This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json) Hash identifier: FxMxe8L6jODEOYrQaFTr0kZ4QRUqK1aW4vAHjYFp6jg= Subject key identifier: 2B:AC:CB:46:84:20:99:B9:7B:C5:13:95:80:97:01:4A:DD:AF:51:7E Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Certificate serial: 019B5A883AA5263A7EF8220053A4B01AE4E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:00:35 +0000 Manifest this update: Fri 26 Dec 2025 12:00:35 +0000 Manifest next update: Sat 27 Dec 2025 12:00:35 +0000 Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: pA3WX0E4feeMu6s/rXrmqSAr70wGPVB4V9+9i6AUKFY=) 2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:3a:a5:26:3a:7e:f8:22:00:53:a4:b0:1a:e4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4 Validity Not Before: Dec 26 12:00:35 2025 GMT Not After : Dec 27 12:00:35 2025 GMT Subject: CN=2baccb46842099b97bc513958097014addaf517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:6a:b4:2e:c9:2f:4d:a9:98:b1:8f:6c:be: 6a:17:70:ba:a9:85:c8:cc:51:0a:89:2e:e3:0f:49: b6:c1:16:61:db:f2:9a:5c:be:cf:d6:32:d9:a7:8a: f6:a5:4e:4b:f8:47:ac:f3:dc:ee:4c:ad:60:7e:df: da:6a:54:2b:73:14:8b:90:d1:27:be:01:aa:a8:69: 9c:15:75:9b:6c:93:18:b2:69:3e:c2:67:29:d2:b8: 10:cc:1b:e7:71:4d:da:64:94:6c:bb:f3:08:10:16: a7:9b:0a:7b:b6:03:09:07:c7:7d:a5:27:e4:3d:20: 1e:f6:cd:88:b4:a9:23:4c:ac:f8:72:62:12:87:1b: a2:83:78:5c:0a:b3:f1:e1:10:b9:cb:27:c0:e7:a4: b1:cf:6f:14:0a:86:68:18:f0:8c:d4:4e:34:02:10: a0:d1:98:03:2f:fb:ac:17:df:0e:5f:d7:b8:5e:28: 72:49:d8:19:88:e3:10:be:09:7b:07:54:19:90:ad: 99:20:e0:5e:de:86:9e:2e:97:ca:10:b9:c5:de:c7: 98:65:e7:9a:4f:1f:40:b1:c0:b9:8a:34:ef:aa:cb: 93:23:70:c7:73:4a:ef:4f:63:ab:1e:3d:c8:6f:d9: bd:8c:79:68:04:de:18:32:f1:b2:fc:60:9f:67:6c: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AC:CB:46:84:20:99:B9:7B:C5:13:95:80:97:01:4A:DD:AF:51:7E X509v3 Authority Key Identifier: keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9f:33:1d:cd:c9:6b:ea:5f:5e:e8:e5:1a:62:04:43:ba:85: b6:25:13:30:6a:5e:62:09:03:82:da:2f:63:80:b2:09:9a:85: 75:68:40:72:b1:1c:66:71:ea:8a:ad:f4:26:a0:ff:56:5c:86: 3a:08:7d:f3:b6:54:a3:f8:c1:6e:b9:16:cb:ab:95:6c:a1:aa: 91:25:f1:26:09:18:58:66:de:ca:7a:4b:83:fb:ba:99:fe:2c: 7f:64:2a:1f:b4:e3:82:84:5a:07:3b:0e:46:a8:2b:68:0b:b9: 09:27:18:3e:4e:81:49:ed:7b:72:a1:d3:aa:09:23:85:1c:48: 43:c9:4e:f7:dc:bd:1f:96:99:79:c8:e5:53:6c:7e:59:57:14: 09:b7:c3:0d:b2:34:99:d4:e9:c8:30:80:69:5d:3e:84:57:da: 15:02:2a:10:dc:09:d9:56:d4:70:ea:5d:29:73:15:bd:05:a9: c3:ee:ae:fe:47:27:91:e9:54:a1:5e:05:59:93:0a:a6:a9:23: fa:92:95:d3:cf:42:03:6c:17:7d:0b:f1:b8:8d:d7:2b:02:54: 89:ba:7c:ef:61:d0:02:78:84:d0:47:e8:1c:89:99:87:53:7e: 16:c5:9b:5d:1a:69:2b:6d:be:9a:0d:49:95:47:a8:54:9e:b7: bd:3d:13:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiDqlJjp++CIAU6SwGuTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5 MWI5ZDQwHhcNMjUxMjI2MTIwMDM1WhcNMjUxMjI3MTIwMDM1WjAzMTEwLwYDVQQD EygyYmFjY2I0Njg0MjA5OWI5N2JjNTEzOTU4MDk3MDE0YWRkYWY1MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQpqtC7JL02pmLGPbL5qF3C6qYXI zFEKiS7jD0m2wRZh2/KaXL7P1jLZp4r2pU5L+Ees89zuTK1gft/aalQrcxSLkNEn vgGqqGmcFXWbbJMYsmk+wmcp0rgQzBvncU3aZJRsu/MIEBanmwp7tgMJB8d9pSfk PSAe9s2ItKkjTKz4cmIShxuig3hcCrPx4RC5yyfA56Sxz28UCoZoGPCM1E40AhCg 0ZgDL/usF98OX9e4XihySdgZiOMQvgl7B1QZkK2ZIOBe3oaeLpfKELnF3seYZeea Tx9AscC5ijTvqsuTI3DHc0rvT2OrHj3Ib9m9jHloBN4YMvGy/GCfZ2wLcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCusy0aEIJm5e8UTlYCXAUrdr1F+MB8GA1UdIwQY MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4 LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK58zHc3J a+pfXujlGmIEQ7qFtiUTMGpeYgkDgtovY4CyCZqFdWhAcrEcZnHqiq30JqD/VlyG Ogh987ZUo/jBbrkWy6uVbKGqkSXxJgkYWGbeynpLg/u6mf4sf2QqH7TjgoRaBzsO RqgraAu5CScYPk6BSe17cqHTqgkjhRxIQ8lO99y9H5aZecjlU2x+WVcUCbfDDbI0 mdTpyDCAaV0+hFfaFQIqENwJ2VbUcOpdKXMVvQWpw+6u/kcnkelUoV4FWZMKpqkj +pKV089CA2wXfQvxuI3XKwJUibp872HQAniE0EfoHImZh1N+FsWbXRppK22+mg1J lUeoVJ63vT0TTw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:46 2025 by rpki-client