This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json) Hash identifier: ldUesyXA8JTPbqodxfGEblPBBplBW829hDd1EhWAvRA= Subject key identifier: E4:2F:55:6A:A7:D3:57:1B:2C:EB:00:3B:66:D4:2D:86:C7:24:86:59 Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35 Certificate serial: 019B3EA3C1A432C2BD80A743B9A5D5DAC3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft Manifest number: 16E2 Signing time: Sun 21 Dec 2025 02:01:17 +0000 Manifest this update: Sun 21 Dec 2025 02:01:17 +0000 Manifest next update: Mon 22 Dec 2025 02:01:17 +0000 Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: QltxcbCDG1426vUNr25l+VbH0gjMn7M56JSodbWGLcY=) 2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:c1:a4:32:c2:bd:80:a7:43:b9:a5:d5:da:c3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35 Validity Not Before: Dec 21 02:01:17 2025 GMT Not After : Dec 22 02:01:17 2025 GMT Subject: CN=e42f556aa7d3571b2ceb003b66d42d86c7248659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:c2:b0:5d:67:cd:ad:5b:88:f1:54:72:60: 45:4d:64:a0:90:c1:bc:74:e9:c2:03:4c:9d:c1:83: a6:86:e8:71:14:06:4c:6c:81:74:0e:77:b3:53:1a: 4b:65:62:ec:f6:80:05:96:37:e8:6a:0b:95:e0:19: 1c:fc:72:8b:b4:c3:b2:8b:b7:85:0e:f4:68:94:2a: 76:5a:78:74:ed:25:07:23:6a:6a:15:05:1a:b4:2e: 0a:ec:a5:35:aa:4a:85:2e:9b:3a:c1:2c:24:0a:65: 7c:b1:2a:28:9b:00:bf:47:70:19:11:3d:c4:b4:bc: a9:12:95:61:b7:54:5d:df:f8:2b:be:50:a1:50:d1: 22:57:19:00:17:26:46:e5:54:a1:d0:cc:11:45:76: 9d:5b:23:89:ed:d3:1c:a2:b6:b0:ef:90:1a:e2:f8: 6d:62:53:f7:7f:e0:e7:fe:05:68:58:84:d1:fc:0b: 43:6e:67:b4:cb:8c:82:1a:18:80:40:4f:2f:0a:c4: c4:43:bc:5c:c8:5a:37:11:84:6f:21:33:7c:76:bb: b3:a6:a2:ac:d5:37:1f:39:95:af:1f:0f:ba:f9:29: 4b:29:09:eb:31:12:3f:a5:00:50:8a:28:5b:6e:d2: 82:45:50:08:25:53:fa:62:e5:18:ac:98:53:5e:66: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:55:6A:A7:D3:57:1B:2C:EB:00:3B:66:D4:2D:86:C7:24:86:59 X509v3 Authority Key Identifier: keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:36:9e:54:5d:3b:15:a2:08:1b:85:c9:ff:23:db:68:e5:ee: 31:16:cc:6a:8f:34:86:27:3b:f4:d7:10:90:e1:42:a7:c4:f9: 01:96:2e:90:99:5d:4e:e7:01:cc:66:b0:d9:c6:88:e4:ff:fd: cc:7a:91:85:cf:ac:a4:2d:ac:33:ac:b6:01:91:ff:a7:16:42: b1:f7:a5:d3:31:d9:8d:fd:92:37:3e:09:20:29:3d:5f:b6:e0: a6:6d:a9:29:be:9a:6d:a3:4e:f3:f5:ac:a3:67:87:37:25:e6: ee:f4:50:a8:55:2a:4a:b1:52:47:69:de:5f:f7:28:85:46:0e: 08:40:01:76:bc:c2:ac:e3:23:c2:e3:2d:b5:ba:62:62:04:ee: 5e:d9:b2:79:a0:5c:ba:9b:0c:9f:8f:d4:d0:53:cc:0c:a9:ea: 77:75:73:7c:da:86:d3:37:4e:7f:ae:a0:80:1b:f5:5d:dc:de: 54:11:07:93:a7:1b:08:a5:b7:28:55:9d:c3:1e:02:3d:7b:0c: d2:5d:a7:25:5b:25:29:3f:b2:4f:03:a6:6d:9f:0f:6f:93:4f: e2:e1:bb:6e:9e:43:cd:09:82:f8:d8:9c:ec:e6:ec:54:5b:64: 33:3f:2e:d2:cb:ac:97:fc:40:5e:c5:c2:e2:26:d3:b0:13:7a: 8a:bf:4c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o8GkMsK9gKdDuaXV2sPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0 NTVmMzUwHhcNMjUxMjIxMDIwMTE3WhcNMjUxMjIyMDIwMTE3WjAzMTEwLwYDVQQD EyhlNDJmNTU2YWE3ZDM1NzFiMmNlYjAwM2I2NmQ0MmQ4NmM3MjQ4NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDCsF1nza1biPFUcmBFTWSgkMG8 dOnCA0ydwYOmhuhxFAZMbIF0DnezUxpLZWLs9oAFljfoaguV4Bkc/HKLtMOyi7eF DvRolCp2Wnh07SUHI2pqFQUatC4K7KU1qkqFLps6wSwkCmV8sSoomwC/R3AZET3E tLypEpVht1Rd3/grvlChUNEiVxkAFyZG5VSh0MwRRXadWyOJ7dMcoraw75Aa4vht YlP3f+Dn/gVoWITR/AtDbme0y4yCGhiAQE8vCsTEQ7xcyFo3EYRvITN8druzpqKs 1TcfOZWvHw+6+SlLKQnrMRI/pQBQiihbbtKCRVAIJVP6YuUYrJhTXmYQrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQvVWqn01cbLOsAO2bULYbHJIZZMB8GA1UdIwQY MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5 LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjaeVF07 FaIIG4XJ/yPbaOXuMRbMao80hic79NcQkOFCp8T5AZYukJldTucBzGaw2caI5P/9 zHqRhc+spC2sM6y2AZH/pxZCsfel0zHZjf2SNz4JICk9X7bgpm2pKb6abaNO8/Ws o2eHNyXm7vRQqFUqSrFSR2neX/cohUYOCEABdrzCrOMjwuMttbpiYgTuXtmyeaBc upsMn4/U0FPMDKnqd3VzfNqG0zdOf66ggBv1XdzeVBEHk6cbCKW3KFWdwx4CPXsM 0l2nJVslKT+yTwOmbZ8Pb5NP4uG7bp5DzQmC+Nic7ObsVFtkMz8u0susl/xAXsXC 4ibTsBN6ir9MGA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:24 2025 by rpki-client