This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json) Hash identifier: 6BUFPyyQ2apHczHdOkU3JFKdZJk50W8y7tRvbddptuM= Subject key identifier: 50:D6:34:23:CF:93:2D:AD:A2:2A:2E:AC:7E:6C:7E:77:71:6A:3A:3F Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Certificate serial: 019B390FC425DA249A7AC8478A5D876FB626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 00:01:33 +0000 Manifest this update: Sat 20 Dec 2025 00:01:33 +0000 Manifest next update: Sun 21 Dec 2025 00:01:33 +0000 Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=) 2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: 7TEvTCuACMTCrWhZOIqngNEJuGSmx6wFSg179nizYMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:c4:25:da:24:9a:7a:c8:47:8a:5d:87:6f:b6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Validity Not Before: Dec 20 00:01:33 2025 GMT Not After : Dec 21 00:01:33 2025 GMT Subject: CN=50d63423cf932dada22a2eac7e6c7e77716a3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:20:2f:9a:c3:b1:a4:c4:b6:b2:79:95:b4: 4c:7e:eb:9b:d8:a7:36:0d:dc:e0:e7:01:02:67:da: d8:e2:41:0f:80:01:62:b1:09:ef:98:b1:b3:bd:f0: 9e:e6:98:31:f2:9a:52:f3:f1:c6:64:ee:b2:ce:5c: cd:05:d5:f2:c4:f1:2d:6a:21:41:50:dc:3a:dd:a0: 3b:63:63:4e:6d:3b:c3:bd:fb:8c:6b:85:83:f0:c2: 1a:66:7a:e7:63:98:0d:cd:24:ff:44:28:c1:fa:df: 87:0c:78:fa:b7:87:f7:66:6b:02:7a:65:b4:f0:f8: b4:34:bb:7b:4c:ac:4c:32:94:a9:27:47:d1:31:3d: 99:e9:bc:8f:d0:cd:03:0e:d0:f3:dc:0d:49:73:ee: 36:60:9f:04:b7:37:33:90:d7:3e:1a:f3:bf:bd:5a: 44:43:09:9c:43:50:f0:a2:13:a5:ea:51:25:67:1f: 4f:e9:dc:79:26:82:9e:f2:01:b1:d2:32:41:ba:51: b5:eb:35:a2:b9:86:3b:cd:c3:83:4e:16:01:3f:ac: a6:59:23:4f:00:9c:06:f8:50:9b:fe:84:e8:7d:01: 4c:7e:7e:81:84:a5:5b:3b:85:b0:bd:c0:4f:f6:9e: 54:cd:cc:3d:b4:5e:a4:68:50:96:36:48:16:72:b2: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:34:23:CF:93:2D:AD:A2:2A:2E:AC:7E:6C:7E:77:71:6A:3A:3F X509v3 Authority Key Identifier: keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:19:2e:17:b3:11:d4:b4:1f:7b:dd:98:5e:86:6e:6c:fb: 6d:6b:77:41:0e:6b:ca:b8:b5:93:88:c1:6f:71:b3:5b:f5:da: 83:78:97:fa:3e:07:97:89:87:eb:7d:a9:94:13:77:f7:80:a4: b3:bf:ff:c8:1d:a8:51:9e:e5:37:85:8e:63:7e:10:30:0e:3b: 4b:c3:2d:91:78:c1:89:c7:c9:27:ef:f3:07:ad:c2:16:df:1a: fc:a2:1e:3d:86:2e:08:15:4e:60:64:d8:a9:3d:6e:df:89:ab: 59:be:4b:66:df:be:11:f1:af:8f:fb:77:25:73:13:19:72:81: c2:af:2f:88:ac:fb:9c:38:9f:8e:55:94:0d:90:c7:54:95:f4: 8e:e0:31:62:b1:8e:dd:3c:cf:51:a9:76:ff:f2:9b:26:25:6f: 06:2b:cc:de:27:9a:7f:ea:38:74:ee:d1:64:67:43:de:b2:81: 80:5e:47:29:a0:05:55:b1:28:13:a2:a9:2c:40:d6:3f:65:fa: cd:fa:e5:93:c2:f1:d3:b0:5b:7c:cd:8e:2a:41:71:08:b2:bb: b7:ad:c1:6d:6f:ce:91:d2:81:07:e5:77:56:37:9b:5b:95:18: 81:97:a3:f1:b2:cd:4f:f3:5f:21:8a:3e:7f:0d:63:1d:71:e0: 91:84:c3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D8Ql2iSaeshHil2Hb7YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh ZTY1ZjcwHhcNMjUxMjIwMDAwMTMzWhcNMjUxMjIxMDAwMTMzWjAzMTEwLwYDVQQD Eyg1MGQ2MzQyM2NmOTMyZGFkYTIyYTJlYWM3ZTZjN2U3NzcxNmEzYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5IgL5rDsaTEtrJ5lbRMfuub2Kc2 Ddzg5wECZ9rY4kEPgAFisQnvmLGzvfCe5pgx8ppS8/HGZO6yzlzNBdXyxPEtaiFB UNw63aA7Y2NObTvDvfuMa4WD8MIaZnrnY5gNzST/RCjB+t+HDHj6t4f3ZmsCemW0 8Pi0NLt7TKxMMpSpJ0fRMT2Z6byP0M0DDtDz3A1Jc+42YJ8EtzczkNc+GvO/vVpE QwmcQ1DwohOl6lElZx9P6dx5JoKe8gGx0jJBulG16zWiuYY7zcODThYBP6ymWSNP AJwG+FCb/oTofQFMfn6BhKVbO4WwvcBP9p5Uzcw9tF6kaFCWNkgWcrLMhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDWNCPPky2toiourH5sfndxajo/MB8GA1UdIwQY MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt ZmQ5Yzc0OTA2YmFhLzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInsZLhez EdS0H3vdmF6Gbmz7bWt3QQ5ryri1k4jBb3GzW/Xag3iX+j4Hl4mH632plBN394Ck s7//yB2oUZ7lN4WOY34QMA47S8MtkXjBicfJJ+/zB63CFt8a/KIePYYuCBVOYGTY qT1u34mrWb5LZt++EfGvj/t3JXMTGXKBwq8viKz7nDifjlWUDZDHVJX0juAxYrGO 3TzPUal2//KbJiVvBivM3ieaf+o4dO7RZGdD3rKBgF5HKaAFVbEoE6KpLEDWP2X6 zfrlk8Lx07BbfM2OKkFxCLK7t63BbW/OkdKBB+V3VjebW5UYgZej8bLNT/NfIYo+ fw1jHXHgkYTD3w== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:12 2025 by rpki-client