This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json) Hash identifier: CKftGFLm5DmdgIiRtoAnQPgPx3zVJUJu+NUwktRIeJc= Subject key identifier: A3:A1:EB:6A:47:E5:87:CB:8F:A0:55:A4:2F:94:AC:39:04:93:AA:3D Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Certificate serial: 019AF163D25AB6F0982E7A115822C38D09F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=) 2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: KUJp+AD6YRiWsrOhYaeGxTPPWfI1hOoAYYDsmilYnnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d2:5a:b6:f0:98:2e:7a:11:58:22:c3:8d:09:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=a3a1eb6a47e587cb8fa055a42f94ac390493aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:72:ef:34:c9:d3:06:04:93:7c:81:fb:be: 48:72:28:bf:53:a0:75:55:91:7f:ab:08:1a:59:d9: 9f:6a:f3:be:96:e8:cf:f7:5f:d9:a7:28:3b:45:af: 99:aa:23:b0:0c:43:0e:61:25:5c:e6:3f:7d:ab:ad: 49:55:6b:ad:67:2c:01:f0:6d:89:d7:0e:f9:43:4f: 5c:62:e0:9b:1c:be:f1:d1:ad:46:0c:fd:a4:72:e7: 05:d3:47:1f:0e:af:fc:12:6c:4a:aa:f1:4a:ab:fa: fd:1f:71:42:e4:23:91:e6:e8:70:6a:06:a7:89:9f: 20:3c:c2:c9:70:2d:fe:27:cb:6e:45:d1:1f:76:59: 80:5c:a3:09:cd:f1:d0:d1:b9:f9:36:95:35:d0:b5: 31:77:a2:6f:2a:ba:ac:dd:a5:10:1a:fb:45:5a:05: 99:b5:30:2a:9f:17:42:f8:6d:18:06:d8:96:83:d9: 4e:42:38:9b:23:97:f5:41:09:d8:cc:9c:7e:cb:e2: fa:ab:03:fd:0d:28:e4:da:0a:10:00:29:ed:d2:cb: 6a:7b:1a:ef:ce:e1:53:9c:48:0c:1a:c0:64:01:a5: 7c:63:75:69:f8:97:15:95:4b:e4:7b:88:cc:2d:7a: e3:db:e7:fe:93:16:e7:d1:31:3e:5e:5b:cb:c3:5c: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A1:EB:6A:47:E5:87:CB:8F:A0:55:A4:2F:94:AC:39:04:93:AA:3D X509v3 Authority Key Identifier: keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:e5:38:3a:c1:2b:0f:b1:0d:e6:63:89:5d:4f:62:63:36: e6:d9:3f:c4:93:6f:49:4d:0a:ba:39:89:63:d8:69:37:a8:13: f8:37:ce:30:ab:4e:fa:ff:f4:09:8f:cc:68:33:85:7b:52:ac: 1f:dd:0c:36:37:99:0f:bf:6b:dd:d2:60:b1:d7:e9:62:6b:91: f8:d4:e8:1f:6b:ba:2e:fa:8a:f6:e3:80:8a:6a:5b:c3:eb:0e: 18:ae:73:0f:12:ed:c9:b5:3a:96:f4:32:9e:30:f2:de:72:1e: 92:e8:7f:5f:3f:eb:b0:e4:34:1d:d9:5f:f5:8f:80:9d:89:cc: 27:5a:dd:9c:21:a5:fe:cc:9c:cd:14:c0:3a:4b:63:d6:5e:ba: cc:8a:12:9b:86:4e:28:8d:79:44:71:f3:52:04:0a:0c:35:6f: 48:a4:05:41:e0:21:dc:a0:f2:1c:d0:2c:e8:eb:a1:91:b0:8f: 39:5d:a4:40:27:6a:f1:5f:ce:a0:62:7d:e8:f0:0c:41:fa:b3: 4f:28:6a:d2:6b:84:56:c7:47:b0:65:7e:75:fa:c1:57:5c:c0: ee:25:3e:9e:11:a8:75:c1:45:27:e0:8c:6e:15:b8:17:e3:c7: cc:db:92:02:a6:8e:8c:27:2e:82:79:97:a6:4e:b7:f3:b4:b9: c3:98:8a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9JatvCYLnoRWCLDjQnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj MTVhNzQwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EyhhM2ExZWI2YTQ3ZTU4N2NiOGZhMDU1YTQyZjk0YWMzOTA0OTNhYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3By7zTJ0wYEk3yB+75Icii/U6B1 VZF/qwgaWdmfavO+lujP91/Zpyg7Ra+ZqiOwDEMOYSVc5j99q61JVWutZywB8G2J 1w75Q09cYuCbHL7x0a1GDP2kcucF00cfDq/8EmxKqvFKq/r9H3FC5COR5uhwagan iZ8gPMLJcC3+J8tuRdEfdlmAXKMJzfHQ0bn5NpU10LUxd6JvKrqs3aUQGvtFWgWZ tTAqnxdC+G0YBtiWg9lOQjibI5f1QQnYzJx+y+L6qwP9DSjk2goQACnt0stqexrv zuFTnEgMGsBkAaV8Y3Vp+JcVlUvke4jMLXrj2+f+kxbn0TE+XlvLw1xkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOh62pH5YfLj6BVpC+UrDkEk6o9MB8GA1UdIwQY MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt YjI1MTM3N2FkZDg2LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2 LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvrlODrB Kw+xDeZjiV1PYmM25tk/xJNvSU0KujmJY9hpN6gT+DfOMKtO+v/0CY/MaDOFe1Ks H90MNjeZD79r3dJgsdfpYmuR+NToH2u6LvqK9uOAimpbw+sOGK5zDxLtybU6lvQy njDy3nIekuh/Xz/rsOQ0Hdlf9Y+AnYnMJ1rdnCGl/syczRTAOktj1l66zIoSm4ZO KI15RHHzUgQKDDVvSKQFQeAh3KDyHNAs6OuhkbCPOV2kQCdq8V/OoGJ96PAMQfqz Tyhq0muEVsdHsGV+dfrBV1zA7iU+nhGodcFFJ+CMbhW4F+PHzNuSAqaOjCcugnmX pk6387S5w5iKaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:02 2025 by rpki-client