This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json) Hash identifier: QtKUDWHw6piNCgoG6K6dCYb1KwYAdgAZamSQdqlG/ws= Subject key identifier: 46:AE:DC:F0:68:C7:16:67:B6:C2:4C:A5:A9:C1:CA:5F:6A:6B:22:0F Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Certificate serial: 019B3A9093EC16518E8B2C24980F40AC6496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:51 +0000 Manifest this update: Sat 20 Dec 2025 07:01:51 +0000 Manifest next update: Sun 21 Dec 2025 07:01:51 +0000 Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: LXyM2FTsnISL1JifN8183caHVL7qBrRjEgFI7uue6Y8=) 2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:93:ec:16:51:8e:8b:2c:24:98:0f:40:ac:64:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Validity Not Before: Dec 20 07:01:51 2025 GMT Not After : Dec 21 07:01:51 2025 GMT Subject: CN=46aedcf068c71667b6c24ca5a9c1ca5f6a6b220f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:6a:fc:bd:64:43:4b:c8:b7:2b:43:dc:88: 7d:ef:e7:ce:0f:3a:85:b0:75:c1:b1:08:7a:66:d6: 75:5b:f8:20:3d:23:dc:31:cb:d2:c7:e0:e9:ea:b6: 8a:f8:ff:0a:92:29:bf:39:41:96:13:11:c4:db:a2: 3f:8d:e4:61:0a:d5:b6:4b:5d:34:ad:11:d3:67:a0: 57:81:43:12:2b:a9:70:0d:1a:a0:59:7c:9e:79:f5: 3b:f3:38:4a:db:62:25:8e:31:41:af:da:e3:ca:b4: d5:5f:c7:a8:3b:dc:1c:22:e0:07:ee:a5:f9:ea:e5: 0a:4c:30:c4:d5:47:89:cc:67:8a:3c:47:9a:88:f4: d9:b0:b7:5c:8f:10:4e:50:f7:8f:06:97:5c:71:c8: e5:55:89:a0:ed:83:c9:da:5a:69:f1:ec:e8:a2:4b: 25:07:0a:19:d1:0b:cd:67:a2:65:80:9b:e3:1f:74: 3f:5c:37:36:c5:b4:85:59:65:0d:85:f8:20:f7:e7: 2e:e2:c9:94:22:35:12:45:c3:8f:0f:d7:1c:87:ac: 31:0c:5a:a0:38:34:69:b8:71:0d:61:aa:9b:b3:ec: 8e:da:5a:24:c9:bc:bf:11:fd:c9:64:d0:79:3b:08: ca:21:13:49:25:46:f8:3f:cf:41:b5:c5:a1:be:66: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:DC:F0:68:C7:16:67:B6:C2:4C:A5:A9:C1:CA:5F:6A:6B:22:0F X509v3 Authority Key Identifier: keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a2:22:45:d6:40:16:7c:3f:ed:d5:23:b3:de:bb:75:94:b1: d7:8b:2e:f4:a6:47:5f:78:d9:12:b5:38:66:39:cf:8e:a7:c6: 02:73:b9:13:ab:ab:5e:14:df:f0:c0:bb:5d:f0:00:44:37:cf: 30:ed:30:fe:1a:66:55:b4:7d:56:da:c3:5c:49:02:99:d1:9b: 4f:c5:0f:30:28:a6:d7:c0:82:db:e9:3b:49:8d:ae:24:24:60: 30:a6:46:05:5a:86:ee:b0:15:cb:84:a6:0a:82:bb:f2:aa:01: b4:e3:01:5b:ca:7f:c2:76:e0:3c:4c:81:10:2e:ba:e9:ed:18: 7c:8e:77:7a:c8:9b:77:44:78:97:82:b3:59:5f:ee:a3:41:b6: 9a:e6:c9:22:37:af:d6:c1:b9:e3:f9:b4:1a:4d:11:95:9b:b3: 9b:a7:fa:c4:79:60:32:cd:da:7c:bc:57:f0:1f:43:1d:65:48: 14:cf:7f:1f:33:dc:db:07:b6:36:6d:c9:78:a1:a6:ae:66:19: ba:22:f5:54:bc:1a:3d:81:0c:bb:0a:d5:36:46:37:3b:57:bc: 2a:20:60:f6:39:c6:d8:84:be:a2:e0:5c:26:e9:2f:3b:5d:56: e3:9b:3f:95:61:3b:9a:e3:14:07:d5:0c:49:21:a8:8d:05:c4: 28:4a:a8:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJPsFlGOiywkmA9ArGSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj NTQ3Y2YwHhcNMjUxMjIwMDcwMTUxWhcNMjUxMjIxMDcwMTUxWjAzMTEwLwYDVQQD Eyg0NmFlZGNmMDY4YzcxNjY3YjZjMjRjYTVhOWMxY2E1ZjZhNmIyMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszpq/L1kQ0vItytD3Ih97+fODzqF sHXBsQh6ZtZ1W/ggPSPcMcvSx+Dp6raK+P8Kkim/OUGWExHE26I/jeRhCtW2S100 rRHTZ6BXgUMSK6lwDRqgWXyeefU78zhK22IljjFBr9rjyrTVX8eoO9wcIuAH7qX5 6uUKTDDE1UeJzGeKPEeaiPTZsLdcjxBOUPePBpdcccjlVYmg7YPJ2lpp8ezooksl BwoZ0QvNZ6JlgJvjH3Q/XDc2xbSFWWUNhfgg9+cu4smUIjUSRcOPD9cch6wxDFqg ODRpuHENYaqbs+yO2lokyby/Ef3JZNB5OwjKIRNJJUb4P89BtcWhvmZH3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEau3PBoxxZntsJMpanByl9qayIPMB8GA1UdIwQY MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0 LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6IiRdZA Fnw/7dUjs967dZSx14su9KZHX3jZErU4ZjnPjqfGAnO5E6urXhTf8MC7XfAARDfP MO0w/hpmVbR9VtrDXEkCmdGbT8UPMCim18CC2+k7SY2uJCRgMKZGBVqG7rAVy4Sm CoK78qoBtOMBW8p/wnbgPEyBEC666e0YfI53esibd0R4l4KzWV/uo0G2mubJIjev 1sG54/m0Gk0RlZuzm6f6xHlgMs3afLxX8B9DHWVIFM9/HzPc2we2Nm3JeKGmrmYZ uiL1VLwaPYEMuwrVNkY3O1e8KiBg9jnG2IS+ouBcJukvO11W45s/lWE7muMUB9UM SSGojQXEKEqoTw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:20:27 2025 by rpki-client