This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json) Hash identifier: 9BZJL7sihs/h7Nbf57I9Q1R0tkCkt2XPNB5DcZLZoVY= Subject key identifier: AE:C4:50:4A:C1:F3:B1:5F:B8:EA:FD:CD:7E:58:5F:14:09:A9:FE:EA Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c Certificate serial: 019B5A1AEE95AC52671EC1FABA70D2FF6D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft Manifest number: 0B16 Signing time: Fri 26 Dec 2025 10:01:12 +0000 Manifest this update: Fri 26 Dec 2025 10:01:12 +0000 Manifest next update: Sat 27 Dec 2025 10:01:12 +0000 Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: 9esrSSuglLcVr3U83gGGIk9V52mhaYgcXA5LdKOnQhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ee:95:ac:52:67:1e:c1:fa:ba:70:d2:ff:6d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c Validity Not Before: Dec 26 10:01:12 2025 GMT Not After : Dec 27 10:01:12 2025 GMT Subject: CN=aec4504ac1f3b15fb8eafdcd7e585f1409a9feea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:0a:ba:53:d9:32:1d:b7:b2:75:60:d8:34: e3:2e:ed:4a:38:7e:57:5d:de:25:ad:35:ed:ee:50: 4c:a6:29:94:4a:e6:0a:4a:57:34:2e:e7:71:5e:79: 5e:8a:23:4f:68:0f:0c:17:02:84:bf:f5:64:2d:1c: 1a:35:5d:ad:b4:4c:dc:84:68:30:1b:86:52:12:f5: 3b:dd:14:42:b3:30:bb:54:0a:fc:fc:05:c9:c5:92: 3f:dc:fc:44:2b:59:72:9f:5a:02:b2:de:d8:ee:0b: f7:92:26:74:16:b0:16:6d:8a:97:b4:eb:36:7a:05: d8:63:c5:60:91:ba:75:2c:e3:6d:56:5a:74:32:f5: 6f:cc:15:c5:6d:c0:1f:49:4c:ce:d0:87:5c:1f:0c: 40:b0:96:d2:45:6d:2c:67:34:42:42:2f:6f:02:cf: 42:c5:a0:f1:02:91:99:9d:93:ce:86:0b:a9:c4:12: bd:30:0d:ac:9f:d7:f3:11:dd:8c:67:2d:3d:8c:f7: 54:7a:39:2d:40:c5:b3:2b:e1:a0:1a:38:36:88:cb: b0:2c:6d:ac:67:e4:78:a2:71:2d:a5:53:24:4d:67: 23:9c:23:90:75:63:c7:b2:85:ee:80:fe:b0:62:cf: 87:7f:45:ba:cd:ff:92:e5:d0:7b:4a:62:82:f1:1a: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:50:4A:C1:F3:B1:5F:B8:EA:FD:CD:7E:58:5F:14:09:A9:FE:EA X509v3 Authority Key Identifier: keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:68:54:a0:e0:87:ce:a5:ed:6c:c2:75:04:10:40:6b:3a:e3: fa:b8:12:79:e3:d3:5f:fa:ad:94:07:c9:7c:e8:3d:7a:a7:83: 33:a7:99:4a:97:32:39:ea:ac:8a:bf:88:51:17:4f:50:46:02: 34:c5:51:ad:0a:d4:5c:f3:41:18:eb:82:a9:86:04:59:9f:a0: be:39:99:59:90:06:27:e2:f1:5e:10:9b:6c:b8:1f:ec:0c:8e: 7b:23:99:5a:3a:45:62:9b:71:d8:e1:9d:92:7f:ba:3c:ac:0f: 4f:98:28:b9:03:21:07:d5:00:2a:60:eb:1a:b2:64:75:76:06: f6:09:8d:a7:fb:46:3a:4b:a2:ca:73:d5:dd:f8:1f:f7:81:64: 9c:a3:18:ab:7e:88:96:07:4b:e4:f2:e9:ed:2d:83:94:41:31: c9:76:83:9a:5f:1a:f9:ad:05:07:41:02:e1:ab:76:57:2d:44: 5e:f4:9a:e6:fa:55:62:f6:46:7d:9b:d2:64:f4:a9:12:82:b9: e3:6d:1e:72:5f:3a:3f:cb:93:a6:0a:77:84:4b:10:30:d7:bf: 40:74:40:61:54:bb:3a:69:de:cc:34:1d:13:61:1e:3b:62:c7: 2b:da:82:3b:25:30:ff:6a:36:6b:fa:c9:8c:e0:73:41:e8:4a: 04:a3:01:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGu6VrFJnHsH6unDS/21eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWI3ZDBkYzhiY2E0ZmY0ZTc1MzZiZDM4MDM0MDI0MjJl OGUyNmMwHhcNMjUxMjI2MTAwMTEyWhcNMjUxMjI3MTAwMTEyWjAzMTEwLwYDVQQD EyhhZWM0NTA0YWMxZjNiMTVmYjhlYWZkY2Q3ZTU4NWYxNDA5YTlmZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCoKulPZMh23snVg2DTjLu1KOH5X Xd4lrTXt7lBMpimUSuYKSlc0LudxXnleiiNPaA8MFwKEv/VkLRwaNV2ttEzchGgw G4ZSEvU73RRCszC7VAr8/AXJxZI/3PxEK1lyn1oCst7Y7gv3kiZ0FrAWbYqXtOs2 egXYY8Vgkbp1LONtVlp0MvVvzBXFbcAfSUzO0IdcHwxAsJbSRW0sZzRCQi9vAs9C xaDxApGZnZPOhgupxBK9MA2sn9fzEd2MZy09jPdUejktQMWzK+GgGjg2iMuwLG2s Z+R4onEtpVMkTWcjnCOQdWPHsoXugP6wYs+Hf0W6zf+S5dB7SmKC8Rr/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7EUErB87FfuOr9zX5YXxQJqf7qMB8GA1UdIwQY MBaAFBIbfQ3IvKT/TnU2vTgDQCQi6OJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYt OGRiYzc0NjZhZmUzLzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYtOGRiYzc0NjZhZmUz LzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWhUoOCH zqXtbMJ1BBBAazrj+rgSeePTX/qtlAfJfOg9eqeDM6eZSpcyOeqsir+IURdPUEYC NMVRrQrUXPNBGOuCqYYEWZ+gvjmZWZAGJ+LxXhCbbLgf7AyOeyOZWjpFYptx2OGd kn+6PKwPT5gouQMhB9UAKmDrGrJkdXYG9gmNp/tGOkuiynPV3fgf94FknKMYq36I lgdL5PLp7S2DlEExyXaDml8a+a0FB0EC4at2Vy1EXvSa5vpVYvZGfZvSZPSpEoK5 420ecl86P8uTpgp3hEsQMNe/QHRAYVS7OmnezDQdE2EeO2LHK9qCOyUw/2o2a/rJ jOBzQehKBKMBZw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:22 2025 by rpki-client