This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft File: E8QF935QykXWfYTqFxflyYtDbt4.mft (raw, json) Hash identifier: g4yzK86OECfN9AYpVOdsDwPa6Yf4YO2Yqj+1Zi/uVxk= Subject key identifier: F0:14:B4:C6:70:DE:33:E4:9F:22:DD:CA:0E:83:D3:2D:DE:19:6E:40 Authority key identifier: 13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE Certificate issuer: /CN=13c405f77e50ca45d67d84ea1717e5c98b436ede Certificate serial: 019AF50B8ADC8292FDCC2CD38B35C2C2FF7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft Manifest number: C5 Signing time: Sat 06 Dec 2025 19:02:45 +0000 Manifest this update: Sat 06 Dec 2025 19:02:45 +0000 Manifest next update: Sun 07 Dec 2025 19:02:45 +0000 Files and hashes: 1: E8QF935QykXWfYTqFxflyYtDbt4.crl (hash: 21J3L/A84O9AX0lXQX5GHfuQ+ZaUnU3cXukyuqiuzp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:8a:dc:82:92:fd:cc:2c:d3:8b:35:c2:c2:ff:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13c405f77e50ca45d67d84ea1717e5c98b436ede Validity Not Before: Dec 6 19:02:45 2025 GMT Not After : Dec 7 19:02:45 2025 GMT Subject: CN=f014b4c670de33e49f22ddca0e83d32dde196e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:62:e8:f0:ef:88:89:45:7d:ff:06:2f:32: 90:8b:80:b2:b5:d2:ce:c0:48:7c:f5:9f:0c:fe:13: 50:4a:f4:b1:7b:83:af:79:15:f6:67:22:8d:dc:69: 04:5b:6b:a2:13:aa:75:16:86:5f:88:12:5d:e1:7b: 03:66:da:3b:af:5a:18:07:1e:29:9b:b7:56:b4:45: ce:5d:2c:68:54:69:ba:9a:b0:9a:2e:46:3c:f9:89: 6d:53:e5:8b:88:50:6c:bf:98:e9:22:ef:ca:99:89: f1:70:40:65:41:38:57:57:72:ae:c2:76:dd:54:b0: 13:4a:0e:7b:89:64:fb:af:f7:b5:3f:4a:25:64:a5: 8e:39:fc:1d:9d:f4:07:65:6c:a5:0d:0a:2b:d2:d3: e4:0a:bb:a3:eb:dd:3c:97:5c:28:89:2a:00:90:6b: 63:f1:ef:24:4a:f4:e3:40:07:9f:04:a6:a1:9a:b9: 88:06:8c:9a:aa:9d:3d:46:9a:4d:99:cc:f9:d1:c3: af:b4:65:3d:6f:7a:e8:59:1c:47:af:bc:4b:a4:11: ff:1f:91:3b:42:31:4f:cf:8d:5f:d6:43:a3:c8:8d: f6:5e:49:18:8a:a5:69:88:41:fd:fa:28:6d:d6:4e: ef:c1:f7:a7:53:a9:a9:85:c6:2c:8c:44:9b:74:1c: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:B4:C6:70:DE:33:E4:9F:22:DD:CA:0E:83:D3:2D:DE:19:6E:40 X509v3 Authority Key Identifier: keyid:13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3c:a9:c5:6b:a4:8a:76:05:a4:75:05:9a:89:51:5c:0e:05: bc:ae:2d:d0:9f:e7:01:79:e9:16:0f:73:68:5d:b1:a8:83:41: 1c:7b:6d:52:a7:b5:55:17:b1:cb:00:99:64:0b:b2:9c:ae:db: 