This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json) Hash identifier: ynCoCyWxJgRUldnCY7zs2ZEj731W4jqfiSkSgB+1wFs= Subject key identifier: DC:A0:2F:DD:BC:F2:6B:08:9C:32:9D:BD:44:83:D3:7E:9F:96:D1:76 Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce Certificate serial: 019AF163E5554B0B6AD0614C484C9C3D164C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=) 2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: iDDixgTrdx2yLFh0tW61nnhJkZXoh7oezNUiX3Bkflo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:55:4b:0b:6a:d0:61:4c:48:4c:9c:3d:16:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=dca02fddbcf26b089c329dbd4483d37e9f96d176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:aa:99:68:b1:64:d0:08:4f:df:ff:a6:2a: 2d:90:d3:eb:07:ff:3f:44:c4:79:92:3f:6c:2e:a7: 8c:4a:7a:eb:49:0d:3a:ed:48:5c:4b:b4:c3:ab:2e: d6:75:7f:eb:e3:50:62:18:8c:d2:ce:3b:94:3a:3c: 5a:d6:2a:05:4b:3e:fb:64:26:d6:27:c7:26:79:35: 10:c4:f7:e7:61:ea:37:79:99:41:3f:93:35:70:35: c3:49:53:d1:06:39:8c:2f:bc:25:6b:b1:ff:44:66: ed:33:60:73:3b:78:37:71:7a:07:0f:9f:09:a3:2c: 86:11:07:c1:e3:f6:6d:fb:8a:ce:f3:06:a1:f2:54: 8f:e9:62:ac:ec:c2:d6:e8:b6:20:04:a3:d0:0b:1c: 1e:a1:fe:ce:f3:ed:73:7b:8f:7f:59:98:f3:79:e5: d3:c2:f8:c4:a7:97:5b:e7:5f:aa:88:2c:99:89:8e: 09:45:75:d2:f7:06:c7:b0:00:5e:25:4f:37:b9:06: 1c:4b:f8:78:c9:45:66:50:06:2a:72:a5:86:bf:39: 27:60:1a:12:1b:03:21:67:61:9a:3c:4f:a8:3f:8a: 1f:5d:a8:0b:99:bf:80:f7:2b:42:45:c1:9e:3f:95: a4:05:c3:fd:86:0a:c5:97:c8:91:39:0e:a5:d0:23: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:2F:DD:BC:F2:6B:08:9C:32:9D:BD:44:83:D3:7E:9F:96:D1:76 X509v3 Authority Key Identifier: keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2a:65:1a:22:65:dc:6d:33:09:1c:67:5e:32:91:b5:2c:68: 45:37:dd:99:88:ba:2f:53:79:ad:e9:ec:75:f8:6b:42:54:ad: bf:76:d6:f6:53:57:3b:32:5e:07:6c:08:df:91:66:42:7e:4e: cd:8b:45:2d:c2:79:2f:1d:60:f3:92:ee:54:5a:de:e4:72:22: 62:42:21:05:10:5e:f9:52:10:17:91:1a:45:fd:43:f5:2d:3f: 7b:e9:ec:7c:6c:6a:33:72:49:a5:35:26:90:f4:e7:93:85:c4: 6b:4f:5e:e9:b5:bb:94:f4:6f:f0:29:32:b2:fd:3a:f9:4c:7c: 68:b7:b3:0b:94:b3:cf:03:7c:5c:a4:fc:ba:d0:0e:15:e1:92: 84:05:54:5b:33:a5:77:03:b5:3c:57:9e:13:91:72:c8:34:e2: 79:59:bf:a2:65:b8:73:f8:0d:92:a7:51:a9:12:7a:0b:8c:75: 27:52:4b:f7:84:7c:10:83:cb:26:7e:09:88:e4:71:8d:96:b1: 15:d1:3c:fc:68:b1:f7:05:58:59:7c:1d:fa:a1:00:91:76:ae: 63:99:f2:44:86:7e:bc:b8:6c:81:36:31:f8:b5:c9:19:ae:27: 7d:e8:d4:f1:aa:57:41:d7:4b:4d:70:cb:6d:a2:4d:cf:b1:09: 62:84:cd:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+VVSwtq0GFMSEycPRZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDA3ZTgwNWE1MmM1MzRjYzZkMzM0NTA1NzVmZjAyMzll ODA3Y2UwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EyhkY2EwMmZkZGJjZjI2YjA4OWMzMjlkYmQ0NDgzZDM3ZTlmOTZkMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmuqmWixZNAIT9//piotkNPrB/8/ RMR5kj9sLqeMSnrrSQ067UhcS7TDqy7WdX/r41BiGIzSzjuUOjxa1ioFSz77ZCbW J8cmeTUQxPfnYeo3eZlBP5M1cDXDSVPRBjmML7wla7H/RGbtM2BzO3g3cXoHD58J oyyGEQfB4/Zt+4rO8wah8lSP6WKs7MLW6LYgBKPQCxweof7O8+1ze49/WZjzeeXT wvjEp5db51+qiCyZiY4JRXXS9wbHsABeJU83uQYcS/h4yUVmUAYqcqWGvzknYBoS GwMhZ2GaPE+oP4ofXagLmb+A9ytCRcGeP5WkBcP9hgrFl8iROQ6l0CP/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNygL9288msInDKdvUSD036fltF2MB8GA1UdIwQY MBaAFBPQfoBaUsU0zG0zRQV1/wI56AfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTkt YWQ3ZjkyNjJhN2MyLzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTktYWQ3ZjkyNjJhN2My LzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiplGiJl 3G0zCRxnXjKRtSxoRTfdmYi6L1N5rensdfhrQlStv3bW9lNXOzJeB2wI35FmQn5O zYtFLcJ5Lx1g85LuVFre5HIiYkIhBRBe+VIQF5EaRf1D9S0/e+nsfGxqM3JJpTUm kPTnk4XEa09e6bW7lPRv8Ckysv06+Ux8aLezC5SzzwN8XKT8utAOFeGShAVUWzOl dwO1PFeeE5FyyDTieVm/omW4c/gNkqdRqRJ6C4x1J1JL94R8EIPLJn4JiORxjZax FdE8/Gix9wVYWXwd+qEAkXauY5nyRIZ+vLhsgTYx+LXJGa4nfejU8apXQddLTXDL baJNz7EJYoTNXg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:15 2025 by rpki-client