This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json) Hash identifier: jVnjPkiuoQdl0ND/cIo4zVuwh5P83B4NT5AW5pIBzOg= Subject key identifier: 73:92:AA:F9:E7:32:89:64:4A:EB:3D:F2:90:9E:1F:74:4C:67:81:5B Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Certificate serial: 019B0E92656720F661DA1218E8F29117333C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 18:00:33 +0000 Manifest this update: Thu 11 Dec 2025 18:00:33 +0000 Manifest next update: Fri 12 Dec 2025 18:00:33 +0000 Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=) 2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: AmUca0VleB4l6rjg2z1XDYJhhRo9+CON1qdoYiIN4fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:65:67:20:f6:61:da:12:18:e8:f2:91:17:33:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Validity Not Before: Dec 11 18:00:33 2025 GMT Not After : Dec 12 18:00:33 2025 GMT Subject: CN=7392aaf9e73289644aeb3df2909e1f744c67815b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:49:8f:71:f5:f7:b1:52:c5:c7:96:3c:76: a5:54:06:7c:99:c9:3a:95:0f:6e:66:eb:ee:58:a9: 74:08:87:2e:6b:9d:5a:08:7f:c5:b9:a2:6a:7c:5a: e9:e3:f4:b5:cc:ce:55:54:65:d7:13:f5:94:f9:ad: 23:26:d9:cb:bf:ed:89:d3:d2:13:93:67:d7:52:e2: 1e:77:29:ad:d0:4a:75:ed:88:88:f8:fb:08:18:67: 70:f3:f0:7d:2a:ca:90:a7:58:35:da:b2:fa:8e:11: 75:f3:34:85:00:8b:f0:ee:8f:ef:fe:17:22:85:7c: d6:63:2e:6d:da:3b:c2:0b:c2:c2:ac:ad:d7:df:63: 88:03:17:f0:f0:b9:00:a2:48:a8:79:d8:a6:cf:b5: a3:c8:4a:5f:72:08:46:3b:44:a3:0a:c5:ea:a8:32: 87:a2:8f:5e:b6:d8:9c:a0:ab:1b:5d:ce:3e:ea:c6: 2e:8f:3e:be:8f:df:00:24:3a:77:36:49:2f:b4:c7: 87:52:11:e1:f3:10:d4:12:b6:39:62:7f:8a:a2:34: a9:d8:31:a3:d0:cd:5f:ef:38:f9:51:05:04:2f:20: 15:7e:10:c1:a1:c8:d4:c2:59:5e:5c:a5:54:43:e0: 38:14:cd:c2:7a:d9:7d:92:58:e5:c6:74:c8:7f:cb: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:92:AA:F9:E7:32:89:64:4A:EB:3D:F2:90:9E:1F:74:4C:67:81:5B X509v3 Authority Key Identifier: keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c9:76:19:8a:6c:9e:60:96:33:21:b7:08:5a:a5:7f:48:68: 30:99:71:d5:8e:c9:a4:44:f5:e3:01:77:79:5b:a9:34:03:a0: fd:01:fb:90:c4:2c:ef:f7:3d:93:53:b8:95:fe:a3:f6:06:ad: a7:00:c4:9c:56:68:44:17:d4:aa:bb:d0:0e:6d:59:ff:9e:7d: 68:c4:f5:65:a4:c3:0f:f7:60:fe:bf:49:6e:af:ad:47:dc:be: 28:88:bd:63:ce:47:8b:c2:49:1c:b4:22:97:98:81:d6:5a:c8: 9b:ac:06:1f:ca:2d:28:7b:0c:13:c3:a6:f1:29:e2:9e:db:ce: a9:00:9f:9f:0a:06:5e:7b:e7:09:22:2b:62:c9:57:b1:0e:fa: c9:60:7f:f8:2a:67:7f:93:81:73:6d:c0:52:67:8f:f9:4a:02: 64:d9:0c:2b:d1:1f:91:f1:2f:96:60:75:7e:0b:1a:3a:ee:c7: 1c:98:a6:9e:15:11:e6:34:39:05:49:23:15:90:74:8a:4a:a9: 37:43:ae:f2:5f:d2:c2:36:c6:0b:23:d2:41:71:52:f9:cf:59: f7:b9:42:ea:16:c9:c2:b2:28:78:a4:88:d6:f9:cc:67:02:5d: 8b:3f:21:07:a3:a4:ae:89:bd:7e:6b:07:a5:63:ab:ff:d1:78: f5:a3:a9:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkmVnIPZh2hIY6PKRFzM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi MjliMjEwHhcNMjUxMjExMTgwMDMzWhcNMjUxMjEyMTgwMDMzWjAzMTEwLwYDVQQD Eyg3MzkyYWFmOWU3MzI4OTY0NGFlYjNkZjI5MDllMWY3NDRjNjc4MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBJj3H197FSxceWPHalVAZ8mck6 lQ9uZuvuWKl0CIcua51aCH/FuaJqfFrp4/S1zM5VVGXXE/WU+a0jJtnLv+2J09IT k2fXUuIedymt0Ep17YiI+PsIGGdw8/B9KsqQp1g12rL6jhF18zSFAIvw7o/v/hci hXzWYy5t2jvCC8LCrK3X32OIAxfw8LkAokioedimz7WjyEpfcghGO0SjCsXqqDKH oo9etticoKsbXc4+6sYujz6+j98AJDp3NkkvtMeHUhHh8xDUErY5Yn+KojSp2DGj 0M1f7zj5UQUELyAVfhDBocjUwlleXKVUQ+A4FM3Cetl9kljlxnTIf8tmHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOSqvnnMolkSus98pCeH3RMZ4FbMB8GA1UdIwQY MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8l2GYps nmCWMyG3CFqlf0hoMJlx1Y7JpET14wF3eVupNAOg/QH7kMQs7/c9k1O4lf6j9gat pwDEnFZoRBfUqrvQDm1Z/559aMT1ZaTDD/dg/r9Jbq+tR9y+KIi9Y85Hi8JJHLQi l5iB1lrIm6wGH8otKHsME8Om8SnintvOqQCfnwoGXnvnCSIrYslXsQ76yWB/+Cpn f5OBc23AUmeP+UoCZNkMK9EfkfEvlmB1fgsaOu7HHJimnhUR5jQ5BUkjFZB0ikqp N0Ou8l/SwjbGCyPSQXFS+c9Z97lC6hbJwrIoeKSI1vnMZwJdiz8hB6Okrom9fmsH pWOr/9F49aOpzA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:05 2025 by rpki-client