This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json) Hash identifier: fwpIKwu+szm6ssr4uoypyrN8QcKU2EWC1lsSo7VG9/8= Subject key identifier: F4:1D:0F:46:D4:C7:64:C0:1F:A8:D3:2C:27:A8:59:B5:4A:78:9F:30 Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Certificate serial: 019AF31D52B4750922EE92A0313CB1D8BB95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft Manifest number: 0752 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=) 2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: 3eRvhSC8NlzHTPMwV2bJsa6PW5BLZ/6fb73sAaDwnAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:52:b4:75:09:22:ee:92:a0:31:3c:b1:d8:bb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=f41d0f46d4c764c01fa8d32c27a859b54a789f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:5d:7b:2d:c8:18:85:39:30:74:c9:ad:1e: 9d:32:90:c3:78:de:21:f2:69:3c:1a:0b:64:d1:89: 21:59:a6:78:d0:aa:bc:7c:73:3a:31:8f:aa:f9:f5: 6e:a2:a3:ea:5c:ad:9c:ce:21:1a:fd:5b:a9:be:50: d3:b9:e1:e9:c2:04:ca:cb:a6:87:2c:98:79:b9:2d: d8:71:8c:f5:1e:4f:65:d6:ee:e8:45:ae:ba:82:f7: 09:7d:dd:1f:e7:f3:6c:25:ba:40:2a:ad:e5:1e:85: 24:10:d9:a5:5a:47:28:99:8a:8d:28:00:9c:05:df: 3a:b6:90:ec:db:9a:72:ae:06:e5:f3:6b:83:d0:d9: 77:1f:28:06:d9:99:b6:6b:37:cc:a0:21:dd:c0:5e: 53:f4:fb:b1:01:87:eb:e0:66:66:e2:5c:e4:37:1b: 72:59:79:a5:89:94:25:ae:8f:d6:c6:74:eb:2b:c4: 08:e6:79:61:0e:75:0f:50:57:6b:24:dc:f5:44:5e: 3a:df:9e:72:72:ab:03:4a:3f:a9:d6:60:8e:f6:f9: 22:5c:f6:2e:8b:3f:c6:cd:43:a8:8c:12:4e:23:85: 94:c9:70:c3:4f:37:bb:38:b6:d8:38:68:1a:cc:d5: 29:11:cd:17:fc:4a:aa:f0:5f:14:15:35:a0:06:34: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:0F:46:D4:C7:64:C0:1F:A8:D3:2C:27:A8:59:B5:4A:78:9F:30 X509v3 Authority Key Identifier: keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:f4:ab:1c:8f:43:f0:72:87:fe:fd:04:13:22:66:21:be: cf:c5:1f:7e:ac:34:d2:1e:c0:46:a0:95:08:12:7b:60:26:ff: 7d:07:8c:f2:c6:f9:5c:03:2c:d1:e0:b0:43:4f:6f:57:9f:9f: c6:a8:eb:6c:ea:a4:18:5a:d6:82:94:fb:93:88:98:8a:e1:59: f4:2b:6b:4a:45:ae:09:54:bf:0e:56:52:79:e5:68:aa:34:17: 48:15:28:15:52:25:5e:6a:76:cf:d2:d8:d5:ee:63:9b:88:f5: 3c:3d:8c:93:5f:4f:46:d0:29:82:18:5c:6f:ca:d1:c3:0f:60: 0d:fd:6e:9f:d1:5a:11:26:0c:ce:5f:7c:c1:e9:94:7e:d3:7e: 15:fb:30:01:2c:f0:33:4a:70:cb:09:f4:d3:ff:71:b9:cf:51: 9e:ca:db:e0:f0:e9:d3:15:66:99:35:5a:0b:80:83:a5:3d:6f: 34:77:59:c1:5a:1f:06:9b:b5:7f:69:08:ba:f6:04:fd:af:8f: 82:f5:6b:89:c3:e4:4c:58:eb:20:12:81:46:98:d5:60:d8:e3: 9c:4a:aa:e1:5c:b7:1a:89:ce:b1:be:a2:22:aa:f4:e1:be:7f: f7:2e:f8:cb:eb:55:c2:d3:1d:db:86:d8:e5:49:a1:49:85:3e: 32:16:cb:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVK0dQki7pKgMTyx2LuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4 NWNkYTIwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD EyhmNDFkMGY0NmQ0Yzc2NGMwMWZhOGQzMmMyN2E4NTliNTRhNzg5ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FFdey3IGIU5MHTJrR6dMpDDeN4h 8mk8Ggtk0YkhWaZ40Kq8fHM6MY+q+fVuoqPqXK2cziEa/VupvlDTueHpwgTKy6aH LJh5uS3YcYz1Hk9l1u7oRa66gvcJfd0f5/NsJbpAKq3lHoUkENmlWkcomYqNKACc Bd86tpDs25pyrgbl82uD0Nl3HygG2Zm2azfMoCHdwF5T9PuxAYfr4GZm4lzkNxty WXmliZQlro/WxnTrK8QI5nlhDnUPUFdrJNz1RF46355ycqsDSj+p1mCO9vkiXPYu iz/GzUOojBJOI4WUyXDDTze7OLbYOGgazNUpEc0X/Eqq8F8UFTWgBjQCGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQdD0bUx2TAH6jTLCeoWbVKeJ8wMB8GA1UdIwQY MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It MmU5YjJkODhkNTQ3LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3 LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeH0qxyP Q/Byh/79BBMiZiG+z8Uffqw00h7ARqCVCBJ7YCb/fQeM8sb5XAMs0eCwQ09vV5+f xqjrbOqkGFrWgpT7k4iYiuFZ9CtrSkWuCVS/DlZSeeVoqjQXSBUoFVIlXmp2z9LY 1e5jm4j1PD2Mk19PRtApghhcb8rRww9gDf1un9FaESYMzl98wemUftN+FfswASzw M0pwywn00/9xuc9Rnsrb4PDp0xVmmTVaC4CDpT1vNHdZwVofBpu1f2kIuvYE/a+P gvVricPkTFjrIBKBRpjVYNjjnEqq4Vy3GonOsb6iIqr04b5/9y74y+tVwtMd24bY 5UmhSYU+MhbLOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:47 2025 by rpki-client