This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json) Hash identifier: 2BndMEdzGRFBKM9zuc/vwhuWf/2YW37TIjXQU8pD3ec= Subject key identifier: C3:66:C0:59:B8:E2:A0:89:B9:82:CA:71:09:2E:23:34:88:47:A8:4E Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74 Certificate serial: 019B1C4E32FDCA74A94761D96A6BCF3ADE97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 10:00:45 +0000 Manifest this update: Sun 14 Dec 2025 10:00:45 +0000 Manifest next update: Mon 15 Dec 2025 10:00:45 +0000 Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=) 2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: +llGxuglYRyAEbC9pwaI6uh0w/5zjrM+F+o4oegFE90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:32:fd:ca:74:a9:47:61:d9:6a:6b:cf:3a:de:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74 Validity Not Before: Dec 14 10:00:45 2025 GMT Not After : Dec 15 10:00:45 2025 GMT Subject: CN=c366c059b8e2a089b982ca71092e23348847a84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:20:3c:99:97:92:1a:8c:cd:07:e8:68:1e: c9:61:12:a1:7a:6d:6c:01:28:70:17:ce:ba:f0:3c: 7b:f7:3f:b9:b9:78:b1:de:f7:ac:e6:5b:43:c9:4a: 78:1a:02:7a:4c:43:0a:c9:6a:1a:46:23:b1:cb:93: 4b:72:7e:e0:ac:b8:c5:78:c9:a3:78:10:e0:8e:9c: 80:11:85:27:9d:80:80:6b:1c:85:f1:6c:94:f1:85: 81:6a:55:40:37:c3:1f:26:4c:e2:6a:f6:ac:4d:7c: e9:22:58:a8:30:cb:9b:b5:1a:28:2b:ae:e2:84:87: 01:85:8d:ea:cf:de:93:10:05:a2:4c:1a:f9:2b:88: da:7c:8c:f6:33:a2:a3:93:a8:95:a5:40:4c:23:52: 2f:50:e8:b4:9d:9f:1c:b9:94:a9:51:d0:67:ce:b7: 26:10:88:60:09:99:86:34:c9:ec:42:43:78:53:90: f5:4c:11:b8:0a:60:0f:78:52:89:db:e6:6b:6b:05: 30:04:ab:41:a8:82:3e:9b:51:5c:dd:46:41:59:da: 82:3f:5f:9a:44:f3:1e:f6:21:ef:20:0f:f3:b4:dc: f2:66:a4:bb:a5:7c:96:ab:25:8b:59:68:00:7f:8d: b1:9c:5f:5a:92:81:2d:11:8a:22:89:ea:68:7e:3b: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:66:C0:59:B8:E2:A0:89:B9:82:CA:71:09:2E:23:34:88:47:A8:4E X509v3 Authority Key Identifier: keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dd:27:14:87:fb:57:51:6c:49:4c:10:a0:c1:01:d9:c4:01: 84:71:c1:b2:b7:c1:7d:64:45:2c:1e:20:53:1b:4b:12:4f:d2: 45:4e:6e:62:f7:25:19:db:98:90:c2:7a:50:b4:18:43:b7:fe: 58:40:cc:f0:10:33:46:86:15:fb:42:f4:8d:c7:17:ad:49:49: 46:b1:07:22:b1:8a:6e:7c:99:97:6b:af:23:0e:43:7e:8a:c9: f7:77:e0:25:d5:19:81:0f:af:2c:5c:b1:59:a0:fa:ec:56:12: 4a:73:90:f4:d3:22:54:17:d2:b1:e8:04:29:d1:15:f3:be:84: 88:6b:88:17:c7:1a:c2:f4:8d:07:83:13:30:06:bc:6c:c8:ad: f9:e4:0c:f6:d9:c3:62:8b:9c:96:f5:e7:65:db:f7:ea:2b:25: 5e:7c:28:41:cc:bf:5d:db:07:71:3c:fd:7c:78:fd:50:e0:82: af:a6:c0:97:c0:4a:f0:5a:74:d1:fa:43:94:e4:84:5d:e4:09: 7d:d3:73:15:d5:78:0e:91:7d:36:6a:e8:8a:42:fa:7b:ca:9c: c0:8a:70:07:eb:ed:b5:76:6e:b5:a2:1f:52:de:14:0d:87:8f: fb:ac:96:30:7f:20:17:10:68:9d:43:0e:5c:b4:9a:e4:e8:43: ab:4f:2c:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTjL9ynSpR2HZamvPOt6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTc3MzYyZTMxNDU4NmQwZDIxODg0ZDAxYTg1YWRiNzc2 NjViNzQwHhcNMjUxMjE0MTAwMDQ1WhcNMjUxMjE1MTAwMDQ1WjAzMTEwLwYDVQQD EyhjMzY2YzA1OWI4ZTJhMDg5Yjk4MmNhNzEwOTJlMjMzNDg4NDdhODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwgPJmXkhqMzQfoaB7JYRKhem1s AShwF8668Dx79z+5uXix3ves5ltDyUp4GgJ6TEMKyWoaRiOxy5NLcn7grLjFeMmj eBDgjpyAEYUnnYCAaxyF8WyU8YWBalVAN8MfJkziavasTXzpIlioMMubtRooK67i hIcBhY3qz96TEAWiTBr5K4jafIz2M6Kjk6iVpUBMI1IvUOi0nZ8cuZSpUdBnzrcm EIhgCZmGNMnsQkN4U5D1TBG4CmAPeFKJ2+ZrawUwBKtBqII+m1Fc3UZBWdqCP1+a RPMe9iHvIA/ztNzyZqS7pXyWqyWLWWgAf42xnF9akoEtEYoiiepofjuVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNmwFm44qCJuYLKcQkuIzSIR6hOMB8GA1UdIwQY MBaAFHunc2LjFFhtDSGITQGoWtt3Zlt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMt OTYxZjQzNzEzNWM2LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMtOTYxZjQzNzEzNWM2 LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd0nFIf7 V1FsSUwQoMEB2cQBhHHBsrfBfWRFLB4gUxtLEk/SRU5uYvclGduYkMJ6ULQYQ7f+ WEDM8BAzRoYV+0L0jccXrUlJRrEHIrGKbnyZl2uvIw5DforJ93fgJdUZgQ+vLFyx WaD67FYSSnOQ9NMiVBfSsegEKdEV876EiGuIF8cawvSNB4MTMAa8bMit+eQM9tnD YouclvXnZdv36islXnwoQcy/XdsHcTz9fHj9UOCCr6bAl8BK8Fp00fpDlOSEXeQJ fdNzFdV4DpF9NmroikL6e8qcwIpwB+vttXZutaIfUt4UDYeP+6yWMH8gFxBonUMO XLSa5OhDq08ssg== -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:27 2025 by rpki-client