This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json) Hash identifier: eSLeyjnNw8Ly3rUVeJG7Rgt0nW+6pjuHgec0racUDEs= Subject key identifier: 96:C9:17:4D:E8:5C:DC:42:57:F4:98:AE:AF:0B:17:E7:14:85:26:DD Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019B077DDF760BE9C488E71CBCED9C46558A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft Manifest number: C1 Signing time: Wed 10 Dec 2025 09:00:48 +0000 Manifest this update: Wed 10 Dec 2025 09:00:48 +0000 Manifest next update: Thu 11 Dec 2025 09:00:48 +0000 Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: pMIZU9eGzN4thW3GlqBd1iYisJU2izA1AJgCJgn70R8=) 2: qgKZAArtpwZNGuwsFB65WWkz-lk.roa (hash: PLkGhcClNOI6nc6nrxBDCSyHpkoFTKMqFL9ulr2HzlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:df:76:0b:e9:c4:88:e7:1c:bc:ed:9c:46:55:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Dec 10 09:00:48 2025 GMT Not After : Dec 11 09:00:48 2025 GMT Subject: CN=96c9174de85cdc4257f498aeaf0b17e7148526dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:d2:d6:e7:46:11:ef:27:f5:60:a1:28:18: a0:2e:64:e7:2e:d4:7b:e3:82:8a:43:d8:9d:2c:69: 3a:44:84:c8:a9:ea:99:c7:35:fa:98:ea:9a:75:44: 9a:1e:6c:22:a8:4c:10:40:a0:4c:26:a1:c9:a7:95: 02:b2:3c:9c:e3:11:77:91:c8:14:ae:44:21:91:2b: 76:26:0e:65:4f:09:96:db:ce:c3:73:5d:65:c4:df: 64:59:22:f7:7e:93:35:85:a5:6f:89:72:1e:ae:09: 1c:23:f6:0d:ea:c7:31:81:9a:1a:d3:8b:5d:49:c2: 64:78:bf:46:91:4c:0c:93:0a:59:ee:93:19:7a:7d: 9c:4f:76:43:47:bb:a7:97:03:6a:82:30:3c:9b:c6: 24:36:aa:1f:a1:5c:de:56:1f:84:0c:24:b9:51:2f: 5d:12:0b:24:ab:12:db:91:fa:fe:23:b9:74:e9:dc: 08:45:b5:26:e0:95:43:00:e0:0d:bf:b7:7e:6c:b1: 3b:fd:ab:c0:3b:50:e9:d3:30:ef:c7:be:40:2b:c3: b9:94:ab:58:a8:5e:ea:0b:1b:19:1f:5e:17:76:e0: 2c:1d:d2:ac:ef:7e:6b:08:16:d1:3f:ae:82:e9:8d: 03:ce:79:c1:bb:9b:62:47:78:60:ce:bf:8b:d7:b6: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C9:17:4D:E8:5C:DC:42:57:F4:98:AE:AF:0B:17:E7:14:85:26:DD X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:c5:d3:83:e1:ab:fc:81:d5:49:bc:4d:08:6a:68:a7:53: de:ed:68:4a:79:02:f9:b8:b6:46:16:36:a0:dd:3e:8c:25:71: f3:59:1f:5b:7c:c5:26:91:2b:b4:57:85:d7:86:65:0e:a5:48: e6:ab:d0:60:71:6b:08:f5:9a:55:37:e6:96:c6:4e:a0:17:c8: 67:5d:a9:e5:f6:b8:97:b2:fa:e4:cf:3e:3f:bb:26:e8:e0:76: 46:09:2e:8a:34:b8:f8:59:b9:06:da:b8:97:7b:91:f7:22:34: 39:5a:3e:a3:64:06:82:94:99:0d:41:16:bc:f7:71:55:75:ad: 2e:f7:86:f6:bb:26:a1:5a:c7:1c:43:f4:11:d5:8b:ab:eb:b6: ab:98:5e:95:4b:74:91:73:d2:f0:b0:f6:c8:0e:1f:02:ee:79: a7:f2:3f:15:a5:11:de:7e:8b:1b:bc:02:e4:15:2c:64:17:34: ac:ca:22:f8:11:43:ba:db:e0:cd:e1:7a:5d:fe:73:3f:18:dd: 9d:11:b3:46:2d:06:a7:95:56:9d:8f:9d:aa:f6:af:bb:17:47: 2b:45:97:2f:90:43:ba:62:78:36:ec:f3:ff:c7:0f:01:b9:3f: 1c:d3:78:d9:d8:e5:01:ce:39:4d:be:c6:69:6b:c4:51:ee:94: b8:2e:2e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfd92C+nEiOccvO2cRlWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjUxMjEwMDkwMDQ4WhcNMjUxMjExMDkwMDQ4WjAzMTEwLwYDVQQD Eyg5NmM5MTc0ZGU4NWNkYzQyNTdmNDk4YWVhZjBiMTdlNzE0ODUyNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxTS1udGEe8n9WChKBigLmTnLtR7 44KKQ9idLGk6RITIqeqZxzX6mOqadUSaHmwiqEwQQKBMJqHJp5UCsjyc4xF3kcgU rkQhkSt2Jg5lTwmW287Dc11lxN9kWSL3fpM1haVviXIergkcI/YN6scxgZoa04td ScJkeL9GkUwMkwpZ7pMZen2cT3ZDR7unlwNqgjA8m8YkNqofoVzeVh+EDCS5US9d EgskqxLbkfr+I7l06dwIRbUm4JVDAOANv7d+bLE7/avAO1Dp0zDvx75AK8O5lKtY qF7qCxsZH14XduAsHdKs735rCBbRP66C6Y0DznnBu5tiR3hgzr+L17Yr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbJF03oXNxCV/SYrq8LF+cUhSbdMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPbF04Ph q/yB1Um8TQhqaKdT3u1oSnkC+bi2RhY2oN0+jCVx81kfW3zFJpErtFeF14ZlDqVI 5qvQYHFrCPWaVTfmlsZOoBfIZ12p5fa4l7L65M8+P7sm6OB2RgkuijS4+Fm5Btq4 l3uR9yI0OVo+o2QGgpSZDUEWvPdxVXWtLveG9rsmoVrHHEP0EdWLq+u2q5helUt0 kXPS8LD2yA4fAu55p/I/FaUR3n6LG7wC5BUsZBc0rMoi+BFDutvgzeF6Xf5zPxjd nRGzRi0Gp5VWnY+dqvavuxdHK0WXL5BDumJ4Nuzz/8cPAbk/HNN42djlAc45Tb7G aWvEUe6UuC4ung== -----END CERTIFICATE-----Generated at Wed Dec 10 12:03:53 2025 by rpki-client