This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft File: E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json) Hash identifier: kC4XSRP9ww0Pxsyybpj4F1VvxXombeH2WTGZu8Jaimk= Subject key identifier: 33:5C:5F:F2:0F:F3:55:47:94:2D:D9:DB:D2:B0:F0:9B:A7:1B:89:0F Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F Certificate issuer: /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Certificate serial: 019AFD31E46FE2471D691F0591CC792CC2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft Manifest number: 1765 Signing time: Mon 08 Dec 2025 09:01:36 +0000 Manifest this update: Mon 08 Dec 2025 09:01:36 +0000 Manifest next update: Tue 09 Dec 2025 09:01:36 +0000 Files and hashes: 1: C_P_x6vKlP69WHS2Io3yN0V9nik.roa (hash: wJLlFgwQydtIFLoCnksnZpJrvv41uQQpAj8CsBJriq4=) 2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: KRA+A2QKOc7Qe/Hpi5aDaDnqUn/UQ/gGE6BpDW6TjTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:e4:6f:e2:47:1d:69:1f:05:91:cc:79:2c:c2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f Validity Not Before: Dec 8 09:01:36 2025 GMT Not After : Dec 9 09:01:36 2025 GMT Subject: CN=335c5ff20ff35547942dd9dbd2b0f09ba71b890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:b1:b8:1c:e8:9a:94:84:00:b9:9c:e5:f2: a4:54:90:7e:40:f1:ec:12:75:81:aa:84:49:18:72: b8:e5:d8:19:bc:68:e7:a5:12:51:dc:90:fd:b2:91: 22:54:d4:b6:35:6e:03:53:7a:7e:ce:2a:3c:06:80: 4e:b0:81:9e:28:a4:82:57:3d:fb:dc:03:34:a4:15: 6f:db:df:89:e5:8d:d6:ec:72:28:3e:cb:60:1b:e3: 75:e5:32:87:da:6d:88:82:a6:7e:10:e8:d0:ba:2b: 8a:72:88:bf:58:90:9f:5b:12:4f:fc:27:93:60:91: e8:79:0e:f1:1f:6f:47:f3:c7:76:b7:d4:00:7e:59: a5:ac:3e:57:6f:5c:04:6c:8b:7e:b6:ab:75:76:de: 45:3f:44:0a:2c:83:cd:74:cf:b7:a5:c7:91:8a:2e: d2:d9:71:22:b3:dd:4a:d3:e5:34:ab:f5:76:3f:57: 9c:56:8d:ba:03:c4:3a:52:91:72:35:29:a5:ab:74: 5b:91:8f:2c:5b:5e:be:55:0a:f5:a4:ce:3e:9f:75: c5:69:90:d2:35:64:8a:8c:aa:47:ca:74:bc:bb:d7: b6:22:37:28:90:48:81:4a:af:61:f1:35:72:79:d0: 97:2a:af:40:bd:dd:b2:64:3a:64:c0:2e:34:1c:b0: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:5F:F2:0F:F3:55:47:94:2D:D9:DB:D2:B0:F0:9B:A7:1B:89:0F X509v3 Authority Key Identifier: keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:27:fb:e2:68:e5:91:e8:b1:00:40:b4:c0:16:8d:48:18: fb:f1:8a:ba:65:2a:00:0d:2c:23:58:61:3f:ee:40:4f:c3:46: 80:a4:01:e0:45:0b:be:36:bb:7a:15:c7:74:9d:d3:0e:61:12: df:4c:6e:5a:b0:1b:f4:8b:3b:6d:35:3e:41:9e:cb:23:f2:8d: 8f:57:8d:35:9d:30:dc:e3:19:84:55:6e:24:57:32:ff:9d:fc: 39:54:99:1b:d8:13:f4:b9:d9:db:ba:20:4a:9f:4c:14:af:23: 97:2c:47:46:8d:12:f1:05:6d:7b:b4:ee:33:cc:0c:99:c4:79: f8:7e:d1:c8:7c:df:02:02:3a:18:27:be:6f:33:15:05:5a:5f: 86:ad:da:9d:a1:e0:40:20:a3:49:53:5b:95:54:bc:7d:82:20: 00:9c:7f:1f:12:6d:3c:65:b0:c7:52:eb:82:6d:c7:38:29:76: 5c:46:89:f2:9f:fa:4e:ff:a3:d4:d1:fc:e3:9f:ee:40:0b:59: 32:6b:d0:57:13:5f:dc:f7:7b:c0:7d:9e:ca:5c:9d:df:28:f8: 3a:51:69:bd:e9:43:f9:e5:69:6a:c0:75:26:a3:ad:9c:f9:8f: b2:97:fa:3a:8e:bb:6f:aa:91:94:07:e4:55:d0:fb:30:fb:7e: e7:ac:87:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MeRv4kcdaR8Fkcx5LMLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmM0ODMxNTk3ZmUxNmU5ZWUyODgyZDdiNWEwZGY4YTc2 ZTRmN2YwHhcNMjUxMjA4MDkwMTM2WhcNMjUxMjA5MDkwMTM2WjAzMTEwLwYDVQQD EygzMzVjNWZmMjBmZjM1NTQ3OTQyZGQ5ZGJkMmIwZjA5YmE3MWI4OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgSxuBzompSEALmc5fKkVJB+QPHs EnWBqoRJGHK45dgZvGjnpRJR3JD9spEiVNS2NW4DU3p+zio8BoBOsIGeKKSCVz37 3AM0pBVv29+J5Y3W7HIoPstgG+N15TKH2m2IgqZ+EOjQuiuKcoi/WJCfWxJP/CeT YJHoeQ7xH29H88d2t9QAflmlrD5Xb1wEbIt+tqt1dt5FP0QKLIPNdM+3pceRii7S 2XEis91K0+U0q/V2P1ecVo26A8Q6UpFyNSmlq3RbkY8sW16+VQr1pM4+n3XFaZDS NWSKjKpHynS8u9e2IjcokEiBSq9h8TVyedCXKq9Avd2yZDpkwC40HLB7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNcX/IP81VHlC3Z29Kw8JunG4kPMB8GA1UdIwQY MBaAFBNsSDFZf+FunuKILXtaDfinbk9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEt Y2U1OWIwYzU0ZWVhLzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MGZlMjAtNmNlYi00NWQ2LWFhMTEtY2U1OWIwYzU0ZWVh LzEvRTJ4SU1WbF80VzZlNG9ndGUxb04tS2R1VDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB4n++Jo 5ZHosQBAtMAWjUgY+/GKumUqAA0sI1hhP+5AT8NGgKQB4EULvja7ehXHdJ3TDmES 30xuWrAb9Is7bTU+QZ7LI/KNj1eNNZ0w3OMZhFVuJFcy/538OVSZG9gT9LnZ27og Sp9MFK8jlyxHRo0S8QVte7TuM8wMmcR5+H7RyHzfAgI6GCe+bzMVBVpfhq3anaHg QCCjSVNblVS8fYIgAJx/HxJtPGWwx1Lrgm3HOCl2XEaJ8p/6Tv+j1NH845/uQAtZ MmvQVxNf3Pd7wH2eylyd3yj4OlFpvelD+eVpasB1JqOtnPmPspf6Oo67b6qRlAfk VdD7MPt+56yHPg== -----END CERTIFICATE-----Generated at Mon Dec 8 17:47:46 2025 by rpki-client