This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json) Hash identifier: h+08NepnIMD25KownB0AMa/E9nf0xfIJGV+8tH42bGE= Subject key identifier: BB:CA:46:4B:F0:A6:8F:1C:92:68:0C:90:2E:48:9A:44:F9:C0:23:86 Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Certificate serial: 019B32D79E0A6D1C8A0DC72FCED34C1FE13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:02:29 +0000 Manifest this update: Thu 18 Dec 2025 19:02:29 +0000 Manifest next update: Fri 19 Dec 2025 19:02:29 +0000 Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: WW6mzRzJVmBxto6Cb4VX+P+jYqJG7IQ0fBAfUpfSqro=) 2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:9e:0a:6d:1c:8a:0d:c7:2f:ce:d3:4c:1f:e1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e Validity Not Before: Dec 18 19:02:29 2025 GMT Not After : Dec 19 19:02:29 2025 GMT Subject: CN=bbca464bf0a68f1c92680c902e489a44f9c02386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:fd:95:1f:d0:01:c3:fc:f0:91:4a:e8:54: ba:54:34:ae:fe:a2:71:e6:f2:b4:13:06:d4:55:f6: 5f:61:d3:88:dd:dc:f4:f4:3f:64:f4:dd:c6:3b:a3: f6:db:d5:d9:46:89:08:15:63:c4:08:2d:93:b2:cb: b7:4f:ec:ec:22:27:46:4c:97:78:ec:b0:04:25:ed: 0a:1f:79:fb:c2:6c:65:54:1c:29:c6:68:26:66:bf: 51:f8:af:e1:a0:5e:5a:fe:fa:5d:0a:ba:d1:11:85: c4:ba:14:5a:45:00:09:91:d7:96:1d:e4:39:78:eb: d1:51:ac:f9:ae:13:99:85:66:32:66:03:ff:c9:ed: 30:27:ad:c8:67:ef:67:74:ba:49:ff:b7:03:bd:13: 99:25:30:11:80:de:68:73:78:26:30:4b:e9:84:8a: 54:e3:1f:f2:9f:3a:ec:a6:f2:15:28:55:c5:9c:25: 6f:ad:93:6f:b5:c6:a5:3e:d1:d2:b3:62:13:2d:d0: d4:f1:00:76:ba:2a:70:96:0a:65:d6:09:d4:14:dd: 96:7e:20:4c:77:c6:6c:eb:8d:8a:b8:b8:35:6d:c8: db:d2:76:8a:45:67:8d:8a:6b:20:d2:60:b3:21:05: 77:12:b7:c0:3c:6f:fc:ee:34:ec:17:f0:48:e6:38: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:46:4B:F0:A6:8F:1C:92:68:0C:90:2E:48:9A:44:F9:C0:23:86 X509v3 Authority Key Identifier: keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1d:a0:32:b6:d5:f7:66:e2:bf:c1:41:3a:ff:52:20:71:8c: 3e:12:1e:32:a9:ef:bb:17:99:e3:3c:f4:52:cc:97:90:c6:27: dc:03:9b:b6:30:fe:07:b4:d9:a8:97:f4:b3:dd:c0:57:c8:dc: 2e:b1:15:b3:ba:c0:14:14:80:a5:f5:1b:b4:ab:7f:62:60:a2: 62:90:25:63:cd:71:df:c7:f8:c7:c6:d2:f8:e2:f0:06:ba:9b: 79:3f:39:b1:36:25:91:56:7e:7c:57:39:8c:27:e2:b3:c8:2f: 86:c5:c8:9d:f8:b9:6f:a1:07:18:e2:11:8b:ce:88:7c:4c:c5: 5e:15:42:69:ae:03:62:84:c6:38:30:ec:cd:47:7f:ed:8c:e0: 69:a3:cb:88:45:9b:f1:69:f8:d0:2e:54:49:b8:1e:d3:50:96: 7e:a6:99:00:d0:73:16:b6:63:74:94:a3:e8:08:f5:8b:8c:d0: a2:e1:c5:64:be:36:9e:f1:3a:b0:7a:aa:a6:8e:84:48:35:0f: f2:ab:69:4b:44:bb:2f:8a:76:dc:4c:d8:22:57:9e:52:9f:fb: 84:04:98:16:5b:96:20:c2:d1:3a:e2:cd:6e:f4:24:d6:e8:95: 5c:69:0a:12:8a:1d:1d:92:89:51:60:94:4c:14:b7:30:8c:49: ee:9f:17:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy154KbRyKDccvztNMH+E9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj OTg0NmUwHhcNMjUxMjE4MTkwMjI5WhcNMjUxMjE5MTkwMjI5WjAzMTEwLwYDVQQD EyhiYmNhNDY0YmYwYTY4ZjFjOTI2ODBjOTAyZTQ4OWE0NGY5YzAyMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAL9lR/QAcP88JFK6FS6VDSu/qJx 5vK0EwbUVfZfYdOI3dz09D9k9N3GO6P229XZRokIFWPECC2Tssu3T+zsIidGTJd4 7LAEJe0KH3n7wmxlVBwpxmgmZr9R+K/hoF5a/vpdCrrREYXEuhRaRQAJkdeWHeQ5 eOvRUaz5rhOZhWYyZgP/ye0wJ63IZ+9ndLpJ/7cDvROZJTARgN5oc3gmMEvphIpU 4x/ynzrspvIVKFXFnCVvrZNvtcalPtHSs2ITLdDU8QB2uipwlgpl1gnUFN2WfiBM d8Zs642KuLg1bcjb0naKRWeNimsg0mCzIQV3ErfAPG/87jTsF/BI5jir5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvKRkvwpo8ckmgMkC5ImkT5wCOGMB8GA1UdIwQY MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0 LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh2gMrbV 92biv8FBOv9SIHGMPhIeMqnvuxeZ4zz0UsyXkMYn3AObtjD+B7TZqJf0s93AV8jc LrEVs7rAFBSApfUbtKt/YmCiYpAlY81x38f4x8bS+OLwBrqbeT85sTYlkVZ+fFc5 jCfis8gvhsXInfi5b6EHGOIRi86IfEzFXhVCaa4DYoTGODDszUd/7YzgaaPLiEWb 8Wn40C5USbge01CWfqaZANBzFrZjdJSj6Aj1i4zQouHFZL42nvE6sHqqpo6ESDUP 8qtpS0S7L4p23EzYIleeUp/7hASYFluWIMLROuLNbvQk1uiVXGkKEoodHZKJUWCU TBS3MIxJ7p8XsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:27 2025 by rpki-client