This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json) Hash identifier: voZYR4CbRIwESrDJJoQJUI1Zgmwd6IgB6odsJbm6z+8= Subject key identifier: E6:99:1F:E9:B8:1D:A9:4B:28:24:FA:57:22:08:B0:91:8C:0A:22:16 Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1 Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1 Certificate serial: 019B3C7E154B2FA0F331E3495619487F0BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft Manifest number: 0F75 Signing time: Sat 20 Dec 2025 16:00:54 +0000 Manifest this update: Sat 20 Dec 2025 16:00:54 +0000 Manifest next update: Sun 21 Dec 2025 16:00:54 +0000 Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: WSRxVhtevn5fbKdBG/adCnC42YtKbtlIvFDn2RY1T2w=) 2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:15:4b:2f:a0:f3:31:e3:49:56:19:48:7f:0b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1 Validity Not Before: Dec 20 16:00:54 2025 GMT Not After : Dec 21 16:00:54 2025 GMT Subject: CN=e6991fe9b81da94b2824fa572208b0918c0a2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:c2:21:9b:b2:16:58:ae:40:44:04:6e:ba: 14:51:41:41:46:77:9e:a4:82:8a:b8:7b:74:08:ff: a5:7a:45:bc:ec:32:7c:a5:60:2a:51:83:2e:f8:7e: 21:19:63:81:be:3a:b6:22:df:7d:0a:e2:8a:ec:a4: 6c:3c:75:67:74:8c:4a:08:b8:6b:b9:b0:4e:6d:c5: af:5b:f2:e4:b1:79:94:02:30:dd:51:45:02:6d:b0: 1e:02:c7:e2:85:47:c7:3d:21:65:28:c0:d9:42:55: c2:54:be:f9:63:9f:f2:33:7d:37:84:63:e5:f0:0d: 55:d9:13:fa:93:ad:81:96:d5:5b:3a:b4:87:97:e7: e8:c0:6f:8b:cd:08:d0:ec:b0:45:7e:c4:53:e8:8f: d8:de:60:7c:be:5b:15:74:5c:4d:d0:a2:2f:07:b4: 76:a5:a3:80:10:8c:a8:38:f8:3a:8b:0a:94:27:b2: 09:ee:ea:e5:8d:ca:d8:3b:dd:51:c1:a5:66:9a:ce: 59:b4:5d:49:10:2e:87:d0:cf:f2:75:51:d9:71:a6: 67:21:fd:03:07:ec:99:47:65:2f:68:b7:5a:95:17: 3c:fc:77:ab:16:2c:cb:55:8f:06:18:09:8d:9d:6d: f2:38:d0:10:69:b7:c9:da:d6:49:06:0f:3f:48:f6: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:99:1F:E9:B8:1D:A9:4B:28:24:FA:57:22:08:B0:91:8C:0A:22:16 X509v3 Authority Key Identifier: keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:98:d5:73:89:75:43:9c:e9:1f:0a:c6:bb:e7:61:ed:10: 08:13:46:ea:e7:0c:80:e0:1b:b6:29:e0:21:b0:0d:52:9a:f8: d7:a1:a1:10:10:09:b5:e5:24:e0:7d:f0:19:22:fb:bb:e1:15: 32:d0:01:8f:84:7d:57:af:31:38:4c:54:bc:10:d2:60:39:0e: 1d:c8:03:f4:69:2c:b1:b2:9e:ba:05:4a:aa:40:83:dc:e6:26: f7:6d:74:fa:cd:1d:c6:14:04:3a:a9:11:7a:58:34:4c:36:54: 27:ad:55:32:b7:91:67:5c:c2:18:a2:17:c4:05:d1:92:cf:b2: 1f:c0:53:ed:06:54:dd:40:d1:e9:46:c0:9f:db:ab:ae:b3:87: 15:5c:05:22:25:56:1f:ee:21:09:12:be:da:d8:14:f2:a8:13: a6:2f:ed:25:74:9d:3c:ee:c3:72:50:4b:2a:e8:d7:8b:87:9c: 57:df:a5:c9:9c:5f:24:9a:c3:35:ce:42:15:cb:16:5d:8f:84: 9d:3b:b4:c2:bc:2c:81:c7:93:e6:4b:dd:db:20:40:d2:bf:74: bb:01:da:fe:58:7d:d0:3b:2b:2a:5e:21:88:11:52:91:45:89: ea:f7:07:c0:99:92:4c:aa:f6:c2:bc:f5:da:ea:22:f6:5f:cf: 94:57:39:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhVLL6DzMeNJVhlIfwvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz OTAwZDEwHhcNMjUxMjIwMTYwMDU0WhcNMjUxMjIxMTYwMDU0WjAzMTEwLwYDVQQD EyhlNjk5MWZlOWI4MWRhOTRiMjgyNGZhNTcyMjA4YjA5MThjMGEyMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWrCIZuyFliuQEQEbroUUUFBRnee pIKKuHt0CP+lekW87DJ8pWAqUYMu+H4hGWOBvjq2It99CuKK7KRsPHVndIxKCLhr ubBObcWvW/LksXmUAjDdUUUCbbAeAsfihUfHPSFlKMDZQlXCVL75Y5/yM303hGPl 8A1V2RP6k62BltVbOrSHl+fowG+LzQjQ7LBFfsRT6I/Y3mB8vlsVdFxN0KIvB7R2 paOAEIyoOPg6iwqUJ7IJ7urljcrYO91RwaVmms5ZtF1JEC6H0M/ydVHZcaZnIf0D B+yZR2UvaLdalRc8/HerFizLVY8GGAmNnW3yONAQabfJ2tZJBg8/SPahWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaZH+m4HalLKCT6VyIIsJGMCiIWMB8GA1UdIwQY MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEOY1XOJ dUOc6R8KxrvnYe0QCBNG6ucMgOAbtingIbANUpr416GhEBAJteUk4H3wGSL7u+EV MtABj4R9V68xOExUvBDSYDkOHcgD9GkssbKeugVKqkCD3OYm9210+s0dxhQEOqkR elg0TDZUJ61VMreRZ1zCGKIXxAXRks+yH8BT7QZU3UDR6UbAn9urrrOHFVwFIiVW H+4hCRK+2tgU8qgTpi/tJXSdPO7DclBLKujXi4ecV9+lyZxfJJrDNc5CFcsWXY+E nTu0wrwsgceT5kvd2yBA0r90uwHa/lh90DsrKl4hiBFSkUWJ6vcHwJmSTKr2wrz1 2uoi9l/PlFc5Tg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:12 2025 by rpki-client