This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft File: e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json) Hash identifier: mRodrlG/DIb4HdHxNtXuhIoVGlBgPBoIQqW7s0/T7D4= Subject key identifier: 6B:23:BF:FE:E8:9D:A8:CC:0D:6B:90:78:11:EE:4C:62:D3:32:A7:84 Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25 Certificate issuer: /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525 Certificate serial: 019AF12E7C9E2E2816A68584B56F15EB8CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft Manifest number: 0B63 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: J67e/V6NNGOpk6X7Ef9kuQhjBjCFNzYr0Hk2bpCywG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7c:9e:2e:28:16:a6:85:84:b5:6f:15:eb:8c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=6b23bffee89da8cc0d6b907811ee4c62d332a784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:2f:e1:58:67:b7:28:89:89:2c:f5:5d:3e: c4:5b:e4:8a:87:ac:b9:d2:e9:ba:cd:c1:c6:84:eb: a3:fc:46:92:e4:6a:fd:cf:21:db:a8:09:ec:77:9c: d1:1e:6a:1b:bb:92:27:3a:30:88:a7:22:b1:8c:55: cf:0e:f5:b1:d6:76:5e:a2:4e:dc:69:b6:fa:ac:85: a3:d4:df:d7:cf:7d:b7:0a:a2:c2:b8:38:a0:5b:3f: a1:f2:f5:42:cc:36:60:65:db:91:54:d5:01:2b:91: 7f:f8:7a:a7:06:c2:fd:e7:03:1b:1d:b2:77:d5:c2: e3:b0:49:f1:cb:75:f5:3f:26:6f:c7:fa:92:f8:a6: e0:e1:53:52:ba:46:c7:88:9f:6a:27:c4:00:e3:7e: 39:18:3a:96:2c:6a:e2:0b:e3:b2:e4:1c:4a:ad:5d: 46:6f:8b:9e:fc:e6:a0:0c:07:c9:c2:14:8d:09:85: af:68:f9:de:ee:2e:24:f8:c0:e9:da:bd:f1:f4:6b: 1a:3f:6d:0d:09:75:76:06:18:63:36:f9:f6:87:15: fd:5c:89:e4:7a:ba:ad:ef:e1:3d:02:c5:2e:d0:37: 96:f0:a2:be:87:a4:a4:a0:4c:46:84:9a:2f:e5:92: 83:17:3c:ac:80:7c:bd:3d:fe:b6:c5:2d:bd:d9:27: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:BF:FE:E8:9D:A8:CC:0D:6B:90:78:11:EE:4C:62:D3:32:A7:84 X509v3 Authority Key Identifier: keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ba:b8:e4:ed:02:7e:08:c7:61:60:cc:d6:45:45:48:7f:3e: bd:4c:d4:9a:f9:c7:c1:14:00:05:2c:20:36:e0:4d:a4:6c:2e: cd:df:ad:11:66:15:28:6c:d5:5d:65:a9:87:16:a7:3e:ba:c0: 9c:9c:99:c9:1a:0f:40:17:87:fc:eb:55:c5:04:7b:4b:62:93: ff:af:80:3d:8e:be:d4:85:c4:26:70:1d:1c:9a:a4:39:21:c7: a8:d2:9b:56:22:53:3e:ac:9d:e4:86:a0:85:9d:e3:d3:82:8d: bb:bb:df:4c:e1:06:f4:3f:32:a2:19:75:b0:25:5c:05:21:e1: 76:53:11:8a:e9:1c:2d:44:8e:0a:70:e3:b5:1b:21:6c:d6:2d: 04:72:30:4d:a3:0f:7c:4e:32:f7:5a:e8:f1:43:67:6c:d7:0c: c5:06:c9:61:d9:6c:39:79:fd:63:87:b0:b9:79:36:75:c9:4e: 53:f9:e2:23:1f:fa:76:31:fe:bb:52:25:85:ad:9c:03:40:c9: 51:2f:3d:7c:72:1c:52:e3:c2:f9:88:d0:f0:8f:3c:27:5a:8c: 49:bc:30:65:b3:f9:d0:51:f9:35:9d:03:f3:55:ae:bb:b5:b7: d2:2e:af:c9:31:d9:ce:60:74:d5:54:88:67:e5:9c:7f:1c:42: 23:0b:d5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnyeLigWpoWEtW8V64zCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDkxMWYxZjRkMGJjM2VlNjJlZjgzMzIzMDdhMTM1NDU2 MmI1MjUwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg2YjIzYmZmZWU4OWRhOGNjMGQ2YjkwNzgxMWVlNGM2MmQzMzJhNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6agv4VhntyiJiSz1XT7EW+SKh6y5 0um6zcHGhOuj/EaS5Gr9zyHbqAnsd5zRHmobu5InOjCIpyKxjFXPDvWx1nZeok7c abb6rIWj1N/Xz323CqLCuDigWz+h8vVCzDZgZduRVNUBK5F/+HqnBsL95wMbHbJ3 1cLjsEnxy3X1PyZvx/qS+Kbg4VNSukbHiJ9qJ8QA4345GDqWLGriC+Oy5BxKrV1G b4ue/OagDAfJwhSNCYWvaPne7i4k+MDp2r3x9GsaP20NCXV2BhhjNvn2hxX9XInk erqt7+E9AsUu0DeW8KK+h6SkoExGhJov5ZKDFzysgHy9Pf62xS292SfFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsjv/7onajMDWuQeBHuTGLTMqeEMB8GA1UdIwQY MBaAFHvZEfH00Lw+5i74MyMHoTVFYrUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2Mt ZGEyNTUwNjRkM2RjLzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2MtZGEyNTUwNjRkM2Rj LzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7q45O0C fgjHYWDM1kVFSH8+vUzUmvnHwRQABSwgNuBNpGwuzd+tEWYVKGzVXWWphxanPrrA nJyZyRoPQBeH/OtVxQR7S2KT/6+APY6+1IXEJnAdHJqkOSHHqNKbViJTPqyd5Iag hZ3j04KNu7vfTOEG9D8yohl1sCVcBSHhdlMRiukcLUSOCnDjtRshbNYtBHIwTaMP fE4y91ro8UNnbNcMxQbJYdlsOXn9Y4ewuXk2dclOU/niIx/6djH+u1Ilha2cA0DJ US89fHIcUuPC+YjQ8I88J1qMSbwwZbP50FH5NZ0D81Wuu7W30i6vyTHZzmB01VSI Z+WcfxxCIwvV2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:49 2025 by rpki-client