This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json) Hash identifier: kLepJIKmZMrEsfbk7km5LVQ/v02q9Fyb4pm2rfLat68= Subject key identifier: 37:06:4C:95:78:68:18:CB:55:C7:76:F1:6D:4D:00:38:15:83:FB:7A Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c Certificate serial: 019AF12CBBEA295781BA374850FFEA124C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft Manifest number: 169B Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: URslFiuqoIQuJ5l7EXzlwBquy6i/dXPyPzrona44UWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bb:ea:29:57:81:ba:37:48:50:ff:ea:12:4c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=37064c95786818cb55c776f16d4d00381583fb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:fe:e8:c9:aa:b9:eb:d2:39:d8:93:53:ce: 73:18:da:7d:17:96:31:33:a8:7a:7b:cc:24:8d:6d: 18:b9:21:1b:ad:51:c6:9e:9a:36:11:c0:4b:7f:70: b3:47:24:d9:dd:67:01:54:13:9a:08:2a:08:8c:cc: 57:89:53:ed:d9:8a:0a:47:69:61:cc:03:b1:73:8c: 59:ee:9c:2d:2e:2d:37:f2:0c:b9:3f:09:8b:8c:78: 99:a6:62:88:83:be:d9:15:eb:f6:fe:f6:2c:cc:43: b9:9a:42:e5:72:43:37:62:cf:dc:4b:a8:f4:7e:87: eb:75:b1:0b:16:d8:c0:05:b4:81:fd:c0:2e:d6:40: 49:60:00:33:87:97:87:9d:aa:d3:22:60:7d:0d:f6: 01:a8:d6:c0:8c:39:ea:26:03:73:dd:8f:5d:40:7c: 20:da:36:19:3a:68:ce:32:47:ba:7c:a1:c2:15:37: 03:69:16:37:d3:43:9c:75:3a:99:cc:78:b2:6c:3b: b8:62:9a:7d:33:46:c3:a0:6e:53:68:f6:9d:52:43: 52:68:db:56:e3:04:d2:c8:0d:b7:2b:de:3e:c2:fa: 00:40:b9:0e:58:f2:71:aa:b9:12:50:c7:79:b2:76: d3:2d:cc:fe:4c:8f:e3:59:7a:9b:b9:fa:8e:aa:67: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:4C:95:78:68:18:CB:55:C7:76:F1:6D:4D:00:38:15:83:FB:7A X509v3 Authority Key Identifier: keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:25:55:67:45:bc:39:95:06:1f:ca:81:e5:18:51:26:9f:fc: 33:81:e5:73:a0:54:ef:49:d9:ef:5e:f2:3a:79:7c:3c:27:8d: d2:b1:52:63:0c:47:38:24:66:21:59:8e:4e:62:99:e5:dd:c4: 90:9d:dc:49:45:40:66:8a:4a:6d:b5:1a:eb:a7:ef:8b:78:4e: a2:dc:69:9b:eb:80:a7:eb:bd:58:b3:61:45:bd:8b:62:7b:41: cb:ca:15:85:bb:66:2a:67:54:7c:e6:cc:30:4e:f5:6b:8a:c0: 85:d9:43:e1:d5:84:e8:86:0a:82:df:c4:01:fc:9d:cc:ee:5f: 80:62:30:df:3c:b3:05:98:21:74:0e:58:11:6d:55:5c:f6:eb: b7:8e:7d:50:5d:71:17:b7:3c:4a:56:4a:9d:18:1b:fa:7e:04: 59:02:e3:45:9d:e1:c8:63:4f:df:a8:fc:4f:d1:1a:93:1a:19: 02:56:0d:f4:f9:3b:d0:d2:e3:a1:8e:79:7f:0a:a7:6d:12:75: b1:56:38:65:29:4e:9d:02:48:b4:4e:36:e3:ba:e1:14:70:b3: ee:7b:11:37:ae:57:f6:14:fa:e8:c4:79:55:0e:09:3e:22:7e: 54:7a:e4:c2:cc:99:f3:48:94:70:3c:e5:ad:54:39:e9:90:18: 83:b8:87:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLvqKVeBujdIUP/qEkw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDgzNmMyOGFmMDkyN2EwMzU1ODYyNWFlZGY2ZmQ3ODdh NDkwNWMwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EygzNzA2NGM5NTc4NjgxOGNiNTVjNzc2ZjE2ZDRkMDAzODE1ODNmYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsL+6MmquevSOdiTU85zGNp9F5Yx M6h6e8wkjW0YuSEbrVHGnpo2EcBLf3CzRyTZ3WcBVBOaCCoIjMxXiVPt2YoKR2lh zAOxc4xZ7pwtLi038gy5PwmLjHiZpmKIg77ZFev2/vYszEO5mkLlckM3Ys/cS6j0 fofrdbELFtjABbSB/cAu1kBJYAAzh5eHnarTImB9DfYBqNbAjDnqJgNz3Y9dQHwg 2jYZOmjOMke6fKHCFTcDaRY300OcdTqZzHiybDu4Ypp9M0bDoG5TaPadUkNSaNtW 4wTSyA23K94+wvoAQLkOWPJxqrkSUMd5snbTLcz+TI/jWXqbufqOqmfCcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcGTJV4aBjLVcd28W1NADgVg/t6MB8GA1UdIwQY MBaAFHvYNsKK8JJ6A1WGJa7fb9eHpJBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTct YWRiMzE0YTU3NTNjLzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTctYWRiMzE0YTU3NTNj LzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCVVZ0W8 OZUGH8qB5RhRJp/8M4Hlc6BU70nZ717yOnl8PCeN0rFSYwxHOCRmIVmOTmKZ5d3E kJ3cSUVAZopKbbUa66fvi3hOotxpm+uAp+u9WLNhRb2LYntBy8oVhbtmKmdUfObM ME71a4rAhdlD4dWE6IYKgt/EAfydzO5fgGIw3zyzBZghdA5YEW1VXPbrt459UF1x F7c8SlZKnRgb+n4EWQLjRZ3hyGNP36j8T9EakxoZAlYN9Pk70NLjoY55fwqnbRJ1 sVY4ZSlOnQJItE4247rhFHCz7nsRN65X9hT66MR5VQ4JPiJ+VHrkwsyZ80iUcDzl rVQ56ZAYg7iHFg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:27 2025 by rpki-client