This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json) Hash identifier: 09yiq9q9ADdNCmyfmhsOpS/sdI9zFnWEw1IeZavf08A= Subject key identifier: F8:DC:E5:24:74:63:7B:1C:58:09:D0:20:45:35:A1:BD:7C:5A:59:75 Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Certificate serial: 019B59AD23D42A78A24A84D18CE6BF8D3798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft Manifest number: 1728 Signing time: Fri 26 Dec 2025 08:01:17 +0000 Manifest this update: Fri 26 Dec 2025 08:01:17 +0000 Manifest next update: Sat 27 Dec 2025 08:01:17 +0000 Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: 8aQTOvq/oDB3mmXynhGtlAuDfihftOyLC1dggCXqv/Q=) 2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:23:d4:2a:78:a2:4a:84:d1:8c:e6:bf:8d:37:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Validity Not Before: Dec 26 08:01:17 2025 GMT Not After : Dec 27 08:01:17 2025 GMT Subject: CN=f8dce52474637b1c5809d0204535a1bd7c5a5975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:ef:bd:d9:43:bd:62:4d:ec:2f:41:e5:eb: 7c:32:8c:84:8c:4d:11:08:6a:84:68:65:26:b9:ae: ea:72:62:68:0d:42:32:a2:c4:59:c0:a8:fb:43:24: d9:a9:21:31:75:0c:d5:1e:6a:c9:7d:71:4b:bb:0f: 53:c0:43:ed:2e:9b:3d:37:f4:bd:90:d7:3d:18:3d: 1e:75:be:b4:14:6e:ac:f0:87:58:cc:70:4d:40:57: d0:2c:76:11:00:4d:14:aa:d1:97:08:40:c7:85:b2: 8f:d1:9c:10:40:12:d3:be:38:8d:cf:28:9e:33:e6: 41:39:1e:96:c4:27:b0:c5:4c:af:92:c8:b0:e7:9e: 84:8e:a1:eb:02:af:81:9f:f3:46:29:58:5a:af:4b: eb:c7:3c:ca:15:d4:27:4a:40:f5:9b:3b:95:ad:01: ce:0a:5f:4a:d7:a4:c4:a2:30:2e:df:09:fb:99:21: d2:d1:c3:51:5b:6c:63:b0:b7:95:3c:4b:6d:96:29: 91:81:4b:96:26:64:2e:5b:88:93:48:ad:9f:4c:28: 1e:ba:02:12:9a:d3:b7:77:76:72:7b:c8:9f:b4:67: 29:26:15:ab:77:bd:4a:42:00:d9:fe:0a:fa:f3:02: 4a:30:4d:fc:17:62:65:ea:09:16:7b:65:f6:0e:97: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:E5:24:74:63:7B:1C:58:09:D0:20:45:35:A1:BD:7C:5A:59:75 X509v3 Authority Key Identifier: keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:24:9e:ee:0e:43:2b:10:23:f8:40:34:fb:34:78:46:54:1c: 53:40:e4:1f:28:a7:01:e4:33:a8:10:22:2c:40:0c:b0:9b:16: ab:c0:47:89:93:bf:73:e9:74:b1:2b:48:55:be:1c:ba:dc:22: b2:aa:54:0d:94:b7:bd:05:8c:54:1e:96:47:f6:09:33:95:5a: f4:54:8f:6b:18:7b:c4:85:93:a2:8a:c2:69:6d:b0:0c:1f:61: c7:04:97:07:b7:c4:40:0c:94:08:c6:8b:19:dd:2d:b9:4e:11: 74:07:d1:77:37:86:32:fb:cb:05:fa:6d:ef:5a:9a:e7:6d:4f: 66:4c:f2:f2:6c:57:41:35:dc:17:36:4b:53:fa:39:a7:70:48: e6:f7:a8:9c:bb:d7:06:8b:47:14:37:11:bf:27:90:63:22:a3: 9f:bb:4f:57:75:8e:1d:6e:d4:ff:1b:c6:a6:a1:ae:19:21:30: d0:10:68:43:36:83:1e:bc:6e:32:d3:c0:d5:4c:84:b4:00:44: 7e:73:3c:8c:89:2b:85:dd:18:7c:1e:d2:24:97:12:06:14:18: 20:4c:e9:de:af:10:8d:70:bf:90:29:d9:2e:5c:06:ad:06:76: 4f:d1:3b:be:56:66:d2:d0:24:3a:c8:b5:27:1f:e4:67:80:1a: e7:c2:70:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSPUKniiSoTRjOa/jTeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx ZDA5Y2EwHhcNMjUxMjI2MDgwMTE3WhcNMjUxMjI3MDgwMTE3WjAzMTEwLwYDVQQD EyhmOGRjZTUyNDc0NjM3YjFjNTgwOWQwMjA0NTM1YTFiZDdjNWE1OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEDvvdlDvWJN7C9B5et8MoyEjE0R CGqEaGUmua7qcmJoDUIyosRZwKj7QyTZqSExdQzVHmrJfXFLuw9TwEPtLps9N/S9 kNc9GD0edb60FG6s8IdYzHBNQFfQLHYRAE0UqtGXCEDHhbKP0ZwQQBLTvjiNzyie M+ZBOR6WxCewxUyvksiw556EjqHrAq+Bn/NGKVhar0vrxzzKFdQnSkD1mzuVrQHO Cl9K16TEojAu3wn7mSHS0cNRW2xjsLeVPEttlimRgUuWJmQuW4iTSK2fTCgeugIS mtO3d3Zye8iftGcpJhWrd71KQgDZ/gr68wJKME38F2Jl6gkWe2X2DpcOxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjc5SR0Y3scWAnQIEU1ob18Wll1MB8GA1UdIwQY MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCSe7g5D KxAj+EA0+zR4RlQcU0DkHyinAeQzqBAiLEAMsJsWq8BHiZO/c+l0sStIVb4cutwi sqpUDZS3vQWMVB6WR/YJM5Va9FSPaxh7xIWToorCaW2wDB9hxwSXB7fEQAyUCMaL Gd0tuU4RdAfRdzeGMvvLBfpt71qa521PZkzy8mxXQTXcFzZLU/o5p3BI5veonLvX BotHFDcRvyeQYyKjn7tPV3WOHW7U/xvGpqGuGSEw0BBoQzaDHrxuMtPA1UyEtABE fnM8jIkrhd0YfB7SJJcSBhQYIEzp3q8QjXC/kCnZLlwGrQZ2T9E7vlZm0tAkOsi1 Jx/kZ4Aa58Jw6w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client