This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json) Hash identifier: 8v1437MvyexbbhHHzQgDpszaWiRY93XdAb4xfp+a5SE= Subject key identifier: 94:3B:BC:52:5F:49:B6:90:2D:C0:3E:0C:15:A9:5A:D0:01:3E:29:EB Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Certificate serial: 019B51176F4A82ADE893FCB94EF7C818FA45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft Manifest number: 0B62 Signing time: Wed 24 Dec 2025 16:00:48 +0000 Manifest this update: Wed 24 Dec 2025 16:00:48 +0000 Manifest next update: Thu 25 Dec 2025 16:00:48 +0000 Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=) 2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=) 3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: 4sCMDBUDEF+VL0HuZbntxpv5GOuArUoYnZy4jS3ayTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:6f:4a:82:ad:e8:93:fc:b9:4e:f7:c8:18:fa:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Validity Not Before: Dec 24 16:00:48 2025 GMT Not After : Dec 25 16:00:48 2025 GMT Subject: CN=943bbc525f49b6902dc03e0c15a95ad0013e29eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:53:af:c0:4c:e0:3b:bc:3e:1e:bc:b9:4a: 6b:40:fa:4f:10:1c:0f:79:82:8f:c5:ff:bf:35:ea: dc:00:25:15:7e:9e:e8:f7:73:2e:9d:c8:8d:4b:7d: d0:a0:10:8c:5a:54:2f:5b:f4:ee:df:e0:77:a9:cb: 07:85:f1:50:7c:22:fc:dc:b3:c8:2a:1b:50:b2:62: 66:9b:2a:c3:e2:f6:ff:d2:f1:7a:13:78:1c:21:90: 69:af:a7:2b:d3:c8:b8:4a:26:13:2e:bb:6f:cb:b7: a4:0f:af:d6:90:f1:a9:c2:72:96:b8:cb:68:92:c9: b4:11:c4:57:96:e5:ae:21:dd:8b:56:bc:14:7d:04: 5d:05:66:68:bc:e9:57:6b:7a:91:68:6a:e2:e2:ff: e3:92:50:58:a6:ef:58:9c:1b:f0:19:33:2e:b4:72: ed:d5:20:18:97:ea:8e:9f:68:2b:46:f8:38:68:e0: a2:ec:00:fe:46:b6:63:45:e4:5f:b8:93:21:4e:45: 4e:16:1a:b2:3a:e1:fb:56:15:b5:47:de:b3:25:b1: af:f7:04:fb:33:bc:09:15:88:f6:46:8d:0e:fd:75: 7e:90:47:5d:c9:fb:f2:32:ad:bd:f7:66:50:9e:0a: 35:fa:a8:11:96:4f:1e:ed:a3:0d:f2:d9:9b:cd:f8: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3B:BC:52:5F:49:B6:90:2D:C0:3E:0C:15:A9:5A:D0:01:3E:29:EB X509v3 Authority Key Identifier: keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ba:13:48:3c:c5:04:56:83:69:bd:9b:73:08:84:47:06:66: 58:d8:a0:55:ff:53:b1:76:cf:a9:75:55:8c:8d:e1:f3:0c:61: ca:63:3d:0d:63:2f:1f:52:f5:93:46:1d:5f:f5:a7:bb:dc:dc: b0:a9:85:88:58:0e:56:79:fa:3b:29:de:52:cb:bf:20:19:dd: 8c:0b:68:01:3b:ef:60:6d:ec:be:38:b3:35:c8:5c:de:0a:46: 8c:01:04:b8:52:66:6a:03:6c:0d:08:8b:99:03:1f:cd:26:ef: 8c:07:6b:0a:74:72:8d:02:48:7c:50:6d:9c:18:c2:d7:e7:69: e9:87:4f:9c:fe:7a:a4:13:0b:8a:51:bd:e3:78:57:fc:65:76: 5e:58:67:fc:88:d8:96:b0:85:f3:cf:1d:02:09:2d:5a:c7:5c: 54:09:47:8d:73:5d:f0:70:0b:04:c2:14:15:a3:b3:29:8a:a8: 51:55:48:05:ab:eb:4a:af:b8:64:1e:52:07:05:8b:0e:29:dd: 49:43:38:fc:04:d6:61:84:d8:3d:49:c1:ff:c2:84:17:6f:02: 81:85:48:be:0d:71:ae:a3:00:bc:46:9e:86:a6:7a:66:48:52: 51:ec:20:51:b9:1e:16:91:85:f2:02:f7:47:16:be:76:36:f9: a7:ee:af:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF29Kgq3ok/y5TvfIGPpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix ZDdkNGQwHhcNMjUxMjI0MTYwMDQ4WhcNMjUxMjI1MTYwMDQ4WjAzMTEwLwYDVQQD Eyg5NDNiYmM1MjVmNDliNjkwMmRjMDNlMGMxNWE5NWFkMDAxM2UyOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5Tr8BM4Du8Ph68uUprQPpPEBwP eYKPxf+/NercACUVfp7o93MunciNS33QoBCMWlQvW/Tu3+B3qcsHhfFQfCL83LPI KhtQsmJmmyrD4vb/0vF6E3gcIZBpr6cr08i4SiYTLrtvy7ekD6/WkPGpwnKWuMto ksm0EcRXluWuId2LVrwUfQRdBWZovOlXa3qRaGri4v/jklBYpu9YnBvwGTMutHLt 1SAYl+qOn2grRvg4aOCi7AD+RrZjReRfuJMhTkVOFhqyOuH7VhW1R96zJbGv9wT7 M7wJFYj2Ro0O/XV+kEddyfvyMq2992ZQngo1+qgRlk8e7aMN8tmbzfgb/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQ7vFJfSbaQLcA+DBWpWtABPinrMB8GA1UdIwQY MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt NWFjN2YwNjYyMzBiLzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7oTSDzF BFaDab2bcwiERwZmWNigVf9TsXbPqXVVjI3h8wxhymM9DWMvH1L1k0YdX/Wnu9zc sKmFiFgOVnn6OyneUsu/IBndjAtoATvvYG3svjizNchc3gpGjAEEuFJmagNsDQiL mQMfzSbvjAdrCnRyjQJIfFBtnBjC1+dp6YdPnP56pBMLilG943hX/GV2Xlhn/IjY lrCF888dAgktWsdcVAlHjXNd8HALBMIUFaOzKYqoUVVIBavrSq+4ZB5SBwWLDind SUM4/ATWYYTYPUnB/8KEF28CgYVIvg1xrqMAvEaehqZ6ZkhSUewgUbkeFpGF8gL3 Rxa+djb5p+6vAA== -----END CERTIFICATE-----Generated at Wed Dec 24 22:04:51 2025 by rpki-client