This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft File: e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json) Hash identifier: quKzbuWI/tcRg0PSk3t4vlpbWMccQG3fUkactSC3nAE= Subject key identifier: AC:71:5E:86:D3:1A:CE:9F:9A:0B:17:0A:36:3F:94:F0:FB:28:0E:14 Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Certificate serial: 019B34C5B4FADC48D5B18C551F9ADB7FEFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft Manifest number: 037B Signing time: Fri 19 Dec 2025 04:02:10 +0000 Manifest this update: Fri 19 Dec 2025 04:02:10 +0000 Manifest next update: Sat 20 Dec 2025 04:02:10 +0000 Files and hashes: 1: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (hash: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=) 2: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: 6ldagzwrskZywT69h1WpGkBwnfxbluRLXDRvw9/Jxfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:b4:fa:dc:48:d5:b1:8c:55:1f:9a:db:7f:ef:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Validity Not Before: Dec 19 04:02:10 2025 GMT Not After : Dec 20 04:02:10 2025 GMT Subject: CN=ac715e86d31ace9f9a0b170a363f94f0fb280e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:68:10:82:1f:06:9d:0d:60:a7:cf:d6:85: 0c:76:49:3c:9a:89:66:f4:1a:5f:11:eb:ed:a5:93: 8c:cc:cd:bf:7a:36:e3:dd:09:37:59:23:1d:32:9e: 93:6b:85:ce:9a:2b:f1:ca:b4:13:6a:dd:14:dd:65: 2b:9c:9e:d6:ac:7a:b6:75:2e:73:74:ae:5e:23:bd: fd:5f:19:3f:f6:4f:b2:35:d3:66:d9:e5:de:75:f3: f3:81:c0:a5:ae:33:d4:a2:be:84:67:ea:4a:e6:08: f3:ad:0a:d1:28:32:ff:d3:c4:74:3a:12:bc:c8:7c: 3d:bb:5b:8f:4f:53:62:93:55:d9:13:97:a9:bd:d0: 54:31:92:a7:d4:9b:60:21:5a:f0:83:45:e5:aa:1b: 78:eb:a9:7b:22:e3:d0:ba:d6:b3:8b:0a:6f:15:97: 11:5b:56:54:b8:5d:fa:8f:15:98:84:57:01:f8:80: ec:ac:8c:4b:66:32:e2:ae:05:69:2e:ea:94:28:d7: 6b:69:7d:68:58:25:a1:a6:74:0e:92:c8:e6:82:dd: 45:57:ff:14:d9:99:f4:4b:22:94:89:64:9a:56:a5: 98:a3:e4:cb:bf:1b:6a:a3:09:8e:d7:52:60:f7:8b: 45:8e:57:ef:e9:e2:7f:71:fe:8b:30:59:95:c2:fa: e9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:5E:86:D3:1A:CE:9F:9A:0B:17:0A:36:3F:94:F0:FB:28:0E:14 X509v3 Authority Key Identifier: keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:11:72:8a:f1:0f:87:85:8a:f4:87:c4:6c:24:f8:c5:be:5e: 21:e7:83:0d:92:d2:47:df:5d:ff:ae:88:fa:c4:03:c7:ae:d0: 68:72:ea:97:32:8f:0b:73:be:c0:c5:23:43:98:4e:1f:30:51: 3d:d4:82:da:0b:03:9f:5f:fc:0b:ee:cc:c4:dd:81:f7:4a:41: 55:9e:e2:76:34:28:86:f2:a1:86:39:a6:1d:7c:e2:58:0b:a6: 97:ad:82:0f:be:a4:af:b0:3d:00:c0:4f:cf:dc:1d:44:6a:4c: ab:59:d7:24:1c:84:45:49:cd:a1:2c:f7:4c:32:55:b1:cb:8f: 6b:93:75:2f:4f:11:27:ac:a3:30:52:04:4d:ae:0a:12:c3:57: 2d:56:d2:85:cf:c9:58:34:9d:81:cd:97:a3:b6:4a:43:89:33: 92:1b:5e:fd:79:8c:0d:a7:7d:83:cc:1e:98:0e:b3:d2:4e:14: c2:49:db:a7:19:29:dc:cf:1f:54:e5:01:c4:bb:be:47:e7:84: 0d:f7:5e:c1:a0:63:30:92:90:ed:d0:b1:ea:1f:0f:d6:fb:9e: 5e:8e:87:38:fb:27:ce:b1:6c:bf:21:4c:c0:b0:6e:25:51:1d: de:8b:41:3c:01:40:31:49:8f:ca:d2:ef:2e:68:d6:39:7e:a4: a8:55:a3:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xbT63EjVsYxVH5rbf++8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl MjVjYjUwHhcNMjUxMjE5MDQwMjEwWhcNMjUxMjIwMDQwMjEwWjAzMTEwLwYDVQQD EyhhYzcxNWU4NmQzMWFjZTlmOWEwYjE3MGEzNjNmOTRmMGZiMjgwZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiFoEIIfBp0NYKfP1oUMdkk8molm 9BpfEevtpZOMzM2/ejbj3Qk3WSMdMp6Ta4XOmivxyrQTat0U3WUrnJ7WrHq2dS5z dK5eI739Xxk/9k+yNdNm2eXedfPzgcClrjPUor6EZ+pK5gjzrQrRKDL/08R0OhK8 yHw9u1uPT1Nik1XZE5epvdBUMZKn1JtgIVrwg0Xlqht466l7IuPQutaziwpvFZcR W1ZUuF36jxWYhFcB+IDsrIxLZjLirgVpLuqUKNdraX1oWCWhpnQOksjmgt1FV/8U 2Zn0SyKUiWSaVqWYo+TLvxtqowmO11Jg94tFjlfv6eJ/cf6LMFmVwvrpEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxxXobTGs6fmgsXCjY/lPD7KA4UMB8GA1UdIwQY MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt MmI3YzFlZGYxMTZhLzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBFyivEP h4WK9IfEbCT4xb5eIeeDDZLSR99d/66I+sQDx67QaHLqlzKPC3O+wMUjQ5hOHzBR PdSC2gsDn1/8C+7MxN2B90pBVZ7idjQohvKhhjmmHXziWAuml62CD76kr7A9AMBP z9wdRGpMq1nXJByERUnNoSz3TDJVscuPa5N1L08RJ6yjMFIETa4KEsNXLVbShc/J WDSdgc2Xo7ZKQ4kzkhte/XmMDad9g8wemA6z0k4Uwknbpxkp3M8fVOUBxLu+R+eE DfdewaBjMJKQ7dCx6h8P1vueXo6HOPsnzrFsvyFMwLBuJVEd3otBPAFAMUmPytLv LmjWOX6kqFWjQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:28 2025 by rpki-client