This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json) Hash identifier: dAJAQKQ7/IPYWzXvqyWT0xzqA32Y4YLbyd48+RvGU0E= Subject key identifier: 81:07:57:AA:E8:31:23:81:3D:65:3C:F5:F4:9E:42:95:EF:79:E6:72 Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Certificate serial: 019AF12CF27049FFA90CD872C153BAA93318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: aK/nqiidnYfuh8c7+4ixMRL6zzp3b8/VTxZEZUveEuc=) 2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f2:70:49:ff:a9:0c:d8:72:c1:53:ba:a9:33:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=810757aae83123813d653cf5f49e4295ef79e672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:2c:63:a7:87:8e:9d:fc:76:da:42:88:17: da:5d:4d:a8:bc:d0:0e:d2:a3:12:19:d8:bf:83:f2: c9:ca:4c:62:f9:09:74:66:ef:6b:bb:1a:8d:dd:74: 6b:b7:a0:41:04:f5:8d:8d:53:8b:60:9f:56:48:08: b3:4d:ba:0b:81:6f:1c:aa:27:17:a0:a7:37:18:0c: a3:f8:2f:fb:40:c7:ed:33:89:fe:15:ab:1e:53:d0: 63:85:5a:ff:a0:24:64:40:3b:47:84:11:88:35:ed: ad:34:d8:ba:14:2d:a7:b3:78:ae:4f:dc:9f:df:90: b7:c6:ef:9a:1d:47:da:dc:bb:6b:35:8e:c4:4f:38: 54:9d:51:a6:69:cd:44:54:a7:f9:87:c6:fc:e8:f4: 62:65:ab:17:b8:c4:0b:a0:55:20:01:cf:41:82:b5: 42:a4:4d:9a:c6:f8:68:5e:ba:66:a9:09:03:32:c2: be:a5:98:ca:12:71:f2:c5:74:91:2c:67:be:c5:d1: 23:68:72:89:d8:9c:42:6a:32:24:5a:a9:d3:e8:bc: ee:07:b1:10:58:52:e6:28:5f:8b:03:ef:e0:58:88: 68:ad:cf:53:1c:b9:00:47:27:f8:38:95:c4:96:30: 0c:48:9d:97:35:a9:d3:d6:1a:3e:db:8d:d6:b7:6c: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:57:AA:E8:31:23:81:3D:65:3C:F5:F4:9E:42:95:EF:79:E6:72 X509v3 Authority Key Identifier: keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:22:40:5f:6e:e7:20:a4:12:56:59:ed:13:a5:af:2c:7b: dd:96:f6:4c:29:08:44:27:a1:9b:1c:c1:4b:5d:37:cc:bc:55: bf:d1:42:6f:18:9b:c8:ff:76:01:26:65:75:1c:c9:da:be:16: f0:4b:e0:99:74:2f:c9:bc:4a:4e:4c:1b:80:f7:54:ae:a8:43: 85:07:c2:54:f2:51:5c:01:e9:4e:ae:24:a0:b5:24:24:a5:b4: 50:27:66:cd:54:8b:c1:15:20:4b:65:78:44:5f:73:26:89:d4: 3b:29:7c:ae:c5:e4:da:13:b8:65:8e:6b:7e:c4:50:33:6e:a6: 26:77:ac:6c:a2:eb:6f:66:e9:fe:48:1e:88:b8:ce:1a:69:e9: 69:5c:34:57:40:47:8e:7b:50:97:93:5a:1a:81:90:24:62:7d: b7:39:b7:39:df:da:7b:b5:cb:79:d2:e0:13:95:50:0b:62:7e: b0:e1:44:9f:c2:9c:4f:b6:f0:99:55:0e:f8:72:36:7a:a3:e6: b3:8d:fc:5c:24:91:46:c3:9c:f4:0d:5c:9b:86:87:d4:37:30: ba:c0:f1:6b:5d:65:80:b9:fe:28:cf:59:65:4e:c3:a4:f1:1c: 34:b4:4e:d1:e7:dc:5c:ae:21:d4:67:9d:04:7b:8a:b2:85:a0: 7e:f1:4d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPJwSf+pDNhywVO6qTMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj OTg0NmUwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD Eyg4MTA3NTdhYWU4MzEyMzgxM2Q2NTNjZjVmNDllNDI5NWVmNzllNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OosY6eHjp38dtpCiBfaXU2ovNAO 0qMSGdi/g/LJykxi+Ql0Zu9ruxqN3XRrt6BBBPWNjVOLYJ9WSAizTboLgW8cqicX oKc3GAyj+C/7QMftM4n+FaseU9BjhVr/oCRkQDtHhBGINe2tNNi6FC2ns3iuT9yf 35C3xu+aHUfa3LtrNY7ETzhUnVGmac1EVKf5h8b86PRiZasXuMQLoFUgAc9BgrVC pE2axvhoXrpmqQkDMsK+pZjKEnHyxXSRLGe+xdEjaHKJ2JxCajIkWqnT6LzuB7EQ WFLmKF+LA+/gWIhorc9THLkARyf4OJXEljAMSJ2XNanT1ho+243Wt2y1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEHV6roMSOBPWU89fSeQpXveeZyMB8GA1UdIwQY MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0 LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoEiQF9u 5yCkElZZ7ROlryx73Zb2TCkIRCehmxzBS103zLxVv9FCbxibyP92ASZldRzJ2r4W 8EvgmXQvybxKTkwbgPdUrqhDhQfCVPJRXAHpTq4koLUkJKW0UCdmzVSLwRUgS2V4 RF9zJonUOyl8rsXk2hO4ZY5rfsRQM26mJnesbKLrb2bp/kgeiLjOGmnpaVw0V0BH jntQl5NaGoGQJGJ9tzm3Od/ae7XLedLgE5VQC2J+sOFEn8KcT7bwmVUO+HI2eqPm s438XCSRRsOc9A1cm4aH1DcwusDxa11lgLn+KM9ZZU7DpPEcNLRO0efcXK4h1Ged BHuKsoWgfvFNgw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:41 2025 by rpki-client