This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json) Hash identifier: GWWUrkRQyMxbBGD4u0d05+Wp9hASUVfwYfwr9MzW384= Subject key identifier: A0:42:67:94:C1:32:E5:CA:1D:1A:CB:9D:F3:F9:42:18:CA:C8:A6:99 Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019B5A888C78187DEC418730A8A03BFE877D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft Manifest number: 0DBE Signing time: Fri 26 Dec 2025 12:00:56 +0000 Manifest this update: Fri 26 Dec 2025 12:00:56 +0000 Manifest next update: Sat 27 Dec 2025 12:00:56 +0000 Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: zryklVB22GqcuTVO3BRS+pOrEgFk0Me5hFCQ1HbYBVA=) 2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:8c:78:18:7d:ec:41:87:30:a8:a0:3b:fe:87:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Dec 26 12:00:56 2025 GMT Not After : Dec 27 12:00:56 2025 GMT Subject: CN=a0426794c132e5ca1d1acb9df3f94218cac8a699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:91:2d:72:3f:f8:bb:15:49:ee:41:e5:95: 02:8b:66:57:ae:8e:7c:f0:92:d4:ad:5c:35:8a:60: 3c:0c:bb:4e:40:c5:46:ad:dc:41:a7:2b:f0:c6:db: 9c:7e:0d:0c:ee:25:e7:52:88:1a:c5:f6:84:ce:f9: 36:dd:30:c5:56:0e:21:f0:c7:5a:d4:8d:fd:71:2e: 3c:cc:d0:88:ee:d0:15:cb:81:28:e1:f1:c5:c5:fb: e6:12:10:15:43:7d:af:82:20:b3:cb:59:ed:4e:ca: 1c:d8:e7:61:50:5a:a3:ed:33:f2:e6:31:81:36:6d: 21:39:47:88:56:5c:7c:57:57:93:7b:ab:e6:e6:0d: 6f:05:e9:b0:96:55:8e:b1:0e:43:3c:5e:5c:55:b2: 26:0d:e5:cc:9a:91:b2:0b:a6:f7:b4:87:74:72:e1: 93:33:49:c8:2c:02:c6:74:8f:09:2b:f9:5f:7d:56: 0e:17:f8:44:f4:d6:b8:41:ff:d3:79:0a:49:be:65: 78:71:19:7f:0a:41:a0:54:f5:d5:30:72:a3:51:03: 0b:af:cd:11:65:94:1d:3a:18:3e:32:f9:e3:90:1c: 59:1c:f8:bc:cb:ee:cd:a7:c4:61:a9:49:27:fc:64: 7f:22:51:e0:f7:66:cf:d0:2e:5e:df:16:3e:f2:a3: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:67:94:C1:32:E5:CA:1D:1A:CB:9D:F3:F9:42:18:CA:C8:A6:99 X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:87:3b:94:a4:52:6f:14:5e:14:87:d8:a9:4d:4b:38:49:fd: e9:75:1f:0e:d6:e3:f6:3e:4b:32:59:95:bf:65:05:6b:1a:f3: 7d:23:0b:9b:49:17:a3:f0:28:b4:29:04:ee:31:12:e4:cb:26: e3:a3:cd:e9:4a:ac:8b:84:c3:c9:3f:26:db:53:29:ef:53:34: d2:f2:da:bc:5e:c8:ed:ad:9f:58:3a:8c:29:00:a1:e2:27:56: 3f:06:dc:12:ff:18:dc:56:9e:84:d3:24:93:69:81:38:78:ed: 26:1f:97:3f:d3:8a:00:80:de:fa:61:93:ec:ba:65:ad:23:1d: ba:6e:d2:2c:b9:20:74:9d:25:72:dd:cc:ed:ba:4a:c2:9d:df: 19:77:61:30:8c:b0:a5:27:2d:c5:a2:5e:07:92:9d:9e:13:f6: 89:96:38:3a:47:1a:0c:ef:81:7d:d4:d8:66:78:9c:48:51:6e: b1:35:96:75:d8:8b:ef:c8:59:60:7d:e7:fe:37:dc:ee:04:5a: f0:f6:b2:42:3d:4b:5b:44:aa:95:0c:04:d3:29:eb:e4:96:d1: 9a:12:b0:6f:a0:7c:3f:f1:c7:9b:80:8f:6d:43:27:8e:28:5e: ba:05:75:07:8f:7c:62:52:91:d8:a2:59:9b:bd:79:68:1b:cd: 08:8f:f9:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIx4GH3sQYcwqKA7/od9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjUxMjI2MTIwMDU2WhcNMjUxMjI3MTIwMDU2WjAzMTEwLwYDVQQD EyhhMDQyNjc5NGMxMzJlNWNhMWQxYWNiOWRmM2Y5NDIxOGNhYzhhNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IKRLXI/+LsVSe5B5ZUCi2ZXro58 8JLUrVw1imA8DLtOQMVGrdxBpyvwxtucfg0M7iXnUogaxfaEzvk23TDFVg4h8Mda 1I39cS48zNCI7tAVy4Eo4fHFxfvmEhAVQ32vgiCzy1ntTsoc2OdhUFqj7TPy5jGB Nm0hOUeIVlx8V1eTe6vm5g1vBemwllWOsQ5DPF5cVbImDeXMmpGyC6b3tId0cuGT M0nILALGdI8JK/lffVYOF/hE9Na4Qf/TeQpJvmV4cRl/CkGgVPXVMHKjUQMLr80R ZZQdOhg+MvnjkBxZHPi8y+7Np8RhqUkn/GR/IlHg92bP0C5e3xY+8qNsFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBCZ5TBMuXKHRrLnfP5QhjKyKaZMB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoc7lKRS bxReFIfYqU1LOEn96XUfDtbj9j5LMlmVv2UFaxrzfSMLm0kXo/AotCkE7jES5Msm 46PN6Uqsi4TDyT8m21Mp71M00vLavF7I7a2fWDqMKQCh4idWPwbcEv8Y3FaehNMk k2mBOHjtJh+XP9OKAIDe+mGT7LplrSMdum7SLLkgdJ0lct3M7bpKwp3fGXdhMIyw pSctxaJeB5KdnhP2iZY4OkcaDO+BfdTYZnicSFFusTWWddiL78hZYH3n/jfc7gRa 8PayQj1LW0SqlQwE0ynr5JbRmhKwb6B8P/HHm4CPbUMnjiheugV1B498YlKR2KJZ m715aBvNCI/5Rg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:11 2025 by rpki-client