This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json) Hash identifier: eDwxlTvEhlugIc5UnsxynoR5+uAWxGdm+CY0OuUaPJA= Subject key identifier: 27:59:56:12:61:47:3C:D0:59:FF:DA:3C:33:AB:94:0A:07:59:59:6A Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Certificate serial: 019B0D80A552FCAAF2760DB2551C1A6A2D05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft Manifest number: 16DF Signing time: Thu 11 Dec 2025 13:01:33 +0000 Manifest this update: Thu 11 Dec 2025 13:01:33 +0000 Manifest next update: Fri 12 Dec 2025 13:01:33 +0000 Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=) 2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: aWhlk9ET6Z1mqyFGa2H1iG8zeWjbnA8TAPoh9P3qrPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:a5:52:fc:aa:f2:76:0d:b2:55:1c:1a:6a:2d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Validity Not Before: Dec 11 13:01:33 2025 GMT Not After : Dec 12 13:01:33 2025 GMT Subject: CN=2759561261473cd059ffda3c33ab940a0759596a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:ae:2e:27:48:6c:d1:cd:2e:d9:d1:0f:1b: 15:65:8b:85:df:93:14:53:c5:97:78:5c:9b:60:cf: 0c:ca:cd:ae:cb:7b:ca:c4:fb:99:90:bd:9c:13:dd: 54:72:17:a2:0b:ae:04:f0:01:ca:19:09:fd:82:9e: 2f:c5:c1:1f:6a:32:f3:75:c6:79:20:c0:e6:e6:6e: 6c:ab:a9:12:b9:26:90:24:d1:a4:cf:8e:90:10:2e: ff:ef:1e:c2:41:47:8b:06:b2:74:72:85:a9:39:52: 0f:7e:20:62:ad:53:60:04:56:f6:4a:24:7a:61:f7: b6:e6:96:1c:52:a6:08:16:3d:47:fc:24:1e:2f:79: 85:f2:2b:ba:01:cd:d9:3b:4e:47:c1:e3:c4:69:b2: 5c:1d:13:a1:07:ed:f0:e2:84:e6:ba:99:83:85:53: b2:2d:67:dd:05:f3:72:9f:82:51:dc:f8:dd:6c:c0: 7e:d5:36:81:e3:b0:ab:91:b3:ed:33:dd:9a:cc:f3: 76:03:5d:32:ae:45:e5:1d:30:a8:4a:dd:c4:08:7c: 82:f3:e2:1a:1f:87:8c:54:03:0b:9d:46:89:65:db: 35:37:91:a7:a8:1a:19:4a:84:5f:e1:2b:0b:9b:f6: 5a:a7:fe:cf:dc:0b:12:4e:f3:e6:81:b5:9a:35:e6: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:59:56:12:61:47:3C:D0:59:FF:DA:3C:33:AB:94:0A:07:59:59:6A X509v3 Authority Key Identifier: keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:95:9a:2d:51:6b:d2:72:5c:0b:0a:1d:2b:9e:39:74:94:96: d5:d2:a0:be:0d:d7:f4:b7:46:56:3c:13:6e:44:33:2e:d5:26: ac:28:b6:f6:1e:8a:9a:18:31:4c:5a:a7:5b:a7:7f:ea:86:c8: 97:88:eb:34:b8:9c:13:7f:fa:76:03:a8:23:9d:80:a7:62:69: 99:df:b6:be:bb:93:5a:95:e9:26:fc:83:43:bb:14:22:7b:e7: 48:0c:ec:18:b3:78:9f:35:6c:aa:e4:f8:3a:58:77:f0:11:cb: 9a:e4:fc:06:c7:21:95:80:2e:25:ca:33:9b:7c:3c:83:74:28: ac:83:d0:c9:cd:75:0b:43:16:77:9b:5b:e1:3a:f2:34:64:fe: 79:1e:26:03:a0:a4:fa:a1:0d:91:73:7b:da:f3:90:f1:46:60: 74:9d:68:cb:8a:18:55:ea:c2:19:38:80:c4:f0:b7:8b:1f:c7: 2c:7d:77:fe:a5:14:be:ae:eb:29:25:a4:07:b7:af:69:eb:b1: 01:a4:75:7a:ea:2b:f3:5d:c5:29:02:66:c9:2b:18:64:66:58: 9e:40:f2:cb:ba:c0:e1:8a:bd:e0:0a:18:22:6f:33:60:c5:a7: 94:e9:5b:5f:37:fc:af:98:fa:07:07:67:f9:32:45:85:14:bd: 7a:f1:d1:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgKVS/Krydg2yVRwaai0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzc4NDU5OTU3NzZjZjZmMmEwODM3ZjdhZDRjMWE5MWJj OTdkODIwHhcNMjUxMjExMTMwMTMzWhcNMjUxMjEyMTMwMTMzWjAzMTEwLwYDVQQD EygyNzU5NTYxMjYxNDczY2QwNTlmZmRhM2MzM2FiOTQwYTA3NTk1OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+2uLidIbNHNLtnRDxsVZYuF35MU U8WXeFybYM8Mys2uy3vKxPuZkL2cE91UcheiC64E8AHKGQn9gp4vxcEfajLzdcZ5 IMDm5m5sq6kSuSaQJNGkz46QEC7/7x7CQUeLBrJ0coWpOVIPfiBirVNgBFb2SiR6 Yfe25pYcUqYIFj1H/CQeL3mF8iu6Ac3ZO05HwePEabJcHROhB+3w4oTmupmDhVOy LWfdBfNyn4JR3PjdbMB+1TaB47CrkbPtM92azPN2A10yrkXlHTCoSt3ECHyC8+Ia H4eMVAMLnUaJZds1N5GnqBoZSoRf4SsLm/Zap/7P3AsSTvPmgbWaNeZO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdZVhJhRzzQWf/aPDOrlAoHWVlqMB8GA1UdIwQY MBaAFHJ3hFmVd2z28qCDf3rUwakbyX2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgt ZWVlNmJhMTgyOWI0LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgtZWVlNmJhMTgyOWI0 LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspWaLVFr 0nJcCwodK545dJSW1dKgvg3X9LdGVjwTbkQzLtUmrCi29h6KmhgxTFqnW6d/6obI l4jrNLicE3/6dgOoI52Ap2Jpmd+2vruTWpXpJvyDQ7sUInvnSAzsGLN4nzVsquT4 Olh38BHLmuT8BschlYAuJcozm3w8g3QorIPQyc11C0MWd5tb4TryNGT+eR4mA6Ck +qENkXN72vOQ8UZgdJ1oy4oYVerCGTiAxPC3ix/HLH13/qUUvq7rKSWkB7evaeux AaR1euor813FKQJmySsYZGZYnkDyy7rA4Yq94AoYIm8zYMWnlOlbXzf8r5j6Bwdn +TJFhRS9evHR5g== -----END CERTIFICATE-----Generated at Thu Dec 11 19:21:17 2025 by rpki-client