This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft File: enzxoqqDsSb_TO70c6Rzl6v4_w0.mft (raw, json) Hash identifier: SFv0HGJHUQdQGBhvbdZ+OxLJeEDdSXRBHgl2oiLI+y4= Subject key identifier: 3A:33:47:2F:5A:98:A8:BA:DC:3B:CB:06:6F:CF:91:AC:05:F1:CC:23 Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D Certificate issuer: /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d Certificate serial: 019B0F37A09078DB013F5D544B39ED0DFB31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft Manifest number: 1460 Signing time: Thu 11 Dec 2025 21:01:02 +0000 Manifest this update: Thu 11 Dec 2025 21:01:02 +0000 Manifest next update: Fri 12 Dec 2025 21:01:02 +0000 Files and hashes: 1: enzxoqqDsSb_TO70c6Rzl6v4_w0.crl (hash: Z5f+zsxXG2AeXVzZtwSje7ahWfoiKws1hmqoEPq528Q=) 2: xb2NvHdajED54_SL3MKVNIAlUGs.roa (hash: Grou1zplFJxqish9A4XkxSqO0Yr0gOy017NWwV2yOds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a0:90:78:db:01:3f:5d:54:4b:39:ed:0d:fb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d Validity Not Before: Dec 11 21:01:02 2025 GMT Not After : Dec 12 21:01:02 2025 GMT Subject: CN=3a33472f5a98a8badc3bcb066fcf91ac05f1cc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2d:61:ab:7f:81:78:de:88:3a:ce:25:0c:b7: b5:31:a5:96:5d:ba:0e:49:9a:df:5d:04:49:9f:33: 2f:54:82:ec:19:79:5b:87:e9:58:88:2d:13:19:a7: a8:a7:f7:1d:65:98:d4:b6:0a:70:2b:5d:21:68:1d: aa:e1:af:b4:ed:3f:50:25:e7:1f:7c:bc:53:5e:47: 1d:7d:de:53:94:b6:4d:ab:3d:fb:a2:af:bf:f1:38: c5:18:09:94:97:af:08:9e:06:89:84:18:be:c4:13: c1:ac:37:b4:3f:08:99:f1:09:25:6f:0c:cf:af:69: 5c:b0:4b:13:1e:fe:1f:2a:cd:c7:27:5b:e4:1a:4a: ca:f8:ef:2e:7c:bc:0c:4b:d2:e4:9d:b1:e7:eb:96: 4f:d9:3b:02:e1:e7:2e:10:d8:ec:34:ab:db:07:4e: ab:bf:7d:51:46:a8:77:cc:14:8b:39:c1:c8:68:a1: 68:d3:95:2e:6b:e7:5a:66:a9:4d:3b:57:9e:74:e0: 57:02:3e:c7:5f:a8:ba:09:23:32:a8:df:f5:34:63: 8b:0e:8d:c8:ca:3e:9f:13:ef:78:33:e5:c6:c3:15: 11:9e:de:9a:ae:6e:1b:12:5e:bf:2a:b0:63:e3:cb: db:06:f0:b1:d2:b8:6c:13:8f:ec:53:3a:7a:9f:66: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:47:2F:5A:98:A8:BA:DC:3B:CB:06:6F:CF:91:AC:05:F1:CC:23 X509v3 Authority Key Identifier: keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:a7:3a:6a:eb:d4:23:53:61:21:37:6f:c6:e9:22:a2:c2: 6a:b1:d0:dc:b8:73:b8:f1:0b:a6:03:06:6f:1d:7d:5a:7e:54: 