This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json) Hash identifier: daQ2RczYOMIo8v0OEZaGrPd6ZSSkEuHaWPYztafW990= Subject key identifier: 2F:34:4B:D9:EA:F3:6E:A9:2D:24:69:46:D6:EF:37:12:51:6C:74:77 Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced Certificate serial: 019AF12D00D0C9EEBD1BC1B122A62FBD8932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft Manifest number: 04D2 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: kiKwXBijjDCwc0Gnrn+wRI9rQPeTbhxoBjEXPSHWkpU=) 2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:00:d0:c9:ee:bd:1b:c1:b1:22:a6:2f:bd:89:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=2f344bd9eaf36ea92d246946d6ef3712516c7477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:77:71:c9:9d:64:c1:87:bb:31:4c:1c:fa: 0f:8b:25:cf:e2:a2:80:31:ab:44:f4:49:10:b4:e2: d7:0e:df:3e:37:40:54:77:cb:2f:be:a4:7d:a2:f8: b2:fc:0c:81:43:02:74:cf:6f:fc:60:1a:e0:6c:43: 0e:7c:e6:0d:c0:9c:c6:6b:d1:65:46:1f:62:82:49: 30:72:3a:97:db:c2:d9:25:81:61:41:72:24:f2:17: bd:4f:19:2f:26:eb:13:35:97:4c:04:bf:9e:89:8d: 5c:2c:c8:3a:e5:1c:e9:ee:2d:ed:8e:aa:5f:37:17: bd:d3:9b:bd:eb:bb:61:4c:78:2f:55:99:37:ea:40: 47:f2:00:26:85:f2:0c:19:1e:ec:36:c9:ec:37:94: d8:a3:9c:32:46:53:2f:19:13:dd:7c:6c:05:c5:49: a8:cc:b2:a8:25:b7:da:0d:f0:63:f4:d5:9b:ba:52: f8:25:25:5f:df:e2:0c:18:0b:7c:7f:4b:bc:59:18: db:90:7f:bf:4d:76:c7:5b:4f:15:54:96:d4:d0:02: ae:5c:38:f3:04:7c:75:e7:49:1d:2a:21:8f:07:dd: 3d:bb:d5:e4:5e:af:81:76:d3:e1:d3:b1:6c:db:08: a9:bd:d0:7f:dd:47:f1:b5:6e:2d:3e:e1:1a:c1:49: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:4B:D9:EA:F3:6E:A9:2D:24:69:46:D6:EF:37:12:51:6C:74:77 X509v3 Authority Key Identifier: keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f9:35:f9:45:a4:4e:46:41:1e:52:e2:a6:f8:30:11:2b:aa: ec:40:70:14:a7:45:ec:11:7b:e0:05:a5:b6:a0:20:92:8a:b6: c2:39:95:03:42:84:0d:ae:43:16:fb:69:96:8d:53:32:ab:d1: 73:fc:f2:9c:5d:61:11:f3:56:4f:a0:1f:c4:8c:3d:83:ae:1f: 0b:e6:43:bd:e3:c6:b8:cb:c1:74:6c:d3:f7:f1:a8:37:84:c3: 16:47:c2:55:a2:35:23:91:af:c1:5c:8a:b7:57:cf:96:14:ac: 39:d7:9c:d1:f1:17:2e:a3:3e:cb:15:b1:5f:75:8f:d3:df:b3: cd:aa:7b:da:dd:17:a0:0f:70:d6:d6:6c:2d:db:a9:68:48:bf: c6:b4:a5:93:6c:71:1f:ef:be:3b:3f:29:72:40:7c:15:e8:f6: ce:7f:b6:9d:f8:1b:0f:79:21:c6:f3:da:bc:11:43:29:ce:6d: 73:c5:24:22:2f:91:cf:a1:8b:9d:03:af:30:ff:91:7b:0f:08: 95:5d:a5:ac:2f:ea:24:c1:6b:de:c5:0a:23:85:3d:cc:6e:d8: 27:fe:a5:e7:d5:c7:40:c0:2d:44:e2:a8:1d:51:2a:55:10:8f: 9b:cf:64:73:5d:2a:a7:1b:03:d1:92:09:70:88:e1:c9:7a:a0: ee:cb:45:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQDQye69G8GxIqYvvYkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmYyM2NhYmE3ZTAxZjY4MWU3M2RmYWIxNzQzZmY2NDc4 ZGRjZWQwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EygyZjM0NGJkOWVhZjM2ZWE5MmQyNDY5NDZkNmVmMzcxMjUxNmM3NDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx53ccmdZMGHuzFMHPoPiyXP4qKA MatE9EkQtOLXDt8+N0BUd8svvqR9oviy/AyBQwJ0z2/8YBrgbEMOfOYNwJzGa9Fl Rh9igkkwcjqX28LZJYFhQXIk8he9TxkvJusTNZdMBL+eiY1cLMg65Rzp7i3tjqpf Nxe905u967thTHgvVZk36kBH8gAmhfIMGR7sNsnsN5TYo5wyRlMvGRPdfGwFxUmo zLKoJbfaDfBj9NWbulL4JSVf3+IMGAt8f0u8WRjbkH+/TXbHW08VVJbU0AKuXDjz BHx150kdKiGPB909u9XkXq+BdtPh07Fs2wipvdB/3UfxtW4tPuEawUl0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC80S9nq826pLSRpRtbvNxJRbHR3MB8GA1UdIwQY MBaAFBP/I8q6fgH2gec9+rF0P/ZHjdztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQt NjM5NzgwZTkzOWU1LzEvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQtNjM5NzgwZTkzOWU1 LzEvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPk1+UWk TkZBHlLipvgwESuq7EBwFKdF7BF74AWltqAgkoq2wjmVA0KEDa5DFvtplo1TMqvR c/zynF1hEfNWT6AfxIw9g64fC+ZDvePGuMvBdGzT9/GoN4TDFkfCVaI1I5GvwVyK t1fPlhSsOdec0fEXLqM+yxWxX3WP09+zzap72t0XoA9w1tZsLdupaEi/xrSlk2xx H+++Oz8pckB8Fej2zn+2nfgbD3khxvPavBFDKc5tc8UkIi+Rz6GLnQOvMP+Rew8I lV2lrC/qJMFr3sUKI4U9zG7YJ/6l59XHQMAtROKoHVEqVRCPm89kc10qpxsD0ZIJ cIjhyXqg7stFYA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:56 2025 by rpki-client