This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json) Hash identifier: wsAT2tX9yJmmbRgp6VDPn8MGVhZAbNIjjus/VyaaeLQ= Subject key identifier: 92:A7:B2:82:21:07:86:B8:71:6D:B6:16:F0:DE:95:72:E7:BB:7D:47 Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Certificate serial: 019AF164995024FCEB076ABD9304288A14F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 02:01:33 +0000 Manifest this update: Sat 06 Dec 2025 02:01:33 +0000 Manifest next update: Sun 07 Dec 2025 02:01:33 +0000 Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: U5mQkDK89AcdaF/9fqRaywNpRdvlJ2ZqicgyIHTLqX0=) 2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:99:50:24:fc:eb:07:6a:bd:93:04:28:8a:14:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Validity Not Before: Dec 6 02:01:33 2025 GMT Not After : Dec 7 02:01:33 2025 GMT Subject: CN=92a7b282210786b8716db616f0de9572e7bb7d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:15:a9:cd:3c:84:da:4f:fe:ec:14:9f:28: a4:3c:23:6e:08:ab:6a:ea:9e:45:79:6a:8e:b2:2b: 60:0b:48:46:a6:50:f8:0a:ec:98:69:d5:be:73:a6: 51:99:be:1f:aa:b6:dc:78:76:09:7b:7b:b3:ff:09: 60:80:5b:e3:d2:6d:90:36:ec:c2:24:98:92:7f:3c: 7b:2a:06:75:f4:73:55:d7:5d:fc:6f:3f:41:31:da: 3d:e3:95:93:0c:88:25:af:ed:5a:93:2d:ea:38:da: ab:1d:42:e6:c9:dd:83:67:18:94:81:a4:db:3e:eb: c5:f2:78:27:16:b2:c4:a9:5c:73:68:e8:07:cf:93: dd:0b:1e:e5:18:6c:f3:11:33:6e:55:d9:bb:cc:d9: f4:85:28:42:8b:cd:ff:63:bc:2c:75:67:ff:93:43: 80:a9:72:30:b4:9d:78:3e:0b:ab:84:90:50:d6:17: f7:7b:3a:38:d5:4a:89:84:01:c2:9b:e8:07:fd:8f: 35:f4:32:78:2a:f6:d8:fc:b0:64:ca:61:ba:8c:33: cf:08:52:11:19:cf:de:0b:32:7c:a4:52:16:80:b2: 23:5a:18:a7:97:5d:10:b9:89:71:5e:5d:b2:69:9e: d9:04:e4:c3:d4:e1:55:55:da:5c:aa:d5:5e:67:3a: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A7:B2:82:21:07:86:B8:71:6D:B6:16:F0:DE:95:72:E7:BB:7D:47 X509v3 Authority Key Identifier: keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:96:1d:0a:ab:7f:84:3b:24:15:3e:69:82:97:61:25:c5: c3:f2:fb:a4:90:34:c4:ec:29:f7:15:27:17:ea:13:89:3d:92: c9:84:f1:cd:ec:91:ba:d7:51:c8:25:86:28:53:4a:93:da:b7: ab:65:29:8e:74:31:fc:b5:b3:f9:d9:6b:ce:17:b2:28:d4:d3: 46:25:ea:20:bc:5e:de:2d:bf:6c:90:62:ff:44:4a:62:e6:be: f4:69:c7:a6:78:04:96:28:a7:84:0e:cf:c9:96:eb:7f:a9:b8: e5:46:09:07:7b:e8:c2:95:39:16:c7:08:27:99:a3:70:cb:41: 08:58:8a:11:55:da:2b:ff:b2:fc:93:65:02:09:a1:58:e0:2e: 66:97:ec:ba:44:bf:03:4f:f8:fd:65:f5:d2:17:aa:aa:18:88: fe:a2:c1:6f:b9:5d:ab:35:b8:52:a4:47:4d:66:54:11:25:09: 43:25:e6:df:bb:fd:d7:31:03:2f:3b:1a:60:c8:a5:4e:96:7e: c4:8c:c7:0a:39:a0:83:d0:e6:4c:15:bb:d7:e8:4e:cd:0d:57: cd:8e:13:a8:4b:41:d9:d9:48:cc:ad:92:ca:36:51:d4:a2:af: 3a:42:54:5a:bf:ce:4f:e6:46:ce:9c:a9:20:dd:28:d9:f5:8c: 0e:fa:b8:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJlQJPzrB2q9kwQoihTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx ZDA5Y2EwHhcNMjUxMjA2MDIwMTMzWhcNMjUxMjA3MDIwMTMzWjAzMTEwLwYDVQQD Eyg5MmE3YjI4MjIxMDc4NmI4NzE2ZGI2MTZmMGRlOTU3MmU3YmI3ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DkVqc08hNpP/uwUnyikPCNuCKtq 6p5FeWqOsitgC0hGplD4CuyYadW+c6ZRmb4fqrbceHYJe3uz/wlggFvj0m2QNuzC JJiSfzx7KgZ19HNV1138bz9BMdo945WTDIglr+1aky3qONqrHULmyd2DZxiUgaTb PuvF8ngnFrLEqVxzaOgHz5PdCx7lGGzzETNuVdm7zNn0hShCi83/Y7wsdWf/k0OA qXIwtJ14PgurhJBQ1hf3ezo41UqJhAHCm+gH/Y819DJ4KvbY/LBkymG6jDPPCFIR Gc/eCzJ8pFIWgLIjWhinl10QuYlxXl2yaZ7ZBOTD1OFVVdpcqtVeZzpdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKnsoIhB4a4cW22FvDelXLnu31HMB8GA1UdIwQY MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeqWHQqr f4Q7JBU+aYKXYSXFw/L7pJA0xOwp9xUnF+oTiT2SyYTxzeyRutdRyCWGKFNKk9q3 q2UpjnQx/LWz+dlrzheyKNTTRiXqILxe3i2/bJBi/0RKYua+9GnHpngEliinhA7P yZbrf6m45UYJB3vowpU5FscIJ5mjcMtBCFiKEVXaK/+y/JNlAgmhWOAuZpfsukS/ A0/4/WX10heqqhiI/qLBb7ldqzW4UqRHTWZUESUJQyXm37v91zEDLzsaYMilTpZ+ xIzHCjmgg9DmTBW71+hOzQ1XzY4TqEtB2dlIzK2SyjZR1KKvOkJUWr/OT+ZGzpyp IN0o2fWMDvq40A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:52 2025 by rpki-client