This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft File: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json) Hash identifier: Qe4AIDPaHJMt6sQYSJABLkGvNhcQxHwn3xsk0R6umDE= Subject key identifier: 44:14:E6:80:9F:0B:96:69:C9:75:14:D3:A1:F6:5C:41:E9:31:81:57 Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8 Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8 Certificate serial: 019AF31B577A5DF3A0834143A532164050D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft Manifest number: 0BB2 Signing time: Sat 06 Dec 2025 10:00:46 +0000 Manifest this update: Sat 06 Dec 2025 10:00:46 +0000 Manifest next update: Sun 07 Dec 2025 10:00:46 +0000 Files and hashes: 1: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (hash: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=) 2: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: ag5Zt4jZ3/nwa7dSUwcwkMsQxpzBkkSSz9pTz+j61FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:57:7a:5d:f3:a0:83:41:43:a5:32:16:40:50:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8 Validity Not Before: Dec 6 10:00:46 2025 GMT Not After : Dec 7 10:00:46 2025 GMT Subject: CN=4414e6809f0b9669c97514d3a1f65c41e9318157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:11:cc:70:2c:0c:51:85:d4:8b:99:7c:53: b8:80:30:d3:a0:b9:43:21:88:46:37:10:d4:54:57: 3a:98:03:e7:a9:f8:d8:2d:3f:32:4e:94:02:22:14: b3:b9:8f:4e:be:84:d5:b9:74:91:8b:ed:03:8c:89: 8e:92:36:bf:06:e4:29:d5:0d:09:bb:a0:66:5d:1a: 05:ab:08:c4:ba:ba:bd:eb:be:ee:eb:cb:c1:ff:4f: 6f:a1:21:79:14:ad:ff:2e:e1:5c:93:c2:bf:6a:48: 74:02:12:92:6f:f7:f9:13:7f:21:8e:4e:8c:fb:1f: 82:c8:45:51:a4:05:9b:40:8e:c0:64:12:84:13:5e: 7e:61:14:94:d2:b1:f1:12:52:c7:89:7c:95:55:2f: 65:76:39:fa:6f:af:53:25:97:1b:15:18:f9:8c:54: 58:26:d3:94:6a:0c:69:60:37:d3:9a:da:e5:5a:b7: a2:df:64:40:7d:f8:a5:2c:90:d8:ae:ed:a1:af:1e: 5e:ce:e5:b6:0b:64:6b:f9:2d:00:64:1d:dd:42:a7: 8b:53:d6:93:03:ae:e8:46:c7:fe:06:e7:f3:cd:13: bb:b1:a9:18:5e:f7:72:a8:9f:64:e9:9e:7f:2b:98: 6c:e4:73:97:89:43:d2:21:e1:de:02:ef:b6:fe:01: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:E6:80:9F:0B:96:69:C9:75:14:D3:A1:F6:5C:41:E9:31:81:57 X509v3 Authority Key Identifier: keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ee:e9:55:98:f6:c5:87:74:1b:cc:a5:56:68:37:0c:9d:16: b1:20:0f:c7:6f:33:73:16:d4:9e:53:60:3b:8e:f1:35:b5:29: 47:24:8f:c1:7c:f0:14:c7:50:43:de:a7:4d:71:a5:56:59:e2: 72:94:94:8d:64:f1:38:8e:cd:9e:27:6c:4e:b5:4d:5f:db:1c: 35:71:26:05:a3:e2:4f:b3:53:7a:5f:29:39:df:bd:fc:59:38: d7:e6:b9:61:d7:3e:53:4c:84:5e:7c:4a:e1:91:3f:be:8e:51: 86:42:5d:23:b8:25:6b:fa:90:2f:a5:5e:fb:d6:32:01:fa:4d: e1:f8:e2:3e:eb:3d:d3:2b:6b:75:3a:fa:a8:76:43:37:d2:97: f8:68:c3:bc:b4:15:93:bf:52:53:0b:14:f6:13:50:b5:cc:96: b1:26:b4:49:5b:7f:59:ce:39:40:6a:7f:b6:b8:99:a2:25:7e: e5:c0:56:c5:70:d1:53:7b:ef:e5:dc:02:71:d0:3f:f8:a7:8b: 3a:fc:cd:52:0c:b5:c4:ad:ef:3d:a1:77:95:ff:21:76:e9:b5: 4a:b7:10:f4:c1:c7:22:24:e7:ab:84:d5:72:e3:d3:7c:14:0a: 6a:1c:de:98:30:56:77:e4:42:4c:3d:7b:b6:b1:f6:b1:1f:03: 6d:14:c5:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1d6XfOgg0FDpTIWQFDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDAxMGU0Mzk4ZGZkNmUxOWY0NWI1MTNjMjJjMWVjYTMz MzExZjgwHhcNMjUxMjA2MTAwMDQ2WhcNMjUxMjA3MTAwMDQ2WjAzMTEwLwYDVQQD Eyg0NDE0ZTY4MDlmMGI5NjY5Yzk3NTE0ZDNhMWY2NWM0MWU5MzE4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0YRzHAsDFGF1IuZfFO4gDDToLlD IYhGNxDUVFc6mAPnqfjYLT8yTpQCIhSzuY9OvoTVuXSRi+0DjImOkja/BuQp1Q0J u6BmXRoFqwjEurq9677u68vB/09voSF5FK3/LuFck8K/akh0AhKSb/f5E38hjk6M +x+CyEVRpAWbQI7AZBKEE15+YRSU0rHxElLHiXyVVS9ldjn6b69TJZcbFRj5jFRY JtOUagxpYDfTmtrlWrei32RAffilLJDYru2hrx5ezuW2C2Rr+S0AZB3dQqeLU9aT A67oRsf+BufzzRO7sakYXvdyqJ9k6Z5/K5hs5HOXiUPSIeHeAu+2/gEdawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQU5oCfC5ZpyXUU06H2XEHpMYFXMB8GA1UdIwQY MBaAFBNAEOQ5jf1uGfRbUTwiweyjMxH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgt MTYyZGYwOGIzOWU1LzEvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgtMTYyZGYwOGIzOWU1 LzEvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe7pVZj2 xYd0G8ylVmg3DJ0WsSAPx28zcxbUnlNgO47xNbUpRySPwXzwFMdQQ96nTXGlVlni cpSUjWTxOI7NnidsTrVNX9scNXEmBaPiT7NTel8pOd+9/Fk41+a5Ydc+U0yEXnxK 4ZE/vo5RhkJdI7gla/qQL6Ve+9YyAfpN4fjiPus90ytrdTr6qHZDN9KX+GjDvLQV k79SUwsU9hNQtcyWsSa0SVt/Wc45QGp/triZoiV+5cBWxXDRU3vv5dwCcdA/+KeL OvzNUgy1xK3vPaF3lf8hdum1SrcQ9MHHIiTnq4TVcuPTfBQKahzemDBWd+RCTD17 trH2sR8DbRTFrA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:54 2025 by rpki-client