This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json) Hash identifier: e4qeJnKnCEw5qV80nDvWfcMOF/LeUQGc9j1eisbS3aY= Subject key identifier: 5B:4C:80:AD:C3:95:BF:DA:13:75:84:B8:07:A6:EA:F2:43:92:D5:65 Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Certificate serial: 019AF5E5831166656AA1FAC1E78240E6F2C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 23:00:50 +0000 Manifest this update: Sat 06 Dec 2025 23:00:50 +0000 Manifest next update: Sun 07 Dec 2025 23:00:50 +0000 Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=) 2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: txAm+NKVX3YskleDcrxPG9dvXf9k0J0ZAijIDrIz/ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:83:11:66:65:6a:a1:fa:c1:e7:82:40:e6:f2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Validity Not Before: Dec 6 23:00:50 2025 GMT Not After : Dec 7 23:00:50 2025 GMT Subject: CN=5b4c80adc395bfda137584b807a6eaf24392d565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:57:cc:84:5b:78:30:78:f9:aa:60:10:0c: cf:0e:5a:bc:97:48:f3:e0:6b:8e:dd:ec:14:79:71: a5:bd:67:99:a7:90:bb:24:a5:c3:4a:51:fb:5c:e0: 35:af:06:65:1d:08:a7:7e:5d:bb:67:7e:18:2f:94: 4c:e2:01:72:5e:cd:cc:b4:25:54:94:a0:66:ec:e5: b6:30:07:1e:05:b2:e6:bd:bb:75:53:6f:ba:9e:4b: bd:85:b3:22:ac:9e:cd:6f:70:ff:40:91:aa:b6:f1: 51:46:31:4b:1b:62:33:60:f3:72:46:d4:8a:7a:33: d9:87:7a:b4:8d:ba:b9:d8:cb:56:c8:8c:e8:3e:53: 50:de:35:99:b2:aa:ea:77:27:5c:1e:ad:8d:2f:fd: 0f:61:76:70:10:cc:0a:19:02:63:80:3f:dd:13:f3: 77:a3:ba:38:15:f3:e2:71:08:28:ca:a9:e5:c6:e0: 89:2c:9a:5f:cd:16:0b:64:ae:49:fb:6f:27:0e:15: 0b:89:52:d5:94:11:38:16:02:08:03:f9:1d:6b:4a: ea:dd:7b:cf:01:cd:ba:d1:3e:fa:02:d5:44:14:37: b1:18:20:ec:11:bd:7a:2a:91:3f:3d:3b:6c:d2:96: fd:7a:e2:f7:5c:f8:02:37:17:db:08:8a:3d:e6:79: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:80:AD:C3:95:BF:DA:13:75:84:B8:07:A6:EA:F2:43:92:D5:65 X509v3 Authority Key Identifier: keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:35:91:f3:3a:7c:98:4a:a0:3e:3c:c5:59:b9:31:d1:2e:fe: 53:4a:7d:91:d6:2e:4e:0b:d2:1c:12:ed:45:ae:9f:5a:5e:ad: 10:ec:5f:c6:6c:ee:13:fe:fc:e7:0b:5e:c2:34:30:e7:0b:b8: 97:ef:0d:52:28:1f:d0:10:31:4d:b8:ba:0e:96:eb:fd:dc:61: f4:50:b3:10:50:d7:66:1a:38:c8:1d:7c:26:b4:09:02:f3:ce: 7f:79:60:2e:b3:bc:94:24:c2:9d:df:f1:48:2a:ab:d0:91:16: 81:54:61:56:cc:f9:fc:f3:f3:c0:41:d6:de:fb:33:c7:66:fd: 85:dd:61:a7:7b:75:56:11:7b:62:4c:c9:d5:01:52:f9:8b:b3: 76:f2:e7:5a:2a:bc:5f:e3:9a:a7:8b:31:e4:3f:1b:a2:33:38: 24:e3:3a:09:ee:98:56:f1:4b:3e:c0:a5:4f:22:59:5a:84:fa: 19:03:04:eb:f6:88:8a:90:56:1b:00:dd:7a:b4:94:4b:c8:a0: 0e:7f:6d:c3:f5:ae:85:05:79:b1:d2:55:ae:c3:b8:73:95:54: d9:63:00:61:d3:c7:4d:22:0b:d3:a4:b6:0b:af:a3:c2:c7:62: 09:c8:e6:37:77:bf:d4:aa:f9:47:0a:0c:fe:0b:b9:6f:25:d2: ba:b2:36:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15YMRZmVqofrB54JA5vLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDdjZGMyMWM3Y2IyMjQ2NzRjMGVhZmRlYzYzYTIwM2Vl ZTMxMDgwHhcNMjUxMjA2MjMwMDUwWhcNMjUxMjA3MjMwMDUwWjAzMTEwLwYDVQQD Eyg1YjRjODBhZGMzOTViZmRhMTM3NTg0YjgwN2E2ZWFmMjQzOTJkNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1XzIRbeDB4+apgEAzPDlq8l0jz 4GuO3ewUeXGlvWeZp5C7JKXDSlH7XOA1rwZlHQinfl27Z34YL5RM4gFyXs3MtCVU lKBm7OW2MAceBbLmvbt1U2+6nku9hbMirJ7Nb3D/QJGqtvFRRjFLG2IzYPNyRtSK ejPZh3q0jbq52MtWyIzoPlNQ3jWZsqrqdydcHq2NL/0PYXZwEMwKGQJjgD/dE/N3 o7o4FfPicQgoyqnlxuCJLJpfzRYLZK5J+28nDhULiVLVlBE4FgIIA/kda0rq3XvP Ac260T76AtVEFDexGCDsEb16KpE/PTts0pb9euL3XPgCNxfbCIo95nlCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtMgK3Dlb/aE3WEuAem6vJDktVlMB8GA1UdIwQY MBaAFHtHzcIcfLIkZ0wOr97GOiA+7jEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQt MDc1NTc4YzM3YWNhLzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQtMDc1NTc4YzM3YWNh LzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDWR8zp8 mEqgPjzFWbkx0S7+U0p9kdYuTgvSHBLtRa6fWl6tEOxfxmzuE/785wtewjQw5wu4 l+8NUigf0BAxTbi6Dpbr/dxh9FCzEFDXZho4yB18JrQJAvPOf3lgLrO8lCTCnd/x SCqr0JEWgVRhVsz5/PPzwEHW3vszx2b9hd1hp3t1VhF7YkzJ1QFS+YuzdvLnWiq8 X+Oap4sx5D8bojM4JOM6Ce6YVvFLPsClTyJZWoT6GQME6/aIipBWGwDderSUS8ig Dn9tw/WuhQV5sdJVrsO4c5VU2WMAYdPHTSIL06S2C6+jwsdiCcjmN3e/1Kr5RwoM /gu5byXSurI2lA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:10 2025 by rpki-client