This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json) Hash identifier: K1svGvsNjG7I/VDzoYP+UYKCGYvFvmTSvs1B65vNHGM= Subject key identifier: 8C:C1:9C:2C:C5:E6:5E:98:1C:A0:E8:86:42:6A:FD:A3:82:8C:65:E0 Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0 Certificate serial: 019B432528307DA100726BD3D49576D9DEEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft Manifest number: 0F1E Signing time: Sun 21 Dec 2025 23:01:07 +0000 Manifest this update: Sun 21 Dec 2025 23:01:07 +0000 Manifest next update: Mon 22 Dec 2025 23:01:07 +0000 Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=) 2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: lx7nBf5JKtqLy15NynoaEsw5Fxdd0mEVJq+PPh5fENI=) 3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=) 4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:28:30:7d:a1:00:72:6b:d3:d4:95:76:d9:de:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0 Validity Not Before: Dec 21 23:01:07 2025 GMT Not After : Dec 22 23:01:07 2025 GMT Subject: CN=8cc19c2cc5e65e981ca0e886426afda3828c65e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:41:b0:a8:b1:bd:3a:22:12:82:b7:02:28: 7f:b0:ba:41:da:5e:61:65:27:67:2f:ac:f1:26:cf: cd:ea:ba:29:00:1b:fe:d6:0a:31:f6:bd:9a:b8:cf: 16:eb:cb:f1:b7:8b:d6:45:00:09:46:fb:2f:57:af: e3:c1:b3:62:30:bc:7a:30:09:49:84:b0:14:fe:68: 5c:c1:b2:a3:02:03:30:8d:35:5e:a9:0d:63:8f:d9: e0:42:75:17:88:06:29:8f:07:6d:34:51:a7:45:60: 5f:1e:d0:aa:b9:c7:ea:0f:ec:ba:0c:36:19:f5:c1: 29:2a:6e:5a:d0:78:07:c2:37:ce:7d:5c:3b:bf:7d: f0:6e:9f:9f:7c:1b:43:7d:f3:6c:b3:7e:30:6d:3e: e2:a7:eb:12:53:53:73:ea:f6:6e:d1:c3:64:30:d5: 3a:d0:8f:58:bc:cf:e9:5f:bd:e7:b3:55:ce:0a:46: 18:63:9b:87:e8:8d:63:74:8b:c2:69:a7:32:65:57: 0d:34:5c:09:33:11:65:09:32:c8:a2:5c:4f:a7:4c: b4:8d:7d:a0:57:d2:42:2c:70:f5:1e:6e:96:52:bb: 0e:f6:fa:42:e1:ab:69:c0:0b:73:8b:1d:97:cd:08: f4:c3:1a:19:a6:6d:d9:1d:df:cf:8a:da:70:24:08: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:9C:2C:C5:E6:5E:98:1C:A0:E8:86:42:6A:FD:A3:82:8C:65:E0 X509v3 Authority Key Identifier: keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:11:12:a5:ec:0c:50:e9:f6:c0:e5:37:9c:b3:d9:44:65:90: 0b:3b:aa:3f:b6:dc:b5:54:f5:6e:e8:4d:7a:a0:f4:53:79:b3: ca:8f:54:c3:d5:f7:e9:7a:da:c8:dd:16:b7:03:80:3b:fd:61: cc:17:70:c4:c6:34:cf:e1:db:db:bd:2a:06:cf:2f:bd:0a:d6: a8:65:fe:82:f5:06:0f:2f:0c:ce:23:80:ec:4c:ff:29:8e:d6: af:c6:ef:84:66:b9:2a:4a:ee:c5:47:d1:b2:8b:ab:4f:97:e7: 4a:97:c9:0f:fe:9b:35:81:ec:0c:e3:f5:58:a1:ff:80:81:60: 98:29:83:e0:04:7f:f2:ca:c8:8e:ed:05:5b:61:f9:de:42:11: 78:4c:12:d4:ac:e0:6e:22:b0:59:fc:d0:31:2d:e1:51:1b:aa: a5:03:48:c6:fb:41:1c:86:70:2e:ca:6c:fb:7e:33:e2:92:45: d3:7e:70:e5:d8:ce:38:80:37:a2:ed:e4:f5:70:0a:43:3a:ba: 70:79:27:1b:24:f9:61:47:91:9c:34:fb:7e:1c:f3:a5:62:f7: ed:be:48:3d:7e:41:e6:55:01:49:9d:e1:3c:50:d8:5e:d4:ec: af:e7:8e:9a:33:9c:0a:ca:84:3d:e4:e6:d2:36:c8:3e:d1:e5: 21:e0:5f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJSgwfaEAcmvT1JV22d7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUw OGI5YjAwHhcNMjUxMjIxMjMwMTA3WhcNMjUxMjIyMjMwMTA3WjAzMTEwLwYDVQQD Eyg4Y2MxOWMyY2M1ZTY1ZTk4MWNhMGU4ODY0MjZhZmRhMzgyOGM2NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vtBsKixvToiEoK3Aih/sLpB2l5h ZSdnL6zxJs/N6ropABv+1gox9r2auM8W68vxt4vWRQAJRvsvV6/jwbNiMLx6MAlJ hLAU/mhcwbKjAgMwjTVeqQ1jj9ngQnUXiAYpjwdtNFGnRWBfHtCqucfqD+y6DDYZ 9cEpKm5a0HgHwjfOfVw7v33wbp+ffBtDffNss34wbT7ip+sSU1Nz6vZu0cNkMNU6 0I9YvM/pX73ns1XOCkYYY5uH6I1jdIvCaacyZVcNNFwJMxFlCTLIolxPp0y0jX2g V9JCLHD1Hm6WUrsO9vpC4atpwAtzix2XzQj0wxoZpm3ZHd/PitpwJAiuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzBnCzF5l6YHKDohkJq/aOCjGXgMB8GA1UdIwQY MBaAFBNEA2YAfrVvEOn5npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYt NDRjMWE0ZWI5NjljLzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5Njlj LzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBESpewM UOn2wOU3nLPZRGWQCzuqP7bctVT1buhNeqD0U3mzyo9Uw9X36XrayN0WtwOAO/1h zBdwxMY0z+Hb270qBs8vvQrWqGX+gvUGDy8MziOA7Ez/KY7Wr8bvhGa5KkruxUfR sourT5fnSpfJD/6bNYHsDOP1WKH/gIFgmCmD4AR/8srIju0FW2H53kIReEwS1Kzg biKwWfzQMS3hURuqpQNIxvtBHIZwLsps+34z4pJF035w5djOOIA3ou3k9XAKQzq6 cHknGyT5YUeRnDT7fhzzpWL37b5IPX5B5lUBSZ3hPFDYXtTsr+eOmjOcCsqEPeTm 0jbIPtHlIeBfig== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:02 2025 by rpki-client