This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json) Hash identifier: WpywgBCR2+VDtyrQ/MQTWqQCoBUZBzGVykL0FNrLw2s= Subject key identifier: 6C:12:50:47:3A:FB:9E:8F:5B:92:1D:7A:C5:E0:C6:CB:9C:4E:70:BD Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Certificate serial: 019AF49BE4F18D6D5BB6D95229A9200902EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft Manifest number: 12E3 Signing time: Sat 06 Dec 2025 17:00:48 +0000 Manifest this update: Sat 06 Dec 2025 17:00:48 +0000 Manifest next update: Sun 07 Dec 2025 17:00:48 +0000 Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=) 2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: my4Ecdzmiq1K1CIrsohnTfyXXzTlQh8UcxSAwWHB/f0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e4:f1:8d:6d:5b:b6:d9:52:29:a9:20:09:02:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Validity Not Before: Dec 6 17:00:48 2025 GMT Not After : Dec 7 17:00:48 2025 GMT Subject: CN=6c1250473afb9e8f5b921d7ac5e0c6cb9c4e70bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:42:86:89:57:0a:ba:61:fa:d8:12:c4:67: 47:a5:c1:ae:6f:2d:09:3d:68:8d:98:eb:3c:46:87: 15:ef:d1:d6:f0:66:bb:ca:6a:7d:1e:b4:77:eb:5f: 8e:9c:0b:c9:d3:51:4d:3f:32:71:7e:b3:31:da:c3: 27:d5:79:8e:96:cd:d5:91:af:18:d4:4b:ac:26:09: a4:a0:a9:1a:1f:44:ca:0e:63:20:fb:a9:2d:f5:f3: 83:f6:b0:78:86:5c:6a:55:fb:7b:31:88:ca:b7:48: 40:90:86:e0:7d:58:e7:e0:50:ae:07:10:c2:c5:b5: 2e:3e:f4:c8:2e:77:61:ad:1d:c1:d4:94:00:0a:d0: 90:de:bd:a3:ea:e8:7b:4b:65:3c:67:bd:e5:2c:52: c8:76:34:b1:97:6d:07:d6:7f:cb:0f:b2:9d:f0:f5: 80:22:1c:83:92:e7:f3:e3:4f:38:d2:01:02:e0:5c: 1c:13:45:c7:5c:fb:a9:60:6f:c5:7c:59:ad:43:60: 3a:f9:a1:6e:a4:75:af:8a:90:73:83:34:73:95:93: 3d:24:18:d0:f8:35:5d:e2:9e:53:e0:1c:3d:03:07: e4:67:8c:d1:94:04:c6:c7:fd:2a:07:20:78:61:cc: 01:4c:d9:a7:30:9f:fc:d3:76:5b:fb:91:fa:a8:46: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:50:47:3A:FB:9E:8F:5B:92:1D:7A:C5:E0:C6:CB:9C:4E:70:BD X509v3 Authority Key Identifier: keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:81:6b:2c:6b:c9:57:2f:9a:65:eb:b8:48:31:66:56:a1:cc: d9:1d:d0:da:c7:18:c0:8e:ba:80:de:b8:07:68:eb:da:5b:b0: 41:ac:f8:f3:20:e7:91:c9:34:46:6c:04:42:5a:fc:c1:44:1c: 4e:11:66:25:67:ee:da:c8:0d:31:98:9e:70:e5:a1:d9:8c:fe: f3:ce:4d:4f:47:80:a7:98:56:47:9b:68:c4:06:f2:ee:fc:4d: 18:46:95:5c:72:6a:e4:90:a9:d9:02:64:3e:f0:66:48:4f:a3: 39:50:6b:61:ae:ab:38:f6:5d:91:69:27:d2:5a:1e:aa:a7:b5: 0b:8b:cf:e2:ce:fc:1c:27:1f:d1:e5:82:e1:a8:f3:c1:8c:54: af:ee:de:6d:57:2c:33:8c:54:3f:98:9d:06:ea:cd:29:80:f8: 70:0e:e8:45:ad:c7:42:0b:a8:d5:75:af:85:42:7e:d3:44:a7: 23:b9:cb:fb:14:5f:e5:c5:f1:93:ee:b1:1f:24:9a:f6:58:70: 7c:23:65:7d:fb:b4:48:78:ed:c4:3f:0b:40:b6:df:25:1d:22: 97:7b:d9:54:a8:bf:76:94:aa:4e:29:41:f8:23:39:35:ea:06: 2a:5c:06:d8:15:da:40:f0:3c:fa:04:7d:5b:b2:00:c6:dc:9e: 9f:5f:69:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+TxjW1bttlSKakgCQLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyN2U5ZjlkNWZkNDVkYTAxMDY5NWNjNDIxMmFmN2U2N2I3 YjM0OGYwHhcNMjUxMjA2MTcwMDQ4WhcNMjUxMjA3MTcwMDQ4WjAzMTEwLwYDVQQD Eyg2YzEyNTA0NzNhZmI5ZThmNWI5MjFkN2FjNWUwYzZjYjljNGU3MGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5NCholXCrph+tgSxGdHpcGuby0J PWiNmOs8RocV79HW8Ga7ymp9HrR361+OnAvJ01FNPzJxfrMx2sMn1XmOls3Vka8Y 1EusJgmkoKkaH0TKDmMg+6kt9fOD9rB4hlxqVft7MYjKt0hAkIbgfVjn4FCuBxDC xbUuPvTILndhrR3B1JQACtCQ3r2j6uh7S2U8Z73lLFLIdjSxl20H1n/LD7Kd8PWA IhyDkufz40840gEC4FwcE0XHXPupYG/FfFmtQ2A6+aFupHWvipBzgzRzlZM9JBjQ +DVd4p5T4Bw9AwfkZ4zRlATGx/0qByB4YcwBTNmnMJ/803Zb+5H6qEZVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwSUEc6+56PW5IdesXgxsucTnC9MB8GA1UdIwQY MBaAFBJ+n51f1F2gEGlcxCEq9+Z7ezSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzIt MTVhOWYyMWNhYTg1LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzItMTVhOWYyMWNhYTg1 LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoFrLGvJ Vy+aZeu4SDFmVqHM2R3Q2scYwI66gN64B2jr2luwQaz48yDnkck0RmwEQlr8wUQc ThFmJWfu2sgNMZiecOWh2Yz+885NT0eAp5hWR5toxAby7vxNGEaVXHJq5JCp2QJk PvBmSE+jOVBrYa6rOPZdkWkn0loeqqe1C4vP4s78HCcf0eWC4ajzwYxUr+7ebVcs M4xUP5idBurNKYD4cA7oRa3HQguo1XWvhUJ+00SnI7nL+xRf5cXxk+6xHySa9lhw fCNlffu0SHjtxD8LQLbfJR0il3vZVKi/dpSqTilB+CM5NeoGKlwG2BXaQPA8+gR9 W7IAxtyen19pVA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:12 2025 by rpki-client