This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json) Hash identifier: xbRix9BgzX9KPP77jF8hIQ3cyuUNKTaJpj4Z7tjJJhY= Subject key identifier: C5:2D:26:4D:4F:4A:8B:F2:8F:D0:0D:67:E2:07:94:10:6A:3B:BD:C7 Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0 Certificate serial: 019B3CEC223DCE8501CA1209D30424A067D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 18:01:06 +0000 Manifest this update: Sat 20 Dec 2025 18:01:06 +0000 Manifest next update: Sun 21 Dec 2025 18:01:06 +0000 Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: EWChODNrVHMD4EFleXITMQWY954ttijHbYMpa9k1Rjs=) 2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:22:3d:ce:85:01:ca:12:09:d3:04:24:a0:67:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0 Validity Not Before: Dec 20 18:01:06 2025 GMT Not After : Dec 21 18:01:06 2025 GMT Subject: CN=c52d264d4f4a8bf28fd00d67e20794106a3bbdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:eb:ca:9b:4f:6d:c0:6e:33:7a:7b:10:c1: 47:8b:98:9a:43:d4:30:c6:4e:06:56:9a:24:0e:dd: 89:b8:b9:95:4f:d0:c0:b4:12:d6:db:c4:5f:d6:b9: f7:bf:7d:e8:30:ee:f0:a4:3a:95:27:77:44:71:1c: 0d:6a:2f:38:b0:c5:c0:99:7e:53:b9:ab:c5:da:f6: 6d:0f:6d:32:7c:ab:3b:eb:59:74:33:af:10:96:d5: b8:d5:2d:8b:ae:d0:8e:71:87:0b:d5:d7:a5:9e:80: bd:65:43:90:65:dc:0c:73:0f:09:1b:e0:d8:d6:a5: b4:f6:5a:24:01:e7:0e:13:0c:1b:28:dc:47:7a:9c: 3f:66:55:62:fd:1a:16:7a:c3:4a:56:20:81:d9:a8: 79:7a:a5:84:22:15:3b:aa:ee:a1:4a:18:4e:04:38: 76:1d:5b:9c:48:c4:54:29:d1:fe:4a:bf:b4:ce:1a: ec:7f:71:b2:d2:21:d0:aa:93:40:0e:7f:ac:32:7f: e3:66:c7:64:b8:79:d2:49:75:ef:5e:52:32:43:14: be:95:b0:3a:1e:d5:b9:c1:ae:84:c0:32:3b:21:2b: f7:4b:fc:17:13:dd:1f:80:ba:86:af:60:3e:55:60: e9:cf:98:37:70:e3:d7:4d:31:40:c2:da:5d:41:51: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2D:26:4D:4F:4A:8B:F2:8F:D0:0D:67:E2:07:94:10:6A:3B:BD:C7 X509v3 Authority Key Identifier: keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:60:44:92:20:f5:38:1b:db:72:12:0d:70:12:ae:a9:bf:0e: 4c:c6:c0:dd:39:4b:cf:bd:b4:bb:07:4d:b2:86:0c:65:a6:c8: ca:a1:a1:0d:0c:e9:01:1a:aa:e3:5b:aa:db:8d:5a:8e:58:b6: d4:fa:8f:e4:54:05:3f:ce:4d:f8:e8:47:61:ec:88:08:8c:e8: 0d:fa:e0:be:ef:a5:63:ae:f6:ab:dc:e0:56:4e:e5:fb:bc:7b: c8:65:a7:85:da:d1:f8:7a:30:78:c6:b3:78:24:80:cc:20:d9: c7:62:07:b8:9c:be:77:71:ce:aa:a8:1f:12:78:d8:6e:d6:a3: 7b:be:45:04:49:bb:f0:0c:25:ae:3e:5f:63:f6:47:3f:22:fe: cc:7d:a6:76:c3:0f:da:be:a1:c4:8f:14:b3:de:81:7b:61:e9: 75:52:cd:21:65:b4:32:4d:09:2b:c3:b7:b7:96:33:dc:94:a9: 74:44:78:99:86:ef:b0:e5:a6:66:34:02:70:a6:83:07:04:17: fd:ec:74:0d:d0:e0:ea:43:c4:f8:30:6e:02:2e:03:07:67:9d: 74:0d:1a:73:22:e7:f4:82:65:30:28:9e:f1:cd:6d:67:e0:30: 29:67:e6:50:74:1b:be:a2:92:50:ad:fb:2f:9b:08:59:48:c8: 63:b5:8a:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CI9zoUByhIJ0wQkoGfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNmQyODQwNDA0NDIzOWVmNTgyNDJmMjEwZTBiMTY2Njdl YjQwZDAwHhcNMjUxMjIwMTgwMTA2WhcNMjUxMjIxMTgwMTA2WjAzMTEwLwYDVQQD EyhjNTJkMjY0ZDRmNGE4YmYyOGZkMDBkNjdlMjA3OTQxMDZhM2JiZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfzryptPbcBuM3p7EMFHi5iaQ9Qw xk4GVpokDt2JuLmVT9DAtBLW28Rf1rn3v33oMO7wpDqVJ3dEcRwNai84sMXAmX5T uavF2vZtD20yfKs761l0M68QltW41S2LrtCOcYcL1delnoC9ZUOQZdwMcw8JG+DY 1qW09lokAecOEwwbKNxHepw/ZlVi/RoWesNKViCB2ah5eqWEIhU7qu6hShhOBDh2 HVucSMRUKdH+Sr+0zhrsf3Gy0iHQqpNADn+sMn/jZsdkuHnSSXXvXlIyQxS+lbA6 HtW5wa6EwDI7ISv3S/wXE90fgLqGr2A+VWDpz5g3cOPXTTFAwtpdQVFQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUtJk1PSovyj9ANZ+IHlBBqO73HMB8GA1UdIwQY MBaAFHttKEBARCOe9YJC8hDgsWZn60DQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt YTY1ZmJkODMwMzU4LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4 LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2BEkiD1 OBvbchINcBKuqb8OTMbA3TlLz720uwdNsoYMZabIyqGhDQzpARqq41uq241ajli2 1PqP5FQFP85N+OhHYeyICIzoDfrgvu+lY672q9zgVk7l+7x7yGWnhdrR+HoweMaz eCSAzCDZx2IHuJy+d3HOqqgfEnjYbtaje75FBEm78Awlrj5fY/ZHPyL+zH2mdsMP 2r6hxI8Us96Be2HpdVLNIWW0Mk0JK8O3t5Yz3JSpdER4mYbvsOWmZjQCcKaDBwQX /ex0DdDg6kPE+DBuAi4DB2eddA0acyLn9IJlMCie8c1tZ+AwKWfmUHQbvqKSUK37 L5sIWUjIY7WKRg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:40 2025 by rpki-client