This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: N7F8sF+cntUwo2GOZ80M+Z7RLrEQUg9Mn60zEvJpRXQ= Subject key identifier: B8:E5:B0:70:59:D1:B2:89:61:2A:C3:06:0D:EC:AA:8A:8F:9A:FB:FB Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019B2C6622C6F769CA3DC2BAD419454ACADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 07E3 Signing time: Wed 17 Dec 2025 13:00:49 +0000 Manifest this update: Wed 17 Dec 2025 13:00:49 +0000 Manifest next update: Thu 18 Dec 2025 13:00:49 +0000 Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: vOBWFaX8zHz5jluypP87vwX/q7vslHi2xoJOKRO2wlo=) 2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:22:c6:f7:69:ca:3d:c2:ba:d4:19:45:4a:ca:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Dec 17 13:00:49 2025 GMT Not After : Dec 18 13:00:49 2025 GMT Subject: CN=b8e5b07059d1b289612ac3060decaa8a8f9afbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:3a:62:61:cb:fd:bd:51:25:ca:55:a8:0e: 00:d2:a7:d8:e0:a9:4b:90:e0:4d:c0:04:f8:01:ba: 89:33:ef:f3:f5:b0:b1:c4:d4:30:44:c9:5f:87:4a: 40:79:b2:46:19:62:0c:65:af:0f:33:5d:d4:37:0b: 2c:29:0d:80:5c:ed:5c:ca:f8:02:95:4f:ac:dc:9b: 9b:81:f1:db:d6:da:86:2b:39:13:a2:6a:82:e7:68: b5:5d:d6:49:f4:1a:66:e5:9c:2b:22:68:b6:d9:0f: d4:bb:2c:90:7f:e2:d6:e9:ae:b5:28:61:d6:9f:d8: bc:71:35:23:43:74:db:d6:ed:64:40:a2:39:80:5d: 7b:a4:17:d6:20:39:32:89:60:a9:2e:1e:77:7f:8b: cb:cf:5a:50:8e:7d:cf:f1:3a:0a:d2:d1:9b:97:65: dc:3e:cf:73:11:ab:b3:bf:b9:3a:f4:43:ce:e4:98: d5:77:51:c2:eb:0a:ba:32:85:a5:56:a3:28:ec:2e: 89:44:25:37:78:2f:80:29:f6:e1:38:b1:8e:14:28: dd:ab:9c:bf:4e:0d:b1:24:15:df:74:2a:33:82:c2: 5e:8a:cb:00:5d:e9:a3:ac:26:b3:93:f4:44:77:dc: a6:3d:cf:b1:51:dd:b5:8c:73:ed:81:5b:7b:38:08: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:B0:70:59:D1:B2:89:61:2A:C3:06:0D:EC:AA:8A:8F:9A:FB:FB X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:a9:b3:74:5f:84:0a:d7:3b:80:b1:15:c0:95:0b:f3:82:25: 23:b8:9f:d6:a0:fc:e7:ac:2b:19:3e:6d:db:08:bd:d9:7c:93: 18:a0:ca:5a:bc:8a:9f:44:a7:0a:2e:6c:7e:8a:52:47:2a:8c: 2e:9d:6b:41:60:9d:ab:69:63:20:f4:4a:56:81:32:a6:69:7c: 44:39:ea:6b:82:3e:cd:fa:1b:d7:9c:52:b5:df:42:4d:97:68: 61:b1:1c:15:6f:57:0d:3a:e4:d0:3a:48:b4:9a:52:f1:1f:db: 13:7e:76:6f:31:05:52:45:d8:c9:7d:6c:21:8b:d4:f8:21:12: 60:90:9e:90:dd:53:2b:ed:b6:68:5a:50:32:a9:82:37:b8:b7: a9:23:8d:0f:e0:1c:02:64:17:34:a3:68:da:6d:1e:df:94:0e: 34:89:d3:59:1b:73:82:24:32:61:fa:7b:07:8f:d0:ca:74:34: bc:7d:ec:62:47:13:fb:b9:02:ef:f3:52:05:8f:b1:6e:50:26: f4:09:89:23:b7:4c:8a:33:fb:7e:b7:6f:33:eb:d3:0e:f6:16: 17:4d:e8:30:ab:f6:2b:b7:13:f7:30:f8:15:69:80:5d:09:96: d0:94:5e:12:6a:c3:de:d7:e9:05:35:b8:1d:4f:a7:28:3a:ae: b8:a0:b4:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZiLG92nKPcK61BlFSsrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjUxMjE3MTMwMDQ5WhcNMjUxMjE4MTMwMDQ5WjAzMTEwLwYDVQQD EyhiOGU1YjA3MDU5ZDFiMjg5NjEyYWMzMDYwZGVjYWE4YThmOWFmYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBc6YmHL/b1RJcpVqA4A0qfY4KlL kOBNwAT4AbqJM+/z9bCxxNQwRMlfh0pAebJGGWIMZa8PM13UNwssKQ2AXO1cyvgC lU+s3JubgfHb1tqGKzkTomqC52i1XdZJ9Bpm5ZwrImi22Q/UuyyQf+LW6a61KGHW n9i8cTUjQ3Tb1u1kQKI5gF17pBfWIDkyiWCpLh53f4vLz1pQjn3P8ToK0tGbl2Xc Ps9zEauzv7k69EPO5JjVd1HC6wq6MoWlVqMo7C6JRCU3eC+AKfbhOLGOFCjdq5y/ Tg2xJBXfdCozgsJeissAXemjrCazk/REd9ymPc+xUd21jHPtgVt7OAjC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjlsHBZ0bKJYSrDBg3sqoqPmvv7MB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4amzdF+E Ctc7gLEVwJUL84IlI7if1qD856wrGT5t2wi92XyTGKDKWryKn0SnCi5sfopSRyqM Lp1rQWCdq2ljIPRKVoEypml8RDnqa4I+zfob15xStd9CTZdoYbEcFW9XDTrk0DpI tJpS8R/bE352bzEFUkXYyX1sIYvU+CESYJCekN1TK+22aFpQMqmCN7i3qSOND+Ac AmQXNKNo2m0e35QONInTWRtzgiQyYfp7B4/QynQ0vH3sYkcT+7kC7/NSBY+xblAm 9AmJI7dMijP7frdvM+vTDvYWF03oMKv2K7cT9zD4FWmAXQmW0JReEmrD3tfpBTW4 HU+nKDquuKC0NQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:33 2025 by rpki-client