This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json) Hash identifier: E7xIsErXnWe5rmeZyUPtqGaJV3EVLnA1asgvHDtLTQI= Subject key identifier: 3B:0C:65:B4:1C:60:13:5A:BC:9E:80:4D:6C:89:61:6D:C4:C4:F2:DD Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Certificate serial: 019AF465AD10EA8D1E9309A9A068A816C6D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft Manifest number: 16D2 Signing time: Sat 06 Dec 2025 16:01:35 +0000 Manifest this update: Sat 06 Dec 2025 16:01:35 +0000 Manifest next update: Sun 07 Dec 2025 16:01:35 +0000 Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=) 2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: ujkJyQB2b4kcLO2UGBnd4B7kfnCCpUgXW+RAL3qlkmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:ad:10:ea:8d:1e:93:09:a9:a0:68:a8:16:c6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Validity Not Before: Dec 6 16:01:35 2025 GMT Not After : Dec 7 16:01:35 2025 GMT Subject: CN=3b0c65b41c60135abc9e804d6c89616dc4c4f2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:e4:5a:2c:a9:06:84:ce:30:3b:8d:d0:b4: 39:15:d8:54:b9:fd:5d:1e:aa:c4:cc:9c:ef:2d:57: 45:78:26:12:ed:2a:7c:b0:0b:10:89:e1:48:cb:13: 3f:15:f4:5d:f4:52:7c:8d:10:94:6e:fc:0d:1e:bd: 43:85:73:e2:a5:fa:84:8d:7d:29:2d:8d:79:d7:cd: 5b:76:9f:1a:22:8b:49:bc:b2:8f:16:80:99:9e:2e: 5e:b6:e0:5c:0a:b4:eb:f4:9d:7c:d5:8f:be:95:51: 4f:bf:39:0b:13:e9:e8:a7:eb:d9:ab:63:fd:e2:ee: a5:b0:b0:9b:51:03:b3:b1:8f:ad:9e:a1:4b:bf:e9: e5:50:49:77:f6:2c:ce:0e:da:a7:37:70:8d:60:1b: b6:b7:7e:76:63:8d:dc:59:af:80:df:f7:02:ef:94: b0:e5:ad:62:3f:0d:9b:fc:8d:c2:70:e9:a1:bf:01: ba:2b:2b:1c:43:06:a5:f9:0d:be:b9:c4:42:85:d1: d2:55:0a:36:29:ee:4d:ab:0c:cf:58:87:db:5a:d5: c7:3f:72:9d:33:46:c0:09:af:b7:0f:1a:b2:54:31: 7c:da:b2:8d:09:41:ed:f1:64:83:fc:98:ef:fd:f4: 4f:64:56:c7:e4:89:26:00:3a:24:83:20:09:47:48: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:65:B4:1C:60:13:5A:BC:9E:80:4D:6C:89:61:6D:C4:C4:F2:DD X509v3 Authority Key Identifier: keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:9d:a6:06:c5:33:ca:30:99:53:23:bb:68:52:27:6e:81: 51:f8:13:5f:fb:c8:cc:d1:7f:45:15:ca:90:21:cc:e9:5b:ed: ef:6e:9b:e0:c1:96:d0:12:eb:9e:2c:c5:d7:cb:e6:65:3f:22: 0b:90:25:02:04:a2:1f:ba:36:b3:7b:2c:c3:de:7a:d9:d0:ec: 31:1f:a1:b5:c2:bd:2b:d6:38:63:91:17:51:15:c7:a3:74:ea: 20:23:4b:9e:1a:fd:c8:0d:2d:0b:bf:77:d5:bf:01:88:e7:1d: cc:5b:f2:11:e2:35:4d:b0:11:b4:b7:6a:bc:9c:8b:f2:ca:d5: 86:48:c1:97:c0:96:98:7a:fc:47:66:c2:79:52:6d:ff:ce:8d: 1e:7e:63:1e:d2:ff:ae:b3:01:ad:88:af:f2:f1:d1:c7:ec:e7: cd:d2:3f:84:1c:e8:76:ad:01:8d:a9:9f:49:cb:53:6f:69:dd: f4:43:b6:54:3a:74:2c:c0:78:06:08:18:97:44:22:4f:fd:e0: f8:8b:00:f4:fa:3c:b6:ea:ee:83:10:81:f4:7c:aa:23:c9:2a: 60:a4:f7:53:d8:52:5a:af:f4:aa:00:14:8f:50:74:fd:87:9e: 49:96:0f:99:9b:0f:91:73:00:2d:bc:d4:b1:0c:8c:c6:35:c5: 98:0c:7c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Za0Q6o0ekwmpoGioFsbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzc4NDU5OTU3NzZjZjZmMmEwODM3ZjdhZDRjMWE5MWJj OTdkODIwHhcNMjUxMjA2MTYwMTM1WhcNMjUxMjA3MTYwMTM1WjAzMTEwLwYDVQQD EygzYjBjNjViNDFjNjAxMzVhYmM5ZTgwNGQ2Yzg5NjE2ZGM0YzRmMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gbkWiypBoTOMDuN0LQ5FdhUuf1d HqrEzJzvLVdFeCYS7Sp8sAsQieFIyxM/FfRd9FJ8jRCUbvwNHr1DhXPipfqEjX0p LY15181bdp8aIotJvLKPFoCZni5etuBcCrTr9J181Y++lVFPvzkLE+nop+vZq2P9 4u6lsLCbUQOzsY+tnqFLv+nlUEl39izODtqnN3CNYBu2t352Y43cWa+A3/cC75Sw 5a1iPw2b/I3CcOmhvwG6KyscQwal+Q2+ucRChdHSVQo2Ke5NqwzPWIfbWtXHP3Kd M0bACa+3DxqyVDF82rKNCUHt8WSD/Jjv/fRPZFbH5IkmADokgyAJR0ha2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsMZbQcYBNavJ6ATWyJYW3ExPLdMB8GA1UdIwQY MBaAFHJ3hFmVd2z28qCDf3rUwakbyX2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgt ZWVlNmJhMTgyOWI0LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgtZWVlNmJhMTgyOWI0 LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+edpgbF M8owmVMju2hSJ26BUfgTX/vIzNF/RRXKkCHM6Vvt726b4MGW0BLrnizF18vmZT8i C5AlAgSiH7o2s3ssw9562dDsMR+htcK9K9Y4Y5EXURXHo3TqICNLnhr9yA0tC793 1b8BiOcdzFvyEeI1TbARtLdqvJyL8srVhkjBl8CWmHr8R2bCeVJt/86NHn5jHtL/ rrMBrYiv8vHRx+znzdI/hBzodq0BjamfSctTb2nd9EO2VDp0LMB4BggYl0QiT/3g +IsA9Po8turugxCB9HyqI8kqYKT3U9hSWq/0qgAUj1B0/YeeSZYPmZsPkXMALbzU sQyMxjXFmAx8dw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:57 2025 by rpki-client