This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json) Hash identifier: QHeaSm37UjBBgWUdtARtew/VFbYvY+J1Pw5nq0ntUQE= Subject key identifier: E6:61:40:E3:BE:98:01:01:C3:F5:5B:18:56:99:25:AC:90:F9:4B:70 Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf Certificate serial: 019B273FF156A2A4FA5C7C0E6193A13FB21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft Manifest number: 15EC Signing time: Tue 16 Dec 2025 13:01:00 +0000 Manifest this update: Tue 16 Dec 2025 13:01:00 +0000 Manifest next update: Wed 17 Dec 2025 13:01:00 +0000 Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: OHVKtfpGwq+nNTlCd5BaInW5vqjcu7egLo7iVW8nxp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:f1:56:a2:a4:fa:5c:7c:0e:61:93:a1:3f:b2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf Validity Not Before: Dec 16 13:01:00 2025 GMT Not After : Dec 17 13:01:00 2025 GMT Subject: CN=e66140e3be980101c3f55b18569925ac90f94b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8f:5c:26:a4:3a:a5:08:cf:2e:2a:ba:0b:ef: 11:f4:09:11:f4:07:d0:26:39:42:cb:84:91:a6:9a: 47:c1:51:bd:19:f8:ab:d3:b9:41:e8:c1:b4:26:22: 31:cb:ab:21:09:2f:58:cd:03:4a:6a:4f:7b:81:52: bc:26:93:88:8d:48:2a:17:75:57:1b:44:15:13:06: 89:51:17:98:3a:05:8c:c8:c1:4f:60:0f:c5:90:f2: a5:88:a6:9a:ff:ce:38:0e:a2:6e:3c:8a:a1:78:78: e2:41:e2:8a:3c:e6:cb:11:c9:c9:41:ba:a2:f0:85: b8:7e:3c:ac:3a:d3:bf:32:59:66:60:54:c3:ed:7b: 07:69:16:fb:c0:7c:c1:26:1c:41:30:aa:2c:80:08: 02:7a:9c:ca:66:07:05:c6:d9:c3:80:8d:e3:8a:45: 95:61:df:8f:de:cb:d9:e4:e4:e5:d2:ad:92:5a:8f: c0:a0:ba:93:1a:02:fe:1b:1a:e9:d9:55:16:39:22: 09:b2:25:65:f8:55:f8:24:2e:56:6c:01:eb:96:da: ee:f8:33:7e:14:49:d7:c1:5d:a6:4d:7e:c0:66:48: 06:83:4e:fc:1a:b3:f5:d8:fe:97:77:1c:e0:a2:38: 0a:ff:9f:e9:32:a9:b8:f9:8b:0d:17:1a:e4:1c:ca: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:61:40:E3:BE:98:01:01:C3:F5:5B:18:56:99:25:AC:90:F9:4B:70 X509v3 Authority Key Identifier: keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ca:c4:e0:92:30:26:dd:f1:27:dc:c1:ef:c9:ca:a8:f5:39: 69:2c:2f:47:54:b2:4f:18:6d:20:51:81:b4:a1:8a:ca:70:a7: c6:d6:47:5a:e0:98:7f:e8:00:0f:b4:a2:60:69:04:11:9d:73: e2:79:ae:94:00:ec:35:58:0e:44:f5:96:28:ba:5c:a8:1b:6b: 19:c4:75:d9:c7:c9:b6:d6:c7:e1:35:7e:33:70:2e:a6:94:f8: 72:fc:16:8c:bb:78:01:89:98:bb:49:70:35:fd:b4:30:c3:b0: 81:6a:a9:72:45:df:3a:cf:15:0b:7d:f9:eb:6b:92:c4:ce:5c: 2c:05:dc:dc:20:14:e8:e6:8e:4f:5a:5d:3f:fc:46:6d:1b:b8: 89:85:9e:ee:58:f4:e3:0d:3d:69:8b:5e:46:87:ee:71:d6:30: 9f:5d:53:39:29:34:86:bd:af:b3:6b:6b:8c:3b:dc:5a:5b:85: 83:2b:6a:4b:5b:fa:dc:0e:20:70:15:7f:64:36:5d:3c:ab:40: 86:ca:88:26:ff:be:41:f9:f1:d8:c2:ae:73:61:cd:c5:19:b1: 0b:10:98:3d:2b:95:a7:e5:5f:41:1e:80:82:cf:f3:a0:da:3b: 41:d8:16:7d:3c:6a:63:52:15:64:58:82:19:a6:4e:c7:9a:f0: a2:e8:06:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP/FWoqT6XHwOYZOhP7IdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDc4ZDkxNDBhZDZlNzQyZTE2NzA2MzIwNjU4MmMxYzQ1 OTUyYmYwHhcNMjUxMjE2MTMwMTAwWhcNMjUxMjE3MTMwMTAwWjAzMTEwLwYDVQQD EyhlNjYxNDBlM2JlOTgwMTAxYzNmNTViMTg1Njk5MjVhYzkwZjk0YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o9cJqQ6pQjPLiq6C+8R9AkR9AfQ JjlCy4SRpppHwVG9Gfir07lB6MG0JiIxy6shCS9YzQNKak97gVK8JpOIjUgqF3VX G0QVEwaJUReYOgWMyMFPYA/FkPKliKaa/844DqJuPIqheHjiQeKKPObLEcnJQbqi 8IW4fjysOtO/MllmYFTD7XsHaRb7wHzBJhxBMKosgAgCepzKZgcFxtnDgI3jikWV Yd+P3svZ5OTl0q2SWo/AoLqTGgL+Gxrp2VUWOSIJsiVl+FX4JC5WbAHrltru+DN+ FEnXwV2mTX7AZkgGg078GrP12P6XdxzgojgK/5/pMqm4+YsNFxrkHMruMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZhQOO+mAEBw/VbGFaZJayQ+UtwMB8GA1UdIwQY MBaAFHvXjZFArW50LhZwYyBlgsHEWVK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYt M2NmZDhlZDUyYTk0LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYtM2NmZDhlZDUyYTk0 LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8rE4JIw Jt3xJ9zB78nKqPU5aSwvR1SyTxhtIFGBtKGKynCnxtZHWuCYf+gAD7SiYGkEEZ1z 4nmulADsNVgORPWWKLpcqBtrGcR12cfJttbH4TV+M3AuppT4cvwWjLt4AYmYu0lw Nf20MMOwgWqpckXfOs8VC33562uSxM5cLAXc3CAU6OaOT1pdP/xGbRu4iYWe7lj0 4w09aYteRofucdYwn11TOSk0hr2vs2trjDvcWluFgytqS1v63A4gcBV/ZDZdPKtA hsqIJv++Qfnx2MKuc2HNxRmxCxCYPSuVp+VfQR6Ags/zoNo7QdgWfTxqY1IVZFiC GaZOx5rwougG+g== -----END CERTIFICATE-----Generated at Tue Dec 16 20:42:13 2025 by rpki-client