This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json) Hash identifier: jCuy028un8+wZR2+GqrT2ELDG00UFzPxG3nZoBlL3EQ= Subject key identifier: D6:EC:48:7A:51:E7:26:7A:E8:2B:A8:70:17:CA:8E:23:B0:5F:EC:F6 Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Certificate serial: 019AF3891E6FA39A1C32189D3AFDB70CFC5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 12:00:40 +0000 Manifest this update: Sat 06 Dec 2025 12:00:40 +0000 Manifest next update: Sun 07 Dec 2025 12:00:40 +0000 Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: /iiHdw7lMRde/2FKSVEcuWjJMT0AqYyKU16EGZCputw=) 2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1e:6f:a3:9a:1c:32:18:9d:3a:fd:b7:0c:fc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Validity Not Before: Dec 6 12:00:40 2025 GMT Not After : Dec 7 12:00:40 2025 GMT Subject: CN=d6ec487a51e7267ae82ba87017ca8e23b05fecf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:de:40:19:2d:87:0b:a1:06:10:ae:06:24: 41:b9:38:32:71:53:b4:18:8d:55:17:f5:07:4a:87: 78:16:4f:c9:3d:79:ac:c9:77:c1:83:eb:82:3d:76: b3:6b:35:9e:1d:71:01:49:5e:f5:48:ec:7e:58:73: ab:73:f0:ea:c2:c7:b0:ec:9d:b4:7a:85:90:92:ea: 4c:a5:8d:ea:54:10:4a:fd:9f:3d:96:16:fe:89:32: c7:db:a5:6c:e2:59:68:52:ff:86:b3:1a:dc:83:5f: 60:f6:c9:ba:4a:05:7a:e6:76:e2:b5:cf:84:7b:1a: b5:2e:af:68:97:c7:bb:22:54:dd:93:63:03:7a:0c: 96:e8:04:9e:d7:65:a2:e9:42:28:82:94:d4:95:e7: ca:5b:88:2e:c8:11:4c:0e:ce:ad:93:ac:ad:49:57: 92:23:ca:9e:33:a2:0b:d7:00:31:cf:97:7a:bb:4b: 2a:0c:27:ba:5f:e7:50:a3:96:c3:23:52:43:e5:20: 3a:74:b5:b2:2d:26:fb:2a:b2:72:cf:f1:56:48:f6: 25:ae:6c:44:53:d1:57:ed:0a:21:e2:5c:eb:8a:23: 40:3b:3c:e1:04:f5:48:ed:95:ef:92:25:9a:67:5c: 97:71:10:b8:55:63:31:a5:5f:e2:da:f1:80:f7:fb: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:48:7A:51:E7:26:7A:E8:2B:A8:70:17:CA:8E:23:B0:5F:EC:F6 X509v3 Authority Key Identifier: keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5f:ba:ed:2c:8e:ae:89:47:15:ec:a0:e6:9d:c0:d2:05:79: 0d:fe:b5:d4:87:4b:b5:99:f4:5c:24:65:ed:dc:26:8a:2d:19: 2a:55:55:7c:c0:c3:e6:8e:26:7d:9d:74:85:ab:bb:34:2b:d5: 18:07:10:e8:a3:51:78:9c:9e:8b:43:29:fc:12:72:c4:0d:ef: 1a:f0:b3:3c:9b:44:d7:61:57:d2:58:9d:ae:17:60:1f:ee:ed: 9e:55:9e:a7:49:20:97:e3:ba:84:ff:b1:34:3b:b4:50:28:dc: c3:c6:47:19:5f:90:68:62:25:ad:95:f7:ed:6b:18:05:49:53: f0:25:3c:06:3c:06:bf:94:17:7c:ec:6a:c5:37:ba:36:b6:c5: 66:ef:f4:92:f8:07:37:30:9e:95:56:be:9f:75:0b:ff:69:bf: b7:44:66:75:d9:a2:86:e7:6d:b2:63:64:d6:5b:a5:76:a5:89: 48:6d:df:a3:b3:27:ba:14:d0:5d:6a:3e:ff:2b:df:b5:dc:34: 49:d9:da:20:73:a2:a4:b5:d6:e6:33:74:00:be:b6:be:2f:1f: d7:fd:90:8f:0f:ea:dd:66:23:67:7f:41:c3:d9:16:c8:4d:9b: f8:47:f4:b1:e3:fc:90:ca:e5:e7:8c:72:3a:5f:f2:91:67:27: cf:4f:30:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR5vo5ocMhidOv23DPxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl OGE3ZTIwHhcNMjUxMjA2MTIwMDQwWhcNMjUxMjA3MTIwMDQwWjAzMTEwLwYDVQQD EyhkNmVjNDg3YTUxZTcyNjdhZTgyYmE4NzAxN2NhOGUyM2IwNWZlY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfTeQBkthwuhBhCuBiRBuTgycVO0 GI1VF/UHSod4Fk/JPXmsyXfBg+uCPXazazWeHXEBSV71SOx+WHOrc/Dqwsew7J20 eoWQkupMpY3qVBBK/Z89lhb+iTLH26Vs4lloUv+Gsxrcg19g9sm6SgV65nbitc+E exq1Lq9ol8e7IlTdk2MDegyW6ASe12Wi6UIogpTUlefKW4guyBFMDs6tk6ytSVeS I8qeM6IL1wAxz5d6u0sqDCe6X+dQo5bDI1JD5SA6dLWyLSb7KrJyz/FWSPYlrmxE U9FX7Qoh4lzriiNAOzzhBPVI7ZXvkiWaZ1yXcRC4VWMxpV/i2vGA9/s8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbsSHpR5yZ66CuocBfKjiOwX+z2MB8GA1UdIwQY MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5 LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1+67SyO rolHFeyg5p3A0gV5Df611IdLtZn0XCRl7dwmii0ZKlVVfMDD5o4mfZ10hau7NCvV GAcQ6KNReJyei0Mp/BJyxA3vGvCzPJtE12FX0lidrhdgH+7tnlWep0kgl+O6hP+x NDu0UCjcw8ZHGV+QaGIlrZX37WsYBUlT8CU8BjwGv5QXfOxqxTe6NrbFZu/0kvgH NzCelVa+n3UL/2m/t0RmddmihudtsmNk1luldqWJSG3fo7MnuhTQXWo+/yvftdw0 SdnaIHOipLXW5jN0AL62vi8f1/2Qjw/q3WYjZ39Bw9kWyE2b+Ef0seP8kMrl54xy Ol/ykWcnz08wIg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:08 2025 by rpki-client