This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json) Hash identifier: MzlE21uE7hoR+czOZb2XsS3zRRP7uXYMVvzMTvV9omU= Subject key identifier: AA:3F:71:14:78:90:1D:47:9A:54:39:A5:44:27:62:C7:2F:83:F2:C7 Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d Certificate serial: 019AEDBECDEEF6B1035E1E6AD5C8DFE4DECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 09:01:35 +0000 Manifest this update: Fri 05 Dec 2025 09:01:35 +0000 Manifest next update: Sat 06 Dec 2025 09:01:35 +0000 Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=) 2: 2fWP_1okXthOUT5i0EgFPwAGnBc.roa (hash: J5+gVvniOtfHzGOi6xF3xcFK0fGXBXbVbA7PFuVnMdw=) 3: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=) 4: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: XWnwCpALCLK4h+/Ek1Q/x87FXmWlJEK5jqHqG1g9Q7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:be:cd:ee:f6:b1:03:5e:1e:6a:d5:c8:df:e4:de:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d Validity Not Before: Dec 5 09:01:35 2025 GMT Not After : Dec 6 09:01:35 2025 GMT Subject: CN=aa3f711478901d479a5439a5442762c72f83f2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:d5:4a:cb:26:f3:a3:08:e2:13:50:18:fb: 5c:96:89:e2:b7:9e:34:99:20:64:78:9d:57:9e:c0: da:82:c3:46:a5:92:ab:f5:11:a1:ba:12:97:23:d4: e8:db:3b:97:a3:c4:fb:df:f1:e9:cb:ff:c0:bc:84: 65:cd:be:6e:7c:dd:74:95:22:ed:26:7c:6c:66:c3: a2:0e:4e:3f:7c:b4:a7:45:a8:64:ba:f8:93:45:9f: 36:7b:46:c3:b5:4d:35:2a:3a:25:41:bd:29:a1:be: 69:fa:15:b2:f9:5e:fa:84:7a:84:bf:a8:bf:0d:95: 83:00:53:01:bb:36:8e:9a:b1:d1:00:91:f5:0d:0e: 76:71:c1:2c:9e:ea:45:94:4c:4d:eb:82:19:c1:ed: 93:e0:d1:4f:1a:be:95:95:4d:58:48:02:0e:a5:ea: d2:37:80:85:05:74:df:e1:60:21:4a:67:3b:e8:42: 99:8c:3f:e2:ea:0f:ee:32:b1:c2:f6:d2:f0:f2:95: 64:a6:24:e5:c4:7c:8d:f1:9d:0e:df:a9:a8:8c:07: 48:ea:99:68:fa:b8:5f:ff:32:c8:ce:18:17:83:7f: 3c:0d:79:18:6f:60:e1:24:97:d4:0e:35:87:0a:f2: db:70:56:ed:fc:5d:9b:ba:53:af:d3:14:92:5d:78: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:71:14:78:90:1D:47:9A:54:39:A5:44:27:62:C7:2F:83:F2:C7 X509v3 Authority Key Identifier: keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:c5:9b:e4:f9:dc:40:f2:11:e9:40:1f:05:f4:3b:3e:6b: f4:7d:40:55:15:35:27:53:d0:d8:42:a5:e3:bd:28:53:2d:ae: 66:fc:86:2d:ce:92:fb:8b:41:c2:56:7d:f3:bd:28:86:02:24: e7:dc:86:4b:1a:5f:b0:35:21:2c:c7:eb:cd:f0:d5:26:b6:4e: 5e:b7:24:79:ed:50:a7:f7:40:65:e1:71:e6:45:04:31:47:6e: b4:7e:1a:12:51:d8:67:a4:be:ac:5c:cd:59:e6:b4:6f:66:9c: 1a:0e:13:09:14:cb:a3:3a:3f:a5:8e:b1:6f:3d:bf:16:a3:2f: 67:33:41:71:e7:c2:76:a3:c7:92:00:c6:1d:a6:42:2a:4a:d8: 0c:9b:54:dd:b0:61:e0:fc:a2:c7:1b:f7:13:0d:66:62:83:bb: 1c:9e:33:86:f7:e7:55:95:82:79:67:fe:62:ad:27:95:34:95: 9a:95:34:c6:3c:e5:46:7f:8d:a3:45:41:4e:1b:c7:cf:3c:82: ed:f9:97:e2:00:0b:e6:34:7e:5e:18:e7:1f:1b:2b:4b:48:c1: b6:74:a0:48:64:5b:3e:18:0e:09:39:8f:8c:ae:48:3f:cd:8e: bf:b9:69:bb:d4:20:f0:20:1a:2d:18:92:c6:5c:f0:9b:2f:13: 5e:d4:7e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtvs3u9rEDXh5q1cjf5N7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy NmI5NmQwHhcNMjUxMjA1MDkwMTM1WhcNMjUxMjA2MDkwMTM1WjAzMTEwLwYDVQQD EyhhYTNmNzExNDc4OTAxZDQ3OWE1NDM5YTU0NDI3NjJjNzJmODNmMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFrVSssm86MI4hNQGPtclonit540 mSBkeJ1XnsDagsNGpZKr9RGhuhKXI9To2zuXo8T73/Hpy//AvIRlzb5ufN10lSLt JnxsZsOiDk4/fLSnRahkuviTRZ82e0bDtU01KjolQb0pob5p+hWy+V76hHqEv6i/ DZWDAFMBuzaOmrHRAJH1DQ52ccEsnupFlExN64IZwe2T4NFPGr6VlU1YSAIOperS N4CFBXTf4WAhSmc76EKZjD/i6g/uMrHC9tLw8pVkpiTlxHyN8Z0O36mojAdI6plo +rhf/zLIzhgXg388DXkYb2DhJJfUDjWHCvLbcFbt/F2bulOv0xSSXXjnlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo/cRR4kB1HmlQ5pUQnYscvg/LHMB8GA1UdIwQY MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0 LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0/Fm+T5 3EDyEelAHwX0Oz5r9H1AVRU1J1PQ2EKl470oUy2uZvyGLc6S+4tBwlZ9870ohgIk 59yGSxpfsDUhLMfrzfDVJrZOXrckee1Qp/dAZeFx5kUEMUdutH4aElHYZ6S+rFzN Wea0b2acGg4TCRTLozo/pY6xbz2/FqMvZzNBcefCdqPHkgDGHaZCKkrYDJtU3bBh 4Pyixxv3Ew1mYoO7HJ4zhvfnVZWCeWf+Yq0nlTSVmpU0xjzlRn+No0VBThvHzzyC 7fmX4gAL5jR+XhjnHxsrS0jBtnSgSGRbPhgOCTmPjK5IP82Ov7lpu9Qg8CAaLRiS xlzwmy8TXtR+Gg== -----END CERTIFICATE-----Generated at Fri Dec 5 18:43:23 2025 by rpki-client