This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json) Hash identifier: szWqg4OqC52UsVdnru12NnpeGWlvDTEs/FgxcfqUhKw= Subject key identifier: 16:53:13:88:E9:83:9A:D0:C9:55:4C:DC:E7:07:08:2E:6B:61:10:96 Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b Certificate serial: 019AF208CE893A9134A7498AF68FEBA77052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: nb7fs0oVeloVG9P4A7lwq1SQas2tj4CZhqWq/Esf70c=) 2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ce:89:3a:91:34:a7:49:8a:f6:8f:eb:a7:70:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=16531388e9839ad0c9554cdce707082e6b611096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:77:64:8c:81:4d:c0:84:58:1b:a6:90:1c: f8:f6:45:3c:ce:e7:1a:60:4d:bc:98:06:a6:e4:1e: 83:53:f5:05:a9:fd:b7:17:07:14:ca:1a:a5:77:ed: 84:b7:98:d7:41:35:9b:dd:28:3d:25:d3:31:93:a8: 1b:8c:36:33:2a:c4:3f:65:38:2f:c1:e3:cb:97:ca: c4:3e:00:c3:ca:61:fb:8c:41:19:fd:df:4b:80:4f: f0:3c:b8:89:49:dc:b9:60:21:63:13:06:f9:05:19: 24:01:af:5b:d2:ec:cb:72:06:f4:32:a7:62:d5:3b: 29:20:e2:33:20:9d:46:95:73:e6:52:e7:c9:8a:e4: f2:fe:77:6c:da:02:75:da:a6:fa:8c:5a:33:55:d8: e0:27:78:df:3b:71:83:ed:8d:a1:25:ca:27:bd:bd: 40:42:e3:b5:5f:41:44:15:07:3a:90:85:3e:8a:73: 07:2b:5c:0a:9a:78:4b:8d:d3:aa:6c:ee:54:aa:9c: df:f5:f7:9b:72:fb:26:f3:14:91:1b:f7:f2:9a:55: f9:dc:70:63:82:24:4f:34:74:a0:41:f0:c7:51:a3: cc:9b:9a:32:6b:5e:ea:59:37:34:22:ef:60:59:6e: 8f:21:38:68:21:30:d4:e2:6f:48:02:88:aa:59:63: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:53:13:88:E9:83:9A:D0:C9:55:4C:DC:E7:07:08:2E:6B:61:10:96 X509v3 Authority Key Identifier: keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b3:01:90:db:12:8d:0a:9f:d3:42:8d:f1:47:dd:9b:f1:d1: 92:12:8f:48:50:19:d0:51:07:79:3a:73:8b:f7:73:a1:fe:ec: 6b:25:ad:95:20:0b:01:d9:e5:77:d7:3b:f0:8c:36:ec:94:ae: 1b:a8:d7:e3:5e:6d:26:b8:20:73:67:d7:3f:ef:11:2f:80:69: f9:47:fe:91:62:8c:bd:21:29:14:e7:e1:9a:d2:2a:17:91:6b: df:24:fd:88:40:c0:8f:46:85:ea:c1:e7:da:ec:be:63:e0:27: 21:ae:5d:13:c3:87:a9:b8:63:6b:56:d9:0e:a7:65:10:45:c6: 81:d1:eb:58:bd:67:5f:0a:36:f7:b2:b5:d7:28:31:ad:71:a4: eb:86:45:a8:0b:bb:10:d2:d4:53:d6:1f:7d:ab:6d:57:5e:48: 5c:c1:67:a0:0a:a5:b9:4d:3e:f7:65:19:b7:33:9a:2f:d6:e2: fe:1f:83:de:68:20:de:44:7e:5c:15:ed:ba:c9:4e:60:d4:8f: 3e:b8:2b:5a:e9:ef:9d:d4:3a:54:bf:49:4c:bc:36:fe:04:3f: 0d:f5:a8:3c:e4:81:5d:57:e4:b6:de:a7:d2:6c:35:7f:5f:04: d6:d8:4e:aa:05:4b:b6:29:90:eb:50:1b:fc:5f:e2:e7:20:61: ff:7a:7a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM6JOpE0p0mK9o/rp3BSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy ZGMwMGIwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygxNjUzMTM4OGU5ODM5YWQwYzk1NTRjZGNlNzA3MDgyZTZiNjExMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4t3ZIyBTcCEWBumkBz49kU8zuca YE28mAam5B6DU/UFqf23FwcUyhqld+2Et5jXQTWb3Sg9JdMxk6gbjDYzKsQ/ZTgv wePLl8rEPgDDymH7jEEZ/d9LgE/wPLiJSdy5YCFjEwb5BRkkAa9b0uzLcgb0Mqdi 1TspIOIzIJ1GlXPmUufJiuTy/nds2gJ12qb6jFozVdjgJ3jfO3GD7Y2hJconvb1A QuO1X0FEFQc6kIU+inMHK1wKmnhLjdOqbO5Uqpzf9febcvsm8xSRG/fymlX53HBj giRPNHSgQfDHUaPMm5oya17qWTc0Iu9gWW6PIThoITDU4m9IAoiqWWPFPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZTE4jpg5rQyVVM3OcHCC5rYRCWMB8GA1UdIwQY MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLMBkNsS jQqf00KN8Ufdm/HRkhKPSFAZ0FEHeTpzi/dzof7sayWtlSALAdnld9c78Iw27JSu G6jX415tJrggc2fXP+8RL4Bp+Uf+kWKMvSEpFOfhmtIqF5Fr3yT9iEDAj0aF6sHn 2uy+Y+AnIa5dE8OHqbhja1bZDqdlEEXGgdHrWL1nXwo297K11ygxrXGk64ZFqAu7 ENLUU9YffattV15IXMFnoAqluU0+92UZtzOaL9bi/h+D3mgg3kR+XBXtuslOYNSP PrgrWunvndQ6VL9JTLw2/gQ/DfWoPOSBXVfktt6n0mw1f18E1thOqgVLtimQ61Ab /F/i5yBh/3p6KA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:29 2025 by rpki-client