8a:42:f2:5d:93:c1:fb:58:4d:ee:ed:4a:3c:d5:34:40:ef:f9: 8d:de:3a:fd:7c:44:d8:9f:18:b1:f9:7f:6a:24:cd:8b:c9:94: 14:8e:4e:8d:60:29:c1:0b:95:1f:76:26:e0:40:aa:31:74:22: c3:50:78:1c:48:7c:24:7f:f2:d6:96:1b:19:94:86:21:7e:0b: 2b:54:39:13:4a:f2:bd:20:33:84:f0:69:55:06:e8:3d:de:2b: 2c:99:78:d7:0c:f2:55:62:49:40:5b:2a:d9:06:cd:94:b6:44: 71:b3:a7:9c:02:37:eb:29:bd:e0:54:1b:6a:8a:f4:19:d5:36: 90:c9:35:40:a6:9d:be:16:78:ec:5f:5d:da:b3:6f:d0:55:a1: 49:83:4c:e4:7d:12:40:ca:48:16:fb:57:18:c1:8a:d5:a7:71: ea:25:95:1b:a0:71:ac:d5:b4:ba:bb:e1:a7:87:7c:24:0a:ce: c3:7a:20:b0:4e:ff:a7:a8:7d:c3:03:36:e1:64:b5:5f:74:d1: 1f:0b:38:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4rcgpL9zCzTizXCwv96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYzQwNWY3N2U1MGNhNDVkNjdkODRlYTE3MTdlNWM5OGI0 MzZlZGUwHhcNMjUxMjA2MTkwMjQ1WhcNMjUxMjA3MTkwMjQ1WjAzMTEwLwYDVQQD EyhmMDE0YjRjNjcwZGUzM2U0OWYyMmRkY2EwZTgzZDMyZGRlMTk2ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1exi6PDviIlFff8GLzKQi4CytdLO wEh89Z8M/hNQSvSxe4OveRX2ZyKN3GkEW2uiE6p1FoZfiBJd4XsDZto7r1oYBx4p m7dWtEXOXSxoVGm6mrCaLkY8+YltU+WLiFBsv5jpIu/KmYnxcEBlQThXV3Kuwnbd VLATSg57iWT7r/e1P0olZKWOOfwdnfQHZWylDQor0tPkCruj6908l1woiSoAkGtj 8e8kSvTjQAefBKahmrmIBoyaqp09RppNmcz50cOvtGU9b3roWRxHr7xLpBH/H5E7 QjFPz41f1kOjyI32XkkYiqVpiEH9+iht1k7vwfenU6mphcYsjESbdBxH5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAUtMZw3jPknyLdyg6D0y3eGW5AMB8GA1UdIwQY MBaAFBPEBfd+UMpF1n2E6hcX5cmLQ27eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRThRRjkzNVF5a1hXZllUcUZ4Zmx5WXREYnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NzRiZjMtOTgyZC00YzI2LTgwZjAt ZjBmNjYyMTE3YjQ3LzEvRThRRjkzNVF5a1hXZllUcUZ4Zmx5WXREYnQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84NzRiZjMtOTgyZC00YzI2LTgwZjAtZjBmNjYyMTE3YjQ3 LzEvRThRRjkzNVF5a1hXZllUcUZ4Zmx5WXREYnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDypxWuk inYFpHUFmolRXA4FvK4t0J/nAXnpFg9zaF2xqINBHHttUqe1VRexywCZZAuynK7b ikLyXZPB+1hN7u1KPNU0QO/5jd46/XxE2J8Ysfl/aiTNi8mUFI5OjWApwQuVH3Ym 4ECqMXQiw1B4HEh8JH/y1pYbGZSGIX4LK1Q5E0ryvSAzhPBpVQboPd4rLJl41wzy VWJJQFsq2QbNlLZEcbOnnAI36ym94FQbaor0GdU2kMk1QKadvhZ47F9d2rNv0FWh SYNM5H0SQMpIFvtXGMGK1adx6iWVG6BxrNW0urvhp4d8JArOw3ogsE7/p6h9wwM2 4WS1X3TRHws4gw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:51 2025 by rpki-client