This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json) Hash identifier: 1EyOnZb4MoXPxaLdM3wnECeB5DxwcK0OjXXSiDqJ4xg= Subject key identifier: 7F:B9:31:68:54:57:E5:49:C4:6A:84:BE:90:E2:7F:AF:83:42:62:A5 Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Certificate serial: 019B3EDA5AED0B5A249BFE2FC02B6738A1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft Manifest number: 0DCC Signing time: Sun 21 Dec 2025 03:00:55 +0000 Manifest this update: Sun 21 Dec 2025 03:00:55 +0000 Manifest next update: Mon 22 Dec 2025 03:00:55 +0000 Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=) 2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: 6kAq1XHsyq3hyy1IbYq+EKHPylLnDEW3DgUs6xnQ9J4=) 3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5a:ed:0b:5a:24:9b:fe:2f:c0:2b:67:38:a1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Validity Not Before: Dec 21 03:00:55 2025 GMT Not After : Dec 22 03:00:55 2025 GMT Subject: CN=7fb931685457e549c46a84be90e27faf834262a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:5b:df:60:e8:f2:c6:45:1d:65:af:37:99: 16:93:44:86:09:7d:3b:9a:28:30:1d:b6:11:5a:24: 79:2b:a4:36:28:e9:1c:ff:33:97:dc:42:5f:74:ef: d9:03:d4:bb:77:b6:29:8d:3a:61:ab:1e:c4:98:29: 59:bc:13:94:25:c1:65:a0:cf:4f:9f:a4:a3:21:43: 13:4e:70:81:ca:f9:23:d3:8d:02:a7:6f:ee:47:e4: 64:51:e6:fc:a3:14:ca:87:64:d7:b8:4f:76:42:d7: 64:18:ae:e9:74:83:bb:b1:b5:0a:1f:05:32:91:6b: ea:9b:4c:b6:b8:48:c3:20:94:ed:5a:f0:1c:11:23: 36:6d:ba:01:9a:63:bc:44:8d:5d:94:a8:c3:59:24: c4:e1:eb:8b:82:2f:13:04:c4:1b:39:24:9a:98:ef: af:de:94:90:af:64:24:a9:b0:de:bc:57:d9:b4:d3: 15:e7:a5:16:25:dd:7a:cb:f7:38:1f:c4:f3:31:67: 0b:d3:52:bd:30:8e:f8:39:d7:5c:f4:2f:ef:59:2b: 4a:86:2f:aa:24:40:51:aa:4e:e9:d7:ec:76:dd:c2: 4d:f7:b1:3f:9a:6f:3a:7a:9a:9f:15:3d:83:11:fe: 62:4d:9a:7b:1c:2a:a6:18:10:77:61:3b:78:7f:41: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:31:68:54:57:E5:49:C4:6A:84:BE:90:E2:7F:AF:83:42:62:A5 X509v3 Authority Key Identifier: keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e9:12:23:eb:71:16:1b:a8:55:e3:0a:0a:86:2c:2e:67:62: 28:f6:4f:61:2e:6f:2f:63:89:7d:f1:46:ec:f2:af:ec:b7:cd: 61:bd:06:87:05:0e:7b:c9:9a:e6:f6:7e:70:84:ac:2b:8d:95: f5:ed:a1:2d:37:22:51:10:05:d1:d3:03:6b:44:fa:5f:62:89: 36:5c:66:7f:7c:60:8d:6c:c5:cf:44:42:5a:ec:51:1a:0b:9a: 2d:f8:59:0d:aa:33:53:c1:53:cd:eb:a1:a7:8f:ec:2d:e3:c6: 60:81:f5:88:b9:f8:d1:5b:9f:d5:7a:00:aa:71:45:74:4a:2a: eb:db:a7:95:1e:ad:41:81:f9:fc:96:f4:20:85:83:7c:ab:8b: ef:5f:ef:aa:9c:54:cb:29:b8:8b:02:f5:fa:e6:3e:0e:54:03: e5:da:e7:67:30:e2:83:9a:ab:b7:23:e9:c1:66:e7:9b:96:2c: a4:43:c5:97:a8:7e:03:8f:c8:6d:02:20:8f:74:94:13:fd:4c: a5:ea:88:95:9a:00:ab:b0:33:1d:93:93:84:ac:63:e6:58:ca: 5d:58:ea:d4:32:36:55:01:e9:95:06:f4:08:bf:9b:26:7c:45: b4:ee:51:cd:1d:bd:06:4c:c7:d1:cb:06:2c:fd:60:62:4a:00: 64:8a:f3:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lrtC1okm/4vwCtnOKH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx YjY5MjMwHhcNMjUxMjIxMDMwMDU1WhcNMjUxMjIyMDMwMDU1WjAzMTEwLwYDVQQD Eyg3ZmI5MzE2ODU0NTdlNTQ5YzQ2YTg0YmU5MGUyN2ZhZjgzNDI2MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyZb32Do8sZFHWWvN5kWk0SGCX07 migwHbYRWiR5K6Q2KOkc/zOX3EJfdO/ZA9S7d7YpjTphqx7EmClZvBOUJcFloM9P n6SjIUMTTnCByvkj040Cp2/uR+RkUeb8oxTKh2TXuE92QtdkGK7pdIO7sbUKHwUy kWvqm0y2uEjDIJTtWvAcESM2bboBmmO8RI1dlKjDWSTE4euLgi8TBMQbOSSamO+v 3pSQr2QkqbDevFfZtNMV56UWJd16y/c4H8TzMWcL01K9MI74Oddc9C/vWStKhi+q JEBRqk7p1+x23cJN97E/mm86epqfFT2DEf5iTZp7HCqmGBB3YTt4f0EqaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+5MWhUV+VJxGqEvpDif6+DQmKlMB8GA1UdIwQY MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1 LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmukSI+tx FhuoVeMKCoYsLmdiKPZPYS5vL2OJffFG7PKv7LfNYb0GhwUOe8ma5vZ+cISsK42V 9e2hLTciURAF0dMDa0T6X2KJNlxmf3xgjWzFz0RCWuxRGguaLfhZDaozU8FTzeuh p4/sLePGYIH1iLn40Vuf1XoAqnFFdEoq69unlR6tQYH5/Jb0IIWDfKuL71/vqpxU yym4iwL1+uY+DlQD5drnZzDig5qrtyPpwWbnm5YspEPFl6h+A4/IbQIgj3SUE/1M peqIlZoAq7AzHZOThKxj5ljKXVjq1DI2VQHplQb0CL+bJnxFtO5RzR29BkzH0csG LP1gYkoAZIrz0g== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:36 2025 by rpki-client