This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json) Hash identifier: Xhh/+4hBywuCDR16HxhImPfMZz9b+BeTl5XLK4o2cjc= Subject key identifier: 4A:14:02:71:71:1E:F8:9E:2B:9E:8D:9F:CF:6A:6F:72:2B:CE:E0:28 Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08 Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908 Certificate serial: 019B4926CEA3CD9111509C0983CEA900B4F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft Manifest number: 037E Signing time: Tue 23 Dec 2025 03:00:38 +0000 Manifest this update: Tue 23 Dec 2025 03:00:38 +0000 Manifest next update: Wed 24 Dec 2025 03:00:38 +0000 Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=) 2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: ZKPFMmPLY1NC70MkixxXzYOznBI0LgMKrtNQf6ixs0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:ce:a3:cd:91:11:50:9c:09:83:ce:a9:00:b4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908 Validity Not Before: Dec 23 03:00:38 2025 GMT Not After : Dec 24 03:00:38 2025 GMT Subject: CN=4a140271711ef89e2b9e8d9fcf6a6f722bcee028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:50:46:ef:31:ca:6e:cc:ec:e5:b0:32:4f: 03:16:b6:7b:44:76:f3:cf:14:26:c4:5b:13:bd:cc: 89:7f:e2:6e:39:e0:a6:12:c0:20:dd:53:e7:9e:36: 2f:9e:51:69:05:5e:27:83:13:30:84:19:1f:b2:92: 4b:fd:0a:6c:2f:04:d7:f6:bb:69:cd:14:53:73:1d: d9:4d:13:af:ad:09:b2:26:e3:11:f0:4a:59:33:a1: 00:31:d2:b5:43:5b:e1:a6:ca:03:60:be:76:9f:75: 78:5e:fc:34:29:1f:13:33:90:be:52:ae:26:17:92: 7d:f9:97:d9:ff:b4:a8:f2:da:83:0e:57:61:ef:47: 56:74:3e:17:08:1d:92:b0:86:6a:ab:fd:58:73:42: e2:1c:0a:7a:ae:13:c3:a6:1f:da:8d:89:2f:98:5d: 65:40:26:a9:9e:56:7a:23:c7:f3:ee:b6:91:d4:ba: de:3f:8c:de:fd:86:3c:21:44:48:34:30:1a:21:0e: 66:42:b0:c0:47:45:9f:52:3a:cf:e5:6b:9b:be:1a: 32:d4:ed:93:ed:3d:7a:5c:68:21:37:92:d0:48:62: cd:ac:bc:68:ca:ce:cf:da:98:0e:49:78:30:8c:07: 20:db:70:27:fe:7f:b7:5e:11:07:58:98:5b:af:5d: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:14:02:71:71:1E:F8:9E:2B:9E:8D:9F:CF:6A:6F:72:2B:CE:E0:28 X509v3 Authority Key Identifier: keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d0:71:25:e3:69:55:6e:dd:49:20:bc:58:69:5c:c3:e8:78: ac:ab:e6:e8:81:90:1c:23:43:c6:81:c5:00:75:56:8e:d0:61: 11:b9:61:38:80:bb:fc:67:8e:7e:db:2b:c5:a0:e8:32:65:af: 70:03:f4:2a:f7:36:6b:8b:d9:8e:f1:72:78:6b:85:3c:c1:68: 15:a2:97:f5:28:c3:cf:24:89:a8:6b:f3:ac:a6:d5:ff:0c:be: 0c:cd:ef:37:8d:bb:a8:67:e0:97:56:49:15:7b:6d:67:81:2e: 13:bb:41:cb:1d:91:81:f2:ac:ab:86:27:84:f7:91:42:d5:00: 8c:8d:90:a1:2a:20:a2:e5:8c:f8:52:0d:11:36:93:87:c4:6e: 8b:f0:b7:e1:69:e4:b0:d5:fd:cf:52:e2:45:1f:74:9f:08:89: 17:b9:15:3f:7f:c6:98:e6:e7:ac:8a:46:e6:d2:72:ae:90:6f: 15:32:79:6f:37:85:7e:33:11:ef:1c:30:e3:95:62:29:a5:e6: 48:38:20:46:43:92:93:7e:a0:72:8a:fe:09:27:d7:56:eb:e9: 7f:cc:2f:1b:90:80:b9:ce:bb:55:bf:02:1a:b4:02:a4:31:55: 34:da:7b:d5:30:7d:58:1f:26:5e:d6:d9:92:27:5f:3a:8f:57: 54:9a:80:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJs6jzZERUJwJg86pALTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTVkZDE0YmRlOTMyMzcyZGM4YjU5MzJjYzU0ZDYwOGRi YmU5MDgwHhcNMjUxMjIzMDMwMDM4WhcNMjUxMjI0MDMwMDM4WjAzMTEwLwYDVQQD Eyg0YTE0MDI3MTcxMWVmODllMmI5ZThkOWZjZjZhNmY3MjJiY2VlMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/VQRu8xym7M7OWwMk8DFrZ7RHbz zxQmxFsTvcyJf+JuOeCmEsAg3VPnnjYvnlFpBV4ngxMwhBkfspJL/QpsLwTX9rtp zRRTcx3ZTROvrQmyJuMR8EpZM6EAMdK1Q1vhpsoDYL52n3V4Xvw0KR8TM5C+Uq4m F5J9+ZfZ/7So8tqDDldh70dWdD4XCB2SsIZqq/1Yc0LiHAp6rhPDph/ajYkvmF1l QCapnlZ6I8fz7raR1LreP4ze/YY8IURINDAaIQ5mQrDAR0WfUjrP5Wubvhoy1O2T 7T16XGghN5LQSGLNrLxoys7P2pgOSXgwjAcg23An/n+3XhEHWJhbr11NXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoUAnFxHvieK56Nn89qb3IrzuAoMB8GA1UdIwQY MBaAFBPl3RS96TI3Lci1kyzFTWCNu+kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTgzNTgtMTU3ZC00YzZiLWI3ZTUt YWZmNjE0NTFlODRlLzEvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTgzNTgtMTU3ZC00YzZiLWI3ZTUtYWZmNjE0NTFlODRl LzEvRS1YZEZMM3BNamN0eUxXVExNVk5ZSTI3NlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdBxJeNp VW7dSSC8WGlcw+h4rKvm6IGQHCNDxoHFAHVWjtBhEblhOIC7/GeOftsrxaDoMmWv cAP0Kvc2a4vZjvFyeGuFPMFoFaKX9SjDzySJqGvzrKbV/wy+DM3vN427qGfgl1ZJ FXttZ4EuE7tByx2RgfKsq4YnhPeRQtUAjI2QoSogouWM+FINETaTh8Rui/C34Wnk sNX9z1LiRR90nwiJF7kVP3/GmObnrIpG5tJyrpBvFTJ5bzeFfjMR7xww45ViKaXm SDggRkOSk36gcor+CSfXVuvpf8wvG5CAuc67Vb8CGrQCpDFVNNp71TB9WB8mXtbZ kidfOo9XVJqA8A== -----END CERTIFICATE-----Generated at Tue Dec 23 10:50:46 2025 by rpki-client