This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json) Hash identifier: rRXiVUYeYayJYTmQ5bRHTp5jcFVQxfxaPHE7tnfEsq4= Subject key identifier: 79:F4:F6:0D:42:28:D6:7A:B0:DB:00:1A:A1:C7:E4:AC:E6:15:3A:32 Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35 Certificate serial: 019B3CB52C67AD91A1FF4F6E91430654A5AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft Manifest number: 16E1 Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: KRq4POE/9x6y4sNTc67Cx+lHkbSH5OYaV7V38HHF8Mg=) 2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2c:67:ad:91:a1:ff:4f:6e:91:43:06:54:a5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35 Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=79f4f60d4228d67ab0db001aa1c7e4ace6153a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:d8:ba:7c:b2:37:c9:05:91:76:c1:96:47: 77:19:25:11:22:94:8c:5b:11:06:42:cd:fb:dd:48: b6:1f:13:08:dc:7c:54:88:46:cd:02:cf:1b:2a:31: 4a:e1:75:17:a1:72:30:bd:9a:ae:65:8e:7c:2f:92: 31:08:58:11:f8:e0:04:52:5d:0c:96:79:04:bb:05: da:d5:8e:ba:93:35:5c:57:9a:ce:d0:34:35:5e:43: de:62:2b:37:ee:f2:67:4c:5f:cf:98:e2:85:74:43: fb:e6:b6:a4:3f:c4:28:92:7d:7a:4b:42:4c:6d:17: f9:80:ae:21:ae:f1:cf:fb:f4:76:8c:13:3e:ec:6f: 58:02:ad:21:2a:b4:ca:c8:97:22:e6:d5:7e:71:aa: 71:d4:ab:44:02:ae:0c:b3:76:66:31:8f:7e:67:ae: 38:78:a2:4e:af:85:84:fb:01:33:70:1c:45:f9:4b: 43:4e:9e:d1:00:24:b3:57:be:1d:69:cf:cf:cb:e1: a9:06:e9:1b:42:51:3f:9a:ea:86:e0:4b:c1:6b:7a: 33:59:fb:da:29:27:cb:58:6c:76:37:85:1f:f9:44: 01:19:d7:ad:69:3d:43:45:8c:e2:76:10:92:52:43: 6d:9d:66:9f:f0:71:ed:d5:71:ff:93:b6:75:ea:c3: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F4:F6:0D:42:28:D6:7A:B0:DB:00:1A:A1:C7:E4:AC:E6:15:3A:32 X509v3 Authority Key Identifier: keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:7d:0e:eb:f9:7b:fc:82:0c:d7:52:04:a6:ee:98:45:c5: 1e:ea:d5:a8:a7:d8:e9:87:22:eb:d4:15:27:92:43:e4:2b:ac: d5:33:02:8b:3f:6e:c4:dd:15:cd:e7:9f:f1:f4:54:6e:2e:26: 94:80:6a:bc:5c:5c:a7:dd:98:ce:a5:48:13:de:87:d4:23:ae: 6c:c8:95:6c:f2:f2:59:62:72:c6:ad:a5:ce:d3:93:78:a7:b4: 0d:a2:ee:9a:d6:ca:e0:88:10:9f:b2:e6:0c:d1:fd:45:7f:4f: fa:1e:c5:bd:c8:84:ee:9e:56:48:32:4e:bf:e2:1c:c3:6a:32: 3c:b3:88:73:a9:45:84:3d:fd:8d:05:59:ac:7d:01:4b:b3:ed: c4:f4:29:14:b7:62:aa:4c:6d:f2:00:19:a8:70:24:7f:48:f7: 88:fe:cb:3a:06:6b:24:79:8c:a6:22:b1:76:8b:26:d5:86:bc: a2:70:a4:48:79:6f:5a:09:e5:e2:ce:ee:c7:1c:3f:d9:c3:17: 89:25:90:05:80:bc:08:12:1b:98:03:da:87:b5:aa:51:b2:e6: 7f:fb:13:2f:d0:c1:d4:fa:6b:a1:22:7b:3f:a2:cd:e1:22:94: 63:c8:5a:e5:4d:f2:27:15:c2:b8:69:b1:4d:b5:d7:5f:ec:b6: fa:94:fe:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSxnrZGh/09ukUMGVKWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0 NTVmMzUwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD Eyg3OWY0ZjYwZDQyMjhkNjdhYjBkYjAwMWFhMWM3ZTRhY2U2MTUzYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3krYunyyN8kFkXbBlkd3GSURIpSM WxEGQs373Ui2HxMI3HxUiEbNAs8bKjFK4XUXoXIwvZquZY58L5IxCFgR+OAEUl0M lnkEuwXa1Y66kzVcV5rO0DQ1XkPeYis37vJnTF/PmOKFdEP75rakP8Qokn16S0JM bRf5gK4hrvHP+/R2jBM+7G9YAq0hKrTKyJci5tV+capx1KtEAq4Ms3ZmMY9+Z644 eKJOr4WE+wEzcBxF+UtDTp7RACSzV74dac/Py+GpBukbQlE/muqG4EvBa3ozWfva KSfLWGx2N4Uf+UQBGdetaT1DRYzidhCSUkNtnWaf8HHt1XH/k7Z16sN7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn09g1CKNZ6sNsAGqHH5KzmFToyMB8GA1UdIwQY MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5 LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGN9Duv5 e/yCDNdSBKbumEXFHurVqKfY6Yci69QVJ5JD5Cus1TMCiz9uxN0Vzeef8fRUbi4m lIBqvFxcp92YzqVIE96H1COubMiVbPLyWWJyxq2lztOTeKe0DaLumtbK4IgQn7Lm DNH9RX9P+h7FvciE7p5WSDJOv+Icw2oyPLOIc6lFhD39jQVZrH0BS7PtxPQpFLdi qkxt8gAZqHAkf0j3iP7LOgZrJHmMpiKxdosm1Ya8onCkSHlvWgnl4s7uxxw/2cMX iSWQBYC8CBIbmAPah7WqUbLmf/sTL9DB1PproSJ7P6LN4SKUY8ha5U3yJxXCuGmx TbXXX+y2+pT+ZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:23 2025 by rpki-client