This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json) Hash identifier: mbQueT0cOM+CDvcRuMYCLEwVrnMWE3DVvNxrfNraEXo= Subject key identifier: 5E:9F:9D:50:D6:5E:D3:7A:28:55:ED:88:D6:03:90:DE:85:26:1D:2A Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Certificate serial: 019AF19B7EE4F50764441CF2C4A48571C8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft Manifest number: 0DA4 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=) 2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: TOMUiKTv0RcGOu62foQMBTKHGNvIc0WKhqX4HPuMNj0=) 3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:e4:f5:07:64:44:1c:f2:c4:a4:85:71:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=5e9f9d50d65ed37a2855ed88d60390de85261d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:4d:97:c9:1d:f2:ca:9e:67:eb:2e:d4:0d: 9f:a5:39:96:12:d3:9c:18:01:d8:1c:0a:63:12:fe: 4d:90:9b:4f:f3:44:cf:02:85:cd:ce:2c:9b:cd:18: c7:92:55:af:96:ff:ba:64:71:91:81:96:fe:dd:f7: e7:1a:57:1f:fb:32:a6:47:51:eb:ef:65:27:7a:37: 1b:8e:dd:1d:d1:8b:1c:d6:c9:f4:7e:14:23:91:bf: 9c:6a:b7:55:26:6a:cd:0e:97:ad:33:42:a8:a8:00: 05:47:1d:bd:75:09:9c:dc:58:de:ae:f1:ec:83:54: 84:9d:eb:f1:8f:fd:04:3c:cc:cb:a4:d2:f0:54:c6: c7:84:1e:f1:c1:f1:b5:ba:ac:11:b6:4e:17:ac:3f: 36:e1:58:a6:a6:2d:81:50:77:5f:6a:c0:84:e2:05: 87:36:97:c5:d6:5f:a0:a2:99:e3:7d:a5:da:fc:d9: 2a:06:47:89:23:55:b2:fe:10:ad:d6:04:92:de:a3: ae:12:66:f9:c9:10:77:ae:09:72:55:01:52:22:70: 73:14:99:56:06:97:2b:30:6e:4b:26:ca:74:5c:db: 29:59:5e:7a:d8:e9:96:a7:6f:bd:6b:a4:01:cc:c1: 7b:32:b7:b5:a1:2b:91:9f:81:d8:44:b2:0c:c8:30: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:9D:50:D6:5E:D3:7A:28:55:ED:88:D6:03:90:DE:85:26:1D:2A X509v3 Authority Key Identifier: keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:72:16:bd:27:a9:b5:03:53:11:27:8b:75:5c:f7:15:df:cb: 0f:24:45:d9:bb:42:e9:98:1a:22:e9:5c:2c:94:33:42:29:fc: f8:00:d7:c2:f7:ad:aa:d3:ec:bc:0c:05:f8:c9:2c:8a:46:39: 68:be:2f:eb:ac:3f:1f:0d:cb:60:36:4e:e0:e1:3f:a6:92:a9: 88:14:57:7e:c4:bf:75:5c:ac:1e:e6:7c:6a:64:71:f8:4b:a5: 97:4a:4f:6c:b9:56:9c:51:a0:5f:bf:ae:6c:b8:99:43:0c:60: 1b:f7:a7:46:25:9e:de:00:af:80:df:07:a8:b6:42:93:40:a1: a9:6a:f9:85:60:61:72:48:c5:22:b2:a8:82:78:f2:6e:a0:76: 3f:cf:11:76:ff:08:07:50:34:b9:44:5c:a8:fd:1a:a8:28:0d: 6b:48:41:30:5f:e0:a4:f2:ca:95:38:b9:b9:09:00:bc:9e:a8: ca:6d:29:09:8c:b4:b0:33:37:ea:b9:64:0c:13:6a:eb:eb:8b: 10:bf:73:8b:c6:f5:aa:e4:3d:9d:8b:fa:14:ed:85:56:20:73: 23:1c:e0:d5:bf:06:a7:0b:df:e6:7d:70:82:89:db:95:13:4b: 92:59:61:67:22:b2:49:5e:c9:11:c8:b1:76:be:2a:90:91:8c: 6f:2f:cd:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm37k9QdkRBzyxKSFccj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx YjY5MjMwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg1ZTlmOWQ1MGQ2NWVkMzdhMjg1NWVkODhkNjAzOTBkZTg1MjYxZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN5Nl8kd8sqeZ+su1A2fpTmWEtOc GAHYHApjEv5NkJtP80TPAoXNziybzRjHklWvlv+6ZHGRgZb+3ffnGlcf+zKmR1Hr 72Unejcbjt0d0Ysc1sn0fhQjkb+cardVJmrNDpetM0KoqAAFRx29dQmc3FjervHs g1SEnevxj/0EPMzLpNLwVMbHhB7xwfG1uqwRtk4XrD824Vimpi2BUHdfasCE4gWH NpfF1l+gopnjfaXa/NkqBkeJI1Wy/hCt1gSS3qOuEmb5yRB3rglyVQFSInBzFJlW BpcrMG5LJsp0XNspWV562OmWp2+9a6QBzMF7Mre1oSuRn4HYRLIMyDC6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6fnVDWXtN6KFXtiNYDkN6FJh0qMB8GA1UdIwQY MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1 LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnIWvSep tQNTESeLdVz3Fd/LDyRF2btC6ZgaIulcLJQzQin8+ADXwvetqtPsvAwF+MksikY5 aL4v66w/Hw3LYDZO4OE/ppKpiBRXfsS/dVysHuZ8amRx+Eull0pPbLlWnFGgX7+u bLiZQwxgG/enRiWe3gCvgN8HqLZCk0ChqWr5hWBhckjFIrKognjybqB2P88Rdv8I B1A0uURcqP0aqCgNa0hBMF/gpPLKlTi5uQkAvJ6oym0pCYy0sDM36rlkDBNq6+uL EL9zi8b1quQ9nYv6FO2FViBzIxzg1b8Gpwvf5n1wgonblRNLkllhZyKySV7JEcix dr4qkJGMby/N3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:55 2025 by rpki-client