2b:0d:9f:5d:e4:38:60:79:93:c7:1b:f4:d7:c7:7d:e9:f5:f1: 89:ff:0b:69:33:8b:76:b0:cd:0d:02:fd:2c:b0:88:77:00:f0: 6a:63:4a:b3:d9:a3:76:e6:8e:c6:e5:90:da:56:61:fc:ae:2f: 95:6e:bc:e4:24:07:88:ef:40:f1:4a:f8:69:aa:e2:90:f7:6a: 96:c7:c4:d2:85:47:dc:bc:43:03:69:d7:12:46:e8:99:07:ee: 81:8b:7c:d1:45:b6:1e:f8:b8:c4:25:e6:b6:70:42:ef:69:3b: 89:bb:7c:31:28:e6:c7:41:e2:ba:0d:d4:f5:0c:a5:cc:05:66: 2c:c5:87:f2:85:26:30:e6:6c:a6:62:eb:95:cc:86:ca:98:2d: b0:4d:08:1a:a2:b8:a4:4a:52:0c:86:38:02:d5:c6:1b:f0:e1: d0:a9:db:db:f1:02:3f:f2:3d:4c:3e:d4:c6:46:6d:9f:da:f7: 3e:de:3b:14:d4:c0:b3:5d:e6:17:d5:7a:0b:ca:89:15:2b:c5: c5:1f:7c:fa:81:5f:2f:23:e4:51:a0:1d:0c:b7:bd:f4:6e:0f: 2f:13:55:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6CQeNsBP11USzntDfsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2NmMWEyYWE4M2IxMjZmZjRjZWVmNDczYTQ3Mzk3YWJm OGZmMGQwHhcNMjUxMjExMjEwMTAyWhcNMjUxMjEyMjEwMTAyWjAzMTEwLwYDVQQD EygzYTMzNDcyZjVhOThhOGJhZGMzYmNiMDY2ZmNmOTFhYzA1ZjFjYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i1hq3+BeN6IOs4lDLe1MaWWXboO SZrfXQRJnzMvVILsGXlbh+lYiC0TGaeop/cdZZjUtgpwK10haB2q4a+07T9QJecf fLxTXkcdfd5TlLZNqz37oq+/8TjFGAmUl68IngaJhBi+xBPBrDe0PwiZ8QklbwzP r2lcsEsTHv4fKs3HJ1vkGkrK+O8ufLwMS9LknbHn65ZP2TsC4ecuENjsNKvbB06r v31RRqh3zBSLOcHIaKFo05Uua+daZqlNO1eedOBXAj7HX6i6CSMyqN/1NGOLDo3I yj6fE+94M+XGwxURnt6arm4bEl6/KrBj48vbBvCx0rhsE4/sUzp6n2Z6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDozRy9amKi63DvLBm/PkawF8cwjMB8GA1UdIwQY MBaAFHp88aKqg7Em/0zu9HOkc5er+P8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW56eG9xcURzU2JfVE83MGM2UnpsNnY0X3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84YWY4ZTYtMTljMS00YmUxLWFmMjMt MTk5MTZhNGFlZWIzLzEvZW56eG9xcURzU2JfVE83MGM2UnpsNnY0X3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84YWY4ZTYtMTljMS00YmUxLWFmMjMtMTk5MTZhNGFlZWIz LzEvZW56eG9xcURzU2JfVE83MGM2UnpsNnY0X3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1+nOmrr 1CNTYSE3b8bpIqLCarHQ3LhzuPELpgMGbx19Wn5UKw2fXeQ4YHmTxxv018d96fXx if8LaTOLdrDNDQL9LLCIdwDwamNKs9mjduaOxuWQ2lZh/K4vlW685CQHiO9A8Ur4 aarikPdqlsfE0oVH3LxDA2nXEkbomQfugYt80UW2Hvi4xCXmtnBC72k7ibt8MSjm x0Hiug3U9QylzAVmLMWH8oUmMOZspmLrlcyGypgtsE0IGqK4pEpSDIY4AtXGG/Dh 0Knb2/ECP/I9TD7UxkZtn9r3Pt47FNTAs13mF9V6C8qJFSvFxR98+oFfLyPkUaAd DLe99G4PLxNVpA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:08:12 2025 by rpki-client