This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json) Hash identifier: j3cPILNrA+nLXYwWBQk1VbTuW636+qA/16pOVvoRKFQ= Subject key identifier: 00:1B:5B:B2:6F:B9:04:E9:98:50:4C:D1:D8:A2:D0:52:4F:C8:1F:28 Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Certificate serial: 019B397D178CD37B874B1A3332333F41F098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft Manifest number: 0F8B Signing time: Sat 20 Dec 2025 02:00:57 +0000 Manifest this update: Sat 20 Dec 2025 02:00:57 +0000 Manifest next update: Sun 21 Dec 2025 02:00:57 +0000 Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: 5IO4RWG7rF7rsbiKLS9yyvYYbI8XMBVIFPPRrxzFCdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:17:8c:d3:7b:87:4b:1a:33:32:33:3f:41:f0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Validity Not Before: Dec 20 02:00:57 2025 GMT Not After : Dec 21 02:00:57 2025 GMT Subject: CN=001b5bb26fb904e998504cd1d8a2d0524fc81f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:1b:f8:09:72:75:3e:de:67:fd:43:cd:31: cb:2d:ea:26:17:63:5c:df:84:39:04:5f:c7:eb:09: 6e:a0:33:7a:6c:22:96:61:6c:ec:e2:48:a1:3d:4b: a9:9b:4a:fe:d6:42:fd:b7:ca:ca:5e:12:8b:a3:40: 77:c4:ff:df:10:ae:b7:ac:6c:df:29:aa:5c:10:1f: 8b:df:e2:31:ec:0e:31:21:11:f9:54:d6:ac:30:19: ac:09:26:1a:dd:a5:5b:83:3c:0b:5f:33:e8:19:8c: 56:4b:18:37:de:27:92:40:40:1a:90:b0:58:4b:fc: 3a:a1:da:f6:60:65:24:fe:19:93:62:8c:6e:11:5d: 78:d8:54:92:3e:17:5a:bc:21:68:70:0b:8c:65:18: e5:6f:e1:92:77:ad:20:5a:5e:c4:5e:9f:8e:33:ec: a5:0f:97:00:6a:a9:60:ef:d1:97:d8:01:75:cc:62: d7:a0:59:15:49:37:30:5e:b7:cb:c9:57:c5:fb:bd: 20:0a:75:c1:be:8d:c4:8b:99:79:10:be:01:3e:76: bb:04:09:2a:a9:a4:f8:a6:a9:00:ce:cd:db:c3:7b: c1:51:c2:35:b5:a5:76:59:41:d9:b1:26:8d:57:15: 5c:52:43:1c:2a:ac:bb:77:74:fa:aa:4a:8e:bb:e6: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:5B:B2:6F:B9:04:E9:98:50:4C:D1:D8:A2:D0:52:4F:C8:1F:28 X509v3 Authority Key Identifier: keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e5:53:72:c6:ea:e4:51:bb:20:b1:a8:28:12:62:fb:63:3d: aa:44:0d:01:85:44:ee:e8:87:a7:23:af:e7:b9:cd:ad:87:50: 61:d3:f8:7d:98:5b:41:8f:18:ec:f7:99:0c:da:5d:4e:c4:13: 8c:1b:10:bb:55:10:a8:17:a4:b2:68:c6:02:9d:b0:fc:c7:bf: 7d:5c:91:bc:1f:dd:d4:32:7f:d2:1f:37:b8:1b:a7:f1:50:9c: 5d:b6:b9:00:da:7b:40:e7:e0:6b:14:27:83:4d:de:48:7e:46: 4f:e5:62:13:8d:8e:5f:be:93:78:c4:94:24:a4:10:09:ee:05: fe:b1:15:d0:15:b0:39:df:1a:16:a8:c4:72:01:69:cf:75:31: f0:12:0a:80:d3:7e:f1:a4:3e:99:3d:37:ef:85:e1:33:7e:56: d4:c2:4b:b4:78:72:87:4d:1f:99:7c:89:35:5a:aa:e6:22:94: a1:20:7b:62:69:12:b4:2b:f4:aa:23:bc:53:8b:82:c4:68:e7: 4e:62:e1:3c:1d:e2:7b:94:a7:79:3e:87:03:c9:ec:12:d1:16: 44:60:b6:3a:88:9d:2e:d0:7c:3e:d1:8f:da:c1:43:d9:24:5c: ad:60:76:db:8d:14:3f:4c:20:57:84:f1:78:bf:68:c6:d0:ef: b0:d3:50:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fReM03uHSxozMjM/QfCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTdlODc4NDM2NmI0NzFhNmE0ZTBjODA4MGY4ZjEwZGFl NjZhNTAwHhcNMjUxMjIwMDIwMDU3WhcNMjUxMjIxMDIwMDU3WjAzMTEwLwYDVQQD EygwMDFiNWJiMjZmYjkwNGU5OTg1MDRjZDFkOGEyZDA1MjRmYzgxZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Ab+AlydT7eZ/1DzTHLLeomF2Nc 34Q5BF/H6wluoDN6bCKWYWzs4kihPUupm0r+1kL9t8rKXhKLo0B3xP/fEK63rGzf KapcEB+L3+Ix7A4xIRH5VNasMBmsCSYa3aVbgzwLXzPoGYxWSxg33ieSQEAakLBY S/w6odr2YGUk/hmTYoxuEV142FSSPhdavCFocAuMZRjlb+GSd60gWl7EXp+OM+yl D5cAaqlg79GX2AF1zGLXoFkVSTcwXrfLyVfF+70gCnXBvo3Ei5l5EL4BPna7BAkq qaT4pqkAzs3bw3vBUcI1taV2WUHZsSaNVxVcUkMcKqy7d3T6qkqOu+bizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAbW7JvuQTpmFBM0dii0FJPyB8oMB8GA1UdIwQY MBaAFPXn6HhDZrRxpqTgyAgPjxDa5mpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2Nzct MGQyNzA0NjJiN2Q3LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2NzctMGQyNzA0NjJiN2Q3 LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+VTcsbq 5FG7ILGoKBJi+2M9qkQNAYVE7uiHpyOv57nNrYdQYdP4fZhbQY8Y7PeZDNpdTsQT jBsQu1UQqBeksmjGAp2w/Me/fVyRvB/d1DJ/0h83uBun8VCcXba5ANp7QOfgaxQn g03eSH5GT+ViE42OX76TeMSUJKQQCe4F/rEV0BWwOd8aFqjEcgFpz3Ux8BIKgNN+ 8aQ+mT0374XhM35W1MJLtHhyh00fmXyJNVqq5iKUoSB7YmkStCv0qiO8U4uCxGjn TmLhPB3ie5SneT6HA8nsEtEWRGC2OoidLtB8PtGP2sFD2SRcrWB2240UP0wgV4Tx eL9oxtDvsNNQzw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:22 2025 by rpki-client