This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft File: 9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json) Hash identifier: YjYt7LQ3pBVAXoI+0YEtwr7aIpu3/1fATodjxs2XV6I= Subject key identifier: E3:03:8C:E8:CD:8B:F0:2D:68:91:6E:9B:5B:C7:7C:86:00:BE:2A:B4 Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE Certificate issuer: /CN=f6fc2879500e1eb80855705cf8435e03635137de Certificate serial: 019B3C7EC79885951761C1E598F856AC3844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft Manifest number: 07DA Signing time: Sat 20 Dec 2025 16:01:40 +0000 Manifest this update: Sat 20 Dec 2025 16:01:40 +0000 Manifest next update: Sun 21 Dec 2025 16:01:40 +0000 Files and hashes: 1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: 7YibFvdb4UE9p5xLZMca2ZA90gkckNXxl13iymvaTJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c7:98:85:95:17:61:c1:e5:98:f8:56:ac:38:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de Validity Not Before: Dec 20 16:01:40 2025 GMT Not After : Dec 21 16:01:40 2025 GMT Subject: CN=e3038ce8cd8bf02d68916e9b5bc77c8600be2ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:50:a9:64:d1:86:51:37:33:4b:d4:5f:2e: f9:e7:9a:d7:41:96:38:b7:f4:4f:be:5d:a8:be:19: ae:9c:88:37:6e:55:21:5d:23:15:fd:68:a1:c7:9d: 4b:cd:d9:84:80:00:95:92:4b:e1:4f:04:83:0b:d5: 4a:ca:c9:45:9e:72:c7:88:59:44:11:a5:5a:34:a6: 2f:7d:15:fa:8e:7c:9d:36:4b:65:92:23:f0:ef:f6: 9a:36:67:91:56:6f:05:28:bd:8e:22:89:b5:7a:ca: a7:38:ea:61:a1:46:7c:2e:ec:ce:32:ce:56:a9:3f: 2a:cf:be:8f:2b:33:5f:22:15:ac:4a:63:49:8e:13: 66:ff:95:c4:77:9a:b2:29:70:db:90:af:5c:5e:c3: f6:7c:d5:d4:45:be:7f:39:4b:5c:3f:a4:62:a9:99: fe:c5:b3:87:7e:7d:17:fa:03:ad:be:1f:33:2b:f7: 69:f9:bd:51:7a:02:b9:70:22:62:84:fe:0c:6a:9e: dd:44:f4:86:d0:a4:03:8a:80:0d:83:48:b0:1c:b5: 43:43:3e:d4:ac:65:4a:02:23:23:16:ae:e3:43:65: c0:a6:d0:4a:c0:af:d1:da:f1:9c:e8:06:13:69:ab: 8d:69:bc:bf:b5:5f:a0:11:1b:fe:f0:65:59:bf:a3: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:03:8C:E8:CD:8B:F0:2D:68:91:6E:9B:5B:C7:7C:86:00:BE:2A:B4 X509v3 Authority Key Identifier: keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3b:c1:32:32:52:4f:42:24:80:4b:04:84:1f:4e:df:16:a3: ad:c6:ca:df:02:7a:10:9c:94:85:20:8d:e5:48:78:0f:5b:2e: 5c:bc:21:71:43:d6:61:a7:fb:ad:12:9d:b7:1b:b4:69:d9:b4: 12:c4:01:68:c5:e0:9d:37:46:22:30:cb:10:d3:45:da:3b:bf: c3:ed:14:22:ea:d3:9a:6a:ac:7a:6a:97:ef:4d:d7:44:3b:b2: 21:f7:47:6c:d7:d5:06:8c:fd:0f:25:f0:63:9e:61:3e:fe:a5: 98:62:1c:d1:fa:3c:3c:8a:e3:85:3a:10:f6:6a:d4:84:a7:09: 4e:82:fd:25:65:b9:e8:fb:01:91:99:79:03:51:f3:96:71:0e: 91:45:f6:16:96:5a:f4:3b:32:a7:65:55:72:49:d0:66:1a:e2: 27:96:74:6d:69:1a:7b:8a:b6:49:1b:73:66:50:94:42:40:d4: 26:e1:6c:bb:1e:44:bb:c4:d5:9b:44:44:1a:48:f6:10:50:4d: 1a:d6:52:4d:99:57:15:d8:61:12:22:cf:c3:0a:1e:13:81:4a: a5:38:6d:bc:ba:a1:a1:88:dc:d8:d4:f9:90:98:77:bc:50:b2: 29:b4:4c:10:72:fa:5b:0b:10:6f:4b:3a:0e:f6:c4:48:e7:84: c7:61:b8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fseYhZUXYcHlmPhWrDhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZmMyODc5NTAwZTFlYjgwODU1NzA1Y2Y4NDM1ZTAzNjM1 MTM3ZGUwHhcNMjUxMjIwMTYwMTQwWhcNMjUxMjIxMTYwMTQwWjAzMTEwLwYDVQQD EyhlMzAzOGNlOGNkOGJmMDJkNjg5MTZlOWI1YmM3N2M4NjAwYmUyYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPdQqWTRhlE3M0vUXy7555rXQZY4 t/RPvl2ovhmunIg3blUhXSMV/Wihx51LzdmEgACVkkvhTwSDC9VKyslFnnLHiFlE EaVaNKYvfRX6jnydNktlkiPw7/aaNmeRVm8FKL2OIom1esqnOOphoUZ8LuzOMs5W qT8qz76PKzNfIhWsSmNJjhNm/5XEd5qyKXDbkK9cXsP2fNXURb5/OUtcP6RiqZn+ xbOHfn0X+gOtvh8zK/dp+b1RegK5cCJihP4Map7dRPSG0KQDioANg0iwHLVDQz7U rGVKAiMjFq7jQ2XAptBKwK/R2vGc6AYTaauNaby/tV+gERv+8GVZv6OLHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMDjOjNi/AtaJFum1vHfIYAviq0MB8GA1UdIwQY MBaAFPb8KHlQDh64CFVwXPhDXgNjUTfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMt NzQ0NzJlMzk2ZTg1LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMtNzQ0NzJlMzk2ZTg1 LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjvBMjJS T0IkgEsEhB9O3xajrcbK3wJ6EJyUhSCN5Uh4D1suXLwhcUPWYaf7rRKdtxu0adm0 EsQBaMXgnTdGIjDLENNF2ju/w+0UIurTmmqsemqX703XRDuyIfdHbNfVBoz9DyXw Y55hPv6lmGIc0fo8PIrjhToQ9mrUhKcJToL9JWW56PsBkZl5A1HzlnEOkUX2FpZa 9Dsyp2VVcknQZhriJ5Z0bWkae4q2SRtzZlCUQkDUJuFsux5Eu8TVm0REGkj2EFBN GtZSTZlXFdhhEiLPwwoeE4FKpThtvLqhoYjc2NT5kJh3vFCyKbRMEHL6WwsQb0s6 DvbESOeEx2G4AQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:52:55 2025 by rpki-client