This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json) Hash identifier: ILh+74urezW/KuDXIy1wmQD2H3+ORIVLT1RexHx9DU8= Subject key identifier: A9:81:0F:F4:EA:82:75:DE:D5:56:64:CB:19:B2:26:70:F7:D0:0E:F4 Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Certificate serial: 019AEFAC8CCAA53AB6B0BD81B1730C4803C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft Manifest number: 0C87 Signing time: Fri 05 Dec 2025 18:00:54 +0000 Manifest this update: Fri 05 Dec 2025 18:00:54 +0000 Manifest next update: Sat 06 Dec 2025 18:00:54 +0000 Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=) 2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: WfFxJx5kWjM1pGcIGFAj7a7id5resKWy9w3/brTVCBw=) 3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:8c:ca:a5:3a:b6:b0:bd:81:b1:73:0c:48:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Validity Not Before: Dec 5 18:00:54 2025 GMT Not After : Dec 6 18:00:54 2025 GMT Subject: CN=a9810ff4ea8275ded55664cb19b22670f7d00ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:19:68:62:9b:e8:b2:b3:83:b4:83:0e:d2: 16:fd:e5:a6:52:5d:ac:1b:18:35:18:e9:5c:0e:8a: 73:97:14:43:bb:36:d9:63:fe:ba:8a:f2:dd:ef:7c: 05:54:ce:e6:4d:c6:f2:66:ed:c8:b2:df:a4:91:1a: f6:d8:e0:ff:78:a1:27:6f:99:d9:c7:17:20:b2:24: 6f:57:21:85:70:52:83:36:05:76:e3:74:1b:fe:fd: e4:cd:ad:53:18:f5:56:b0:98:05:bd:41:50:9e:20: 0e:e5:f5:b4:60:ae:db:b9:86:3b:d5:8d:dd:94:26: d3:fc:38:c5:ae:66:0b:b9:0d:a3:74:92:f7:1b:b0: e0:0f:8f:53:0a:e8:f8:02:15:e2:4a:c2:50:e1:f6: 2d:3a:70:78:e1:21:78:d6:1a:8f:e1:79:04:79:de: eb:7c:31:06:37:b3:3d:25:d2:99:22:14:5c:c5:94: 18:2a:06:45:af:62:12:78:68:95:b8:64:d4:1d:d7: ad:6c:1a:c2:82:71:04:e1:49:39:6c:42:2f:1f:b1: cd:b4:30:21:5b:4b:d3:25:22:fc:3e:83:d6:79:ad: 8f:66:e3:de:01:8c:48:53:09:85:df:3d:ad:1c:fe: 63:b7:0b:71:37:7b:f6:8d:06:fe:f7:eb:6f:e9:d4: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:0F:F4:EA:82:75:DE:D5:56:64:CB:19:B2:26:70:F7:D0:0E:F4 X509v3 Authority Key Identifier: keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ec:b3:07:12:1c:7d:6a:4f:3d:d8:f0:ae:13:80:a5:1f:48: 59:61:7a:6b:7e:e9:43:82:6e:67:7e:03:3b:07:c2:62:74:54: d1:98:56:3b:c8:c1:92:cd:82:0c:20:36:c6:ca:78:17:aa:c4: 3a:49:14:25:65:23:4a:7e:9c:6f:41:09:e8:01:08:0c:e1:d1: 67:58:c8:21:c8:74:5a:25:51:9e:a6:c4:14:1a:ff:18:8d:e7: 8c:47:e5:e0:b7:6c:d1:10:d5:f2:d4:92:92:94:df:10:c2:29: 6f:13:9a:d9:eb:c0:cc:3f:38:b5:1e:40:bb:d9:bd:84:7d:81: 74:00:20:14:ab:72:c6:5d:fe:74:15:d6:86:8e:c2:1e:70:72: 05:98:3e:c1:39:c5:68:0c:8a:b3:71:99:45:b2:0a:ae:8b:e8: b2:28:95:60:15:13:1c:9c:7d:6f:a6:28:ae:11:06:0e:be:ab: e5:84:24:ca:6a:43:9a:74:7e:31:51:c0:2a:3f:06:8e:ca:37: a5:75:bb:82:60:cc:63:96:0a:56:0a:51:98:6b:29:d4:1c:68: 16:61:3a:8f:33:50:fe:e8:0c:bd:0e:35:ba:2f:2b:05:64:84: 35:ff:26:20:83:b9:d8:a9:de:b6:ab:35:7a:26:8c:57:9a:73: 0f:80:b0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrIzKpTq2sL2BsXMMSAPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz ZjEzOTcwHhcNMjUxMjA1MTgwMDU0WhcNMjUxMjA2MTgwMDU0WjAzMTEwLwYDVQQD EyhhOTgxMGZmNGVhODI3NWRlZDU1NjY0Y2IxOWIyMjY3MGY3ZDAwZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKIZaGKb6LKzg7SDDtIW/eWmUl2s Gxg1GOlcDopzlxRDuzbZY/66ivLd73wFVM7mTcbyZu3Ist+kkRr22OD/eKEnb5nZ xxcgsiRvVyGFcFKDNgV243Qb/v3kza1TGPVWsJgFvUFQniAO5fW0YK7buYY71Y3d lCbT/DjFrmYLuQ2jdJL3G7DgD49TCuj4AhXiSsJQ4fYtOnB44SF41hqP4XkEed7r fDEGN7M9JdKZIhRcxZQYKgZFr2ISeGiVuGTUHdetbBrCgnEE4Uk5bEIvH7HNtDAh W0vTJSL8PoPWea2PZuPeAYxIUwmF3z2tHP5jtwtxN3v2jQb+9+tv6dRZ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmBD/TqgnXe1VZkyxmyJnD30A70MB8GA1UdIwQY MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt M2QwZGI4ZWI0ZTEzLzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOyzBxIc fWpPPdjwrhOApR9IWWF6a37pQ4JuZ34DOwfCYnRU0ZhWO8jBks2CDCA2xsp4F6rE OkkUJWUjSn6cb0EJ6AEIDOHRZ1jIIch0WiVRnqbEFBr/GI3njEfl4Lds0RDV8tSS kpTfEMIpbxOa2evAzD84tR5Au9m9hH2BdAAgFKtyxl3+dBXWho7CHnByBZg+wTnF aAyKs3GZRbIKrovosiiVYBUTHJx9b6YorhEGDr6r5YQkympDmnR+MVHAKj8Gjso3 pXW7gmDMY5YKVgpRmGsp1BxoFmE6jzNQ/ugMvQ41ui8rBWSENf8mIIO52Knetqs1 eiaMV5pzD4CwOQ== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:59 2025 by rpki-client