This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json) Hash identifier: TxOvmd2uKc4jYCdGUlUeTsRUh7Y1wJXEm3V6aeSAbf0= Subject key identifier: 33:71:D0:AB:BF:7A:40:DA:7B:9F:CF:F7:05:A9:EC:E6:22:56:23:B6 Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Certificate serial: 019AF19B8119695DE99D00FB0A868342B830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=) 2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: 8ZWP4HjGyxLQl4MzwaiI7tmr/YsuT8d/ckU4JutMN9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:81:19:69:5d:e9:9d:00:fb:0a:86:83:42:b8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=3371d0abbf7a40da7b9fcff705a9ece6225623b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:00:e5:41:f0:16:c2:29:2a:16:9d:74:db: 5f:3d:bd:e3:b6:bc:1b:f6:28:92:cf:39:cc:5e:1a: 55:38:ce:fa:6f:06:89:90:b4:41:22:e3:e4:02:27: cd:b0:45:28:48:b6:e8:27:70:ab:6a:88:62:b1:ae: ca:76:4f:89:0b:c8:11:bf:01:03:21:cd:ad:87:0d: 35:00:24:62:39:1b:8a:20:08:03:72:1d:ef:90:70: 34:16:5e:44:10:d9:59:2f:1f:f0:50:e9:c4:29:7d: 9a:18:9b:5e:e8:4f:04:e4:50:3a:ed:16:69:6e:64: b0:fd:69:04:40:09:9a:94:8f:99:0b:f4:21:24:a6: 89:96:2d:35:cc:45:fc:04:3e:7a:3b:b2:68:0b:a6: 61:32:c5:d8:f3:33:da:fe:38:6a:50:62:21:d3:20: 4a:67:5b:d3:0c:a7:45:00:3c:ca:db:61:cb:65:99: 00:cb:a5:c1:95:53:13:9f:37:80:b6:77:d9:ee:89: 72:3b:67:64:35:61:0f:65:13:89:9a:08:8f:0c:10: 87:19:0c:e1:4a:f3:ca:bb:35:b8:cd:4f:f2:b6:72: 3a:56:07:9c:ee:0a:1b:e6:5e:48:43:85:d3:ce:00: bd:c8:9d:f4:6e:a1:1a:be:95:41:5b:61:1f:3b:3e: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:71:D0:AB:BF:7A:40:DA:7B:9F:CF:F7:05:A9:EC:E6:22:56:23:B6 X509v3 Authority Key Identifier: keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4d:82:11:05:00:c9:73:ee:de:95:ac:e7:d1:d9:73:73:49: ac:b1:df:00:7f:e1:da:93:42:07:4b:12:f5:5e:46:9c:1d:1c: fe:b7:95:40:75:27:4c:5f:32:1e:64:33:0b:20:e9:48:26:4f: e6:0a:d9:1e:aa:da:f2:ad:d0:65:ce:a6:ee:f1:e8:e1:59:d6: 19:5e:72:06:7d:63:72:1d:04:7f:5e:f0:79:5b:81:39:ad:5d: 30:72:09:ce:04:6a:73:12:80:b2:55:e5:80:0f:e6:c8:52:20: 26:1f:6b:27:db:66:ba:b0:05:d8:de:45:0f:2a:47:76:7b:0c: c2:f4:55:44:4a:87:01:70:25:3e:51:10:bd:2d:7b:be:44:57: df:29:13:fe:84:57:a9:04:39:51:51:88:51:80:f6:57:58:bf: c9:19:79:54:32:d2:ee:9e:65:d8:dd:c2:b1:12:91:ea:9a:a9: f2:06:c6:e4:6c:42:8d:59:82:01:b2:ae:87:15:68:3d:04:b5: 27:a5:b8:7f:18:95:bc:3f:e5:2d:3b:e5:bf:8f:c3:84:d9:d0: d8:99:a3:16:a5:b5:00:f5:67:74:24:15:a5:ba:e0:6d:79:e3: 02:c0:17:13:b1:2b:9e:b8:6d:c4:36:db:2e:c2:54:5b:2f:e2: ef:93:0b:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4EZaV3pnQD7CoaDQrgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh ZTY1ZjcwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EygzMzcxZDBhYmJmN2E0MGRhN2I5ZmNmZjcwNWE5ZWNlNjIyNTYyM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBMA5UHwFsIpKhaddNtfPb3jtrwb 9iiSzznMXhpVOM76bwaJkLRBIuPkAifNsEUoSLboJ3Craohisa7Kdk+JC8gRvwED Ic2thw01ACRiORuKIAgDch3vkHA0Fl5EENlZLx/wUOnEKX2aGJte6E8E5FA67RZp bmSw/WkEQAmalI+ZC/QhJKaJli01zEX8BD56O7JoC6ZhMsXY8zPa/jhqUGIh0yBK Z1vTDKdFADzK22HLZZkAy6XBlVMTnzeAtnfZ7olyO2dkNWEPZROJmgiPDBCHGQzh SvPKuzW4zU/ytnI6Vgec7gob5l5IQ4XTzgC9yJ30bqEavpVBW2EfOz4CnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNx0Ku/ekDae5/P9wWp7OYiViO2MB8GA1UdIwQY MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt ZmQ5Yzc0OTA2YmFhLzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU2CEQUA yXPu3pWs59HZc3NJrLHfAH/h2pNCB0sS9V5GnB0c/reVQHUnTF8yHmQzCyDpSCZP 5grZHqra8q3QZc6m7vHo4VnWGV5yBn1jch0Ef17weVuBOa1dMHIJzgRqcxKAslXl gA/myFIgJh9rJ9tmurAF2N5FDypHdnsMwvRVREqHAXAlPlEQvS17vkRX3ykT/oRX qQQ5UVGIUYD2V1i/yRl5VDLS7p5l2N3CsRKR6pqp8gbG5GxCjVmCAbKuhxVoPQS1 J6W4fxiVvD/lLTvlv4/DhNnQ2JmjFqW1APVndCQVpbrgbXnjAsAXE7ErnrhtxDbb LsJUWy/i75MLhA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:02 2025 by rpki-client