This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json) Hash identifier: hD+JaEPJLcnzdftFZDJkcjki6exOEcrzeZ6XgdOhD8c= Subject key identifier: DF:91:CE:29:F1:84:EB:31:E2:5B:D7:3E:7B:10:CB:32:B1:88:5D:2D Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Certificate serial: 019B48158623318F6EDF98E189B5C1CE8C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft Manifest number: 0F16 Signing time: Mon 22 Dec 2025 22:02:08 +0000 Manifest this update: Mon 22 Dec 2025 22:02:08 +0000 Manifest next update: Tue 23 Dec 2025 22:02:08 +0000 Files and hashes: 1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=) 2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: j0Ko4LAdPsXAJbDcnLjNp7fyJN/b4jN12ChZ/jSOMpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:86:23:31:8f:6e:df:98:e1:89:b5:c1:ce:8c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Validity Not Before: Dec 22 22:02:08 2025 GMT Not After : Dec 23 22:02:08 2025 GMT Subject: CN=df91ce29f184eb31e25bd73e7b10cb32b1885d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:26:2e:e1:f1:00:1b:86:a1:23:8a:53:4f: 46:07:56:ff:47:5a:02:15:33:04:d0:be:32:46:52: 4d:3c:27:c5:7c:d9:5f:e3:92:ed:6b:33:26:b5:08: d9:fb:1e:cd:6f:15:8e:bb:d5:af:d8:cc:1f:b1:3b: f7:15:d3:85:79:c4:72:0b:a8:22:9e:30:0c:e9:a4: 7e:15:03:b1:fc:ad:fc:a5:e3:12:ad:c6:8d:ac:f4: 56:b0:97:bf:b3:55:b9:3a:aa:42:0d:ce:d0:08:56: b9:a7:9b:15:33:ab:92:d8:f3:dd:95:69:ab:e7:df: 8a:ed:5d:b9:c7:d2:27:60:bc:44:18:ad:74:ad:23: 93:e4:c1:15:75:2c:ec:ef:9c:55:0e:d2:4a:ee:8f: 8c:c8:0b:21:23:b5:87:13:c9:a6:8f:49:06:cd:e2: fe:52:e4:a8:7b:11:53:74:0c:b2:d4:75:1d:e6:ed: ab:0c:27:a9:64:3f:2d:57:e4:56:66:c2:01:9a:8c: e0:4a:12:84:6f:db:2d:ef:f6:c7:44:83:f5:8d:c3: 50:26:0f:cf:1b:0e:9d:6c:0c:c6:1a:16:04:42:08: 9c:df:ef:5f:4b:19:a7:ec:fb:63:21:64:02:94:e0: f2:e0:8f:26:49:cf:f6:bf:ce:53:0e:68:24:8d:d7: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:91:CE:29:F1:84:EB:31:E2:5B:D7:3E:7B:10:CB:32:B1:88:5D:2D X509v3 Authority Key Identifier: keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:77:c2:b2:3c:15:76:26:b2:f5:47:45:2d:29:7c:a9:d6:d7: 75:5a:27:44:2e:6a:c8:1c:b4:cf:37:d6:bd:42:84:43:d3:ea: 86:c5:ff:41:f4:48:55:dc:04:31:b0:3a:25:e0:fb:a3:d2:57: 40:91:c9:c0:8b:ad:50:8b:1b:51:7d:c2:fc:b1:67:7d:f2:75: 7a:0a:9c:78:b9:a3:80:cb:9d:cc:79:54:09:5e:0c:8f:05:1b: 13:7b:fd:4c:58:b9:6c:1d:c6:22:b1:67:d7:7e:a6:94:5e:2a: 7d:c0:96:6c:c0:dc:e4:7e:54:bd:e4:4e:6b:7e:5f:96:50:87: d7:a4:3c:f0:45:8e:83:1a:e4:f6:3d:1f:57:38:86:2d:2c:64: 2b:f7:ba:bc:f6:d0:72:42:74:e1:f8:40:4d:9e:ba:6c:35:90: 34:7f:f1:9b:1b:03:85:e6:46:35:04:d1:a6:7f:7b:72:d1:88: 97:70:2e:86:98:5e:61:c2:c1:8f:fa:9c:8a:b4:2c:c2:c1:6d: 51:01:24:65:68:e0:cf:ad:b6:eb:56:02:b1:63:cd:77:d9:e4: 70:c5:67:71:b0:c1:81:83:64:60:d7:f5:6f:88:4f:37:d5:66: 44:54:b4:d3:e9:60:2c:08:c2:df:e4:dc:37:5e:2a:9a:8e:e2: f9:ce:86:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFYYjMY9u35jhibXBzoyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWU4MzYxNmY1MWYwMGIxZTU1YzBjNjE3YjNhNWYwNGFi NzQxYTMwHhcNMjUxMjIyMjIwMjA4WhcNMjUxMjIzMjIwMjA4WjAzMTEwLwYDVQQD EyhkZjkxY2UyOWYxODRlYjMxZTI1YmQ3M2U3YjEwY2IzMmIxODg1ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpAmLuHxABuGoSOKU09GB1b/R1oC FTME0L4yRlJNPCfFfNlf45LtazMmtQjZ+x7NbxWOu9Wv2MwfsTv3FdOFecRyC6gi njAM6aR+FQOx/K38peMSrcaNrPRWsJe/s1W5OqpCDc7QCFa5p5sVM6uS2PPdlWmr 59+K7V25x9InYLxEGK10rSOT5MEVdSzs75xVDtJK7o+MyAshI7WHE8mmj0kGzeL+ UuSoexFTdAyy1HUd5u2rDCepZD8tV+RWZsIBmozgShKEb9st7/bHRIP1jcNQJg/P Gw6dbAzGGhYEQgic3+9fSxmn7PtjIWQClODy4I8mSc/2v85TDmgkjdfD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+RzinxhOsx4lvXPnsQyzKxiF0tMB8GA1UdIwQY MBaAFBOeg2FvUfALHlXAxhezpfBKt0GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTIt Njc4MmUyZGFlZjc0LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTItNjc4MmUyZGFlZjc0 LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHfCsjwV diay9UdFLSl8qdbXdVonRC5qyBy0zzfWvUKEQ9PqhsX/QfRIVdwEMbA6JeD7o9JX QJHJwIutUIsbUX3C/LFnffJ1egqceLmjgMudzHlUCV4MjwUbE3v9TFi5bB3GIrFn 136mlF4qfcCWbMDc5H5UveROa35fllCH16Q88EWOgxrk9j0fVziGLSxkK/e6vPbQ ckJ04fhATZ66bDWQNH/xmxsDheZGNQTRpn97ctGIl3AuhpheYcLBj/qcirQswsFt UQEkZWjgz62261YCsWPNd9nkcMVncbDBgYNkYNf1b4hPN9VmRFS00+lgLAjC3+Tc N14qmo7i+c6GPw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:19 2025 by rpki-client