This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json) Hash identifier: +hhwBH0nQ3SXZn9hetYCadQFIJrhVvpMEv630GVx8L4= Subject key identifier: BF:27:61:3B:75:81:23:4E:08:7B:72:47:9B:40:7B:B6:CD:CE:23:F8 Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Certificate serial: 019AF3F7CDD3CD3CE91147319064A5CD974B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:34 +0000 Manifest this update: Sat 06 Dec 2025 14:01:34 +0000 Manifest next update: Sun 07 Dec 2025 14:01:34 +0000 Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: g0X6Lor4tv+3Tm8G63ezBvLcx20hl3du22oretXTE4U=) 2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=) 3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:cd:d3:cd:3c:e9:11:47:31:90:64:a5:cd:97:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Validity Not Before: Dec 6 14:01:34 2025 GMT Not After : Dec 7 14:01:34 2025 GMT Subject: CN=bf27613b7581234e087b72479b407bb6cdce23f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:42:b0:02:cb:e2:14:68:c9:f9:13:6f:d4: 46:cd:38:28:65:da:a7:cd:04:34:ff:42:18:f5:f6: 8b:fb:dc:2c:01:ea:eb:4d:17:a3:91:fa:1a:85:e8: d4:8a:0b:29:34:06:66:bb:68:aa:47:ab:5b:62:ff: 1a:ca:6a:5a:78:f1:70:a4:5a:71:76:07:da:f6:0b: 87:b9:cf:5f:d4:10:8d:0f:42:12:a5:24:18:15:3f: 14:8d:5c:fc:83:87:8b:d5:86:c0:d2:57:78:de:b1: 20:a6:db:17:97:a5:5b:01:15:a5:3d:36:36:80:a9: 44:00:86:8e:fa:ab:e8:cc:a2:98:1d:fe:87:d4:4f: de:00:16:98:b4:6a:7d:34:88:ad:0f:d6:0f:71:c5: f9:df:ca:9c:3e:7d:09:3d:9c:6a:93:be:c6:dd:78: 50:c9:f4:c1:6b:a9:ab:1e:ec:ba:50:41:3a:e1:59: 8b:52:55:8f:fa:08:93:3d:9d:69:3e:95:10:81:7c: 34:ce:4d:77:b2:16:f6:b5:8c:ca:d7:04:0a:00:84: b9:8b:16:46:9d:08:68:8d:27:8d:77:a0:f2:cf:b7: 86:7e:c3:71:17:c9:7c:4d:44:de:88:86:57:84:3f: 4c:f3:f5:21:06:fb:02:6f:91:79:c1:56:6b:49:ac: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:61:3B:75:81:23:4E:08:7B:72:47:9B:40:7B:B6:CD:CE:23:F8 X509v3 Authority Key Identifier: keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1b:59:ae:a7:a6:6c:38:57:cf:8e:2a:b3:97:07:1a:d8:59: 55:85:97:12:c7:37:54:d0:9a:65:5a:25:4a:fb:66:a8:4f:ae: 58:0d:cb:04:09:88:c9:1c:00:e4:3e:19:06:65:1b:4a:be:8b: a3:83:2b:1f:47:d4:23:75:45:8f:1f:e9:24:c6:b3:fe:3a:72: cf:f4:f1:39:32:d4:fe:b3:12:55:90:17:70:19:b1:be:e8:b3: 6b:77:bb:e7:78:ea:b2:4e:a6:e3:41:cf:10:ea:7b:da:40:5e: ed:7b:26:e2:97:05:35:b1:07:bd:cd:5c:4b:30:e9:f2:c9:0a: 19:4c:89:f0:5c:88:2f:8f:a7:f3:ce:fc:06:80:f6:2b:15:73: 98:4a:b8:5d:7e:cb:9a:b2:50:a1:65:be:0f:bc:71:4b:03:0d: 48:c9:46:33:61:73:b4:d9:a3:95:fe:a8:6f:ed:b8:69:c9:c8: 50:e9:82:26:6d:2b:cd:3b:42:21:7f:13:07:2c:1b:3a:55:5a: 02:19:2e:fd:0b:9c:78:52:3a:b6:42:78:97:5f:d5:94:0d:dc: b0:ab:9a:bc:3e:4a:46:f7:fd:e8:32:22:ac:a4:2a:d0:47:57: b7:b2:97:28:f4:1b:16:62:24:f9:b1:5f:b0:4d:2a:01:8d:9d: 9e:5b:04:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz983TzTzpEUcxkGSlzZdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi OGU3OTAwHhcNMjUxMjA2MTQwMTM0WhcNMjUxMjA3MTQwMTM0WjAzMTEwLwYDVQQD EyhiZjI3NjEzYjc1ODEyMzRlMDg3YjcyNDc5YjQwN2JiNmNkY2UyM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCVCsALL4hRoyfkTb9RGzTgoZdqn zQQ0/0IY9faL+9wsAerrTRejkfoahejUigspNAZmu2iqR6tbYv8aympaePFwpFpx dgfa9guHuc9f1BCND0ISpSQYFT8UjVz8g4eL1YbA0ld43rEgptsXl6VbARWlPTY2 gKlEAIaO+qvozKKYHf6H1E/eABaYtGp9NIitD9YPccX538qcPn0JPZxqk77G3XhQ yfTBa6mrHuy6UEE64VmLUlWP+giTPZ1pPpUQgXw0zk13shb2tYzK1wQKAIS5ixZG nQhojSeNd6Dyz7eGfsNxF8l8TUTeiIZXhD9M8/UhBvsCb5F5wVZrSaz6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8nYTt1gSNOCHtyR5tAe7bNziP4MB8GA1UdIwQY MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxtZrqem bDhXz44qs5cHGthZVYWXEsc3VNCaZVolSvtmqE+uWA3LBAmIyRwA5D4ZBmUbSr6L o4MrH0fUI3VFjx/pJMaz/jpyz/TxOTLU/rMSVZAXcBmxvuiza3e753jqsk6m40HP EOp72kBe7Xsm4pcFNbEHvc1cSzDp8skKGUyJ8FyIL4+n8878BoD2KxVzmEq4XX7L mrJQoWW+D7xxSwMNSMlGM2FztNmjlf6ob+24acnIUOmCJm0rzTtCIX8TBywbOlVa Ahku/QuceFI6tkJ4l1/VlA3csKuavD5KRvf96DIirKQq0EdXt7KXKPQbFmIk+bFf sE0qAY2dnlsE9w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:39 2025 by rpki-client