This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json) Hash identifier: qUKfg0Ezus+oe4wxMwfX87+mshIjr03qOQD1NEvVwKU= Subject key identifier: 97:E2:FE:72:47:A7:D1:B3:B7:D7:30:0A:DD:9E:D3:DB:A6:68:15:E5 Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Certificate serial: 019AF389FE8BF3339E1EB4628D08A1C0F896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: bEyHjry+nAGrfiIIZwIgR0uWykel15Gr4gYwTPUxB84=) 2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fe:8b:f3:33:9e:1e:b4:62:8d:08:a1:c0:f8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=97e2fe7247a7d1b3b7d7300add9ed3dba66815e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:f0:cc:22:9a:b0:2d:d6:70:24:d7:ed:b5: 68:88:9f:d6:9b:ac:b0:1c:dc:fe:03:e1:34:03:06: 52:5f:05:dc:82:52:b0:1c:cc:d3:48:6d:26:4e:37: 51:6d:46:23:c4:af:a3:33:1b:ac:97:dd:d7:5b:54: 80:10:f9:35:d6:a2:d1:d9:0f:e7:ec:6b:7c:3e:b9: 10:0b:35:3b:2c:97:b2:f4:17:c9:b0:d5:81:06:cf: 38:ff:91:f7:d2:99:43:05:8a:ab:40:85:dd:69:29: f4:e9:fb:e0:be:ce:8f:50:82:7f:2e:68:93:79:ac: 08:a5:1d:8d:17:ee:3d:68:ec:5f:f8:9d:34:6e:0e: 43:91:d6:28:a4:18:c2:24:13:2b:29:9c:bc:27:4e: 07:f5:00:47:cc:98:23:b8:69:20:b5:1f:9d:94:f6: 22:eb:8f:ab:c3:3e:21:41:c0:43:41:d9:c5:36:ce: a4:2b:4c:54:d3:a6:e9:66:8f:47:83:1b:65:9a:b0: 04:41:51:46:90:28:b2:72:bc:7a:4c:1d:1c:79:c3: 37:3a:fc:f6:ab:ac:ad:c8:3c:55:cd:bb:b2:28:b1: df:71:9d:c0:68:a6:90:4d:eb:ea:f9:15:5a:c6:18: 0c:16:4e:71:69:a8:22:88:5c:dc:09:ec:73:7b:9a: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E2:FE:72:47:A7:D1:B3:B7:D7:30:0A:DD:9E:D3:DB:A6:68:15:E5 X509v3 Authority Key Identifier: keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:28:9f:e5:27:42:ab:98:bd:ac:7e:3d:86:34:3f:9b:d6: 87:72:21:30:97:aa:3c:0e:dd:7b:b2:a5:ba:1d:a8:07:3d:2e: 01:f6:0f:6a:5e:cd:a3:f0:3d:1f:35:cf:b6:e3:10:fe:49:58: 31:b9:0d:aa:dc:85:75:d0:26:e2:6f:cf:52:f5:1e:43:51:49: 6b:c4:1d:00:25:3d:4b:1d:1a:0f:7f:15:ef:6f:0f:96:a9:be: e8:11:46:9a:0f:00:8e:13:bd:99:92:6c:fd:3b:2a:71:07:c8: e2:08:91:93:fa:8c:53:e5:82:72:e4:75:7d:5d:e0:d1:80:52: 50:8b:87:dc:1a:ba:64:6a:23:92:21:8f:1b:a4:65:56:ce:dd: c7:61:1c:0e:44:4c:18:86:fe:94:12:e4:17:a8:c5:be:e6:af: c5:ac:2a:89:a2:2c:2c:a5:52:e4:b4:61:3a:72:ce:cd:36:fb: 63:32:24:74:0e:99:0a:7c:a9:4e:87:eb:f0:6e:b8:0a:e8:4b: 6a:dc:75:d8:7a:fc:50:a0:e2:98:48:75:06:49:dd:6b:74:3c: c3:6d:36:8d:1e:73:a9:93:f8:a3:3d:6a:76:2d:96:b8:ea:fa: bf:d3:28:32:27:a1:5b:50:6e:ba:1e:87:ee:56:a3:2e:70:25: ce:c3:f4:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzif6L8zOeHrRijQihwPiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm MjI3NmQwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD Eyg5N2UyZmU3MjQ3YTdkMWIzYjdkNzMwMGFkZDllZDNkYmE2NjgxNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yTwzCKasC3WcCTX7bVoiJ/Wm6yw HNz+A+E0AwZSXwXcglKwHMzTSG0mTjdRbUYjxK+jMxusl93XW1SAEPk11qLR2Q/n 7Gt8PrkQCzU7LJey9BfJsNWBBs84/5H30plDBYqrQIXdaSn06fvgvs6PUIJ/LmiT eawIpR2NF+49aOxf+J00bg5DkdYopBjCJBMrKZy8J04H9QBHzJgjuGkgtR+dlPYi 64+rwz4hQcBDQdnFNs6kK0xU06bpZo9HgxtlmrAEQVFGkCiycrx6TB0cecM3Ovz2 q6ytyDxVzbuyKLHfcZ3AaKaQTevq+RVaxhgMFk5xaagiiFzcCexze5qzhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfi/nJHp9Gzt9cwCt2e09umaBXlMB8GA1UdIwQY MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2 LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemUon+Un QquYvax+PYY0P5vWh3IhMJeqPA7de7Kluh2oBz0uAfYPal7No/A9HzXPtuMQ/klY MbkNqtyFddAm4m/PUvUeQ1FJa8QdACU9Sx0aD38V728Plqm+6BFGmg8AjhO9mZJs /TsqcQfI4giRk/qMU+WCcuR1fV3g0YBSUIuH3Bq6ZGojkiGPG6RlVs7dx2EcDkRM GIb+lBLkF6jFvuavxawqiaIsLKVS5LRhOnLOzTb7YzIkdA6ZCnypTofr8G64CuhL atx12Hr8UKDimEh1Bknda3Q8w202jR5zqZP4oz1qdi2WuOr6v9MoMiehW1Buuh6H 7lajLnAlzsP0Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:13 2025 by rpki-client