This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft File: 1-enaRkroBgtbvSosU13p0RUfeZE.mft (raw, json) Hash identifier: 4OYaoO00JvKuLjvl/nFDgNz3mCN0Ru44gpPxdcvlrc0= Subject key identifier: EC:AC:4D:6F:31:FA:92:A0:FC:84:D8:0A:B8:E9:EC:E3:5C:14:5C:D3 Authority key identifier: F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 Certificate issuer: /CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991 Certificate serial: 019AF19B541D3EA7BC4BC5AE2484AA73BBFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft Manifest number: 03 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 1-enaRkroBgtbvSosU13p0RUfeZE.crl (hash: B6qDa+IwqsHgJma+2TxvLeu2NgSKj3WYuk/wsN6WT9I=) 2: bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa (hash: +u+29vjwK80vsHlbPupPL69T+chusu3cEMS40p3pEws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:54:1d:3e:a7:bc:4b:c5:ae:24:84:aa:73:bb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=ecac4d6f31fa92a0fc84d80ab8e9ece35c145cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:fa:25:bf:45:00:ec:c1:97:d8:ca:54:59: ef:27:0f:01:65:22:b8:de:15:77:6f:f7:21:3d:c6: a8:27:34:09:12:d0:e7:c3:b1:5c:f6:dc:76:22:47: b5:c8:0c:6d:c5:9e:4f:64:22:f9:2a:6f:68:04:87: 6e:ee:d6:8d:ea:cb:4a:e6:09:1f:f3:18:30:a5:11: ca:e7:d9:16:5e:f4:8d:ac:c6:54:ca:89:3f:a9:fe: 20:29:2e:b5:ba:82:05:73:f2:82:68:02:7a:5f:47: 53:dc:4e:37:de:64:28:b9:30:c8:ad:a7:13:28:ec: 38:4f:b8:1c:d9:28:41:1a:b6:e8:23:da:41:19:47: 01:52:d4:6e:8d:ee:76:85:43:61:a1:34:31:58:44: ec:62:c5:f4:c6:24:0b:a4:e5:a1:84:26:3b:a1:8a: 26:fe:2a:58:bf:fe:20:0b:64:6c:39:54:b9:72:fb: 6f:e8:c0:db:29:27:48:07:ed:ae:c3:be:a8:26:ff: 54:55:64:52:45:7b:99:e6:c7:9c:e4:24:e6:b5:66: 24:6d:e7:05:ec:f8:6c:5d:aa:51:f3:78:eb:c1:5f: 6d:57:11:c8:4c:38:5f:14:28:76:3f:22:de:d0:48: b1:21:1d:06:28:6b:bd:5f:d4:a3:f5:27:c8:da:c8: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AC:4D:6F:31:FA:92:A0:FC:84:D8:0A:B8:E9:EC:E3:5C:14:5C:D3 X509v3 Authority Key Identifier: keyid:F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:81:9e:05:ab:b7:3a:8e:de:08:9f:3e:6a:b1:27:48:40:ea: 48:90:d8:3e:03:f8:5a:f1:dd:e3:2a:51:5f:35:71:93:79:93: a1:ba:1d:79:54:e0:3b:d0:e5:d6:d0:d1:85:dc:af:35:8e:ec: f3:7b:81:7c:d9:72:9c:01:44:f5:52:20:db:29:3d:24:4b:89: de:81:e3:71:56:d0:09:97:97:7f:72:eb:95:44:89:df:fe:90: 49:07:dc:b2:74:a2:5d:9a:da:e1:53:8f:02:4e:59:94:35:01: dc:9b:b7:97:04:41:ba:cc:d2:7c:c9:07:0e:df:bc:92:f0:b3: 7b:61:1d:ca:22:ed:5d:b5:55:50:29:55:fc:93:df:07:7b:15: bb:55:e3:c1:50:a9:cb:16:c6:e6:c0:70:af:0c:23:32:8c:23: ef:0c:da:3c:a4:5a:5d:3a:29:b0:d6:70:a0:3b:f4:38:be:b1: 7f:b2:6c:41:d2:0a:50:ec:f4:49:e2:8a:4b:cb:88:2b:01:9f: 4b:c0:8c:85:ed:1b:77:91:6d:62:15:f8:d7:a9:15:de:45:a1: c4:22:52:6f:e1:e3:61:ec:77:cb:c8:91:04:5a:6f:fa:6a:a0: b6:7c:21:cd:f7:1d:ba:43:61:df:0b:bc:a1:c9:37:e0:20:60: b3:60:d2:96 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxm1QdPqe8S8WuJISqc7v9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTlkYTQ2NGFlODA2MGI1YmJkMmEyYzUzNWRlOWQxMTUx Zjc5OTEwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EyhlY2FjNGQ2ZjMxZmE5MmEwZmM4NGQ4MGFiOGU5ZWNlMzVjMTQ1Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzz6Jb9FAOzBl9jKVFnvJw8BZSK4 3hV3b/chPcaoJzQJEtDnw7Fc9tx2Ike1yAxtxZ5PZCL5Km9oBIdu7taN6stK5gkf 8xgwpRHK59kWXvSNrMZUyok/qf4gKS61uoIFc/KCaAJ6X0dT3E433mQouTDIracT KOw4T7gc2ShBGrboI9pBGUcBUtRuje52hUNhoTQxWETsYsX0xiQLpOWhhCY7oYom /ipYv/4gC2RsOVS5cvtv6MDbKSdIB+2uw76oJv9UVWRSRXuZ5sec5CTmtWYkbecF 7PhsXapR83jrwV9tVxHITDhfFCh2PyLe0EixIR0GKGu9X9Sj9SfI2sgfdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOysTW8x+pKg/ITYCrjp7ONcFFzTMB8GA1UdIwQY MBaAFPnp2kZK6AYLW70qLFNd6dEVH3mRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lbmFSa3JvQmd0YnZTb3NVMTNwMFJVZmVaRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvM2E4NjA0LTc2ZDktNGU5NS05ZDhi LWE0MjAxMDUxNDI5Ni8xLzEtZW5hUmtyb0JndGJ2U29zVTEzcDBSVWZlWkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QyLzNhODYwNC03NmQ5LTRlOTUtOWQ4Yi1hNDIwMTA1MTQy OTYvMS8xLWVuYVJrcm9CZ3RidlNvc1UxM3AwUlVmZVpFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoGe Bau3Oo7eCJ8+arEnSEDqSJDYPgP4WvHd4ypRXzVxk3mTobodeVTgO9Dl1tDRhdyv NY7s83uBfNlynAFE9VIg2yk9JEuJ3oHjcVbQCZeXf3LrlUSJ3/6QSQfcsnSiXZra 4VOPAk5ZlDUB3Ju3lwRBuszSfMkHDt+8kvCze2EdyiLtXbVVUClV/JPfB3sVu1Xj wVCpyxbG5sBwrwwjMowj7wzaPKRaXTopsNZwoDv0OL6xf7JsQdIKUOz0SeKKS8uI KwGfS8CMhe0bd5FtYhX416kV3kWhxCJSb+HjYex3y8iRBFpv+mqgtnwhzfcdukNh 3wu8ock34CBgs2DSlg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:44 2025 by rpki-client