This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json) Hash identifier: wwUlCaVQ6AKfaD0Aos1HBKtBy24WyXA4PBlctZ/ICFo= Subject key identifier: B6:22:67:59:EF:DE:8F:E1:0B:5F:26:6E:A1:42:73:1A:B7:EE:9B:64 Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169 Certificate serial: 019AF31C301381AF26707FC2DE0E0E3D4AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: xL5ML2jEq/pisl8yQ5NaXZSi/zDcNO+EIH/EEbNfrZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:30:13:81:af:26:70:7f:c2:de:0e:0e:3d:4a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169 Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=b6226759efde8fe10b5f266ea142731ab7ee9b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:60:3e:b2:cf:02:c4:ae:78:fa:5b:09:28: 70:60:3a:8b:5c:64:a0:56:28:0e:6c:e3:1d:b3:06: 82:61:62:48:87:44:f8:70:df:f2:7c:7b:24:c7:35: 0d:20:23:46:c9:13:b3:fa:65:f5:ff:6a:14:cc:d9: 2d:70:c0:13:4e:77:ad:45:18:cd:cf:74:f5:69:56: 5f:42:b1:47:79:23:5c:a8:2e:3a:a9:74:66:89:4e: 0c:05:b4:03:e5:83:07:5c:63:ae:c7:89:a9:1a:5e: a4:be:72:ee:c1:3b:48:04:01:88:6a:a6:b6:dd:9a: 7a:dc:4a:11:b1:e2:0a:9e:75:4e:f9:28:2a:6d:63: 29:6c:23:9b:c1:82:f0:40:cb:f4:e7:04:0d:45:07: ac:54:43:64:1a:aa:a6:17:34:28:ed:f7:a2:0d:17: 89:f8:b5:88:92:52:83:8d:36:f6:ad:b4:88:ce:9d: 60:2f:b2:4c:0b:f5:45:b3:29:63:3c:20:68:c2:80: 81:43:16:4f:0f:e5:07:60:04:91:20:5e:cd:d0:33: f2:4a:b0:9f:57:ba:ed:c2:29:69:a0:7d:5c:fe:b4: 85:71:8d:68:26:f8:78:58:f4:c5:ff:2e:f5:50:20: f3:aa:55:93:d5:7d:7b:34:37:b5:20:51:5e:01:25: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:67:59:EF:DE:8F:E1:0B:5F:26:6E:A1:42:73:1A:B7:EE:9B:64 X509v3 Authority Key Identifier: keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2f:62:24:1b:e4:f1:48:3c:21:16:fc:1b:0a:3e:ad:72:6a: 4d:94:19:aa:66:5c:8a:f2:26:10:2c:4c:6d:b1:0a:f3:96:bf: 5d:89:b8:11:49:d4:29:bb:44:90:b7:08:40:fb:a6:fe:7d:42: 2c:88:5c:3e:72:46:9b:a3:c0:c5:ae:61:d9:0e:4b:8a:9e:06: a4:42:22:65:fe:5e:0e:0a:1e:c7:29:6a:4c:a2:c2:b1:35:37: 05:84:77:85:25:52:61:77:8c:9b:56:ef:e4:ce:5f:35:b9:3c: 6b:a7:90:e7:c5:64:22:91:22:92:b3:c6:46:ff:c4:93:67:f4: 9c:b2:da:5e:d3:ae:29:08:e0:35:9a:bd:2d:db:38:ee:95:d2: 06:a9:d8:61:99:28:d5:9b:2f:eb:b4:0a:d8:c0:b5:06:d7:45: f8:48:50:48:14:1b:94:29:2d:e9:e8:67:6e:a8:65:07:53:bf: 84:ac:36:0d:13:39:f5:b4:78:60:93:ee:db:05:47:56:ce:db: 8d:e1:71:50:67:b7:0c:18:21:a3:8d:b0:72:cb:39:0a:46:3a: 80:fa:bc:e6:2c:9c:0a:68:04:45:7f:81:44:99:5c:a3:2b:55: 57:51:0b:6b:2b:68:ed:34:ab:95:07:61:75:70:11:c1:c7:b3: b9:a8:bc:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDATga8mcH/C3g4OPUqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzg3M2Y4OWMyYTk4NTMyN2VhNzk5NjI2NzQyM2E3NzUx YzYxNjkwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EyhiNjIyNjc1OWVmZGU4ZmUxMGI1ZjI2NmVhMTQyNzMxYWI3ZWU5YjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSpgPrLPAsSuePpbCShwYDqLXGSg VigObOMdswaCYWJIh0T4cN/yfHskxzUNICNGyROz+mX1/2oUzNktcMATTnetRRjN z3T1aVZfQrFHeSNcqC46qXRmiU4MBbQD5YMHXGOux4mpGl6kvnLuwTtIBAGIaqa2 3Zp63EoRseIKnnVO+SgqbWMpbCObwYLwQMv05wQNRQesVENkGqqmFzQo7feiDReJ +LWIklKDjTb2rbSIzp1gL7JMC/VFsyljPCBowoCBQxZPD+UHYASRIF7N0DPySrCf V7rtwilpoH1c/rSFcY1oJvh4WPTF/y71UCDzqlWT1X17NDe1IFFeASWD+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYiZ1nv3o/hC18mbqFCcxq37ptkMB8GA1UdIwQY MBaAFHt4c/icKphTJ+p5liZ0I6d1HGFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82MzM0YWUtODY2MS00YjFjLTg0MzAt OWI5ZGY0NDNjODYzLzEvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82MzM0YWUtODY2MS00YjFjLTg0MzAtOWI5ZGY0NDNjODYz LzEvZTNoei1Kd3FtRk1uNm5tV0puUWpwM1VjWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuC9iJBvk 8Ug8IRb8Gwo+rXJqTZQZqmZcivImECxMbbEK85a/XYm4EUnUKbtEkLcIQPum/n1C LIhcPnJGm6PAxa5h2Q5Lip4GpEIiZf5eDgoexylqTKLCsTU3BYR3hSVSYXeMm1bv 5M5fNbk8a6eQ58VkIpEikrPGRv/Ek2f0nLLaXtOuKQjgNZq9Lds47pXSBqnYYZko 1Zsv67QK2MC1BtdF+EhQSBQblCkt6ehnbqhlB1O/hKw2DRM59bR4YJPu2wVHVs7b jeFxUGe3DBgho42wcss5CkY6gPq85iycCmgERX+BRJlcoytVV1ELayto7TSrlQdh dXARwcezuai89g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:40 2025 by rpki-client