4:d5:2a:f7:b6:af:1e: 3c:07:ad:4f:03:a4:c5:09:c9:c0:f8:01:ce:58:7e:6e:0b:c1: 11:f4:1c:b5:9d:13:2e:57:3e:0e:3f:fa:58:0a:7b:78:fe:2f: a4:b0:5c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjy8tBAcwpd3Gp1pkBM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl MjVjYjUwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EyhiNWVkNDYxYzMzMTkzNTBmYWUyMWFhMTcwMTAwN2U4OTBjNGI4YjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2WiBiV3CPONlg26ewSQ+Fmyw5Ww p1b9Xnnj++lm1Gwe0it7YsAM5m+eChZ2qifRtATiOwbQvZauJiXkqNO1u7vwhGAs tz+z0YwEsywfhgDIqeDH0tMdyiIcNJPkVNWGdqxD6dfyWN4lHIbDNaxZDw3fp/4T g9RfOuCGV2gn9+SxfH+i34/n1NopkqrLedJF6uBhq6UkwAyZdqexj/KhWofsVdxa WFjvDtW7PWRx1WJpPzqMaIu6rLVMKdb/SPdVy/BXmEv29jWpJfJ8xDuarf4p9rr1 2qnYzlPZHWb3+/jU6XK8nnqYqta1TPR3+DW531jguQYzVJ8aKDXekewi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXtRhwzGTUPriGqFwEAfokMS4uMMB8GA1UdIwQY MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt MmI3YzFlZGYxMTZhLzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt5Nv9mH hvW32zFjUFxwRThR9Mi7xOxClrKHGeie+vV8Ctru3ZUFLpSSQXctwiA3moaxhvDE EqA4wJ+FWtWJil9KQzPgjJ/6ccdamzPGBKwyaWkyrnndJkiMt7PSGS3dj+r6QpQQ tt4f0aTxnJGJqfjtE7STWlqOsjhIcqdYxgFlGWgP4tIWivZeZTju5pYvMPXycWcZ Q/A68muWLTNSk6YqIAFYSQJEN3l37Q3lgMzCKz7uJCkUkwsYZ8CzhPVe7ZGMzNoQ qDOJy7omTiUD9cTk1Sr3tq8ePAetTwOkxQnJwPgBzlh+bgvBEfQctZ0TLlc+Dj/6 WAp7eP4vpLBcIg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:46 2025 by rpki-client