This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json) Hash identifier: jMpFaKYhbzt2TlxV/BBC9G30aKoXEOeVFERtHuA1E/g= Subject key identifier: 53:C8:E7:80:A8:EE:5F:87:94:87:56:15:46:72:B5:C7:62:CD:E9:86 Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Certificate serial: 019B5976F2B37B0A06AA9A91139B40AEB41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:02:06 +0000 Manifest this update: Fri 26 Dec 2025 07:02:06 +0000 Manifest next update: Sat 27 Dec 2025 07:02:06 +0000 Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: xMutSjVJi7cyxbW909xpLa/SDETX6HDQJZbEBqnXOnA=) 2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f2:b3:7b:0a:06:aa:9a:91:13:9b:40:ae:b4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Validity Not Before: Dec 26 07:02:06 2025 GMT Not After : Dec 27 07:02:06 2025 GMT Subject: CN=53c8e780a8ee5f87948756154672b5c762cde986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:2a:73:f0:a2:c9:05:6c:56:8d:49:f4:cd: ca:d6:19:36:4e:d6:2d:a2:d7:65:ce:24:93:db:09: f6:7b:ce:94:a4:2d:55:f8:03:42:76:2f:77:c6:7d: 02:8d:bd:53:c5:28:2a:80:33:29:b9:17:10:8b:29: c9:99:6b:b2:70:04:fe:de:2e:40:72:6a:c3:7d:1f: 32:3d:72:e7:35:a7:2b:cd:95:57:3b:4b:bc:62:da: ba:95:e2:04:25:6b:d8:4a:18:e7:27:d2:a9:c3:63: 3c:c9:06:ad:fb:10:88:4b:0c:54:2e:3b:da:09:5a: 83:73:27:86:72:bb:74:59:5f:df:72:14:8e:f9:7e: b9:3d:bc:6c:50:4c:d7:43:fe:36:3b:5d:15:e0:ae: e3:55:45:4a:92:c7:44:b0:4d:29:fe:62:8c:e9:a7: f4:51:3d:8c:1a:92:0b:a1:0c:05:6d:83:12:6e:13: d4:18:09:f2:8a:55:5e:3e:b5:92:5a:18:23:9c:23: 2b:b4:e5:e7:cf:2c:c8:42:1e:33:1a:0d:9a:96:90: f4:38:cc:59:5a:93:77:b8:04:88:ea:a6:8a:bf:b5: a1:48:08:f3:ad:7b:1a:a7:bb:fd:d3:76:a0:ab:bb: db:d9:f9:c0:c3:bf:1f:37:23:0e:d3:d4:e9:55:46: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:E7:80:A8:EE:5F:87:94:87:56:15:46:72:B5:C7:62:CD:E9:86 X509v3 Authority Key Identifier: keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:60:7c:24:c6:33:77:ae:f2:c7:b7:ea:2b:0a:df:ad:eb:68: 49:0f:2e:71:67:40:39:91:8f:d2:bb:ac:c4:7c:a7:81:c1:58: f5:8c:b5:2b:7b:30:ec:81:5a:b8:18:3e:a8:d0:39:43:af:7e: 9f:83:b9:74:2a:50:f9:21:ee:73:88:37:8d:f2:c0:18:06:5a: b0:bc:ad:29:6d:6a:b8:9f:dc:de:5f:f6:29:ee:62:d7:b5:1a: 19:92:2e:26:c7:18:8a:ab:f5:e5:91:38:39:2f:03:cf:27:8e: eb:8a:96:58:2d:30:a4:71:5b:57:b0:ed:77:ff:d3:79:c4:d8: f6:c6:ac:db:5b:f3:b2:46:4a:ff:7e:ee:b7:25:e3:58:24:96: 1a:59:37:98:95:32:a4:fa:fb:99:ea:75:44:b7:63:8f:30:d8: 05:b2:86:67:26:58:5e:61:8d:3c:28:4f:b0:5f:df:0b:d2:cd: 99:67:ba:03:99:44:9f:da:8d:70:63:a9:66:3e:4d:4b:45:ca: 84:3d:d3:ba:be:dd:ba:f1:c0:fc:5c:43:d6:db:6d:60:9b:a8: 6d:c5:a6:85:67:fb:94:44:99:76:c2:e1:c9:1e:81:a0:d6:33: 18:49:bc:4d:2b:48:3f:4d:50:2f:1e:7e:2e:af:5f:fe:be:30: dc:dc:6d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvKzewoGqpqRE5tArrQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj OTg0NmUwHhcNMjUxMjI2MDcwMjA2WhcNMjUxMjI3MDcwMjA2WjAzMTEwLwYDVQQD Eyg1M2M4ZTc4MGE4ZWU1Zjg3OTQ4NzU2MTU0NjcyYjVjNzYyY2RlOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdUqc/CiyQVsVo1J9M3K1hk2TtYt otdlziST2wn2e86UpC1V+ANCdi93xn0Cjb1TxSgqgDMpuRcQiynJmWuycAT+3i5A cmrDfR8yPXLnNacrzZVXO0u8Ytq6leIEJWvYShjnJ9Kpw2M8yQat+xCISwxULjva CVqDcyeGcrt0WV/fchSO+X65PbxsUEzXQ/42O10V4K7jVUVKksdEsE0p/mKM6af0 UT2MGpILoQwFbYMSbhPUGAnyilVePrWSWhgjnCMrtOXnzyzIQh4zGg2alpD0OMxZ WpN3uASI6qaKv7WhSAjzrXsap7v903agq7vb2fnAw78fNyMO09TpVUZAhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPI54Co7l+HlIdWFUZytcdizemGMB8GA1UdIwQY MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0 LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmB8JMYz d67yx7fqKwrfretoSQ8ucWdAOZGP0rusxHyngcFY9Yy1K3sw7IFauBg+qNA5Q69+ n4O5dCpQ+SHuc4g3jfLAGAZasLytKW1quJ/c3l/2Ke5i17UaGZIuJscYiqv15ZE4 OS8DzyeO64qWWC0wpHFbV7Dtd//TecTY9sas21vzskZK/37utyXjWCSWGlk3mJUy pPr7mep1RLdjjzDYBbKGZyZYXmGNPChPsF/fC9LNmWe6A5lEn9qNcGOpZj5NS0XK hD3Tur7duvHA/FxD1tttYJuobcWmhWf7lESZdsLhyR6BoNYzGEm8TStIP01QLx5+ Lq9f/r4w3NxtNA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client