This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json) Hash identifier: H2TudqHTIt8wcqeqvp+wG9U7fOFxroH1V/FE3VXqofI= Subject key identifier: 4A:87:5F:F5:73:73:BB:6B:27:EA:31:9A:73:DD:D3:20:D0:7F:C1:C5 Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Certificate serial: 019AFAD573D014089D589C72DE0687F089D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft Manifest number: 0899 Signing time: Sun 07 Dec 2025 22:01:24 +0000 Manifest this update: Sun 07 Dec 2025 22:01:24 +0000 Manifest next update: Mon 08 Dec 2025 22:01:24 +0000 Files and hashes: 1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=) 2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: srSvKVnZr/4g4TPi5T/D/+7D0nTUrFv7E+YgFDCZsQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d5:73:d0:14:08:9d:58:9c:72:de:06:87:f0:89:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Validity Not Before: Dec 7 22:01:24 2025 GMT Not After : Dec 8 22:01:24 2025 GMT Subject: CN=4a875ff57373bb6b27ea319a73ddd320d07fc1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:38:b1:30:a1:ad:d8:e5:c1:33:7c:4a:b3: af:84:63:b7:aa:12:15:7f:36:c9:0e:f2:1a:55:12: 23:72:9d:90:3d:30:bf:16:0b:ee:9a:89:a2:e2:9b: 7c:bb:77:5e:72:87:f1:b5:a0:58:c8:9a:3d:1d:f8: 6d:1e:c7:5c:02:f2:ff:27:86:65:b8:1c:a8:81:99: 4e:05:57:ec:4d:a1:2e:e6:52:44:98:29:5c:e0:c9: 6a:63:83:66:3a:7a:04:ed:da:40:ed:2c:87:05:a3: 57:53:ce:fa:dc:ce:58:ba:d7:bc:2b:8e:94:88:d5: 5e:41:c9:17:7f:3c:f7:5c:0f:b8:e3:2a:4b:86:83: 59:d9:1e:19:f7:dc:6c:ce:88:ef:ba:7c:e9:1b:c7: 96:d7:20:65:28:60:41:10:ec:be:00:8c:75:bb:4a: 91:15:d0:b8:b0:0c:f8:62:c0:b7:38:f8:62:17:18: 53:d7:51:20:40:ea:b2:e8:1e:6d:cf:25:39:2d:81: 73:39:c0:d0:c1:9f:96:4b:b0:d0:30:8d:e9:f1:46: 8b:80:76:99:5a:f7:0a:f2:77:3b:19:c8:f6:a9:86: c6:28:58:1e:83:53:30:cd:8d:ac:e5:72:64:88:92: 13:ad:a7:8f:80:f9:60:7e:95:9a:b1:3a:92:b6:62: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:5F:F5:73:73:BB:6B:27:EA:31:9A:73:DD:D3:20:D0:7F:C1:C5 X509v3 Authority Key Identifier: keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4a:74:02:09:53:68:c8:44:de:76:69:ac:d7:dc:b6:07:b0: 2e:bd:68:c0:75:41:3b:4d:11:3c:1e:a3:a6:b7:06:bf:dc:59: 39:3f:e2:eb:e9:36:fc:3a:a6:ad:a6:04:aa:4f:bf:37:41:9d: 2f:22:f5:23:d8:d3:e1:05:d2:91:01:fd:e1:cb:e2:c5:c8:30: 36:6a:59:48:fd:c3:49:d9:44:53:11:a8:54:c1:db:99:85:b0: 30:e8:5a:a6:15:45:2a:60:78:ad:57:5a:75:0f:a8:7c:bc:a5: 9a:40:76:2b:0b:1c:9e:b1:92:69:57:62:4b:df:bf:18:7e:2a: 40:c6:95:0d:3e:13:96:09:4f:64:a5:d3:97:14:9c:97:e0:c3: 03:cb:b3:7a:21:e3:06:be:6a:a2:94:ad:5e:8f:d1:79:20:cd: 2d:53:4b:0e:d7:db:44:f5:d8:4a:14:4b:10:3c:99:5f:a2:57: 8d:e9:51:ee:25:b8:9f:f9:92:89:a1:70:bb:78:60:fd:ec:3f: d6:6f:08:82:3d:10:68:54:4b:22:04:69:e7:62:f2:2e:22:47: ac:f8:5d:de:e4:ee:6d:df:eb:4c:83:55:d1:9b:7d:16:b0:e0: fc:dc:18:b4:dc:d3:3a:cd:89:32:63:b7:83:bc:a5:f2:b8:11: b6:e3:6a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61XPQFAidWJxy3gaH8InXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5 NWJlYTIwHhcNMjUxMjA3MjIwMTI0WhcNMjUxMjA4MjIwMTI0WjAzMTEwLwYDVQQD Eyg0YTg3NWZmNTczNzNiYjZiMjdlYTMxOWE3M2RkZDMyMGQwN2ZjMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom04sTChrdjlwTN8SrOvhGO3qhIV fzbJDvIaVRIjcp2QPTC/Fgvumomi4pt8u3decofxtaBYyJo9HfhtHsdcAvL/J4Zl uByogZlOBVfsTaEu5lJEmClc4MlqY4NmOnoE7dpA7SyHBaNXU8763M5Yute8K46U iNVeQckXfzz3XA+44ypLhoNZ2R4Z99xszojvunzpG8eW1yBlKGBBEOy+AIx1u0qR FdC4sAz4YsC3OPhiFxhT11EgQOqy6B5tzyU5LYFzOcDQwZ+WS7DQMI3p8UaLgHaZ WvcK8nc7Gcj2qYbGKFgeg1MwzY2s5XJkiJITraePgPlgfpWasTqStmKEJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqHX/Vzc7trJ+oxmnPd0yDQf8HFMB8GA1UdIwQY MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt YmY5MjRhODI1ZjU4LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4 LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0p0AglT aMhE3nZprNfctgewLr1owHVBO00RPB6jprcGv9xZOT/i6+k2/DqmraYEqk+/N0Gd LyL1I9jT4QXSkQH94cvixcgwNmpZSP3DSdlEUxGoVMHbmYWwMOhaphVFKmB4rVda dQ+ofLylmkB2KwscnrGSaVdiS9+/GH4qQMaVDT4TlglPZKXTlxScl+DDA8uzeiHj Br5qopStXo/ReSDNLVNLDtfbRPXYShRLEDyZX6JXjelR7iW4n/mSiaFwu3hg/ew/ 1m8Igj0QaFRLIgRp52LyLiJHrPhd3uTubd/rTINV0Zt9FrDg/NwYtNzTOs2JMmO3 g7yl8rgRtuNqEQ== -----END CERTIFICATE-----Generated at Mon Dec 8 07:38:20 2025 by rpki-client