This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json) Hash identifier: VnEyXgOGXfr+Q0jWsVPqCDaVC/OSi4nJlxAf6Ol/syI= Subject key identifier: B6:4F:0B:9C:E0:F3:80:BA:3F:96:CC:60:0B:A3:0B:F1:DB:8E:AD:EA Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70 Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870 Certificate serial: 019AF12E72E38F25438B9ECE19D80386F830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft Manifest number: 0C80 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=) 2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: SLib2Q4zF3la6ShUbdUtTmmr2SnOVTsY4qKrbbg35FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:72:e3:8f:25:43:8b:9e:ce:19:d8:03:86:f8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870 Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=b64f0b9ce0f380ba3f96cc600ba30bf1db8eadea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:3d:71:80:17:5b:f3:0b:cb:bd:ca:30:e9: f2:39:50:a6:51:31:1e:36:55:f6:21:1c:fe:54:d4: 69:81:13:d9:ae:86:76:45:92:ce:5d:95:d0:ac:d7: bc:7d:ca:62:26:ee:d0:b1:4e:6c:fd:e6:6b:2b:57: c4:27:9f:dd:59:3a:b9:16:bc:2f:f6:f8:fa:07:a4: 6a:2b:ed:3b:01:d0:7f:8b:fb:8a:0f:a6:8e:1b:98: 48:81:d8:0f:6e:d3:69:3e:f7:60:f7:38:fe:71:ec: a8:9d:12:bc:91:e2:b5:a1:78:33:96:24:44:cd:21: 82:5a:f5:c8:14:f1:f7:33:b7:9c:07:c3:72:68:b9: 91:2e:24:93:3a:fd:a2:32:3a:6d:cc:12:99:3c:cb: ad:64:49:be:9c:1a:6f:76:52:ff:16:d1:1c:48:cf: f5:25:4c:3f:4c:78:75:c0:16:9c:81:52:80:ae:29: 26:0e:a3:57:a4:c6:ac:65:0b:b3:5a:9b:a4:e8:16: 42:fa:02:0a:78:78:06:65:58:f7:b6:17:a3:51:1a: 9a:db:48:3c:c9:57:93:d0:b4:d7:88:0b:20:02:ab: 0c:03:3a:f9:65:56:2f:38:d4:e1:ac:a3:be:36:6a: 45:05:3e:d8:bc:5e:d3:b8:88:b0:d7:bd:fb:d8:e3: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4F:0B:9C:E0:F3:80:BA:3F:96:CC:60:0B:A3:0B:F1:DB:8E:AD:EA X509v3 Authority Key Identifier: keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:6e:66:28:4c:a5:28:bc:50:3e:81:58:ec:2a:a7:d5:95: ad:e2:bd:1e:51:aa:f2:32:e3:b8:51:00:34:fa:24:c6:3c:e7: dd:2b:34:55:22:0d:a6:55:19:36:16:5e:7f:39:cb:e4:a7:14: ea:04:b0:04:fa:d3:2d:5e:84:8a:d2:bd:93:97:5a:98:2c:d2: ab:91:ee:e9:c5:5c:3f:67:7c:97:1e:95:06:8d:41:37:5e:08: 06:23:e6:61:51:29:40:84:c2:5c:d3:f8:bd:d1:ec:5d:3d:96: 27:56:cb:0a:37:fd:94:27:56:59:4a:5a:f4:0b:57:f5:a3:5a: ae:6d:a1:32:b0:5b:cc:47:d8:76:29:9a:f4:f4:35:37:4d:93: bc:84:a9:aa:8d:b0:b1:7a:0e:d3:f0:2f:1d:77:f9:92:3e:ea: ac:79:c3:1c:8d:90:56:de:70:4d:3e:8c:bd:f3:92:f2:16:6b: d2:ca:f2:cb:b1:dc:69:38:8f:dc:17:be:c6:de:f7:87:aa:17: 6d:1b:30:0d:af:c0:11:6c:91:08:bd:93:e9:d4:8f:bc:aa:b1: 61:7f:de:f4:a4:44:10:85:a5:c7:bb:d3:1d:ed:e9:0a:d5:9d: dd:05:50:c9:49:cd:a3:0f:5f:bc:27:d4:fe:0e:ed:69:96:b1: 71:ff:64:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnLjjyVDi57OGdgDhvgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NGI5ZjgwOTNkZDg4OWU0NzdjZWZhN2E3NTU2MzkyYTY2 YjM4NzAwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhiNjRmMGI5Y2UwZjM4MGJhM2Y5NmNjNjAwYmEzMGJmMWRiOGVhZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfs9cYAXW/MLy73KMOnyOVCmUTEe NlX2IRz+VNRpgRPZroZ2RZLOXZXQrNe8fcpiJu7QsU5s/eZrK1fEJ5/dWTq5Frwv 9vj6B6RqK+07AdB/i/uKD6aOG5hIgdgPbtNpPvdg9zj+ceyonRK8keK1oXgzliRE zSGCWvXIFPH3M7ecB8NyaLmRLiSTOv2iMjptzBKZPMutZEm+nBpvdlL/FtEcSM/1 JUw/THh1wBacgVKArikmDqNXpMasZQuzWpuk6BZC+gIKeHgGZVj3thejURqa20g8 yVeT0LTXiAsgAqsMAzr5ZVYvONThrKO+NmpFBT7YvF7TuIiw17372OMvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZPC5zg84C6P5bMYAujC/Hbjq3qMB8GA1UdIwQY MBaAFPRLn4CT3YieR3zvp6dVY5KmazhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgt MTAzYjA0ODUyMDNiLzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgtMTAzYjA0ODUyMDNi LzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/NuZihM pSi8UD6BWOwqp9WVreK9HlGq8jLjuFEANPokxjzn3Ss0VSINplUZNhZefznL5KcU 6gSwBPrTLV6EitK9k5damCzSq5Hu6cVcP2d8lx6VBo1BN14IBiPmYVEpQITCXNP4 vdHsXT2WJ1bLCjf9lCdWWUpa9AtX9aNarm2hMrBbzEfYdima9PQ1N02TvISpqo2w sXoO0/AvHXf5kj7qrHnDHI2QVt5wTT6MvfOS8hZr0sryy7HcaTiP3Be+xt73h6oX bRswDa/AEWyRCL2T6dSPvKqxYX/e9KREEIWlx7vTHe3pCtWd3QVQyUnNow9fvCfU /g7taZaxcf9khQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:35 2025 by rpki-client