This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json) Hash identifier: yGcPqhOvanjDafSX3/UVYpTxghkYsj8O+SZlUgD1x6s= Subject key identifier: 2C:02:C7:2D:BC:12:4D:92:9A:ED:B5:49:78:B5:A6:1D:A8:61:AE:3E Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Certificate serial: 019B12DCFB49E5D99DE041642287125E6736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft Manifest number: 12F2 Signing time: Fri 12 Dec 2025 14:00:30 +0000 Manifest this update: Fri 12 Dec 2025 14:00:30 +0000 Manifest next update: Sat 13 Dec 2025 14:00:30 +0000 Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: uRhplwruqQRWbSZV7bUMQcF1H5UjAh4BdvxQGWDqQv4=) 2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=) 3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=) 4: U08W2KflM_3EvK4hUoGMDawSFr8.roa (hash: O5Hds9IXa1qN2RUUFQrPf5uOEOZLuUsI3gxYVdP8ubA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dc:fb:49:e5:d9:9d:e0:41:64:22:87:12:5e:67:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Validity Not Before: Dec 12 14:00:30 2025 GMT Not After : Dec 13 14:00:30 2025 GMT Subject: CN=2c02c72dbc124d929aedb54978b5a61da861ae3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bb:00:c9:0b:cf:e0:8a:f7:a1:1d:2b:ff:a5: 3d:6b:eb:0c:6e:09:94:5d:e8:2c:4f:21:0b:6f:32: 22:9a:09:1b:e8:dc:ed:8f:66:ed:ab:07:e2:ca:2a: 74:76:5f:0f:1a:db:e7:e3:03:55:3c:db:66:9b:82: e4:9a:c5:cc:77:8b:d9:f3:6b:da:b4:36:35:e9:17: 26:9d:11:76:b7:ac:2f:71:bc:c6:36:cb:75:f8:c9: 86:22:0d:45:3d:40:0e:7a:d9:40:4b:1b:b4:2c:58: 80:e5:ff:92:47:72:13:a3:58:25:04:d2:0d:b9:63: da:59:6e:a4:65:36:f4:a7:fe:c3:17:63:d9:81:64: 18:01:28:44:45:3b:f7:ef:5e:23:b4:07:2c:27:b5: d1:ae:ca:8c:e0:b6:d2:41:ef:3d:8a:b8:f3:8b:f7: 04:b1:c4:06:45:e5:22:e6:ef:2b:0a:38:ed:b0:1d: 6c:a1:cc:69:1c:97:ed:e2:d4:ee:d6:3c:28:c5:f9: 2d:87:dc:3e:15:58:04:5a:4e:f1:d8:ef:8a:6a:e2: f1:2b:b7:3b:d0:66:39:7a:81:92:30:88:e9:dd:fa: 35:b5:e6:31:a2:5e:af:ad:ca:d2:1f:f1:c6:11:35: 26:3c:dd:f9:f5:08:05:f4:23:b5:52:7d:62:cb:4f: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:C7:2D:BC:12:4D:92:9A:ED:B5:49:78:B5:A6:1D:A8:61:AE:3E X509v3 Authority Key Identifier: keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:bf:9c:f9:0b:9d:be:f1:23:78:73:1d:b5:a1:55:19:5c: df:e0:0d:0b:3d:c5:fd:d8:8e:e3:9b:b9:44:ca:1e:da:45:fa: 6d:4e:ec:07:38:90:19:0a:2f:1c:16:c3:74:8b:98:29:88:de: 2b:0f:d3:a6:42:0c:3d:ca:a3:e3:48:0a:ff:4e:5c:62:77:00: 70:97:b0:e9:94:13:a2:bb:09:21:83:fc:80:ae:0c:bf:bd:dd: 2b:ae:ee:c0:d8:99:7c:82:23:af:ef:5a:a0:c1:4b:a8:bf:0f: 87:f5:2f:33:24:d1:26:d6:a5:69:3d:7d:15:52:49:19:43:18: a5:21:9a:89:9b:ed:fe:69:cc:3b:ed:2c:7b:cb:c0:9d:ae:4e: 46:a5:90:05:9d:ec:4c:d7:8f:b5:57:ea:01:55:c7:b0:c9:4c: 11:0c:84:8e:54:43:d0:cc:17:6a:25:b8:73:77:59:3e:a6:20: c8:9d:d1:00:fb:6c:a4:9a:6d:bb:71:50:f6:6f:8c:be:39:32: 9b:ba:55:81:9b:f3:5b:15:b5:32:f6:a3:92:a3:94:0f:19:33: b4:43:1d:44:59:d5:f8:24:39:30:a3:5e:f4:7b:10:d3:10:24: 3c:68:1c:ca:8a:18:7a:e5:73:a8:81:5e:fe:c3:da:7b:06:0d: 22:76:61:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3PtJ5dmd4EFkIocSXmc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1 YmI5MzkwHhcNMjUxMjEyMTQwMDMwWhcNMjUxMjEzMTQwMDMwWjAzMTEwLwYDVQQD EygyYzAyYzcyZGJjMTI0ZDkyOWFlZGI1NDk3OGI1YTYxZGE4NjFhZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrsAyQvP4Ir3oR0r/6U9a+sMbgmU XegsTyELbzIimgkb6Nztj2btqwfiyip0dl8PGtvn4wNVPNtmm4LkmsXMd4vZ82va tDY16RcmnRF2t6wvcbzGNst1+MmGIg1FPUAOetlASxu0LFiA5f+SR3ITo1glBNIN uWPaWW6kZTb0p/7DF2PZgWQYAShERTv3714jtAcsJ7XRrsqM4LbSQe89irjzi/cE scQGReUi5u8rCjjtsB1socxpHJft4tTu1jwoxfkth9w+FVgEWk7x2O+KauLxK7c7 0GY5eoGSMIjp3fo1teYxol6vrcrSH/HGETUmPN359QgF9CO1Un1iy08YxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwCxy28Ek2Smu21SXi1ph2oYa4+MB8GA1UdIwQY MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt Y2IzZmE0MDdlMGY0LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0 LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOS/nPkL nb7xI3hzHbWhVRlc3+ANCz3F/diO45u5RMoe2kX6bU7sBziQGQovHBbDdIuYKYje Kw/TpkIMPcqj40gK/05cYncAcJew6ZQTorsJIYP8gK4Mv73dK67uwNiZfIIjr+9a oMFLqL8Ph/UvMyTRJtalaT19FVJJGUMYpSGaiZvt/mnMO+0se8vAna5ORqWQBZ3s TNePtVfqAVXHsMlMEQyEjlRD0MwXaiW4c3dZPqYgyJ3RAPtspJptu3FQ9m+Mvjky m7pVgZvzWxW1MvajkqOUDxkztEMdRFnV+CQ5MKNe9HsQ0xAkPGgcyooYeuVzqIFe /sPaewYNInZhvw== -----END CERTIFICATE-----Generated at Fri Dec 12 17:02:56 2025 by rpki-client