This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json) Hash identifier: PEaJzQ2feb7NOa1HtvPBPj2GwdwZO+zGoM0A2cAZ+Pc= Subject key identifier: 31:D0:D9:06:38:92:C8:73:F8:EB:94:22:91:CC:50:95:B7:96:E4:C1 Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Certificate serial: 019AF23F8B94DCAD8517A767AB4487A5BAA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: 6MfImLPVUMAROkMArJUVv4glyogdibasXyf9XJG1OJ0=) 2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8b:94:dc:ad:85:17:a7:67:ab:44:87:a5:ba:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=31d0d9063892c873f8eb942291cc5095b796e4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:5e:97:8a:fd:89:ab:9f:34:76:a0:c4:58: cb:ac:c3:f2:95:74:c5:3a:ba:b3:c7:3d:ba:8d:5f: 45:d5:0e:60:67:1d:69:44:91:24:f0:82:f0:b9:5e: 5f:ca:fa:5f:09:42:55:a5:42:91:eb:70:d2:55:21: a1:b3:83:72:31:e3:89:08:8d:f3:b7:a3:d5:88:00: 06:dd:a0:9a:7f:fe:05:76:46:3e:8f:a4:e7:af:5a: e2:dc:8d:b5:5e:ef:06:18:e7:e6:fd:31:7c:34:4e: dd:bc:ce:f8:c8:7a:68:77:de:4c:53:65:54:b2:cb: da:0c:c8:fd:37:8e:8a:e5:42:bc:6c:be:35:07:8d: 3d:bd:d8:d5:89:6f:cb:f7:a4:86:e8:e2:8c:cd:99: 09:98:aa:93:5b:dd:4b:8c:62:5b:a8:82:e6:41:62: 86:da:29:97:e5:00:12:5d:d4:7c:e4:27:9d:fa:23: 61:22:8b:a5:c0:06:2a:ff:35:f6:4d:90:25:90:57: 89:0f:7f:55:1b:67:25:19:52:77:c0:93:f2:03:b8: 7d:73:7b:68:4f:63:cc:03:7b:62:78:6e:59:f0:66: 8d:2a:1b:bb:d3:5b:6b:fa:5d:ca:da:1e:87:a8:99: bd:55:ba:77:1b:07:8d:5f:e9:92:27:39:40:65:a7: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:D9:06:38:92:C8:73:F8:EB:94:22:91:CC:50:95:B7:96:E4:C1 X509v3 Authority Key Identifier: keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:a7:52:5c:5d:3b:23:40:0f:69:c2:6d:d1:8e:13:01:24: 2b:42:74:21:ab:04:42:de:c6:b1:c3:00:32:80:44:de:35:d2: af:a2:87:b0:5d:5d:2f:f5:d0:e7:82:a0:69:53:15:5d:59:e8: 4c:8b:91:e3:d1:83:9c:37:8c:2c:5b:4b:e5:58:ff:79:01:5c: 95:9b:7b:a5:07:d8:61:9e:cf:71:33:db:92:db:5e:38:e4:8d: ef:c4:c4:6b:d2:c3:cf:76:be:eb:11:9f:2a:54:9f:f2:19:87: 4f:ba:40:f4:20:ad:ad:93:5a:a4:09:63:7a:7c:76:7c:4b:5d: 22:dc:c1:dc:90:fb:e4:b3:64:5e:4f:6e:bc:f5:90:16:0c:f4: d4:3b:bb:7e:60:00:c8:6b:2e:ce:56:77:8b:7d:c2:45:84:6c: 61:fd:4d:05:75:ab:fa:cb:f9:4d:91:73:94:88:26:ae:c0:11: 04:3f:1d:1d:18:a9:d6:52:80:01:e1:5a:9f:2e:55:8f:3a:df: 3c:04:7a:df:43:3f:24:07:af:7d:73:74:bf:cf:ce:4f:e5:71: 97:d1:f7:a8:57:5c:d6:28:51:8a:34:79:bd:d5:10:86:d0:e2: 0d:e1:70:ce:53:ad:99:86:52:03:42:dc:71:0d:23:5f:4a:47: 1e:8f:c8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4uU3K2FF6dnq0SHpbqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5 MWI5ZDQwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EygzMWQwZDkwNjM4OTJjODczZjhlYjk0MjI5MWNjNTA5NWI3OTZlNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftel4r9iaufNHagxFjLrMPylXTF Orqzxz26jV9F1Q5gZx1pRJEk8ILwuV5fyvpfCUJVpUKR63DSVSGhs4NyMeOJCI3z t6PViAAG3aCaf/4FdkY+j6Tnr1ri3I21Xu8GGOfm/TF8NE7dvM74yHpod95MU2VU ssvaDMj9N46K5UK8bL41B409vdjViW/L96SG6OKMzZkJmKqTW91LjGJbqILmQWKG 2imX5QASXdR85Ced+iNhIoulwAYq/zX2TZAlkFeJD39VG2clGVJ3wJPyA7h9c3to T2PMA3tieG5Z8GaNKhu701tr+l3K2h6HqJm9Vbp3GweNX+mSJzlAZaci+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHQ2QY4kshz+OuUIpHMUJW3luTBMB8GA1UdIwQY MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4 LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5mnUlxd OyNAD2nCbdGOEwEkK0J0IasEQt7GscMAMoBE3jXSr6KHsF1dL/XQ54KgaVMVXVno TIuR49GDnDeMLFtL5Vj/eQFclZt7pQfYYZ7PcTPbktteOOSN78TEa9LDz3a+6xGf KlSf8hmHT7pA9CCtrZNapAljenx2fEtdItzB3JD75LNkXk9uvPWQFgz01Du7fmAA yGsuzlZ3i33CRYRsYf1NBXWr+sv5TZFzlIgmrsARBD8dHRip1lKAAeFany5Vjzrf PAR630M/JAevfXN0v8/OT+Vxl9H3qFdc1ihRijR5vdUQhtDiDeFwzlOtmYZSA0Lc cQ0jX0pHHo/Iwg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:38 2025 by rpki-client