This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json) Hash identifier: xGwJHtc5AoFyr4ZD6dkmgFXs3swVzTSvzBfXDBgTvhU= Subject key identifier: 81:88:1F:AF:D0:45:42:2A:C9:5C:7C:D7:9C:B7:78:6E:51:8E:F3:06 Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394 Certificate serial: 019B1C4E200806F0D390D2E34A01BA1EEAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 10:00:40 +0000 Manifest this update: Sun 14 Dec 2025 10:00:40 +0000 Manifest next update: Mon 15 Dec 2025 10:00:40 +0000 Files and hashes: 1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: YprUOkYi15jsq0APnL83kzMcuGzyrE4srwYJJY1kMPQ=) 2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:20:08:06:f0:d3:90:d2:e3:4a:01:ba:1e:ea:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394 Validity Not Before: Dec 14 10:00:40 2025 GMT Not After : Dec 15 10:00:40 2025 GMT Subject: CN=81881fafd045422ac95c7cd79cb7786e518ef306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:d4:48:09:3a:e9:84:13:8f:cc:9d:c7:05: b2:ed:73:68:34:52:82:6e:4c:7e:d4:f0:03:d0:cb: e1:7c:45:b5:2e:c5:00:63:b1:5b:57:d8:26:93:17: 83:f8:fc:17:ee:96:2b:13:23:19:c5:48:47:3c:63: 42:63:7a:2b:c7:9c:47:8a:5d:5d:05:7f:d6:81:f3: 49:55:b3:c4:6c:2b:81:63:d9:50:33:44:40:8b:bb: 13:77:ab:1a:a6:fb:86:e1:65:47:bc:38:f5:a0:69: f2:a7:8b:dd:cc:84:70:21:e0:af:3d:4e:fc:45:51: f2:31:a9:77:8c:b3:17:0e:e4:fc:51:b2:32:c7:b4: 5c:aa:2c:1f:5d:1f:67:35:a9:9e:b5:38:09:de:b0: 45:34:c1:4e:13:b8:7a:98:6a:c7:91:5b:63:0d:4a: 48:af:14:60:67:6f:0f:00:03:3d:91:5b:c4:83:d4: ec:96:2d:b4:0a:d9:00:b6:08:f7:cd:7f:66:47:b3: f3:7f:a8:6c:c6:4b:a9:68:b3:10:fc:87:f4:e4:92: be:79:c1:d3:af:0b:9b:9b:9d:ff:ff:e2:9a:6a:7b: 15:70:92:b8:3e:33:f7:cc:fb:db:a0:8e:54:89:5a: 7f:23:4b:a0:c9:ff:65:d9:9e:77:45:dc:32:c8:14: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:1F:AF:D0:45:42:2A:C9:5C:7C:D7:9C:B7:78:6E:51:8E:F3:06 X509v3 Authority Key Identifier: keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3a:5b:0e:da:13:ef:de:b2:6f:59:bc:ae:5b:0f:dd:87:2f: e3:a0:02:5c:74:3b:2b:8e:1c:8a:b9:8b:e0:b1:92:e7:cd:51: 37:bc:fa:96:a2:25:e4:f2:55:50:35:aa:77:53:b7:cf:c0:0a: cf:75:16:7b:d0:7f:9f:e7:e2:5d:20:43:ce:be:c7:49:2e:f4: 93:7d:fb:62:ce:f8:70:fb:fe:9e:2a:07:11:42:73:7f:46:76: 92:fc:fb:02:86:16:c1:4c:14:4b:ca:50:ec:62:9f:97:f1:66: 9b:ba:97:be:48:f1:f3:56:7c:1a:59:28:d3:56:b5:76:ad:a4: 60:8b:44:e4:7c:3b:22:84:4f:f2:aa:ee:e2:9f:1b:4a:85:6f: 07:95:5c:5b:13:67:20:0f:85:8c:e1:f2:cf:a8:e1:04:64:ee: 92:17:48:88:74:38:49:b4:a1:66:72:b6:40:d0:f7:e6:4f:46: bf:12:8c:c1:4b:15:fd:f7:2c:24:96:bd:e8:f8:5f:50:08:a0: 09:e9:61:5a:38:45:cf:22:53:8b:6a:51:46:b6:c2:0c:07:1f: a6:ea:e1:d5:13:c8:0d:72:46:76:61:1c:2c:f8:f9:8a:71:e7: 0a:fa:b4:e0:9a:46:94:33:2a:6d:1b:6a:a5:e8:2d:09:2b:df: ba:80:e8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTiAIBvDTkNLjSgG6HurXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi OTczOTQwHhcNMjUxMjE0MTAwMDQwWhcNMjUxMjE1MTAwMDQwWjAzMTEwLwYDVQQD Eyg4MTg4MWZhZmQwNDU0MjJhYzk1YzdjZDc5Y2I3Nzg2ZTUxOGVmMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJrUSAk66YQTj8ydxwWy7XNoNFKC bkx+1PAD0MvhfEW1LsUAY7FbV9gmkxeD+PwX7pYrEyMZxUhHPGNCY3orx5xHil1d BX/WgfNJVbPEbCuBY9lQM0RAi7sTd6sapvuG4WVHvDj1oGnyp4vdzIRwIeCvPU78 RVHyMal3jLMXDuT8UbIyx7RcqiwfXR9nNametTgJ3rBFNMFOE7h6mGrHkVtjDUpI rxRgZ28PAAM9kVvEg9Tsli20CtkAtgj3zX9mR7Pzf6hsxkupaLMQ/If05JK+ecHT rwubm53//+KaansVcJK4PjP3zPvboI5UiVp/I0ugyf9l2Z53RdwyyBTSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGIH6/QRUIqyVx815y3eG5RjvMGMB8GA1UdIwQY MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt MDM0YmNmNGViZGNiLzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjpbDtoT 796yb1m8rlsP3Ycv46ACXHQ7K44cirmL4LGS581RN7z6lqIl5PJVUDWqd1O3z8AK z3UWe9B/n+fiXSBDzr7HSS70k337Ys74cPv+nioHEUJzf0Z2kvz7AoYWwUwUS8pQ 7GKfl/Fmm7qXvkjx81Z8Glko01a1dq2kYItE5Hw7IoRP8qru4p8bSoVvB5VcWxNn IA+FjOHyz6jhBGTukhdIiHQ4SbShZnK2QND35k9GvxKMwUsV/fcsJJa96PhfUAig CelhWjhFzyJTi2pRRrbCDAcfpurh1RPIDXJGdmEcLPj5inHnCvq04JpGlDMqbRtq pegtCSvfuoDoiw== -----END CERTIFICATE-----Generated at Sun Dec 14 17:26:20 2025 by rpki-client