This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json) Hash identifier: mzOA9KNghDi/kpQ2Gp+BO5bceiAtLCRfv+Jz/oSMIAY= Subject key identifier: 01:7D:C6:87:BF:6B:F3:13:DB:56:57:7F:1B:D9:4D:2D:1B:E8:9E:FC Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Certificate serial: 019B3344835768EBF4E0277A7AF9821EBDB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:26 +0000 Manifest this update: Thu 18 Dec 2025 21:01:26 +0000 Manifest next update: Fri 19 Dec 2025 21:01:26 +0000 Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: JgiheZpyRq2ZpMwU66mhW4mACh6YYCbXW72cjJZ0Oag=) 2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:83:57:68:eb:f4:e0:27:7a:7a:f9:82:1e:bd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Validity Not Before: Dec 18 21:01:26 2025 GMT Not After : Dec 19 21:01:26 2025 GMT Subject: CN=017dc687bf6bf313db56577f1bd94d2d1be89efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:f1:ec:1f:b1:90:cb:ab:f0:aa:4d:8f:d3: f2:d0:07:88:5a:02:53:3d:cc:b0:d6:ad:30:7f:22: ea:1b:45:31:d8:b8:00:91:b8:a3:f9:6f:58:3f:d4: da:09:cf:ca:79:68:1d:d1:21:d8:d9:fe:2c:76:a0: 53:be:e6:e8:30:e8:83:44:0d:b5:8e:57:96:aa:cd: 5d:9a:ff:f6:21:6b:1f:eb:52:ee:41:21:00:67:7d: ce:a5:47:70:a7:ae:0c:bb:62:d0:f8:48:b3:14:08: bf:f7:69:f3:19:d2:90:0e:ad:15:30:a1:9b:51:5a: 7d:4a:b6:bd:fe:3b:56:86:75:25:c9:c5:a0:3d:db: 6c:ad:5b:5f:7e:34:d8:c5:d1:6a:f0:e6:29:00:36: 86:5e:6f:3b:6f:fb:03:e1:69:c5:13:50:3c:6d:77: ef:ca:49:65:b2:72:0d:1d:33:18:96:76:28:81:6e: 7c:32:60:8b:99:ac:ac:df:8d:3d:55:55:28:a1:92: 93:c2:89:34:65:d9:da:a1:3b:14:d0:53:a5:52:5a: a4:2e:87:d5:6b:fb:38:e5:12:47:31:cd:1e:e6:93: 59:3b:12:dc:bf:56:89:a0:52:7b:b7:be:d9:43:07: ad:2c:39:d9:99:5b:4b:fa:e0:d7:da:df:a5:d8:68: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:C6:87:BF:6B:F3:13:DB:56:57:7F:1B:D9:4D:2D:1B:E8:9E:FC X509v3 Authority Key Identifier: keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6d:6e:a6:2d:fe:89:3b:38:90:f4:20:78:d3:9b:2a:2c:68: d8:7a:d6:4e:40:09:14:44:80:bd:47:3f:52:04:a2:be:12:f7: 38:7d:b8:3d:97:38:63:ca:8c:c0:3a:a6:6e:99:06:62:70:3a: c0:f9:79:51:2b:62:e2:f4:c4:d3:32:46:cb:f3:81:4d:25:5e: 76:50:d5:31:ce:16:49:e1:54:5f:e2:b2:47:1c:05:ba:3d:90: 0f:01:ec:1f:1c:c2:0d:d2:bd:cd:c6:e6:3a:28:eb:17:b4:a1: ba:59:aa:62:95:b4:3f:21:23:e7:1f:5c:73:8c:90:f1:94:ce: 6c:70:15:9f:3d:54:60:15:06:2b:0b:00:b0:89:28:3c:fc:cc: 4c:47:5e:f7:43:60:8a:f0:1c:e9:84:6d:2e:2c:c6:d7:c2:47: 48:76:95:f3:71:16:99:4d:27:4c:b8:fc:44:0f:09:5f:b6:c9: 25:4c:a4:23:27:dc:eb:46:9c:7e:45:c8:de:22:03:e5:27:2d: 5d:50:2d:fa:d2:86:61:54:93:c5:da:bc:34:e2:51:cd:a9:79: e7:49:ac:df:a9:a9:49:07:a1:29:fa:4f:18:25:d4:2e:74:44: f0:93:b0:46:4c:4b:1e:eb:e6:f5:c3:f5:44:25:25:16:36:c3: 6b:f1:ac:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRINXaOv04Cd6evmCHr22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm MjI3NmQwHhcNMjUxMjE4MjEwMTI2WhcNMjUxMjE5MjEwMTI2WjAzMTEwLwYDVQQD EygwMTdkYzY4N2JmNmJmMzEzZGI1NjU3N2YxYmQ5NGQyZDFiZTg5ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfrx7B+xkMur8KpNj9Py0AeIWgJT Pcyw1q0wfyLqG0Ux2LgAkbij+W9YP9TaCc/KeWgd0SHY2f4sdqBTvuboMOiDRA21 jleWqs1dmv/2IWsf61LuQSEAZ33OpUdwp64Mu2LQ+EizFAi/92nzGdKQDq0VMKGb UVp9Sra9/jtWhnUlycWgPdtsrVtffjTYxdFq8OYpADaGXm87b/sD4WnFE1A8bXfv ykllsnINHTMYlnYogW58MmCLmays3409VVUooZKTwok0ZdnaoTsU0FOlUlqkLofV a/s45RJHMc0e5pNZOxLcv1aJoFJ7t77ZQwetLDnZmVtL+uDX2t+l2GhLPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF9xoe/a/MT21ZXfxvZTS0b6J78MB8GA1UdIwQY MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2 LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT21upi3+ iTs4kPQgeNObKixo2HrWTkAJFESAvUc/UgSivhL3OH24PZc4Y8qMwDqmbpkGYnA6 wPl5USti4vTE0zJGy/OBTSVedlDVMc4WSeFUX+KyRxwFuj2QDwHsHxzCDdK9zcbm OijrF7ShulmqYpW0PyEj5x9cc4yQ8ZTObHAVnz1UYBUGKwsAsIkoPPzMTEde90Ng ivAc6YRtLizG18JHSHaV83EWmU0nTLj8RA8JX7bJJUykIyfc60acfkXI3iID5Sct XVAt+tKGYVSTxdq8NOJRzal550ms36mpSQehKfpPGCXULnRE8JOwRkxLHuvm9cP1 RCUlFjbDa/GsMA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:39:55 2025 by rpki-client