This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json) Hash identifier: ZhWkpYulIdieh//Cr0Ji3JlrgQ7l0abY9lcASBPf4ME= Subject key identifier: 0A:5D:DA:7C:83:BA:FE:9F:09:59:BC:63:B9:B9:66:0F:11:E9:B7:59 Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Certificate serial: 019B59AC83384A8D8F1024D3C92BC2A5A3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft Manifest number: 1728 Signing time: Fri 26 Dec 2025 08:00:36 +0000 Manifest this update: Fri 26 Dec 2025 08:00:36 +0000 Manifest next update: Sat 27 Dec 2025 08:00:36 +0000 Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=) 2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: wdjCEXcRokFEczfGcu0QUno3LBuTP6LWreZbb9LEnms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:83:38:4a:8d:8f:10:24:d3:c9:2b:c2:a5:a3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Validity Not Before: Dec 26 08:00:36 2025 GMT Not After : Dec 27 08:00:36 2025 GMT Subject: CN=0a5dda7c83bafe9f0959bc63b9b9660f11e9b759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:31:0f:03:3c:1e:44:ca:e4:1d:c1:22:47: d8:5f:a6:2d:f0:57:22:fd:8f:69:06:1f:80:53:73: 94:3a:6b:11:05:ea:3f:68:3c:07:c6:ab:11:72:dd: 25:bd:f1:d7:cf:d7:0d:65:af:21:57:e4:54:b8:57: a9:56:dd:54:01:d1:6d:d8:5e:87:64:62:fc:dd:1b: b5:cc:2a:9b:44:78:fa:35:62:4a:51:5e:0b:44:09: fa:7b:91:59:59:cc:93:5f:f6:9a:81:42:14:48:10: c1:97:8f:1d:b6:d6:dd:10:d9:b6:e0:d8:0a:0a:4a: 69:7e:f5:4c:41:f7:c8:a1:83:51:78:13:c1:b9:0e: 9e:bc:ae:86:17:64:9d:85:3f:96:a3:e6:94:c0:07: f7:fa:66:00:e2:02:4b:48:88:3e:6d:85:e4:d6:b7: 87:7d:ec:73:0f:84:97:01:e9:db:06:a5:a1:d5:5b: 33:94:59:e5:77:5c:20:f6:3d:92:f9:46:2d:c7:90: 62:ab:59:ce:4f:1e:09:35:2a:cc:5a:0d:00:da:0c: 26:50:92:72:c0:a2:74:7d:16:1a:9f:30:09:8f:7b: 40:a4:6a:45:ae:60:3d:fc:f8:7d:39:9b:8f:90:ef: cc:d5:d8:94:98:15:8b:c2:9b:82:f5:76:c4:38:d6: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5D:DA:7C:83:BA:FE:9F:09:59:BC:63:B9:B9:66:0F:11:E9:B7:59 X509v3 Authority Key Identifier: keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:eb:c0:f3:aa:bd:31:27:66:39:14:9f:07:7e:d6:8a:3a:1e: fc:d3:d6:3e:e8:63:3d:9d:89:12:ab:3a:5b:49:65:e7:a4:a8: 06:6e:47:d4:32:d6:2b:5b:ce:e7:f6:1d:80:5c:e4:87:51:b4: e2:4d:b7:07:b0:58:0b:cd:57:a8:d4:51:a5:15:3e:4a:af:08: b7:f0:8d:00:42:2e:dd:de:2e:f0:dd:91:fb:23:b4:e9:bf:a6: b8:6b:9d:b5:9c:9b:b8:71:7a:16:4d:da:eb:e0:60:28:41:4e: 8f:01:39:90:1b:c9:64:87:17:dd:22:89:8b:7e:c8:2f:07:f5: 6b:e5:eb:cd:eb:d4:57:35:94:de:93:e8:2e:e1:c8:5a:59:f7: 0f:60:47:2f:95:64:4a:c4:01:39:bb:41:4c:cf:3f:87:44:65: ae:a7:21:96:44:a4:4b:ce:ec:19:e1:26:cc:d8:0e:37:77:fc: 0b:59:5a:d9:58:67:ab:b3:ff:b2:ad:84:f6:06:aa:cf:2c:2d: 19:72:0e:26:3a:34:20:58:54:7b:64:42:c7:2c:45:7c:e1:8f: 91:db:39:d6:52:3b:b0:cd:47:4e:9b:2b:5d:d8:0c:0f:33:cc: c9:bc:25:aa:f4:ed:9e:15:22:42:14:c4:10:a6:09:d2:a8:35: c7:da:0c:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIM4So2PECTTySvCpaPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj MTVhNzQwHhcNMjUxMjI2MDgwMDM2WhcNMjUxMjI3MDgwMDM2WjAzMTEwLwYDVQQD EygwYTVkZGE3YzgzYmFmZTlmMDk1OWJjNjNiOWI5NjYwZjExZTliNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu04xDwM8HkTK5B3BIkfYX6Yt8Fci /Y9pBh+AU3OUOmsRBeo/aDwHxqsRct0lvfHXz9cNZa8hV+RUuFepVt1UAdFt2F6H ZGL83Ru1zCqbRHj6NWJKUV4LRAn6e5FZWcyTX/aagUIUSBDBl48dttbdENm24NgK CkppfvVMQffIoYNReBPBuQ6evK6GF2SdhT+Wo+aUwAf3+mYA4gJLSIg+bYXk1reH fexzD4SXAenbBqWh1VszlFnld1wg9j2S+UYtx5Biq1nOTx4JNSrMWg0A2gwmUJJy wKJ0fRYanzAJj3tApGpFrmA9/Ph9OZuPkO/M1diUmBWLwpuC9XbEONZ6bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApd2nyDuv6fCVm8Y7m5Zg8R6bdZMB8GA1UdIwQY MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt YjI1MTM3N2FkZDg2LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2 LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQevA86q9 MSdmORSfB37Wijoe/NPWPuhjPZ2JEqs6W0ll56SoBm5H1DLWK1vO5/YdgFzkh1G0 4k23B7BYC81XqNRRpRU+Sq8It/CNAEIu3d4u8N2R+yO06b+muGudtZybuHF6Fk3a 6+BgKEFOjwE5kBvJZIcX3SKJi37ILwf1a+XrzevUVzWU3pPoLuHIWln3D2BHL5Vk SsQBObtBTM8/h0RlrqchlkSkS87sGeEmzNgON3f8C1la2Vhnq7P/sq2E9gaqzywt GXIOJjo0IFhUe2RCxyxFfOGPkds51lI7sM1HTpsrXdgMDzPMybwlqvTtnhUiQhTE EKYJ0qg1x9oMsg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client