This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json) Hash identifier: spcDsOBNEI3WPwBRYwbWmhVYy6A00DpD+VKUqB/u8t0= Subject key identifier: AE:5F:93:F0:22:31:CD:58:5C:52:2E:09:0C:46:92:77:CF:FC:B6:CE Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Certificate serial: 019B390F27B2AEA8DD6C40611F71F10A40BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft Manifest number: 0DC9 Signing time: Sat 20 Dec 2025 00:00:52 +0000 Manifest this update: Sat 20 Dec 2025 00:00:52 +0000 Manifest next update: Sun 21 Dec 2025 00:00:52 +0000 Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=) 2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: /+prHKzCuGE9uTUn08E0Lvr+KXYrpiewRs1dgM9i1pg=) 3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:27:b2:ae:a8:dd:6c:40:61:1f:71:f1:0a:40:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Validity Not Before: Dec 20 00:00:52 2025 GMT Not After : Dec 21 00:00:52 2025 GMT Subject: CN=ae5f93f02231cd585c522e090c469277cffcb6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:bc:54:70:ea:10:b8:bb:28:e2:89:67:0e: 9d:3f:3e:51:7d:35:28:37:61:95:53:88:49:7b:07: 7a:5f:fc:d3:05:e2:57:45:76:0c:94:59:d8:98:fb: b9:3d:2c:ac:0d:e6:53:e2:67:2f:67:fe:1f:26:c0: 0f:a5:4d:27:f9:b0:57:c5:52:cb:79:97:79:17:6f: fa:9c:c0:b0:9c:0d:0e:46:e2:25:bf:5e:b6:85:7a: 84:58:ee:88:25:eb:75:6f:95:51:4f:7b:2c:a9:c9: df:b8:99:91:31:09:18:47:ef:48:4e:d4:da:0e:cd: 1a:d0:1b:63:f7:d6:ae:dc:6a:13:64:ca:96:4d:e9: 65:08:21:71:11:1d:4e:97:82:d3:b3:f0:13:0c:1a: 37:27:e6:f2:05:1f:e0:14:66:c6:22:8b:41:e7:8d: 8d:be:83:89:62:86:c8:0f:05:96:a2:81:91:6d:78: 3c:70:72:c9:b2:f2:4b:d7:4f:32:36:aa:a1:ae:9d: 26:d2:78:85:6c:65:07:5a:09:b7:09:51:d5:73:9f: cb:bb:eb:88:8d:a2:c0:a6:11:c3:77:04:7a:87:17: 17:12:28:34:04:0a:59:eb:83:0b:6f:01:a0:a3:9c: 9e:fe:e3:9f:99:db:bf:08:19:f5:e0:91:53:3f:74: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5F:93:F0:22:31:CD:58:5C:52:2E:09:0C:46:92:77:CF:FC:B6:CE X509v3 Authority Key Identifier: keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6e:a0:bd:f8:0b:8c:4a:7e:cd:bc:0d:ee:c2:3b:2c:fd:96: 4e:a2:ae:d1:1a:89:b3:09:27:50:76:4d:41:fb:72:cf:e0:5e: 6a:1c:e3:e6:cc:fc:03:a4:e4:2a:e3:ed:ee:3c:fb:0b:07:77: ad:5d:9d:9a:3f:fd:c5:9f:fc:cc:8e:c0:e2:32:d7:a6:5e:46: e1:c3:4b:1e:31:9c:1f:fe:d2:1c:f6:cb:31:ec:55:81:68:de: cb:1c:1d:fe:99:35:1f:f5:63:7b:59:57:a0:33:22:c1:2a:82: 24:3e:b5:32:a6:03:3f:2c:af:71:09:ac:40:8a:af:f7:63:3f: e0:3f:a2:03:91:3b:71:43:5c:3a:1d:c3:76:26:70:98:67:76: 4a:97:9f:9c:e1:2e:e8:7b:99:d2:8c:a5:77:55:46:a5:13:ee: 72:12:30:ae:f7:ee:f4:8e:01:72:96:7a:f8:26:b5:13:28:00: 6b:98:63:61:85:c7:63:a6:7d:33:ee:e5:bb:cd:d4:f4:e7:f9: 89:aa:80:d3:3e:f8:7a:5c:3c:5f:da:f0:1e:26:4a:20:26:8b: e2:fa:2d:ca:0d:3f:c9:8f:2c:cd:25:15:59:34:53:0f:ec:fe: 13:41:ec:ec:e2:f5:b6:95:5c:54:32:54:84:20:73:ce:65:9a: 4e:1f:b2:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyeyrqjdbEBhH3HxCkC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx YjY5MjMwHhcNMjUxMjIwMDAwMDUyWhcNMjUxMjIxMDAwMDUyWjAzMTEwLwYDVQQD EyhhZTVmOTNmMDIyMzFjZDU4NWM1MjJlMDkwYzQ2OTI3N2NmZmNiNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv28VHDqELi7KOKJZw6dPz5RfTUo N2GVU4hJewd6X/zTBeJXRXYMlFnYmPu5PSysDeZT4mcvZ/4fJsAPpU0n+bBXxVLL eZd5F2/6nMCwnA0ORuIlv162hXqEWO6IJet1b5VRT3ssqcnfuJmRMQkYR+9ITtTa Ds0a0Btj99au3GoTZMqWTellCCFxER1Ol4LTs/ATDBo3J+byBR/gFGbGIotB542N voOJYobIDwWWooGRbXg8cHLJsvJL108yNqqhrp0m0niFbGUHWgm3CVHVc5/Lu+uI jaLAphHDdwR6hxcXEig0BApZ64MLbwGgo5ye/uOfmdu/CBn14JFTP3REswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5fk/AiMc1YXFIuCQxGknfP/LbOMB8GA1UdIwQY MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1 LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG6gvfgL jEp+zbwN7sI7LP2WTqKu0RqJswknUHZNQftyz+Beahzj5sz8A6TkKuPt7jz7Cwd3 rV2dmj/9xZ/8zI7A4jLXpl5G4cNLHjGcH/7SHPbLMexVgWjeyxwd/pk1H/Vje1lX oDMiwSqCJD61MqYDPyyvcQmsQIqv92M/4D+iA5E7cUNcOh3DdiZwmGd2SpefnOEu 6HuZ0oyld1VGpRPuchIwrvfu9I4BcpZ6+Ca1EygAa5hjYYXHY6Z9M+7lu83U9Of5 iaqA0z74elw8X9rwHiZKICaL4votyg0/yY8szSUVWTRTD+z+E0Hs7OL1tpVcVDJU hCBzzmWaTh+yrg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:49 2025 by rpki-client