This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json) Hash identifier: ZrvZ3yowidaNL1uPmO21n1iT2lTJnV2xVPM9gKcvKWs= Subject key identifier: 6F:85:22:7A:71:C1:0A:0C:72:45:C8:C7:1C:AC:B0:C3:2E:FC:96:41 Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce Certificate serial: 019B21AB77D6B935201F4A1D25D7C6BA45B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft Manifest number: 0E62 Signing time: Mon 15 Dec 2025 11:00:43 +0000 Manifest this update: Mon 15 Dec 2025 11:00:43 +0000 Manifest next update: Tue 16 Dec 2025 11:00:43 +0000 Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=) 2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: 4YO0xVUKOotct18b5b2WtBU4JApIg3rC73Wz9GE9VtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:77:d6:b9:35:20:1f:4a:1d:25:d7:c6:ba:45:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce Validity Not Before: Dec 15 11:00:43 2025 GMT Not After : Dec 16 11:00:43 2025 GMT Subject: CN=6f85227a71c10a0c7245c8c71cacb0c32efc9641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:19:dd:84:25:e4:45:91:2d:10:82:26:f9: d9:f8:6d:ba:8a:46:6d:c2:fd:fa:43:f8:ab:f7:db: d2:39:4a:bc:7f:93:6a:de:60:ef:ae:a0:94:83:b9: 88:d8:71:72:29:05:ee:df:50:d1:4d:bb:ac:0f:a4: f5:bb:74:23:85:7d:30:c2:38:96:a5:d8:2e:f6:04: 8a:f4:e7:6f:b9:aa:97:1b:8c:0d:56:0e:53:ae:00: fd:67:de:f4:de:21:e8:5a:5f:c8:bd:c6:9e:0f:1c: ce:eb:3a:8b:be:f0:e7:90:46:39:34:e0:c3:a7:f0: 71:cb:cd:6b:c5:d8:08:0f:c1:bd:31:2e:16:22:b9: 14:65:ce:02:77:40:0e:42:6e:ef:0b:f5:e8:36:bb: 09:e9:a9:32:59:94:21:db:1b:dc:cf:65:27:ae:11: 58:2a:71:26:98:23:c4:5c:23:fd:a2:91:d8:8f:8c: 7d:3c:e1:84:ba:ff:bb:f8:1d:9e:f0:e9:87:98:14: 22:14:d7:cb:b4:79:4a:f9:37:a8:2f:65:1e:18:d2: db:e5:e5:60:3a:bd:60:07:6b:79:cc:33:eb:5c:d6: b4:ab:99:04:7b:f0:b2:3c:ea:71:99:97:ca:16:e1: c9:73:a5:4b:ef:89:2f:d4:2e:4f:cd:c5:2b:e0:24: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:22:7A:71:C1:0A:0C:72:45:C8:C7:1C:AC:B0:C3:2E:FC:96:41 X509v3 Authority Key Identifier: keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ab:94:2c:e8:32:c5:ae:d5:d8:38:e5:9c:3f:3e:4b:8f:1e: 6a:ba:b9:0a:00:37:00:a7:d7:4c:c5:27:5b:d3:81:1d:da:dd: b4:2b:91:78:60:cb:3f:0a:40:18:b8:94:64:4f:31:ef:1f:18: 55:5c:72:12:ad:48:39:d6:da:70:98:53:c1:e0:b0:9c:14:01: 28:c8:dc:f5:c5:35:52:e8:38:7b:0d:81:ad:87:e0:13:cc:b4: 4a:56:04:75:52:db:85:fe:46:9c:6a:2e:6e:d4:81:81:40:58: c8:35:45:62:2c:80:5f:b9:0b:22:b7:58:18:db:79:1e:54:62: ab:58:e5:d0:e4:09:88:24:f0:b8:ee:ea:29:d3:7d:62:e7:44: d8:87:32:3d:7e:3e:e7:78:ed:e7:91:c9:46:d2:95:ff:cb:c9: 96:db:bd:4b:6a:99:c7:aa:0f:19:42:7e:7c:0c:c1:ed:b2:a6: b8:97:f4:39:88:00:62:a6:42:09:32:63:ab:60:b5:df:78:fe: 11:cd:7d:75:d1:6b:a3:88:1c:ef:64:3d:e2:8e:6f:ed:02:27: a5:aa:98:c9:32:db:2d:4b:a5:6c:63:66:95:ea:aa:64:ba:71: f1:75:94:64:45:5d:e9:99:80:7c:a4:0e:0c:b3:62:3f:04:31: 5a:6e:52:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq3fWuTUgH0odJdfGukW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDA3ZTgwNWE1MmM1MzRjYzZkMzM0NTA1NzVmZjAyMzll ODA3Y2UwHhcNMjUxMjE1MTEwMDQzWhcNMjUxMjE2MTEwMDQzWjAzMTEwLwYDVQQD Eyg2Zjg1MjI3YTcxYzEwYTBjNzI0NWM4YzcxY2FjYjBjMzJlZmM5NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ0Z3YQl5EWRLRCCJvnZ+G26ikZt wv36Q/ir99vSOUq8f5Nq3mDvrqCUg7mI2HFyKQXu31DRTbusD6T1u3QjhX0wwjiW pdgu9gSK9OdvuaqXG4wNVg5TrgD9Z9703iHoWl/IvcaeDxzO6zqLvvDnkEY5NODD p/Bxy81rxdgID8G9MS4WIrkUZc4Cd0AOQm7vC/XoNrsJ6akyWZQh2xvcz2UnrhFY KnEmmCPEXCP9opHYj4x9POGEuv+7+B2e8OmHmBQiFNfLtHlK+TeoL2UeGNLb5eVg Or1gB2t5zDPrXNa0q5kEe/CyPOpxmZfKFuHJc6VL74kv1C5PzcUr4CQycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+FInpxwQoMckXIxxyssMMu/JZBMB8GA1UdIwQY MBaAFBPQfoBaUsU0zG0zRQV1/wI56AfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTkt YWQ3ZjkyNjJhN2MyLzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTktYWQ3ZjkyNjJhN2My LzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACquULOgy xa7V2DjlnD8+S48earq5CgA3AKfXTMUnW9OBHdrdtCuReGDLPwpAGLiUZE8x7x8Y VVxyEq1IOdbacJhTweCwnBQBKMjc9cU1Uug4ew2BrYfgE8y0SlYEdVLbhf5GnGou btSBgUBYyDVFYiyAX7kLIrdYGNt5HlRiq1jl0OQJiCTwuO7qKdN9YudE2IcyPX4+ 53jt55HJRtKV/8vJltu9S2qZx6oPGUJ+fAzB7bKmuJf0OYgAYqZCCTJjq2C133j+ Ec19ddFro4gc72Q94o5v7QInpaqYyTLbLUulbGNmleqqZLpx8XWUZEVd6ZmAfKQO DLNiPwQxWm5Slg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:21 2025 by rpki-client