This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json) Hash identifier: x5njEgcBSNuyOgFZQgJFH5T29Ew/4snjq6Eaw7frZDs= Subject key identifier: A2:A9:37:F7:FA:2D:B1:A8:25:39:54:37:32:7E:E6:9E:5F:7E:AC:BB Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c Certificate serial: 019AF1D1C46EA3E46AB169683482417A0A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft Manifest number: 0AE0 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: c73U/byoCntBpBt/UpdTzVjmm/nZTdeNvUz0SINzwfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:6e:a3:e4:6a:b1:69:68:34:82:41:7a:0a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=a2a937f7fa2db1a825395437327ee69e5f7eacbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:5a:2b:19:02:88:fd:e0:e3:e9:d1:4a:02: 1a:af:9c:ac:4d:1d:70:72:49:c6:78:84:c9:b7:9d: 42:50:21:64:45:32:65:d8:2e:d3:8a:f9:ae:a7:ff: b5:c7:d9:fb:a0:8b:78:60:e7:9c:f3:35:d9:f2:77: e6:3c:8d:dd:7a:61:01:ca:62:40:19:41:5d:fa:0a: 34:a8:ef:3d:39:ff:73:31:1f:7a:90:47:14:31:fa: 1e:63:c1:d6:47:9a:03:18:96:dc:91:5e:fb:54:0e: b6:87:6e:21:50:e2:8b:cd:2f:ad:19:a5:03:da:2e: 35:e8:ac:38:ae:ac:57:c1:94:97:a9:e0:a2:08:18: 98:f2:4f:1c:24:56:8f:5e:18:6a:51:f0:7f:8a:db: ca:ea:f0:4e:28:41:7f:a1:45:a2:c3:e9:21:9b:7e: e3:03:07:d8:73:a4:93:e6:a9:fc:93:70:00:d5:2e: e3:86:9d:b7:41:48:3a:42:65:c5:c5:8c:35:0e:73: e7:e8:f4:ad:57:a4:b6:f6:15:90:6f:3c:73:d9:37: aa:73:f8:de:53:9c:8c:94:f7:5d:da:04:23:02:aa: 23:9c:2f:52:18:63:ee:85:d2:c9:6d:78:63:84:20: 2f:fd:ab:1c:44:9e:9f:22:ec:f8:41:20:cb:50:33: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A9:37:F7:FA:2D:B1:A8:25:39:54:37:32:7E:E6:9E:5F:7E:AC:BB X509v3 Authority Key Identifier: keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5e:8e:94:34:e0:6a:c2:0d:af:09:c2:c3:30:e0:ad:f8:89: 3c:cb:7d:da:59:2d:6d:4e:a2:6c:d3:f1:51:8e:d6:77:6d:d2: 1e:88:54:94:74:28:9f:d5:6d:38:3c:e9:98:60:71:e4:59:3c: cb:85:11:e5:1f:ff:10:e1:f4:e1:58:b2:a8:2c:e0:a1:17:63: 91:b9:55:9a:96:66:f1:1a:39:b8:0c:47:70:38:1f:df:03:1e: e7:45:75:ba:8e:7b:4e:7b:26:48:42:dc:0c:70:e7:8f:76:19: 8b:54:12:31:eb:d1:3c:e7:ab:77:52:7e:a0:e2:e8:0e:29:f9: 7d:ab:9d:7f:54:95:a0:89:7f:ed:60:43:7c:b8:58:c2:d7:97: 8d:39:4f:d4:d1:21:2f:b9:89:89:83:73:22:61:79:d5:22:54: 22:81:4a:92:16:87:62:cb:3d:3e:0b:1f:5f:cd:95:a1:9d:e9: 7e:1a:4a:70:f2:98:25:b7:36:33:68:c9:33:82:fb:d6:a0:6c: b5:f1:f7:84:a1:d6:d7:1d:dd:34:22:22:73:fb:b8:b3:ae:ea: 5b:85:24:4c:f0:0b:97:7b:00:fb:c1:c7:a7:30:3b:13:84:74: 19:33:c7:de:e3:a2:b6:31:aa:ea:bd:07:05:b7:fb:03:e5:04: 26:f2:15:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cRuo+RqsWloNIJBegpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWI3ZDBkYzhiY2E0ZmY0ZTc1MzZiZDM4MDM0MDI0MjJl OGUyNmMwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhhMmE5MzdmN2ZhMmRiMWE4MjUzOTU0MzczMjdlZTY5ZTVmN2VhY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttFaKxkCiP3g4+nRSgIar5ysTR1w cknGeITJt51CUCFkRTJl2C7Tivmup/+1x9n7oIt4YOec8zXZ8nfmPI3demEBymJA GUFd+go0qO89Of9zMR96kEcUMfoeY8HWR5oDGJbckV77VA62h24hUOKLzS+tGaUD 2i416Kw4rqxXwZSXqeCiCBiY8k8cJFaPXhhqUfB/itvK6vBOKEF/oUWiw+khm37j AwfYc6ST5qn8k3AA1S7jhp23QUg6QmXFxYw1DnPn6PStV6S29hWQbzxz2Teqc/je U5yMlPdd2gQjAqojnC9SGGPuhdLJbXhjhCAv/ascRJ6fIuz4QSDLUDP1gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKpN/f6LbGoJTlUNzJ+5p5ffqy7MB8GA1UdIwQY MBaAFBIbfQ3IvKT/TnU2vTgDQCQi6OJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYt OGRiYzc0NjZhZmUzLzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYtOGRiYzc0NjZhZmUz LzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF6OlDTg asINrwnCwzDgrfiJPMt92lktbU6ibNPxUY7Wd23SHohUlHQon9VtODzpmGBx5Fk8 y4UR5R//EOH04ViyqCzgoRdjkblVmpZm8Ro5uAxHcDgf3wMe50V1uo57TnsmSELc DHDnj3YZi1QSMevRPOerd1J+oOLoDin5faudf1SVoIl/7WBDfLhYwteXjTlP1NEh L7mJiYNzImF51SJUIoFKkhaHYss9PgsfX82VoZ3pfhpKcPKYJbc2M2jJM4L71qBs tfH3hKHW1x3dNCIic/u4s67qW4UkTPALl3sA+8HHpzA7E4R0GTPH3uOitjGq6r0H Bbf7A+UEJvIVoA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:26 2025 by rpki-client