This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json) Hash identifier: woM/AlNmKe7RH55tdjhoiz/uz5QF0emWAOjfrDvZP2s= Subject key identifier: C6:D4:10:D3:60:D7:34:A3:0E:23:90:96:76:4E:0E:82:E7:C1:9D:F7 Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf Certificate serial: 019AF31B89E922FA819CF1FF1CE40DA55239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft Manifest number: 15D1 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: vFlaVg4oYQara849QtblaHIJgTV0rRsURl8mItxA0rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:89:e9:22:fa:81:9c:f1:ff:1c:e4:0d:a5:52:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=c6d410d360d734a30e239096764e0e82e7c19df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:f5:e6:fa:d7:d8:cd:3e:52:26:6d:28:a6: 95:d4:21:34:29:1c:5c:be:43:71:58:aa:5e:9d:51: a1:6c:a2:3b:cf:02:40:70:f0:47:ab:b6:fc:75:65: 0e:00:e8:af:eb:45:77:49:f5:0c:2a:ae:c8:31:fc: 31:64:51:c3:b7:c8:29:8f:68:9e:ef:5f:c2:6d:d3: 92:c4:df:61:36:79:03:5b:78:d3:fd:b1:3a:24:79: 5b:bd:36:42:70:42:b4:3f:c5:d1:56:7c:48:11:60: 01:43:e9:f6:3d:e5:2f:ad:63:71:63:76:c0:3d:6e: f1:1d:17:b1:15:68:ce:fc:5a:19:66:06:d1:31:d1: 0a:a9:27:44:3c:1f:20:1f:b7:40:6e:32:63:a3:0e: 73:05:8d:10:c9:a5:ba:92:e8:9f:aa:8b:c3:f6:17: eb:ea:9b:d6:53:3e:fa:fe:e3:d6:ee:f7:07:9d:ae: 08:57:91:23:25:ae:28:d1:a1:e4:61:2a:f8:71:36: 6a:7e:37:60:ac:56:cf:53:df:c1:ff:e4:39:02:db: 02:de:40:56:32:97:40:18:80:27:08:35:33:44:c4: 47:95:a8:ae:1d:51:bd:e6:d5:3f:7d:aa:18:4a:a1: 63:6e:78:9b:25:c2:c5:b2:db:cf:b5:f7:ab:ce:7b: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:10:D3:60:D7:34:A3:0E:23:90:96:76:4E:0E:82:E7:C1:9D:F7 X509v3 Authority Key Identifier: keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1e:cf:9f:64:89:ae:91:80:14:4a:f1:d4:34:85:16:40:e3: 21:2c:2a:4c:8e:c3:b4:6f:75:5f:d8:83:e9:e0:62:b9:e7:17: 1e:4e:bb:d1:f8:a7:78:a5:9a:dc:ad:18:27:76:2f:1a:a8:94: 27:39:8a:6e:ec:94:55:30:76:c9:39:10:73:4f:40:35:45:0e: 32:2b:f3:1d:0f:7f:14:6c:20:95:e5:4c:80:26:4b:14:d8:b1: 0a:09:07:86:eb:f5:41:40:3c:db:9b:7d:c3:a4:31:17:4a:95: ca:a3:7d:6a:ca:4d:ae:18:ca:ab:44:cb:5d:9d:22:25:d9:9b: 90:35:e5:cf:ca:87:27:4b:20:00:61:49:b6:b6:99:51:6f:20: 57:02:6c:1f:2b:62:26:d8:c3:a1:12:3e:7e:ce:f9:1c:a8:a4: bc:b0:f4:c2:60:bb:cb:51:53:4c:c1:a4:1b:54:bf:b9:76:de: e1:28:f5:cf:56:11:17:a1:d5:9d:da:70:fd:1d:78:4a:99:bd: e7:b0:db:f8:81:0b:a9:a0:f1:51:2b:ca:58:93:29:f8:9e:a7: e9:6b:b2:58:64:6f:a2:63:90:ee:86:2a:93:48:21:c6:bc:1e: e0:2a:33:00:4f:d3:e7:dd:d5:09:b7:7f:5b:c4:a5:95:21:6f: 2e:da:39:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4npIvqBnPH/HOQNpVI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDc4ZDkxNDBhZDZlNzQyZTE2NzA2MzIwNjU4MmMxYzQ1 OTUyYmYwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EyhjNmQ0MTBkMzYwZDczNGEzMGUyMzkwOTY3NjRlMGU4MmU3YzE5ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEz15vrX2M0+UiZtKKaV1CE0KRxc vkNxWKpenVGhbKI7zwJAcPBHq7b8dWUOAOiv60V3SfUMKq7IMfwxZFHDt8gpj2ie 71/CbdOSxN9hNnkDW3jT/bE6JHlbvTZCcEK0P8XRVnxIEWABQ+n2PeUvrWNxY3bA PW7xHRexFWjO/FoZZgbRMdEKqSdEPB8gH7dAbjJjow5zBY0QyaW6kuifqovD9hfr 6pvWUz76/uPW7vcHna4IV5EjJa4o0aHkYSr4cTZqfjdgrFbPU9/B/+Q5AtsC3kBW MpdAGIAnCDUzRMRHlaiuHVG95tU/faoYSqFjbnibJcLFstvPtferzntkpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbUENNg1zSjDiOQlnZODoLnwZ33MB8GA1UdIwQY MBaAFHvXjZFArW50LhZwYyBlgsHEWVK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYt M2NmZDhlZDUyYTk0LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYtM2NmZDhlZDUyYTk0 LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB7Pn2SJ rpGAFErx1DSFFkDjISwqTI7DtG91X9iD6eBiuecXHk670fineKWa3K0YJ3YvGqiU JzmKbuyUVTB2yTkQc09ANUUOMivzHQ9/FGwgleVMgCZLFNixCgkHhuv1QUA825t9 w6QxF0qVyqN9aspNrhjKq0TLXZ0iJdmbkDXlz8qHJ0sgAGFJtraZUW8gVwJsHyti JtjDoRI+fs75HKikvLD0wmC7y1FTTMGkG1S/uXbe4Sj1z1YRF6HVndpw/R14Spm9 57Db+IELqaDxUSvKWJMp+J6n6WuyWGRvomOQ7oYqk0ghxrwe4CozAE/T593VCbd/ W8SllSFvLto56Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:23:23 2025 by rpki-client