This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json) Hash identifier: o4/GAu/d4rWI6paOOl/nGMJ49Kz6+vqYuKJ9hWS665I= Subject key identifier: 25:7A:52:5E:C9:28:DE:2C:B1:2E:3B:E8:70:10:4F:EC:7D:30:F0:81 Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47 Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147 Certificate serial: 019B36EA07E439AA5A0DEEC2CD7AC75079EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 14:01:05 +0000 Manifest this update: Fri 19 Dec 2025 14:01:05 +0000 Manifest next update: Sat 20 Dec 2025 14:01:05 +0000 Files and hashes: 1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 8An6n4oqpgiqV3Oize8ICdDt4/fftSDOVWdbH+tjmQM=) 2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=) 3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:07:e4:39:aa:5a:0d:ee:c2:cd:7a:c7:50:79:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147 Validity Not Before: Dec 19 14:01:05 2025 GMT Not After : Dec 20 14:01:05 2025 GMT Subject: CN=257a525ec928de2cb12e3be870104fec7d30f081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:14:ef:c8:3e:8a:8f:48:3e:bd:7d:82:72: 19:90:fe:31:06:ea:70:d5:e9:a5:69:11:d5:9d:d3: f3:11:36:dc:ac:e8:a2:99:fe:bd:db:30:72:44:59: 2c:fd:06:5a:82:7b:89:fb:99:c5:d9:82:8d:12:95: ec:55:8c:6b:0f:36:b8:ba:3f:5c:b6:9a:85:65:ad: b6:38:a6:6b:e3:38:93:01:cf:f4:e1:9f:ce:a3:f1: 61:62:2c:ba:57:ab:29:15:23:57:31:20:82:f0:f5: 57:9f:6a:31:80:d7:6d:a8:bb:77:c1:1e:ab:74:dd: c1:61:fe:88:5b:1e:31:4a:aa:35:61:2e:b1:3d:37: ae:1b:80:fc:5f:ca:a3:e5:8a:c0:69:5d:2f:1b:0b: ac:24:14:f4:aa:5d:3d:5c:01:42:90:3c:cf:81:e9: 96:e3:bc:3c:8a:dc:a6:8a:08:24:fe:f3:27:c2:db: b7:08:53:44:6d:ce:de:27:2b:3b:4d:e0:1b:fb:19: 08:7d:0f:1b:a8:ca:cf:df:c1:9a:3d:f1:4d:c7:a5: 45:ab:39:e8:71:9e:8e:fb:df:fe:10:06:fd:21:e4: 97:54:fe:d6:de:58:48:22:e8:6a:f8:4a:64:f2:24: 52:fe:3d:e4:aa:c7:4d:1b:89:66:55:21:6b:43:51: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:52:5E:C9:28:DE:2C:B1:2E:3B:E8:70:10:4F:EC:7D:30:F0:81 X509v3 Authority Key Identifier: keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bf:84:8f:68:31:b7:77:3b:3f:b1:0e:32:9f:27:f2:eb:8a: 9d:ee:d5:e8:5a:b8:18:c0:53:ce:f6:d3:57:fe:55:bb:5d:7b: 72:d5:21:f0:71:ac:5c:34:80:df:98:9d:06:b7:7d:14:bd:9f: 8d:48:c2:98:6a:44:dc:50:ea:d9:46:da:51:b1:6e:87:5c:ab: 30:ef:b9:8c:ce:fa:8c:05:d5:a2:19:ec:e4:ce:47:fb:e4:dd: 07:6a:80:d7:3a:df:cf:25:17:30:d8:ec:eb:9e:67:51:21:a3: e0:99:15:c2:17:6c:7f:3f:73:38:02:73:bb:85:d2:ea:df:04: 96:2c:c6:09:fe:af:33:72:f9:7c:eb:ed:4d:1b:66:89:12:81: 18:5e:75:48:e5:6c:16:ef:21:ed:88:99:e9:f4:2c:c8:e7:21: 7d:88:70:10:69:77:9c:a2:e3:c8:11:c2:d3:c1:04:db:dc:a3: 81:f9:f4:76:da:be:14:af:da:26:97:4a:d6:1d:df:48:ab:f7: df:e6:23:1e:db:1d:b7:93:4d:bf:59:ed:3e:6b:e5:65:74:84: fe:df:25:99:af:53:4a:f9:66:6e:59:c1:38:e1:e2:94:b3:6f: 21:c0:00:f5:87:2c:96:cc:d1:58:9e:17:bc:b7:c8:5d:d1:46: d7:ac:5a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26gfkOapaDe7CzXrHUHnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzY0YTUyYzg1ZTA3ZTMzNzQ5NzQzZDIzYTVhMjRkMDk2 ZGYxNDcwHhcNMjUxMjE5MTQwMTA1WhcNMjUxMjIwMTQwMTA1WjAzMTEwLwYDVQQD EygyNTdhNTI1ZWM5MjhkZTJjYjEyZTNiZTg3MDEwNGZlYzdkMzBmMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwkU78g+io9IPr19gnIZkP4xBupw 1emlaRHVndPzETbcrOiimf692zByRFks/QZagnuJ+5nF2YKNEpXsVYxrDza4uj9c tpqFZa22OKZr4ziTAc/04Z/Oo/FhYiy6V6spFSNXMSCC8PVXn2oxgNdtqLt3wR6r dN3BYf6IWx4xSqo1YS6xPTeuG4D8X8qj5YrAaV0vGwusJBT0ql09XAFCkDzPgemW 47w8itymiggk/vMnwtu3CFNEbc7eJys7TeAb+xkIfQ8bqMrP38GaPfFNx6VFqzno cZ6O+9/+EAb9IeSXVP7W3lhIIuhq+Epk8iRS/j3kqsdNG4lmVSFrQ1FjGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV6Ul7JKN4ssS476HAQT+x9MPCBMB8GA1UdIwQY MBaAFBN2SlLIXgfjN0l0PSOlok0JbfFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lNGU1MzEtNmJlZS00MTg5LWJhN2Mt MjAzZTQ1NjE2MzA2LzEvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lNGU1MzEtNmJlZS00MTg5LWJhN2MtMjAzZTQ1NjE2MzA2 LzEvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb+Ej2gx t3c7P7EOMp8n8uuKne7V6Fq4GMBTzvbTV/5Vu117ctUh8HGsXDSA35idBrd9FL2f jUjCmGpE3FDq2UbaUbFuh1yrMO+5jM76jAXVohns5M5H++TdB2qA1zrfzyUXMNjs 655nUSGj4JkVwhdsfz9zOAJzu4XS6t8ElizGCf6vM3L5fOvtTRtmiRKBGF51SOVs Fu8h7YiZ6fQsyOchfYhwEGl3nKLjyBHC08EE29yjgfn0dtq+FK/aJpdK1h3fSKv3 3+YjHtsdt5NNv1ntPmvlZXSE/t8lma9TSvlmblnBOOHilLNvIcAA9YcslszRWJ4X vLfIXdFG16xaZw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:28 2025 by rpki-client