This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json) Hash identifier: q7Tup7q74Ss/GB8OI8BfgsbuY5woY/NOheNq0kgyNlo= Subject key identifier: E8:6A:E8:6E:AA:E0:90:99:BC:9D:8A:97:37:CD:10:F6:AB:29:D7:46 Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Certificate serial: 019B35A09008469ABB2BFB11FB3C133DA24F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft Manifest number: 0F89 Signing time: Fri 19 Dec 2025 08:01:13 +0000 Manifest this update: Fri 19 Dec 2025 08:01:13 +0000 Manifest next update: Sat 20 Dec 2025 08:01:13 +0000 Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: YTUZSrrPlSXn8xhdgiZMfDKujkyOJGWvh8Dcx5xrGJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:90:08:46:9a:bb:2b:fb:11:fb:3c:13:3d:a2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50 Validity Not Before: Dec 19 08:01:13 2025 GMT Not After : Dec 20 08:01:13 2025 GMT Subject: CN=e86ae86eaae09099bc9d8a9737cd10f6ab29d746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:3f:b6:53:45:91:d3:c9:c8:66:d8:e0:98: 9e:3e:03:fd:d0:c8:d4:35:26:d5:5b:57:bb:72:e8: 2e:8f:8c:1b:92:ef:f1:53:1a:be:1b:79:88:a4:ca: f1:e3:64:01:03:c4:cb:b8:85:25:e5:ee:2f:5f:4a: 7a:21:02:b4:32:1c:28:8d:23:d2:ec:3c:0a:0e:95: d8:49:cc:f7:c9:eb:5f:78:13:93:59:e3:d8:a0:e7: 5f:7b:72:4c:eb:fc:49:65:d1:90:1b:a9:a4:5f:10: 8b:33:8c:02:79:2d:a7:22:b3:98:b4:ae:9e:14:9c: 91:07:65:fa:ea:a0:63:8f:73:08:db:c5:b2:10:cd: 47:bc:6a:2b:81:a8:88:6f:2f:af:ea:25:4d:48:4c: 6f:3b:67:31:af:b9:93:38:0b:0c:4c:b5:bf:0f:6e: db:a0:56:dd:31:df:4d:99:8b:19:29:b4:7a:f4:3b: a6:14:a5:b1:21:bb:52:41:05:da:7e:22:a4:5a:f6: a6:c9:dd:61:3d:f5:8c:27:94:9d:ce:5b:80:d1:25: 4d:fe:fb:32:6c:66:82:d0:b1:99:0a:c2:86:a1:51: 5b:0c:65:75:cb:41:ec:85:3c:e5:6d:ae:e8:b5:a0: 52:69:4e:31:fb:74:ba:99:73:30:eb:5c:63:5b:0a: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:E8:6E:AA:E0:90:99:BC:9D:8A:97:37:CD:10:F6:AB:29:D7:46 X509v3 Authority Key Identifier: keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:82:c7:1d:07:79:8b:88:4a:33:34:b5:46:8f:08:f8:e6:93: 17:c4:7a:c3:46:27:64:85:4e:cb:19:68:ce:8a:97:59:31:d3: 57:81:45:aa:76:11:29:f1:5a:98:ab:97:c0:92:25:58:c0:32: a1:a5:04:11:14:b7:35:b4:f4:be:cb:8a:93:3c:81:81:a8:30: 88:de:03:e0:17:4b:60:68:6f:31:4a:47:0f:95:9a:66:f1:3e: a8:c8:66:e5:64:d5:fd:72:f2:17:8d:79:c5:19:8a:73:37:57: 41:57:07:d2:f3:dc:1d:ec:cb:7f:42:d1:56:5f:fd:f3:00:93: 4c:b7:b7:02:97:0d:24:b7:8e:4c:2b:a2:c7:80:4e:00:4a:f2: 1b:0f:e5:8d:af:a3:19:32:8c:bb:7e:4b:f9:47:7b:f4:b6:ec: da:e2:55:6e:af:19:ce:87:37:0c:3b:e7:a9:2c:5d:3a:04:3e: df:ca:44:7a:56:62:b5:86:7f:ac:72:e3:d1:3e:eb:d4:67:21: 47:9d:d3:4a:62:a1:14:61:4e:31:09:bb:d7:27:cb:3f:07:1c: 6f:62:6f:6d:15:03:3e:d1:04:ea:e5:4d:f8:31:32:6b:56:aa: d4:bf:d2:67:5e:78:1c:93:3a:84:30:4a:58:08:ee:23:fd:e1: c9:d0:12:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oJAIRpq7K/sR+zwTPaJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTdlODc4NDM2NmI0NzFhNmE0ZTBjODA4MGY4ZjEwZGFl NjZhNTAwHhcNMjUxMjE5MDgwMTEzWhcNMjUxMjIwMDgwMTEzWjAzMTEwLwYDVQQD EyhlODZhZTg2ZWFhZTA5MDk5YmM5ZDhhOTczN2NkMTBmNmFiMjlkNzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9M/tlNFkdPJyGbY4JiePgP90MjU NSbVW1e7cuguj4wbku/xUxq+G3mIpMrx42QBA8TLuIUl5e4vX0p6IQK0MhwojSPS 7DwKDpXYScz3yetfeBOTWePYoOdfe3JM6/xJZdGQG6mkXxCLM4wCeS2nIrOYtK6e FJyRB2X66qBjj3MI28WyEM1HvGorgaiIby+v6iVNSExvO2cxr7mTOAsMTLW/D27b oFbdMd9NmYsZKbR69DumFKWxIbtSQQXafiKkWvamyd1hPfWMJ5SdzluA0SVN/vsy bGaC0LGZCsKGoVFbDGV1y0HshTzlba7otaBSaU4x+3S6mXMw61xjWwq1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhq6G6q4JCZvJ2KlzfNEParKddGMB8GA1UdIwQY MBaAFPXn6HhDZrRxpqTgyAgPjxDa5mpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2Nzct MGQyNzA0NjJiN2Q3LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2NzctMGQyNzA0NjJiN2Q3 LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4LHHQd5 i4hKMzS1Ro8I+OaTF8R6w0YnZIVOyxlozoqXWTHTV4FFqnYRKfFamKuXwJIlWMAy oaUEERS3NbT0vsuKkzyBgagwiN4D4BdLYGhvMUpHD5WaZvE+qMhm5WTV/XLyF415 xRmKczdXQVcH0vPcHezLf0LRVl/98wCTTLe3ApcNJLeOTCuix4BOAEryGw/lja+j GTKMu35L+Ud79Lbs2uJVbq8Zzoc3DDvnqSxdOgQ+38pEelZitYZ/rHLj0T7r1Gch R53TSmKhFGFOMQm71yfLPwccb2JvbRUDPtEE6uVN+DEya1aq1L/SZ154HJM6hDBK WAjuI/3hydAShQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:40 2025 by rpki-client