This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json) Hash identifier: /3QxUXItdu8WYbDU0DPuP8/M7Vs9yuXSgD8saOa2Z9E= Subject key identifier: BD:27:42:08:D0:F8:AF:0C:CF:9A:A3:18:C7:CE:2D:B7:10:D7:93:D8 Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Certificate serial: 019AF509EE7FB4B82C612A1E32A127ED42C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft Manifest number: 0EEB Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=) 2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: Npx/Q5wNpoXYtPVIwkt2gmmdoaaIxUhtDOab/85/jyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ee:7f:b4:b8:2c:61:2a:1e:32:a1:27:ed:42:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=bd274208d0f8af0ccf9aa318c7ce2db710d793d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:31:af:47:c3:45:4e:44:bf:2b:8f:64:5d: 53:63:a5:cb:23:aa:14:05:d3:9b:ab:12:86:44:0e: e1:4c:67:86:a0:5b:79:b5:0c:aa:27:b1:36:51:68: 9e:48:15:3e:06:e0:6f:c2:bd:6b:94:80:3a:d6:99: 5d:b9:10:91:16:81:8e:f7:21:ba:d0:4c:cc:26:45: f1:b3:b0:a1:88:fb:51:b2:6a:eb:0f:99:1c:b6:fa: 1a:c1:e3:39:a7:03:37:73:d6:03:ea:65:81:8c:77: 27:19:95:70:f7:09:e4:13:f9:c6:d8:0e:41:27:57: 4d:64:7c:18:4c:92:4a:ea:d2:8e:61:71:ec:d5:19: 10:0d:30:8c:76:d8:4b:bd:f2:81:fd:68:91:57:3d: 6f:62:c2:d1:4b:b5:be:43:a3:aa:b2:16:1c:db:19: 15:43:df:ba:2e:a2:c6:c5:69:61:1a:e5:ae:99:4e: 15:f9:40:73:a0:1d:dc:09:12:b9:a1:2e:69:26:26: 92:e6:31:b4:f7:78:55:76:70:d5:e9:72:72:b9:db: 2f:05:36:a4:e6:42:4b:d2:cf:e1:50:79:22:ed:73: d7:cd:35:cd:01:91:64:de:75:f6:d0:44:6a:4a:a3: ea:aa:8e:14:f6:6d:a1:8f:09:cd:d9:e4:69:7f:b0: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:27:42:08:D0:F8:AF:0C:CF:9A:A3:18:C7:CE:2D:B7:10:D7:93:D8 X509v3 Authority Key Identifier: keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d5:e4:89:d0:5e:1f:7b:f9:95:b5:a3:ad:0f:fe:92:a0:17: 6d:05:2c:bc:43:de:b6:d0:0d:50:3b:91:75:be:70:5e:c6:c7: bf:01:25:56:ff:e8:04:bc:03:ba:49:4c:ff:b6:3d:25:cb:8d: 25:b3:a5:39:61:77:16:7f:dc:8d:42:0a:f7:99:a6:6b:a5:6f: 82:c0:72:ce:56:4b:52:2b:91:0e:6e:bc:d4:ca:3c:75:48:30: 1d:ad:2d:cf:90:9d:42:54:08:b2:48:92:c0:ff:0f:ea:d8:e6: a4:af:86:de:29:b1:08:c1:82:46:ad:58:75:c7:68:38:5f:90: f8:a3:4d:69:a8:fa:76:6f:31:0d:0a:7f:86:d4:57:60:2b:de: 20:90:ea:af:0e:9a:3c:72:60:38:3b:6c:95:b8:37:a9:be:d1: 47:fa:9b:6d:23:9b:12:61:93:df:a6:0c:da:5e:21:42:38:ae: 19:00:19:ce:65:cf:15:1a:bd:85:ae:2f:f3:9f:a3:62:21:e9: 97:58:6c:5a:15:44:8a:67:a2:71:e0:a9:d2:dc:ad:81:a4:48: 86:23:33:99:b0:bb:f0:52:9e:48:0c:7b:4a:42:b4:2e:ed:0d: cc:f5:e0:c0:3e:e7:8e:d7:f3:83:5c:4c:b1:5d:32:93:ee:71: 28:bf:53:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ce5/tLgsYSoeMqEn7ULIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWU4MzYxNmY1MWYwMGIxZTU1YzBjNjE3YjNhNWYwNGFi NzQxYTMwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD EyhiZDI3NDIwOGQwZjhhZjBjY2Y5YWEzMThjN2NlMmRiNzEwZDc5M2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDMxr0fDRU5EvyuPZF1TY6XLI6oU BdObqxKGRA7hTGeGoFt5tQyqJ7E2UWieSBU+BuBvwr1rlIA61plduRCRFoGO9yG6 0EzMJkXxs7ChiPtRsmrrD5kctvoaweM5pwM3c9YD6mWBjHcnGZVw9wnkE/nG2A5B J1dNZHwYTJJK6tKOYXHs1RkQDTCMdthLvfKB/WiRVz1vYsLRS7W+Q6OqshYc2xkV Q9+6LqLGxWlhGuWumU4V+UBzoB3cCRK5oS5pJiaS5jG093hVdnDV6XJyudsvBTak 5kJL0s/hUHki7XPXzTXNAZFk3nX20ERqSqPqqo4U9m2hjwnN2eRpf7BCywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0nQgjQ+K8Mz5qjGMfOLbcQ15PYMB8GA1UdIwQY MBaAFBOeg2FvUfALHlXAxhezpfBKt0GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTIt Njc4MmUyZGFlZjc0LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTItNjc4MmUyZGFlZjc0 LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNXkidBe H3v5lbWjrQ/+kqAXbQUsvEPettANUDuRdb5wXsbHvwElVv/oBLwDuklM/7Y9JcuN JbOlOWF3Fn/cjUIK95mma6VvgsByzlZLUiuRDm681Mo8dUgwHa0tz5CdQlQIskiS wP8P6tjmpK+G3imxCMGCRq1YdcdoOF+Q+KNNaaj6dm8xDQp/htRXYCveIJDqrw6a PHJgODtslbg3qb7RR/qbbSObEmGT36YM2l4hQjiuGQAZzmXPFRq9ha4v85+jYiHp l1hsWhVEimeiceCp0tytgaRIhiMzmbC78FKeSAx7SkK0Lu0NzPXgwD7njtfzg1xM sV0yk+5xKL9ThQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:42 2025 by rpki-client