This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json) Hash identifier: qXos0wDAhtsjzQal8FcNp3GzbD4F7eHSmJfmQecArE4= Subject key identifier: 5E:FF:73:B4:68:67:85:1F:5E:64:6C:0B:A7:CF:66:1D:63:9E:0E:D9 Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Certificate serial: 019B4BF257B04A883679C7BA9540A34CE73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft Manifest number: 04B1 Signing time: Tue 23 Dec 2025 16:02:11 +0000 Manifest this update: Tue 23 Dec 2025 16:02:11 +0000 Manifest next update: Wed 24 Dec 2025 16:02:11 +0000 Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: 1qgeMT8Fid+IR2BxEra6uEvUQC7GDKBI0Cbc74TU+bw=) 2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:57:b0:4a:88:36:79:c7:ba:95:40:a3:4c:e7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Validity Not Before: Dec 23 16:02:11 2025 GMT Not After : Dec 24 16:02:11 2025 GMT Subject: CN=5eff73b46867851f5e646c0ba7cf661d639e0ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:fb:3e:a6:cf:b0:02:c8:ab:f3:95:32:cf: 9a:3a:9e:56:8b:5c:3d:e6:a1:f4:91:03:dd:a6:91: 42:e2:a7:b2:ef:39:b9:c8:38:0e:e0:20:08:24:6b: d3:86:df:89:83:88:2c:64:5d:88:1c:fd:54:4e:34: 0a:27:5d:7d:2e:d1:fa:ae:6b:d8:64:26:00:48:d8: 4a:1f:37:d1:ea:d1:e3:ae:e5:17:41:0d:8d:3c:b8: 20:e9:bc:d3:c6:45:d8:d5:68:6f:29:4e:85:f7:82: c5:60:a0:42:b8:97:86:24:8d:45:02:4c:a1:1a:cb: 21:81:31:a2:c0:a6:fb:21:ad:81:03:c9:46:83:65: 58:d1:64:d6:d6:89:a8:23:39:14:b6:ba:00:a0:ee: 0c:08:b2:12:ef:68:cf:90:0c:fe:71:87:33:bf:d1: 33:0f:d5:61:74:28:04:89:dd:b2:69:59:99:b4:ca: e8:4c:de:a7:53:db:eb:b6:10:17:eb:c9:f4:08:c0: 23:c1:29:22:79:00:34:30:60:03:27:e3:d3:45:81: 44:7e:15:c3:4c:a8:e3:d2:2e:7d:a3:ae:9f:7f:8a: 0a:3b:51:e9:a6:91:0c:e7:ac:40:a6:ac:6b:64:d9: 9f:03:95:8c:df:60:b9:dc:50:39:e4:9b:e4:0f:90: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FF:73:B4:68:67:85:1F:5E:64:6C:0B:A7:CF:66:1D:63:9E:0E:D9 X509v3 Authority Key Identifier: keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:e3:59:b3:26:86:e5:0d:65:77:de:af:c8:3a:2e:f7:7c: 1c:de:01:fe:4a:56:90:62:d5:a0:85:ff:f0:c5:60:a5:29:4b: c2:f0:59:0b:25:b8:71:b1:d7:fd:80:a4:83:7d:d0:f2:36:26: db:15:ae:6b:50:7b:36:49:7b:87:25:79:94:4b:92:d9:d3:b0: 66:09:e3:40:6c:32:3b:12:51:ab:78:7e:cb:68:86:a8:66:ec: e3:78:60:a9:42:06:ab:00:e3:5c:d9:a8:b0:8e:46:db:a7:79: c4:a8:d4:23:75:6d:c0:09:62:54:77:a3:2e:2b:c6:86:1f:59: 98:6b:6e:89:2a:f3:a1:1f:22:b4:94:88:5c:42:9f:3d:e1:fe: 46:73:02:c0:2e:61:18:d8:3e:8c:9b:ef:39:f1:bd:89:4d:43: fd:7d:47:c7:42:6d:7d:c7:22:a1:76:d3:fa:3a:a6:dc:38:bf: 1a:01:dd:66:2b:90:8a:b6:68:09:bf:bc:89:4d:92:72:37:5a: d2:ae:b3:5d:f1:c5:da:70:39:26:7c:7a:b6:51:4f:53:07:71: 51:c6:a9:3a:06:42:e7:4e:8e:a0:48:8f:4f:8e:7e:97:e1:80: 11:61:4e:e6:41:43:04:20:4b:be:7f:8a:9f:ab:54:4b:27:eb: fc:e2:43:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8lewSog2ece6lUCjTOc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Nzc5NmUxNmI1NjVkNzI3MzY2OTg2Y2M5Y2E5Y2E2M2Qx YTRlNTgwHhcNMjUxMjIzMTYwMjExWhcNMjUxMjI0MTYwMjExWjAzMTEwLwYDVQQD Eyg1ZWZmNzNiNDY4Njc4NTFmNWU2NDZjMGJhN2NmNjYxZDYzOWUwZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm77PqbPsALIq/OVMs+aOp5Wi1w9 5qH0kQPdppFC4qey7zm5yDgO4CAIJGvTht+Jg4gsZF2IHP1UTjQKJ119LtH6rmvY ZCYASNhKHzfR6tHjruUXQQ2NPLgg6bzTxkXY1WhvKU6F94LFYKBCuJeGJI1FAkyh GsshgTGiwKb7Ia2BA8lGg2VY0WTW1omoIzkUtroAoO4MCLIS72jPkAz+cYczv9Ez D9VhdCgEid2yaVmZtMroTN6nU9vrthAX68n0CMAjwSkieQA0MGADJ+PTRYFEfhXD TKjj0i59o66ff4oKO1HpppEM56xApqxrZNmfA5WM32C53FA55JvkD5AzywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7/c7RoZ4UfXmRsC6fPZh1jng7ZMB8GA1UdIwQY MBaAFNd3luFrVl1yc2aYbMnKnKY9Gk5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTct MTU1ZmQwYjQzZjlmLzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTctMTU1ZmQwYjQzZjlm LzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRbjWbMm huUNZXfer8g6Lvd8HN4B/kpWkGLVoIX/8MVgpSlLwvBZCyW4cbHX/YCkg33Q8jYm 2xWua1B7Nkl7hyV5lEuS2dOwZgnjQGwyOxJRq3h+y2iGqGbs43hgqUIGqwDjXNmo sI5G26d5xKjUI3VtwAliVHejLivGhh9ZmGtuiSrzoR8itJSIXEKfPeH+RnMCwC5h GNg+jJvvOfG9iU1D/X1Hx0JtfccioXbT+jqm3Di/GgHdZiuQirZoCb+8iU2Scjda 0q6zXfHF2nA5Jnx6tlFPUwdxUcapOgZC506OoEiPT45+l+GAEWFO5kFDBCBLvn+K n6tUSyfr/OJDCw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:48:30 2025 by rpki-client