This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json) Hash identifier: e+xylbh5w5xnqGJITyDxL4QaqV/J4CyVYGuMo+Ipr9c= Subject key identifier: 4F:D5:8A:B4:69:81:AC:38:F3:98:31:01:E7:1E:5E:2C:C6:D0:EA:EA Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Certificate serial: 019B3344B18C27DFF98564107F38EE54DC05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft Manifest number: 0E18 Signing time: Thu 18 Dec 2025 21:01:38 +0000 Manifest this update: Thu 18 Dec 2025 21:01:38 +0000 Manifest next update: Fri 19 Dec 2025 21:01:38 +0000 Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=) 2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: HHvo+NzSscKjr3RIJ9P10ooGjjM4FafgPI4p8HkvCGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b1:8c:27:df:f9:85:64:10:7f:38:ee:54:dc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Validity Not Before: Dec 18 21:01:38 2025 GMT Not After : Dec 19 21:01:38 2025 GMT Subject: CN=4fd58ab46981ac38f3983101e71e5e2cc6d0eaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:65:d6:58:e2:81:29:c6:ec:f0:9e:94:bd: 66:f4:14:f1:67:99:6f:d9:9c:22:c3:f7:be:e4:ea: 52:2e:86:7b:8d:87:ec:3e:f7:9b:b6:28:56:a8:d8: 84:36:7b:fc:ba:c1:11:7b:5c:09:e5:d9:45:30:b3: 72:c3:f7:2d:b1:12:1f:fb:e9:c0:db:68:b3:2d:70: 23:c3:12:ff:20:65:77:7d:e3:f7:f3:62:4f:1f:0c: fd:4e:13:c0:eb:d2:a9:dd:80:2a:40:ed:35:84:56: 29:7b:ab:9e:7a:27:09:22:1c:46:2f:5d:86:46:4e: 15:c3:2b:dd:80:40:08:fe:f5:80:ae:e5:03:42:10: a9:35:48:d3:67:66:bc:3a:53:3d:44:ef:0b:43:8c: ef:59:b7:88:55:74:ba:a9:32:68:7c:9d:e7:8c:c3: af:c3:a1:f3:7e:32:90:89:85:f7:9d:30:60:e4:cf: bf:32:a8:ba:fe:b5:ca:b8:d2:60:bf:74:81:5c:14: 74:62:c4:80:bc:f2:57:49:74:45:c4:60:23:3a:cf: 3d:d5:de:50:70:25:c9:97:90:bb:df:0a:78:b6:33: 70:98:c3:ff:ad:04:7b:39:97:54:35:26:74:3b:46: bc:25:8c:8b:4b:10:33:5f:8e:8d:4a:a5:e1:27:99: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:8A:B4:69:81:AC:38:F3:98:31:01:E7:1E:5E:2C:C6:D0:EA:EA X509v3 Authority Key Identifier: keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:10:06:a6:b0:92:ae:ba:f2:79:f0:db:cd:95:9d:22:f8: 57:9f:d4:2d:01:25:27:37:67:3f:6f:3c:24:97:0c:e9:7e:db: 3a:97:b4:70:36:e3:a7:11:ca:0c:3a:74:dd:08:5a:27:5a:c4: 67:44:c5:7e:41:3f:f5:ea:6b:a3:95:8e:64:ba:32:a4:f0:fb: ac:05:63:0d:c8:dd:f9:e0:a1:b1:8b:61:92:74:db:a4:a1:be: c2:ac:e2:17:2a:ce:e4:30:1e:1e:a0:3b:59:f4:31:5e:e5:5b: 4a:ba:af:01:00:70:4b:46:95:28:5b:20:6b:88:0f:b4:7c:7d: ba:ed:58:fb:d8:b3:9b:e4:7e:60:f0:8a:2b:09:26:f9:2d:2a: ba:54:2b:85:0d:5a:66:85:9b:68:20:c1:1f:b4:75:df:36:a7: 85:9e:31:0f:23:79:5f:98:af:fd:11:44:3c:ca:5d:7d:be:28: 1a:cf:92:97:df:53:2d:ff:67:24:d5:f9:ae:d3:eb:86:c5:91: 7f:28:5c:ed:9c:37:38:2c:c3:28:2e:52:ef:29:a5:07:cc:30: aa:54:df:45:a6:a8:c5:8b:8d:f9:e6:38:09:6d:d5:dc:05:7f: 48:c0:67:47:a7:ac:9b:bb:30:30:8e:17:c9:40:c0:7f:2a:75: 85:e0:66:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLGMJ9/5hWQQfzjuVNwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1 OGUyOTYwHhcNMjUxMjE4MjEwMTM4WhcNMjUxMjE5MjEwMTM4WjAzMTEwLwYDVQQD Eyg0ZmQ1OGFiNDY5ODFhYzM4ZjM5ODMxMDFlNzFlNWUyY2M2ZDBlYWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJRl1ljigSnG7PCelL1m9BTxZ5lv 2Zwiw/e+5OpSLoZ7jYfsPvebtihWqNiENnv8usERe1wJ5dlFMLNyw/ctsRIf++nA 22izLXAjwxL/IGV3feP382JPHwz9ThPA69Kp3YAqQO01hFYpe6ueeicJIhxGL12G Rk4VwyvdgEAI/vWAruUDQhCpNUjTZ2a8OlM9RO8LQ4zvWbeIVXS6qTJofJ3njMOv w6HzfjKQiYX3nTBg5M+/Mqi6/rXKuNJgv3SBXBR0YsSAvPJXSXRFxGAjOs891d5Q cCXJl5C73wp4tjNwmMP/rQR7OZdUNSZ0O0a8JYyLSxAzX46NSqXhJ5nuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/VirRpgaw485gxAeceXizG0OrqMB8GA1UdIwQY MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0cQBqaw kq668nnw282VnSL4V5/ULQElJzdnP288JJcM6X7bOpe0cDbjpxHKDDp03QhaJ1rE Z0TFfkE/9epro5WOZLoypPD7rAVjDcjd+eChsYthknTbpKG+wqziFyrO5DAeHqA7 WfQxXuVbSrqvAQBwS0aVKFsga4gPtHx9uu1Y+9izm+R+YPCKKwkm+S0qulQrhQ1a ZoWbaCDBH7R13zanhZ4xDyN5X5iv/RFEPMpdfb4oGs+Sl99TLf9nJNX5rtPrhsWR fyhc7Zw3OCzDKC5S7ymlB8wwqlTfRaaoxYuN+eY4CW3V3AV/SMBnR6esm7swMI4X yUDAfyp1heBmPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:19:48 2025 by rpki-client