This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json) Hash identifier: V9nmW7oP5MgEZD0E7fSb2HOWQH2yIv0rBXdyDCxMfbU= Subject key identifier: 5C:72:AB:22:9B:B3:D0:9E:8E:B8:CE:45:C4:9C:82:3D:AD:A7:71:AB Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Certificate serial: 019B3532E61DE4358955C8E9881646EE0ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 06:01:26 +0000 Manifest this update: Fri 19 Dec 2025 06:01:26 +0000 Manifest next update: Sat 20 Dec 2025 06:01:26 +0000 Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: IvbzYUmq/6aMqEuyw/bZ4EfakK3U9O5wASr4iLnyjVQ=) 2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e6:1d:e4:35:89:55:c8:e9:88:16:46:ee:0e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Validity Not Before: Dec 19 06:01:26 2025 GMT Not After : Dec 20 06:01:26 2025 GMT Subject: CN=5c72ab229bb3d09e8eb8ce45c49c823dada771ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:36:3b:cf:27:39:ad:46:55:fe:5e:37:dc: 79:8a:b3:93:df:3e:2b:c7:d0:d1:f7:0b:4e:27:a8: 01:63:94:01:8d:a8:80:4a:25:66:3a:70:6e:b1:5b: 2d:36:2b:7e:64:1d:0f:95:1b:6f:71:ee:8f:dc:df: ac:79:d2:3d:b1:62:0d:f3:46:56:3c:6c:df:08:7f: e3:32:12:a3:c1:f2:b5:7c:34:ff:a8:dc:9b:39:ee: 96:d3:a8:20:68:d2:a8:b5:82:e7:5f:0f:6b:e9:a2: 60:0f:3d:96:99:6a:2d:88:03:ea:46:73:3c:a1:4d: ff:51:f2:4a:2d:c6:f6:10:58:6a:b3:fc:8c:70:74: d5:0f:3f:fb:9b:14:f0:bf:5d:23:7c:1d:96:6a:84: ad:b8:9e:18:6e:4b:27:a1:d9:4f:e1:06:b7:b0:d2: c1:2a:52:43:67:0d:66:ba:45:b5:fe:05:ea:ef:5a: 48:6d:5b:55:fc:21:2e:27:5a:30:18:88:fd:ce:d4: 60:d5:ac:3b:21:bb:67:a6:46:c8:51:8f:77:e7:a0: eb:04:15:e4:ea:39:10:a2:7b:73:72:c6:f5:09:6f: 9f:55:aa:f1:ec:ad:ca:62:5f:ae:b8:c0:23:1f:56: 24:3e:72:21:74:0d:df:95:25:26:97:37:14:59:dd: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:AB:22:9B:B3:D0:9E:8E:B8:CE:45:C4:9C:82:3D:AD:A7:71:AB X509v3 Authority Key Identifier: keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2d:25:64:c7:42:50:5a:5b:03:6d:2c:d0:12:0f:94:04:2f: d0:18:a5:a6:ed:51:25:bc:ce:a2:d4:70:b5:d8:7f:90:a7:f7: 04:f1:36:90:c6:fb:10:aa:8d:64:c4:57:ef:f8:f8:70:ef:1a: 00:ab:13:05:66:6d:5e:a7:26:20:f1:a9:d2:fc:19:25:d4:f1: d5:fa:43:60:66:04:29:b3:18:f6:7d:26:c6:4e:89:59:bf:f9: 12:3f:f9:6e:89:6f:b5:d2:72:be:d1:9a:af:91:35:fb:a1:ee: 2f:cf:d9:17:91:a4:fe:73:87:73:5a:02:ac:86:40:21:3e:bb: e4:86:59:e4:2a:b2:e2:2c:24:f1:82:b1:99:d9:35:d4:73:f8: fe:89:b4:17:cd:b5:a6:b2:97:ba:9c:be:e9:cb:24:f3:2a:02: 59:8c:e1:0f:3a:a1:5a:f0:f9:fc:15:2b:6d:75:0b:1b:cc:3d: 78:35:3f:a2:ec:75:89:a8:75:0a:53:e5:8b:60:30:1f:65:1b: 5f:19:17:56:78:11:29:db:e6:0f:e9:1d:6f:b6:10:6c:20:69: d6:f0:6e:1e:ba:17:d0:11:0a:6f:8e:af:96:59:9e:a0:cb:e6: 71:b0:6e:49:23:bc:9d:bc:94:32:d8:1b:ad:fd:3d:dc:2f:32: ae:4d:9f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuYd5DWJVcjpiBZG7g7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm MjI3NmQwHhcNMjUxMjE5MDYwMTI2WhcNMjUxMjIwMDYwMTI2WjAzMTEwLwYDVQQD Eyg1YzcyYWIyMjliYjNkMDllOGViOGNlNDVjNDljODIzZGFkYTc3MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBg2O88nOa1GVf5eN9x5irOT3z4r x9DR9wtOJ6gBY5QBjaiASiVmOnBusVstNit+ZB0PlRtvce6P3N+sedI9sWIN80ZW PGzfCH/jMhKjwfK1fDT/qNybOe6W06ggaNKotYLnXw9r6aJgDz2WmWotiAPqRnM8 oU3/UfJKLcb2EFhqs/yMcHTVDz/7mxTwv10jfB2WaoStuJ4YbksnodlP4Qa3sNLB KlJDZw1mukW1/gXq71pIbVtV/CEuJ1owGIj9ztRg1aw7IbtnpkbIUY9356DrBBXk 6jkQontzcsb1CW+fVarx7K3KYl+uuMAjH1YkPnIhdA3flSUmlzcUWd0weQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxyqyKbs9CejrjORcScgj2tp3GrMB8GA1UdIwQY MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2 LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC0lZMdC UFpbA20s0BIPlAQv0Bilpu1RJbzOotRwtdh/kKf3BPE2kMb7EKqNZMRX7/j4cO8a AKsTBWZtXqcmIPGp0vwZJdTx1fpDYGYEKbMY9n0mxk6JWb/5Ej/5bolvtdJyvtGa r5E1+6HuL8/ZF5Gk/nOHc1oCrIZAIT675IZZ5Cqy4iwk8YKxmdk11HP4/om0F821 prKXupy+6csk8yoCWYzhDzqhWvD5/BUrbXULG8w9eDU/oux1iah1ClPli2AwH2Ub XxkXVngRKdvmD+kdb7YQbCBp1vBuHroX0BEKb46vllmeoMvmcbBuSSO8nbyUMtgb rf093C8yrk2f3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 13:30:07 2025 by rpki-client