This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json) Hash identifier: bSr8x0+MQscI6BF5jGcgU63+yL3McnOUAG8IzqB1XOg= Subject key identifier: 87:68:E5:6B:9F:98:D7:9A:AC:AC:04:38:10:54:C2:15:8C:99:FA:05 Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Certificate serial: 019AF19B9D3FE8BF67BFD49AC380775C5A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=) 2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: H65rKx1NNe9RFGeJSRMi3eYzH93Bu9vn0Y6qmFYC1fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9d:3f:e8:bf:67:bf:d4:9a:c3:80:77:5c:5a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=8768e56b9f98d79aacac04381054c2158c99fa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:be:0c:74:34:79:60:f6:04:ad:09:44:29: e7:78:4f:20:c4:ec:36:6b:a7:34:03:10:3c:2e:1a: 8e:f1:00:21:85:e4:e7:71:0b:60:0a:ab:cf:74:97: 68:93:b4:98:fe:27:ce:b2:c2:ad:a2:57:cc:cc:0e: 7e:37:1a:29:1d:a0:97:8e:fe:34:09:b7:19:e0:6e: ce:5e:cd:12:71:62:b3:ea:d5:55:7c:fd:8a:d4:ae: 1f:40:59:aa:77:36:f6:60:01:03:02:b9:08:95:a9: 63:b0:f1:fb:ea:86:78:6c:b0:6c:7c:a3:bf:64:3a: d7:b6:05:87:49:0c:c2:bd:b4:eb:bb:87:e9:a1:be: f8:ac:8b:bd:f8:9d:78:d3:5d:32:83:27:e2:88:d4: 02:81:8a:eb:15:c2:c1:99:de:e3:7f:2b:e1:87:5f: 84:b4:31:c7:a4:70:5b:20:a4:57:8c:7e:d7:69:18: 07:3a:92:db:0e:cb:a5:63:af:a3:20:82:ca:ad:ca: 10:a7:28:37:c4:3d:db:8c:f1:5b:ed:64:8f:da:4c: e0:36:48:29:67:5f:24:b9:53:95:f2:d6:bf:5f:12: cb:b8:44:58:3f:df:70:a1:19:fe:91:6f:ed:cd:81: de:fd:da:df:8c:31:f3:3f:f5:b4:d1:43:f7:91:f0: d5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:E5:6B:9F:98:D7:9A:AC:AC:04:38:10:54:C2:15:8C:99:FA:05 X509v3 Authority Key Identifier: keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:5e:cc:d8:91:41:34:7e:98:64:72:73:d9:da:2f:1c:de: 42:ae:2f:b3:82:3b:4a:6e:f8:12:6b:6a:6e:f2:de:fc:92:16: d5:68:c4:23:c5:23:7b:35:cd:17:db:1f:f9:96:44:6b:e3:d3: c0:79:dd:2f:29:ad:85:e5:47:ae:64:ec:72:89:69:e9:b8:8c: cb:25:54:05:6c:1c:ba:e5:e4:3d:d3:e5:b3:42:e5:5f:af:cd: 6e:c0:fb:28:6e:eb:80:93:40:c7:ed:1c:2f:2a:eb:31:bb:80: a9:34:ec:05:0c:c3:3b:ee:bb:32:9b:4c:12:ca:27:9a:0b:c4: 6e:74:c3:23:ad:d3:f8:9f:2c:f7:d9:bc:84:31:cd:96:91:18: 30:f2:d7:38:a5:b8:c1:84:30:05:0e:3f:3f:cb:5b:b0:04:53: 6e:9e:c9:10:01:51:3e:41:8c:c3:31:ae:fb:bd:2a:ca:64:d5: c3:fa:2d:d0:5c:af:a2:06:79:b8:d4:62:c0:e0:74:0a:59:2e: f7:cb:45:f1:9d:c2:48:78:12:96:15:64:ce:5d:bb:f6:70:fc: 18:d1:77:3d:bc:d2:58:24:32:f3:da:46:fe:7e:43:ce:c7:34: 5f:d0:e1:f2:bd:63:f2:24:49:06:79:63:b3:ef:77:de:a7:50: 23:31:4e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm50/6L9nv9Saw4B3XFpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1 OGUyOTYwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD Eyg4NzY4ZTU2YjlmOThkNzlhYWNhYzA0MzgxMDU0YzIxNThjOTlmYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAney+DHQ0eWD2BK0JRCnneE8gxOw2 a6c0AxA8LhqO8QAhheTncQtgCqvPdJdok7SY/ifOssKtolfMzA5+NxopHaCXjv40 CbcZ4G7OXs0ScWKz6tVVfP2K1K4fQFmqdzb2YAEDArkIlaljsPH76oZ4bLBsfKO/ ZDrXtgWHSQzCvbTru4fpob74rIu9+J14010ygyfiiNQCgYrrFcLBmd7jfyvhh1+E tDHHpHBbIKRXjH7XaRgHOpLbDsulY6+jIILKrcoQpyg3xD3bjPFb7WSP2kzgNkgp Z18kuVOV8ta/XxLLuERYP99woRn+kW/tzYHe/drfjDHzP/W00UP3kfDVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdo5WufmNearKwEOBBUwhWMmfoFMB8GA1UdIwQY MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRZezNiR QTR+mGRyc9naLxzeQq4vs4I7Sm74EmtqbvLe/JIW1WjEI8UjezXNF9sf+ZZEa+PT wHndLymtheVHrmTscolp6biMyyVUBWwcuuXkPdPls0LlX6/NbsD7KG7rgJNAx+0c LyrrMbuAqTTsBQzDO+67MptMEsonmgvEbnTDI63T+J8s99m8hDHNlpEYMPLXOKW4 wYQwBQ4/P8tbsARTbp7JEAFRPkGMwzGu+70qymTVw/ot0FyvogZ5uNRiwOB0Clku 98tF8Z3CSHgSlhVkzl279nD8GNF3PbzSWCQy89pG/n5Dzsc0X9Dh8r1j8iRJBnlj s+933qdQIzFO0g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:41 2025 by rpki-client