This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft File: E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json) Hash identifier: 17tJGRawOerjV7wlJ/OFX9LdfEg/0TTt8GgjDOmlvk8= Subject key identifier: 43:4A:97:9A:F9:21:FB:2A:43:0A:FE:6D:40:BB:92:66:40:65:78:05 Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C Certificate issuer: /CN=13fc5ddf49e36d69936301ad22bf243a471b524c Certificate serial: 019B33B1B0408079BE57AF95DA7B5EBC7CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft Manifest number: 0E7C Signing time: Thu 18 Dec 2025 23:00:41 +0000 Manifest this update: Thu 18 Dec 2025 23:00:41 +0000 Manifest next update: Fri 19 Dec 2025 23:00:41 +0000 Files and hashes: 1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: iiANrImc4PMdQoYGoQZ3jApjv38gswLzLUio8b7w9Ds=) 2: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (hash: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:b0:40:80:79:be:57:af:95:da:7b:5e:bc:7c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c Validity Not Before: Dec 18 23:00:41 2025 GMT Not After : Dec 19 23:00:41 2025 GMT Subject: CN=434a979af921fb2a430afe6d40bb926640657805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:5d:4f:dc:19:a1:ba:24:cc:0e:60:64:60: 0e:7c:0d:09:1f:de:f9:e5:dd:9a:a9:47:48:b7:c2: f4:e5:f9:61:3e:2e:ff:54:e6:1a:82:96:0f:fe:00: ae:33:72:e0:ff:3a:7a:6c:05:a3:86:bd:56:0d:bc: 4f:e7:74:b5:28:80:8d:a3:a7:5d:54:40:42:e6:4d: 4c:d8:0f:20:62:93:b5:96:e8:b0:19:e6:49:5f:4a: 3f:36:72:35:9b:cc:9d:cd:f8:72:c6:a4:02:8e:47: fa:43:01:3a:5d:b4:54:2e:97:3f:40:84:5e:29:2f: 6b:a1:d0:4d:50:2e:84:3a:40:01:5d:b1:45:3d:e0: 72:84:46:c1:e2:97:32:2d:5c:7f:df:90:79:0a:22: e1:42:0f:c3:3f:3f:82:9f:bc:84:a1:de:eb:16:8c: 38:6f:38:e4:64:88:a7:e0:49:4d:35:91:70:a3:e2: c9:0f:19:a8:c9:12:74:a8:d8:dc:b3:27:42:37:39: 7c:b4:eb:17:d9:24:91:e4:77:75:26:04:88:ac:3d: 0f:76:e2:c5:04:66:e4:a1:bd:54:76:72:96:9a:2f: ba:95:ee:25:52:9a:b4:04:1f:54:c7:b3:04:de:2a: ca:3b:e9:7a:31:ba:3f:ef:72:bc:bf:7a:f5:de:50: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4A:97:9A:F9:21:FB:2A:43:0A:FE:6D:40:BB:92:66:40:65:78:05 X509v3 Authority Key Identifier: keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f3:95:b5:e3:f4:b9:68:cf:63:b3:12:a9:df:09:57:f9:bc: ef:86:4f:34:65:15:05:b1:75:b8:10:d7:10:9b:95:bc:e0:18: c8:c9:8d:4e:a4:29:0b:16:82:39:79:7c:2b:44:e3:d9:10:fe: ed:bb:cd:56:0f:29:e2:d7:2e:66:66:42:dc:2d:53:f5:9a:e5: 11:8c:79:57:bf:e1:35:92:3d:79:de:9d:d6:06:a9:d3:b6:2d: 62:97:72:66:78:4c:64:e6:5c:f6:ba:16:ec:b7:de:bf:37:39: c0:49:4c:14:53:57:f4:14:e7:ca:ec:5b:3d:cd:95:5f:49:36: ac:21:c0:6d:a7:54:70:4e:8c:14:1d:ec:ee:19:31:83:6c:23: c1:51:28:76:c7:a4:a8:80:0a:70:7b:c3:81:2d:ae:6b:33:22: a2:60:89:91:09:38:09:2b:f0:aa:5d:74:33:11:2b:ca:5a:6e: 68:56:ab:4d:2d:53:34:58:88:bd:28:0a:6d:74:bf:0f:29:5f: a3:50:ea:be:1f:f7:d5:15:a7:d9:59:28:0d:95:6e:9c:5b:ef: a0:5e:0b:13:95:92:6f:e4:c7:87:bb:0f:98:2f:84:97:4e:57: fd:fa:14:bd:cc:64:a1:eb:23:2a:e8:a2:15:f8:32:a7:12:ed: f5:5a:ff:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsbBAgHm+V6+V2ntevHzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmM1ZGRmNDllMzZkNjk5MzYzMDFhZDIyYmYyNDNhNDcx YjUyNGMwHhcNMjUxMjE4MjMwMDQxWhcNMjUxMjE5MjMwMDQxWjAzMTEwLwYDVQQD Eyg0MzRhOTc5YWY5MjFmYjJhNDMwYWZlNmQ0MGJiOTI2NjQwNjU3ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu85dT9wZobokzA5gZGAOfA0JH975 5d2aqUdIt8L05flhPi7/VOYagpYP/gCuM3Lg/zp6bAWjhr1WDbxP53S1KICNo6dd VEBC5k1M2A8gYpO1luiwGeZJX0o/NnI1m8ydzfhyxqQCjkf6QwE6XbRULpc/QIRe KS9rodBNUC6EOkABXbFFPeByhEbB4pcyLVx/35B5CiLhQg/DPz+Cn7yEod7rFow4 bzjkZIin4ElNNZFwo+LJDxmoyRJ0qNjcsydCNzl8tOsX2SSR5Hd1JgSIrD0PduLF BGbkob1UdnKWmi+6le4lUpq0BB9Ux7ME3irKO+l6Mbo/73K8v3r13lBGrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENKl5r5IfsqQwr+bUC7kmZAZXgFMB8GA1UdIwQY MBaAFBP8Xd9J421pk2MBrSK/JDpHG1JMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMt NDRhN2ExNTg4MTYyLzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMtNDRhN2ExNTg4MTYy LzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPOVteP0 uWjPY7MSqd8JV/m874ZPNGUVBbF1uBDXEJuVvOAYyMmNTqQpCxaCOXl8K0Tj2RD+ 7bvNVg8p4tcuZmZC3C1T9ZrlEYx5V7/hNZI9ed6d1gap07YtYpdyZnhMZOZc9roW 7Lfevzc5wElMFFNX9BTnyuxbPc2VX0k2rCHAbadUcE6MFB3s7hkxg2wjwVEodsek qIAKcHvDgS2uazMiomCJkQk4CSvwql10MxErylpuaFarTS1TNFiIvSgKbXS/Dylf o1Dqvh/31RWn2VkoDZVunFvvoF4LE5WSb+THh7sPmC+El05X/foUvcxkoesjKuii FfgypxLt9Vr/og== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:32 2025 by rpki-client