This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json) Hash identifier: 53YBtzYUi9KeYGM7gwIOnFYTp4VTWgvKoTADJxCTXGM= Subject key identifier: 5C:08:DF:E7:6B:AC:2B:86:AC:7C:2B:11:CD:D0:26:A1:1B:9B:A7:28 Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019AF61C74071BE968FA7A4ACD007BA429A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft Manifest number: B8 Signing time: Sun 07 Dec 2025 00:00:51 +0000 Manifest this update: Sun 07 Dec 2025 00:00:51 +0000 Manifest next update: Mon 08 Dec 2025 00:00:51 +0000 Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: wsJIWFgUMG4s15a3ekurqWNsb4YSNxwMpvqxwYk6jmk=) 2: qgKZAArtpwZNGuwsFB65WWkz-lk.roa (hash: PLkGhcClNOI6nc6nrxBDCSyHpkoFTKMqFL9ulr2HzlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:74:07:1b:e9:68:fa:7a:4a:cd:00:7b:a4:29:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Dec 7 00:00:51 2025 GMT Not After : Dec 8 00:00:51 2025 GMT Subject: CN=5c08dfe76bac2b86ac7c2b11cdd026a11b9ba728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:c4:f4:99:b0:16:7c:de:b4:78:e1:c8:84: a9:15:45:6c:d6:9e:8f:e4:2f:8d:23:77:e9:f8:f2: 84:0b:2a:2a:5b:09:48:4e:c8:33:6b:4d:8d:2b:c3: d0:90:c4:39:da:f1:21:d6:3e:68:5a:62:f6:00:c9: d2:46:01:ae:76:17:ad:ff:f4:bc:81:62:a4:ad:18: a2:16:37:c1:f2:a4:00:92:03:61:10:b5:6b:79:67: 3f:2e:d3:98:18:1d:47:f3:67:df:c3:38:c6:65:b4: 7c:2d:2e:14:a6:7c:cf:92:9b:19:d9:ce:71:3a:e0: 22:68:ce:8a:b1:78:9a:80:92:72:86:24:f1:52:68: e0:f0:08:af:91:45:73:fe:a4:79:f1:b0:88:76:43: 4c:1b:45:4d:f6:99:68:ae:6d:9a:af:f1:fe:eb:b7: 84:0f:6d:ca:ff:0f:6b:3c:70:87:a1:c8:7c:a5:49: c1:d9:37:ee:9c:8b:02:03:26:ed:b3:d9:16:c9:80: 1f:5c:8b:b6:b8:20:1e:16:5d:a2:7d:31:8f:41:38: c0:83:32:69:52:14:d5:24:2e:20:3d:68:8a:82:f8: 6d:a7:12:08:55:79:31:2c:50:cc:78:ae:5f:c9:3e: e8:66:41:8e:9c:97:5d:19:2c:f4:d9:e1:f2:14:6a: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:08:DF:E7:6B:AC:2B:86:AC:7C:2B:11:CD:D0:26:A1:1B:9B:A7:28 X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:3c:21:ae:b1:48:c2:d6:f1:6d:d5:2b:41:ee:e4:d9:f4: 5f:b2:74:9c:13:44:22:c0:b3:60:94:9e:81:68:a1:a9:7b:da: a6:76:67:a1:cc:a9:1c:fb:96:3b:e6:20:d8:c2:97:53:8b:7f: 94:45:e2:43:6f:eb:8c:27:fe:73:4e:70:58:60:9a:6b:16:bd: b1:8a:f8:ca:79:39:9e:38:81:75:8f:be:ab:d1:e7:46:a0:b3: 19:a6:d3:09:f0:56:a1:ee:c3:61:a4:85:58:53:1f:76:49:57: 46:ae:e8:aa:41:ca:07:8a:b5:2b:ff:48:62:b1:cb:c1:5e:db: 2e:6a:c3:eb:6a:e6:06:3c:f6:14:89:9a:86:7e:a1:e6:34:78: ee:8c:01:1d:0e:2c:75:44:4e:8c:72:7d:26:48:18:f8:7e:cf: 7a:f8:88:0b:97:3c:38:dd:6d:26:61:17:1a:3c:97:a9:ff:dc: a3:6c:45:1d:8f:cc:9b:a6:b2:3e:69:71:15:17:bc:8e:e7:ba: 14:68:d6:34:4e:1e:21:33:56:da:88:1d:9c:4c:24:ec:e9:f1: a6:d0:cc:02:4e:08:64:2a:86:fc:51:fb:7a:93:b8:be:67:f1: 68:96:87:c2:61:b9:71:c7:e8:1f:dd:47:96:d3:1b:d3:a7:8c: 84:91:fa:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHQHG+lo+npKzQB7pCmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjUxMjA3MDAwMDUxWhcNMjUxMjA4MDAwMDUxWjAzMTEwLwYDVQQD Eyg1YzA4ZGZlNzZiYWMyYjg2YWM3YzJiMTFjZGQwMjZhMTFiOWJhNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyILE9JmwFnzetHjhyISpFUVs1p6P 5C+NI3fp+PKECyoqWwlITsgza02NK8PQkMQ52vEh1j5oWmL2AMnSRgGudhet//S8 gWKkrRiiFjfB8qQAkgNhELVreWc/LtOYGB1H82ffwzjGZbR8LS4UpnzPkpsZ2c5x OuAiaM6KsXiagJJyhiTxUmjg8AivkUVz/qR58bCIdkNMG0VN9plorm2ar/H+67eE D23K/w9rPHCHoch8pUnB2TfunIsCAybts9kWyYAfXIu2uCAeFl2ifTGPQTjAgzJp UhTVJC4gPWiKgvhtpxIIVXkxLFDMeK5fyT7oZkGOnJddGSz02eHyFGqlCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwI3+drrCuGrHwrEc3QJqEbm6coMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyo8Ia6x SMLW8W3VK0Hu5Nn0X7J0nBNEIsCzYJSegWihqXvapnZnocypHPuWO+Yg2MKXU4t/ lEXiQ2/rjCf+c05wWGCaaxa9sYr4ynk5njiBdY++q9HnRqCzGabTCfBWoe7DYaSF WFMfdklXRq7oqkHKB4q1K/9IYrHLwV7bLmrD62rmBjz2FImahn6h5jR47owBHQ4s dUROjHJ9JkgY+H7PeviIC5c8ON1tJmEXGjyXqf/co2xFHY/Mm6ayPmlxFRe8jue6 FGjWNE4eITNW2ogdnEwk7OnxptDMAk4IZCqG/FH7epO4vmfxaJaHwmG5ccfoH91H ltMb06eMhJH6Og== -----END CERTIFICATE-----Generated at Sun Dec 7 02:42:15 2025 by rpki-client