This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft File: Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json) Hash identifier: a9pkv1V9IkPZAoHJHF8RXQOUDxLtj4i46QNUNLxP7Cc= Subject key identifier: 33:A9:DF:31:0E:8A:70:41:63:48:64:8E:F0:1B:83:E8:E3:CA:A4:6F Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2 Certificate issuer: /CN=127af6c693573a2270c9237875456c2df0b503c2 Certificate serial: 019B59777FA88DC19A52A735862D78BBC5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft Manifest number: 0BE3 Signing time: Fri 26 Dec 2025 07:02:42 +0000 Manifest this update: Fri 26 Dec 2025 07:02:42 +0000 Manifest next update: Sat 27 Dec 2025 07:02:42 +0000 Files and hashes: 1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: JHysWfNxqUKG/z9WSjbEcd0EhzDhBvTnPtoOeZQlqVk=) 2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7f:a8:8d:c1:9a:52:a7:35:86:2d:78:bb:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2 Validity Not Before: Dec 26 07:02:42 2025 GMT Not After : Dec 27 07:02:42 2025 GMT Subject: CN=33a9df310e8a70416348648ef01b83e8e3caa46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:92:63:4b:0e:bf:c9:7b:12:6b:dc:d6:bf: 8f:97:52:56:94:80:07:81:25:ee:a9:a6:79:8a:91: 33:2c:70:1e:c0:27:67:43:6b:b6:c4:6f:ab:da:bc: 85:a6:92:d5:82:98:0b:03:a3:7d:1d:3f:db:5b:af: ee:1f:bf:0a:73:a9:a8:4e:4d:37:c8:e2:43:57:43: eb:82:db:22:de:f8:75:d8:c3:55:ba:c5:70:46:62: 5e:1d:62:ff:23:23:75:bb:6a:cd:88:7e:c7:c5:16: cf:c4:24:85:b2:ae:07:22:7c:d1:27:bf:f3:8b:5a: a4:4b:44:96:8f:c1:ad:2a:b5:b7:32:27:2a:01:0e: b6:16:e5:74:77:4c:67:24:f7:d2:12:61:1f:4e:69: ac:b8:fd:8e:a9:4f:72:e5:bd:7e:c4:8d:a8:7e:48: 9a:fe:91:97:ca:a6:2e:05:89:a0:67:87:fe:e4:25: 14:df:3a:6d:07:57:01:c0:e9:b8:e0:90:67:31:35: a5:f9:9e:ba:b1:3e:55:69:a2:a5:cc:14:df:c9:46: 66:00:0d:ea:d7:b1:60:ff:44:c4:32:d4:e7:5e:84: 1f:7d:43:42:19:47:62:b7:14:c6:9f:5d:6d:80:ad: d2:e3:06:12:4c:df:d8:0c:43:b0:7f:f2:bd:5f:f3: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:DF:31:0E:8A:70:41:63:48:64:8E:F0:1B:83:E8:E3:CA:A4:6F X509v3 Authority Key Identifier: keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:ba:74:9d:d3:84:0a:8a:05:e6:f3:25:4b:75:30:b2:8a: df:a9:e0:c4:db:88:34:39:66:13:0c:2b:05:20:e0:99:64:22: 43:e8:df:10:f8:60:3f:1b:2b:fe:01:d2:d3:a5:ad:45:d2:f3: bc:b2:3a:9d:d5:48:14:20:a8:3e:5f:0a:c4:96:ef:64:fc:08: 54:56:d3:25:16:df:2c:2e:6a:97:81:c2:46:c5:77:c6:15:fe: 1a:23:09:af:16:a3:ed:6b:2b:2a:1a:8d:7f:5e:df:fc:db:5f: d0:73:5b:8e:9e:9b:df:d5:39:fc:bb:22:49:dc:49:92:77:2e: 8d:09:af:8f:a2:05:74:d4:ee:e4:aa:44:d5:95:ef:6e:f5:50: 7e:95:ee:cc:de:e6:62:93:3b:d0:d9:9f:d7:ea:7c:28:94:a8: fb:8c:3f:eb:68:91:af:25:b0:61:e7:4f:94:4f:67:02:44:fd: 98:6f:02:97:25:ab:d2:40:8f:4b:e0:07:f6:f2:98:91:0d:7f: a1:f2:c3:42:4b:80:12:f3:93:50:79:9d:cd:3e:d3:2b:a2:69: 00:05:3c:e6:01:b6:72:07:45:4e:76:4c:9e:68:7c:73:56:3d: 5d:7f:17:ef:b3:3e:02:b3:33:9c:74:c7:7b:a2:7e:7c:13:3b: 56:77:51:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3+ojcGaUqc1hi14u8W3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyN2FmNmM2OTM1NzNhMjI3MGM5MjM3ODc1NDU2YzJkZjBi NTAzYzIwHhcNMjUxMjI2MDcwMjQyWhcNMjUxMjI3MDcwMjQyWjAzMTEwLwYDVQQD EygzM2E5ZGYzMTBlOGE3MDQxNjM0ODY0OGVmMDFiODNlOGUzY2FhNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmSY0sOv8l7Emvc1r+Pl1JWlIAH gSXuqaZ5ipEzLHAewCdnQ2u2xG+r2ryFppLVgpgLA6N9HT/bW6/uH78Kc6moTk03 yOJDV0Prgtsi3vh12MNVusVwRmJeHWL/IyN1u2rNiH7HxRbPxCSFsq4HInzRJ7/z i1qkS0SWj8GtKrW3MicqAQ62FuV0d0xnJPfSEmEfTmmsuP2OqU9y5b1+xI2ofkia /pGXyqYuBYmgZ4f+5CUU3zptB1cBwOm44JBnMTWl+Z66sT5VaaKlzBTfyUZmAA3q 17Fg/0TEMtTnXoQffUNCGUditxTGn11tgK3S4wYSTN/YDEOwf/K9X/N9dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOp3zEOinBBY0hkjvAbg+jjyqRvMB8GA1UdIwQY MBaAFBJ69saTVzoicMkjeHVFbC3wtQPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZDM2MmMtZjg2My00ZDQwLTgwYmQt ODVmYzVmZDkwZmQ4LzEvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZDM2MmMtZjg2My00ZDQwLTgwYmQtODVmYzVmZDkwZmQ4 LzEvRW5yMnhwTlhPaUp3eVNONGRVVnNMZkMxQThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhv26dJ3T hAqKBebzJUt1MLKK36ngxNuINDlmEwwrBSDgmWQiQ+jfEPhgPxsr/gHS06WtRdLz vLI6ndVIFCCoPl8KxJbvZPwIVFbTJRbfLC5ql4HCRsV3xhX+GiMJrxaj7WsrKhqN f17f/Ntf0HNbjp6b39U5/LsiSdxJkncujQmvj6IFdNTu5KpE1ZXvbvVQfpXuzN7m YpM70Nmf1+p8KJSo+4w/62iRryWwYedPlE9nAkT9mG8ClyWr0kCPS+AH9vKYkQ1/ ofLDQkuAEvOTUHmdzT7TK6JpAAU85gG2cgdFTnZMnmh8c1Y9XX8X77M+ArMznHTH e6J+fBM7VndRXw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client