This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json) Hash identifier: Ez6L0zv7HyAyO5L7sIT2SLW2RQBfEIqi0tpTnE5cROU= Subject key identifier: F8:69:04:CF:68:26:E8:71:78:A4:E9:E7:E4:22:5A:2D:6D:5E:C3:BE Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Certificate serial: 019B2B542FF3BE7F1407278A2C1992F95738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft Manifest number: 06E9 Signing time: Wed 17 Dec 2025 08:01:36 +0000 Manifest this update: Wed 17 Dec 2025 08:01:36 +0000 Manifest next update: Thu 18 Dec 2025 08:01:36 +0000 Files and hashes: 1: 1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa (hash: hwD1bihujg4QKnIBffCm29/kZuX5tsYo4qsj399ZBlI=) 2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: Ja3gF6Hoo7CRcOkyIaTgacU1ZNIoUbaLS3t/9BO/lZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:2f:f3:be:7f:14:07:27:8a:2c:19:92:f9:57:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Validity Not Before: Dec 17 08:01:36 2025 GMT Not After : Dec 18 08:01:36 2025 GMT Subject: CN=f86904cf6826e87178a4e9e7e4225a2d6d5ec3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:ac:ea:8f:96:89:6b:82:78:96:ba:72:10: 9d:d4:61:97:73:ff:f2:44:b7:25:bf:68:cb:3d:52: 25:94:04:2a:3f:d4:4a:35:a5:26:85:8e:48:1b:aa: ce:4c:6f:c1:c8:4d:bb:23:e7:d6:6a:98:8d:8b:90: ef:b2:2b:97:7a:ec:df:11:44:9b:1a:ff:1b:e7:bb: eb:81:58:26:74:fc:0f:15:44:fe:ae:aa:48:b3:80: fd:5f:0c:96:3e:85:6b:10:6e:12:29:e1:c8:de:15: 9f:fd:71:a8:bf:bb:25:ca:8c:49:bd:b5:29:fc:83: 2e:99:3f:ef:ae:98:d3:eb:55:f7:65:08:77:c3:8d: c2:69:85:4e:5c:83:09:9a:56:cf:eb:37:83:df:33: 91:b4:53:d8:23:e2:ee:20:db:1d:1c:75:0d:a7:66: a3:e9:25:05:14:86:9a:fc:cf:cf:13:23:24:21:64: 94:65:48:d6:44:2e:1e:9e:93:ef:c3:81:95:23:49: 29:ad:d3:68:b5:4e:5f:b5:24:ed:19:23:e1:f0:a4: 4f:f0:b0:1e:2f:9a:d9:6a:b4:7e:af:d7:3a:8a:5d: 86:b8:e8:20:4e:c6:07:16:15:57:48:90:f4:9c:5c: 04:0f:3e:77:4b:97:db:ff:87:03:5d:46:82:c7:cf: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:69:04:CF:68:26:E8:71:78:A4:E9:E7:E4:22:5A:2D:6D:5E:C3:BE X509v3 Authority Key Identifier: keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ed:76:bf:5f:17:8e:c9:49:06:9b:45:01:50:c7:97:f9:e9: b3:72:83:d5:52:3f:26:14:c2:cc:95:db:1f:88:9d:9f:b2:a0: d4:30:9c:15:f0:04:6e:60:3e:a9:82:bb:de:1e:eb:3b:5e:87: 21:ee:b8:f4:28:f4:8b:7c:61:d3:a4:61:27:2b:c1:3d:4b:c4: a4:a5:d8:90:13:d4:ea:51:fd:32:54:79:bf:02:9b:7c:52:f2: f8:54:6e:db:a9:eb:96:80:6d:13:8c:37:e8:2d:bc:b4:66:92: f2:43:6d:33:f4:50:b7:cb:35:25:42:fd:6f:c2:59:e6:5d:34: fa:be:5a:88:f0:47:62:c6:c9:2d:cb:80:86:ea:a9:36:cc:d1: 4c:98:6e:f0:3a:65:bd:2e:b7:4e:4e:ca:e0:eb:f2:65:cc:ab: 11:dc:11:99:6d:be:ff:98:51:d0:dc:e7:d5:d1:25:5e:50:fe: 5d:f9:2f:ba:79:3e:18:b5:5e:57:59:e0:e5:5a:c1:89:6e:79: 5b:f7:fe:bc:9c:26:38:3a:fc:29:8e:4a:53:8f:06:05:17:0e: 4d:00:f3:2e:fd:eb:93:ee:7a:f5:57:f7:85:cf:4f:81:03:c9: ec:ea:13:70:74:2c:c3:97:0d:02:49:9c:56:02:2a:ee:1a:0c: c7:bd:e3:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVC/zvn8UByeKLBmS+Vc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4 MDhlYWUwHhcNMjUxMjE3MDgwMTM2WhcNMjUxMjE4MDgwMTM2WjAzMTEwLwYDVQQD EyhmODY5MDRjZjY4MjZlODcxNzhhNGU5ZTdlNDIyNWEyZDZkNWVjM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArres6o+WiWuCeJa6chCd1GGXc//y RLclv2jLPVIllAQqP9RKNaUmhY5IG6rOTG/ByE27I+fWapiNi5DvsiuXeuzfEUSb Gv8b57vrgVgmdPwPFUT+rqpIs4D9XwyWPoVrEG4SKeHI3hWf/XGov7slyoxJvbUp /IMumT/vrpjT61X3ZQh3w43CaYVOXIMJmlbP6zeD3zORtFPYI+LuINsdHHUNp2aj 6SUFFIaa/M/PEyMkIWSUZUjWRC4enpPvw4GVI0kprdNotU5ftSTtGSPh8KRP8LAe L5rZarR+r9c6il2GuOggTsYHFhVXSJD0nFwEDz53S5fb/4cDXUaCx89ppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhpBM9oJuhxeKTp5+QiWi1tXsO+MB8GA1UdIwQY MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt NWY4MTY3MDI0OTY4LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4 LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO12v18X jslJBptFAVDHl/nps3KD1VI/JhTCzJXbH4idn7Kg1DCcFfAEbmA+qYK73h7rO16H Ie649Cj0i3xh06RhJyvBPUvEpKXYkBPU6lH9MlR5vwKbfFLy+FRu26nrloBtE4w3 6C28tGaS8kNtM/RQt8s1JUL9b8JZ5l00+r5aiPBHYsbJLcuAhuqpNszRTJhu8Dpl vS63Tk7K4OvyZcyrEdwRmW2+/5hR0Nzn1dElXlD+Xfkvunk+GLVeV1ng5VrBiW55 W/f+vJwmODr8KY5KU48GBRcOTQDzLv3rk+569Vf3hc9PgQPJ7OoTcHQsw5cNAkmc VgIq7hoMx73jxw== -----END CERTIFICATE-----Generated at Wed Dec 17 12:57:12 2025 by rpki-client