This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json) Hash identifier: /z1upHCVYNlK8KorO75oBLvcllqB6H0TrD+Gbs8UDT4= Subject key identifier: 34:F9:AA:D8:90:45:63:26:95:49:1B:72:38:68:A3:8B:B8:8A:EB:16 Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Certificate serial: 019AF209833CD73C5C71A89529A348B3F50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft Manifest number: 0F66 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: hlDeQ69ktKp7EdVS4nm7xA5tzPOBwyQCOh6VXHr2Nsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:83:3c:d7:3c:5c:71:a8:95:29:a3:48:b3:f5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=34f9aad89045632695491b723868a38bb88aeb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:eb:9f:e9:27:b5:67:89:03:47:a6:7f:c4: dc:59:e4:29:53:9b:52:6e:ce:e2:ff:41:4a:49:92: ed:66:1c:9b:17:99:1b:c8:bb:bc:dd:27:2c:cd:a3: bb:c8:c8:58:2f:d5:3c:62:50:52:3c:23:57:b9:57: 95:89:eb:6d:b6:e3:b0:b8:9c:c0:65:f0:a4:98:85: 36:aa:93:dd:67:49:4a:d8:95:99:c3:52:78:da:17: 20:0c:36:8c:af:27:d8:e8:51:cc:95:a5:6c:95:ed: f3:dd:4a:32:c9:99:ca:a2:cd:8c:c5:51:c9:f5:39: f3:ca:eb:97:03:1f:20:99:30:8e:fa:f3:35:18:6b: bd:c4:88:10:2e:4d:92:95:72:4a:cc:14:99:ee:ca: 64:00:30:77:15:fc:83:2b:10:fd:89:88:f8:75:57: 43:f1:41:cf:49:dd:d8:5d:da:bf:5b:69:4e:eb:09: fb:2f:0a:12:56:b6:30:e6:91:a0:58:bc:38:a1:d1: 83:e9:52:7e:df:07:19:65:3e:e9:fe:22:e5:d7:2b: 79:9e:b0:50:3c:88:ef:d0:32:b5:c6:f0:eb:41:bf: de:af:9c:60:c9:2d:63:b4:88:fd:a1:ad:02:9c:4d: 24:31:6f:c0:9f:f7:38:41:4d:4e:d6:ed:bf:de:5e: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:AA:D8:90:45:63:26:95:49:1B:72:38:68:A3:8B:B8:8A:EB:16 X509v3 Authority Key Identifier: keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:1f:ef:6e:e0:9f:e8:01:10:0c:20:b6:3b:2f:e7:57:83:cd: f2:52:ac:79:61:b4:6c:16:8a:00:24:88:4b:3d:a0:7d:6c:7a: 06:c4:61:7f:5a:af:ef:21:4d:7d:0e:39:fa:54:bc:6d:da:f7: 90:82:9a:0a:e9:bc:27:2b:f1:46:37:e3:c5:7c:6f:1b:11:4d: eb:c8:25:1b:fd:28:1c:7a:5a:f6:26:a9:7d:6c:5f:6a:2c:bc: 26:d5:ac:ca:5e:bd:fc:ed:0e:b2:3e:2f:b6:51:19:cc:ff:40: bd:03:65:f6:c4:1a:d9:70:db:ce:e7:c7:23:f4:be:3a:61:fc: 81:a7:27:24:d1:09:03:4a:38:84:7f:1a:46:d8:e5:04:a2:fc: b0:12:b1:f4:d1:06:ec:3c:ed:00:4d:25:5a:79:80:fc:a5:62: 11:66:ae:18:18:0b:50:0e:84:ee:73:94:0f:99:a0:25:de:60: 89:a6:6d:af:de:84:4c:49:2b:77:c7:2c:dc:fa:af:c8:6c:ba: e4:07:42:a0:e4:0c:64:e3:dd:ae:b2:f2:4b:74:07:5d:5d:7a: 84:4b:f7:32:c6:d6:78:7c:f8:8d:7f:17:d4:03:d6:03:df:53: c5:7d:6d:79:33:d7:e7:19:1f:7b:85:da:71:37:7d:4e:c1:ff: aa:cf:3f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYM81zxccaiVKaNIs/UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTdlODc4NDM2NmI0NzFhNmE0ZTBjODA4MGY4ZjEwZGFl NjZhNTAwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EygzNGY5YWFkODkwNDU2MzI2OTU0OTFiNzIzODY4YTM4YmI4OGFlYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgjrn+kntWeJA0emf8TcWeQpU5tS bs7i/0FKSZLtZhybF5kbyLu83ScszaO7yMhYL9U8YlBSPCNXuVeVietttuOwuJzA ZfCkmIU2qpPdZ0lK2JWZw1J42hcgDDaMryfY6FHMlaVsle3z3UoyyZnKos2MxVHJ 9TnzyuuXAx8gmTCO+vM1GGu9xIgQLk2SlXJKzBSZ7spkADB3FfyDKxD9iYj4dVdD 8UHPSd3YXdq/W2lO6wn7LwoSVrYw5pGgWLw4odGD6VJ+3wcZZT7p/iLl1yt5nrBQ PIjv0DK1xvDrQb/er5xgyS1jtIj9oa0CnE0kMW/An/c4QU1O1u2/3l7niQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT5qtiQRWMmlUkbcjhoo4u4iusWMB8GA1UdIwQY MBaAFPXn6HhDZrRxpqTgyAgPjxDa5mpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2Nzct MGQyNzA0NjJiN2Q3LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2NzctMGQyNzA0NjJiN2Q3 LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuh/vbuCf 6AEQDCC2Oy/nV4PN8lKseWG0bBaKACSISz2gfWx6BsRhf1qv7yFNfQ45+lS8bdr3 kIKaCum8JyvxRjfjxXxvGxFN68glG/0oHHpa9iapfWxfaiy8JtWsyl69/O0Osj4v tlEZzP9AvQNl9sQa2XDbzufHI/S+OmH8gacnJNEJA0o4hH8aRtjlBKL8sBKx9NEG 7DztAE0lWnmA/KViEWauGBgLUA6E7nOUD5mgJd5giaZtr96ETEkrd8cs3PqvyGy6 5AdCoOQMZOPdrrLyS3QHXV16hEv3MsbWeHz4jX8X1APWA99TxX1teTPX5xkfe4Xa cTd9TsH/qs8/0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:03 2025 by rpki-client