This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json) Hash identifier: /03sqE0MN29L8t32xZ47+MAkbN28WD1wRGNCQgLh4cE= Subject key identifier: A0:A1:68:0B:9C:71:E5:ED:17:48:43:A8:13:14:95:A2:02:F2:71:C3 Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Certificate serial: 019B2106FD16B3098C12909028DAC891D667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft Manifest number: 12FA Signing time: Mon 15 Dec 2025 08:01:04 +0000 Manifest this update: Mon 15 Dec 2025 08:01:04 +0000 Manifest next update: Tue 16 Dec 2025 08:01:04 +0000 Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=) 2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: bBlXy8w93qiBqHeTuN4e0bIBU2i9eYpCw3rfYQLDOFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:fd:16:b3:09:8c:12:90:90:28:da:c8:91:d6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f Validity Not Before: Dec 15 08:01:04 2025 GMT Not After : Dec 16 08:01:04 2025 GMT Subject: CN=a0a1680b9c71e5ed174843a8131495a202f271c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:36:e9:8e:39:76:e8:c0:6f:7c:80:52:4c:25: 07:cf:b2:f1:f8:d9:c0:b3:cb:bc:fb:cc:09:01:63: 9d:80:b4:30:18:ca:4d:0a:d8:64:fb:7f:49:65:53: 38:5f:f3:12:ba:a6:d0:7f:97:1d:89:b7:08:f3:2c: 65:0b:3b:e1:fb:ab:a5:b4:06:0e:43:fd:f7:0b:e0: 00:a4:74:5f:99:44:89:fe:3c:43:54:30:00:ad:24: ae:f0:2f:f6:2e:df:37:e1:55:e9:e3:2f:0a:18:7a: ad:4e:03:19:18:10:3c:9d:d0:19:5a:de:8b:d3:e9: 66:60:eb:f3:37:13:05:84:9c:d4:c8:8d:96:ef:f8: ce:69:96:c8:4a:28:73:a3:35:27:04:9e:0b:0f:6e: 2a:54:4e:6e:46:46:7c:28:90:0e:8b:6b:fb:45:f2: a6:ff:1a:0b:f8:32:57:b6:97:d8:14:cc:c0:4e:c5: b1:f5:97:3e:05:ef:88:37:fd:d7:2c:a3:a7:98:ea: 42:a0:e1:30:4e:b7:d2:09:3f:a1:c9:4b:fb:bd:b2: c5:3d:da:14:50:97:e1:29:cf:cf:1c:bd:4b:be:e4: d0:28:f5:55:f7:82:3c:d9:db:f0:9c:2c:b0:bc:5c: 90:ec:27:31:9b:6e:f2:36:cd:66:ec:90:d1:42:aa: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:68:0B:9C:71:E5:ED:17:48:43:A8:13:14:95:A2:02:F2:71:C3 X509v3 Authority Key Identifier: keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6f:76:91:a9:28:76:bd:61:c9:e3:ea:d4:e9:27:a2:be:bf: f7:a5:51:1b:9a:26:02:92:9e:60:24:2d:d3:ef:65:28:99:27: 9c:f8:e4:ba:4e:88:e4:40:89:2f:32:d8:fd:9e:42:90:32:42: d3:69:3d:06:31:0b:39:01:64:06:5f:87:4b:f9:ad:35:50:bb: 54:7b:5c:f8:eb:1f:26:13:3c:b6:d9:7e:88:aa:83:cc:89:ef: e3:c9:99:32:ca:0d:40:44:61:ab:f4:23:10:af:77:70:16:e3: 5a:d1:1c:86:88:d3:32:f0:be:e6:4e:08:e1:6b:77:f4:5e:d8: 75:36:a4:23:0b:33:8d:a0:e1:89:1a:50:ed:51:23:15:63:a1: 4e:e2:92:3b:92:0d:45:e1:39:80:c9:96:5b:ad:49:46:19:46: b3:a6:98:5f:f2:a9:50:51:d8:ac:46:e8:cb:9c:0f:cc:87:4a: 0d:e9:9f:ff:33:6a:45:4a:cc:42:bb:e4:ce:23:12:db:08:a0: e2:9c:63:26:79:00:f0:14:9e:b8:49:b9:dd:f4:8c:cc:8f:e9: 1a:20:69:27:7f:2e:ff:90:f2:48:5c:d7:40:c8:fb:1c:e4:3b: 56:90:58:69:bd:97:1d:a7:60:33:4c:d3:ee:7a:1a:47:e4:07: 2c:7d:88:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBv0WswmMEpCQKNrIkdZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyN2U5ZjlkNWZkNDVkYTAxMDY5NWNjNDIxMmFmN2U2N2I3 YjM0OGYwHhcNMjUxMjE1MDgwMTA0WhcNMjUxMjE2MDgwMTA0WjAzMTEwLwYDVQQD EyhhMGExNjgwYjljNzFlNWVkMTc0ODQzYTgxMzE0OTVhMjAyZjI3MWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dbpjjl26MBvfIBSTCUHz7Lx+NnA s8u8+8wJAWOdgLQwGMpNCthk+39JZVM4X/MSuqbQf5cdibcI8yxlCzvh+6ultAYO Q/33C+AApHRfmUSJ/jxDVDAArSSu8C/2Lt834VXp4y8KGHqtTgMZGBA8ndAZWt6L 0+lmYOvzNxMFhJzUyI2W7/jOaZbISihzozUnBJ4LD24qVE5uRkZ8KJAOi2v7RfKm /xoL+DJXtpfYFMzATsWx9Zc+Be+IN/3XLKOnmOpCoOEwTrfSCT+hyUv7vbLFPdoU UJfhKc/PHL1LvuTQKPVV94I82dvwnCywvFyQ7Ccxm27yNs1m7JDRQqq9qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKChaAucceXtF0hDqBMUlaIC8nHDMB8GA1UdIwQY MBaAFBJ+n51f1F2gEGlcxCEq9+Z7ezSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzIt MTVhOWYyMWNhYTg1LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzItMTVhOWYyMWNhYTg1 LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj292kako dr1hyePq1Oknor6/96VRG5omApKeYCQt0+9lKJknnPjkuk6I5ECJLzLY/Z5CkDJC 02k9BjELOQFkBl+HS/mtNVC7VHtc+OsfJhM8ttl+iKqDzInv48mZMsoNQERhq/Qj EK93cBbjWtEchojTMvC+5k4I4Wt39F7YdTakIwszjaDhiRpQ7VEjFWOhTuKSO5IN ReE5gMmWW61JRhlGs6aYX/KpUFHYrEboy5wPzIdKDemf/zNqRUrMQrvkziMS2wig 4pxjJnkA8BSeuEm53fSMzI/pGiBpJ38u/5DySFzXQMj7HOQ7VpBYab2XHadgM0zT 7noaR+QHLH2IiA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:25 2025 by rpki-client