This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json) Hash identifier: KrOKLDuhBhmkEeLssB7Uwr1R7eQHWaB9nIktL/02lqs= Subject key identifier: CA:EB:ED:9C:8B:EE:D5:77:1E:BF:C6:06:93:ED:E3:67:EB:E3:68:BF Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Certificate serial: 019B2D0B7A4D8DB22F2D4F635B9E858FB7D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft Manifest number: 08B3 Signing time: Wed 17 Dec 2025 16:01:25 +0000 Manifest this update: Wed 17 Dec 2025 16:01:25 +0000 Manifest next update: Thu 18 Dec 2025 16:01:25 +0000 Files and hashes: 1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=) 2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: Pg9YiLV1kE9UHfccNqhx6sYb596xIT3U3jjwiL/N3g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:7a:4d:8d:b2:2f:2d:4f:63:5b:9e:85:8f:b7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Validity Not Before: Dec 17 16:01:25 2025 GMT Not After : Dec 18 16:01:25 2025 GMT Subject: CN=caebed9c8beed5771ebfc60693ede367ebe368bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:15:10:85:e9:27:70:d5:11:ed:51:2b:33: 55:04:4b:56:3c:8d:3c:d4:2a:9d:ac:69:56:62:d6: 1d:8c:41:f7:0d:27:3e:4c:df:b2:fc:cb:eb:bd:e3: 96:6a:3a:24:23:3a:72:57:42:63:f8:38:cc:69:b9: d2:ff:56:89:0c:f7:b2:6d:03:80:4c:f1:7e:ad:c3: 25:92:f8:ea:e4:44:93:6d:8e:0b:d8:e5:c9:6b:13: 81:fc:3d:85:af:11:7b:e8:71:0c:1c:0c:d9:2d:77: dd:16:2b:77:f8:ad:95:d6:37:b0:84:3f:b2:bc:15: 29:f5:d4:c0:ae:58:c4:fc:18:30:f9:27:45:32:f8: 7b:76:ba:7a:92:f0:d6:51:c9:4e:e9:4e:1a:70:12: 4a:30:23:d0:18:fe:0b:cf:0b:d2:8a:f6:17:a8:e1: 5b:76:f3:d8:f6:4f:f1:96:97:db:a1:73:28:83:37: b0:e1:98:2d:11:b9:6b:e3:18:6f:71:ac:c4:a5:b9: 7e:15:24:f1:ca:da:25:48:c5:0d:98:24:2c:ae:54: b5:97:f0:1f:ad:0c:92:fc:cc:b4:64:ef:c1:87:d1: 6e:28:5f:51:a9:26:f4:47:c0:fc:0c:f4:a1:ed:20: ad:43:63:21:14:45:fa:9d:49:6d:0b:46:e2:37:7c: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:ED:9C:8B:EE:D5:77:1E:BF:C6:06:93:ED:E3:67:EB:E3:68:BF X509v3 Authority Key Identifier: keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:e0:b8:80:d5:48:ee:18:57:a8:c3:7b:41:6d:71:71:1b: c9:a9:0b:bf:5f:5f:c6:f9:9c:9a:ea:24:9b:b6:68:81:e5:9f: 63:a8:88:6e:9e:14:dc:b5:20:7c:3a:75:05:a2:a1:9b:1b:3a: 56:84:a5:1f:8c:9e:9a:63:49:48:61:bb:1b:8b:20:58:c0:b1: e6:07:f4:ef:32:25:b0:2b:5c:40:1e:31:b2:7c:79:7d:6a:09: 41:7a:f2:05:86:a1:c9:12:95:23:f6:b6:d5:a1:76:57:bc:a5: eb:bd:c4:db:07:46:a5:4b:00:08:af:89:df:31:1b:79:40:99: 7f:39:e6:25:2c:dd:5d:ab:38:08:10:d8:7c:07:35:66:9c:3d: 31:92:dc:7a:ea:72:dc:9b:6f:0d:96:91:07:f6:08:bb:29:54: fe:cb:b1:ef:4a:5b:fd:b7:f1:5e:84:4d:f8:3f:25:85:13:72: 5c:85:6e:f7:cf:4d:16:a8:ba:57:bb:55:b2:89:c9:79:6b:c4: 93:fa:41:f4:0a:72:82:a9:45:ce:ab:c2:db:71:1a:66:38:1e: 03:91:4f:06:b0:64:ea:74:11:6d:db:98:3c:c8:f9:d1:62:e7: c7:3f:5a:8e:f9:5e:ee:38:dd:50:fb:38:94:fc:28:64:24:c5: bc:bc:ff:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC3pNjbIvLU9jW56Fj7fVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5 NWJlYTIwHhcNMjUxMjE3MTYwMTI1WhcNMjUxMjE4MTYwMTI1WjAzMTEwLwYDVQQD EyhjYWViZWQ5YzhiZWVkNTc3MWViZmM2MDY5M2VkZTM2N2ViZTM2OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrYVEIXpJ3DVEe1RKzNVBEtWPI08 1CqdrGlWYtYdjEH3DSc+TN+y/MvrveOWajokIzpyV0Jj+DjMabnS/1aJDPeybQOA TPF+rcMlkvjq5ESTbY4L2OXJaxOB/D2FrxF76HEMHAzZLXfdFit3+K2V1jewhD+y vBUp9dTArljE/Bgw+SdFMvh7drp6kvDWUclO6U4acBJKMCPQGP4LzwvSivYXqOFb dvPY9k/xlpfboXMogzew4ZgtEblr4xhvcazEpbl+FSTxytolSMUNmCQsrlS1l/Af rQyS/My0ZO/Bh9FuKF9RqSb0R8D8DPSh7SCtQ2MhFEX6nUltC0biN3zXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrr7ZyL7tV3Hr/GBpPt42fr42i/MB8GA1UdIwQY MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt YmY5MjRhODI1ZjU4LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4 LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2bguIDV SO4YV6jDe0FtcXEbyakLv19fxvmcmuokm7ZogeWfY6iIbp4U3LUgfDp1BaKhmxs6 VoSlH4yemmNJSGG7G4sgWMCx5gf07zIlsCtcQB4xsnx5fWoJQXryBYahyRKVI/a2 1aF2V7yl673E2wdGpUsACK+J3zEbeUCZfznmJSzdXas4CBDYfAc1Zpw9MZLceupy 3JtvDZaRB/YIuylU/sux70pb/bfxXoRN+D8lhRNyXIVu989NFqi6V7tVsonJeWvE k/pB9ApygqlFzqvC23EaZjgeA5FPBrBk6nQRbduYPMj50WLnxz9ajvle7jjdUPs4 lPwoZCTFvLz/4A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:46 2025 by rpki-client