This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json) Hash identifier: zyIbkGxNa2zO5PrB7xmsQTfAhVgrWXyQ0a8AAtJkKT8= Subject key identifier: 76:3C:DE:76:A8:9F:FD:60:B2:ED:38:91:9F:CD:C5:72:81:2B:9C:8B Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5 Certificate serial: 019B40FF893556184BF65728FE9F67E3C8B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft Manifest number: 03B3 Signing time: Sun 21 Dec 2025 13:00:47 +0000 Manifest this update: Sun 21 Dec 2025 13:00:47 +0000 Manifest next update: Mon 22 Dec 2025 13:00:47 +0000 Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=) 2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: m1cRUGBuNd7Pw0YysJPvuPYCRyZ8fIYgSYWUedlnTfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:89:35:56:18:4b:f6:57:28:fe:9f:67:e3:c8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13701ebe06799de0969899205150e532deffe7b5 Validity Not Before: Dec 21 13:00:47 2025 GMT Not After : Dec 22 13:00:47 2025 GMT Subject: CN=763cde76a89ffd60b2ed38919fcdc572812b9c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:f6:a3:90:4a:0c:0c:92:0d:4a:99:69:23: 3f:5f:74:c2:1c:f2:a0:7d:59:b0:fd:6c:f3:c4:f1: 7c:e9:bb:83:20:32:71:0c:a1:3c:a0:d3:38:ea:33: b2:30:38:48:22:e4:dc:71:2b:4d:07:b6:69:fe:02: 19:36:bb:dc:4f:f7:b1:66:93:66:06:20:6a:7b:89: d1:e5:33:ea:48:36:1b:c5:49:be:73:f6:29:d6:86: de:2d:6a:66:36:78:65:ed:e9:f6:33:d7:45:1c:95: 66:21:d4:eb:3a:5d:50:40:cb:5e:10:ee:6b:b3:f4: 91:8b:d9:95:90:19:44:ff:4e:7d:e7:da:dd:ad:da: 0d:dc:d1:c7:5e:1c:a3:10:d3:b5:24:2e:52:96:a3: 22:c2:f9:53:14:d9:f5:b8:cf:6b:38:fd:68:97:41: eb:20:9d:22:84:19:5e:de:92:74:44:48:cb:3a:ca: f0:dc:4b:4a:68:17:53:3c:ac:8e:7c:f8:f0:d4:f6: af:8e:45:8b:32:9a:66:8a:a6:7e:1e:f6:bb:4e:e8: 22:1b:63:c7:6b:d2:9f:9c:7a:9d:80:82:52:e7:96: 33:99:aa:52:27:75:33:51:03:91:fe:5d:89:40:90: eb:fd:78:26:42:08:f0:69:b9:0d:ff:6f:3c:18:2b: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3C:DE:76:A8:9F:FD:60:B2:ED:38:91:9F:CD:C5:72:81:2B:9C:8B X509v3 Authority Key Identifier: keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:f5:81:65:3a:ca:89:e6:b1:54:8f:c2:17:5c:bc:d8:75: 73:98:87:fc:d2:11:c5:31:8b:09:4f:2a:01:ef:b0:4b:64:79: d4:b1:a2:4f:ec:2c:50:76:46:80:b5:e9:80:83:6c:d4:59:8a: 3b:78:67:26:62:c0:5b:f1:32:a1:07:b2:14:25:55:43:20:32: bd:42:69:63:bf:86:16:36:56:34:ed:5b:35:67:5b:26:ac:3c: 69:22:b6:95:69:7a:b7:3d:a2:df:98:85:8c:ec:1c:99:a3:08: a4:4b:ee:d0:8b:88:39:eb:fb:8a:04:ca:35:b0:8e:45:88:46: 7d:5f:f0:bb:d6:94:18:44:39:31:f9:76:f7:57:58:72:a5:5a: d5:84:76:2d:89:b0:b2:bf:6f:f5:dc:0e:a3:e8:d1:73:ee:11: 39:94:3d:34:2d:d0:2b:dd:ca:cd:32:6d:07:74:b5:ec:8f:7f: ef:00:9e:47:aa:de:e0:c4:c8:e8:ab:32:34:27:48:66:ce:ce: 8e:ae:c5:48:6d:71:be:30:a3:c7:ed:9f:73:de:f4:c1:60:5b: e3:93:8e:ed:c8:e0:cf:5e:b6:07:2f:d4:b5:b0:12:b6:06:09: 24:52:c8:d8:3c:b0:32:a6:00:20:45:05:33:fe:f6:67:a8:df: 93:a2:86:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4k1VhhL9lco/p9n48i3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm ZmU3YjUwHhcNMjUxMjIxMTMwMDQ3WhcNMjUxMjIyMTMwMDQ3WjAzMTEwLwYDVQQD Eyg3NjNjZGU3NmE4OWZmZDYwYjJlZDM4OTE5ZmNkYzU3MjgxMmI5YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33T2o5BKDAySDUqZaSM/X3TCHPKg fVmw/WzzxPF86buDIDJxDKE8oNM46jOyMDhIIuTccStNB7Zp/gIZNrvcT/exZpNm BiBqe4nR5TPqSDYbxUm+c/Yp1obeLWpmNnhl7en2M9dFHJVmIdTrOl1QQMteEO5r s/SRi9mVkBlE/05959rdrdoN3NHHXhyjENO1JC5SlqMiwvlTFNn1uM9rOP1ol0Hr IJ0ihBle3pJ0REjLOsrw3EtKaBdTPKyOfPjw1PavjkWLMppmiqZ+Hva7TugiG2PH a9KfnHqdgIJS55YzmapSJ3UzUQOR/l2JQJDr/XgmQgjwabkN/288GCuxCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY83naon/1gsu04kZ/NxXKBK5yLMB8GA1UdIwQY MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNH1gWU6 yonmsVSPwhdcvNh1c5iH/NIRxTGLCU8qAe+wS2R51LGiT+wsUHZGgLXpgINs1FmK O3hnJmLAW/EyoQeyFCVVQyAyvUJpY7+GFjZWNO1bNWdbJqw8aSK2lWl6tz2i35iF jOwcmaMIpEvu0IuIOev7igTKNbCORYhGfV/wu9aUGEQ5Mfl291dYcqVa1YR2LYmw sr9v9dwOo+jRc+4ROZQ9NC3QK93KzTJtB3S17I9/7wCeR6re4MTI6KsyNCdIZs7O jq7FSG1xvjCjx+2fc970wWBb45OO7cjgz162By/UtbAStgYJJFLI2DywMqYAIEUF M/72Z6jfk6KGZg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:52 2025 by rpki-client