This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json) Hash identifier: 9bKnIMtgsUHPeyTjOuourzCVRIXNEExVEt1hhGK7msA= Subject key identifier: D1:10:9B:2A:97:EC:1E:91:76:9C:56:82:0B:3B:71:CB:BB:E8:4E:36 Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Certificate serial: 019B3CECA5EA166094F3596CD4B2471A247E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft Manifest number: 0E1D Signing time: Sat 20 Dec 2025 18:01:40 +0000 Manifest this update: Sat 20 Dec 2025 18:01:40 +0000 Manifest next update: Sun 21 Dec 2025 18:01:40 +0000 Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=) 2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: UoCDm+zjFm3vPYuIXAA8TrIWrpIWKj5em5VEojPBfFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a5:ea:16:60:94:f3:59:6c:d4:b2:47:1a:24:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Validity Not Before: Dec 20 18:01:40 2025 GMT Not After : Dec 21 18:01:40 2025 GMT Subject: CN=d1109b2a97ec1e91769c56820b3b71cbbbe84e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:35:f4:42:c4:ae:91:5e:7e:70:af:cd:d4: 65:2a:b5:4b:3a:30:8c:42:1c:0f:09:df:1b:06:5a: 2f:cf:96:18:e2:6c:6a:b9:c5:ac:4b:2d:52:0e:eb: ec:3a:81:1b:ba:42:54:f4:96:2c:e0:96:af:68:26: cb:8b:43:97:af:24:b8:24:70:95:74:a1:76:b9:69: bb:c8:c0:2a:fc:77:80:a6:6a:91:f5:92:1f:ba:40: 1d:e0:ff:4a:1e:45:b9:18:55:ea:f6:8c:8d:1e:31: ae:65:e3:7d:c7:62:de:2e:25:1c:20:26:b1:be:b9: 7f:54:58:15:9c:67:8b:ca:04:6a:0c:2f:7e:50:bc: 34:0c:93:d0:27:ca:e5:3d:b8:93:a5:10:64:b7:98: 11:5f:64:87:a7:17:f4:a1:e2:5e:45:ee:49:e8:b7: 06:96:ba:de:64:7b:a7:13:d4:73:f9:9c:8d:ab:03: 6f:37:74:20:ee:96:4f:70:ec:b0:05:4e:e9:84:e2: 29:85:aa:1d:3a:01:bd:55:87:04:b3:9b:47:5f:a7: 9a:fb:b4:9c:05:66:be:37:55:a0:74:b2:6d:8d:34: 75:20:c1:5c:cd:b2:fa:a5:39:ec:f7:a6:91:fb:ed: 68:7b:3d:d8:98:5d:9f:8a:86:b1:92:cc:6b:98:52: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:10:9B:2A:97:EC:1E:91:76:9C:56:82:0B:3B:71:CB:BB:E8:4E:36 X509v3 Authority Key Identifier: keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7a:77:6c:4a:59:6b:93:4b:9f:39:03:f3:6b:dc:00:5b:84: 8d:5a:7d:4c:77:3c:13:08:b6:76:ea:d5:b0:5e:4c:42:50:4a: 18:be:7b:09:be:1b:78:0f:d0:50:72:75:f9:1e:a5:d3:22:0d: 42:af:9d:8b:e8:1d:80:c2:65:1d:6d:c6:94:ff:a1:c3:da:64: 9b:1e:2e:e7:8a:a3:76:f8:78:6a:5b:75:64:48:f4:ef:82:15: b8:bc:3c:ea:a1:e3:a5:6e:09:39:90:5a:b3:f8:f3:a2:b2:f9: 69:8e:e7:99:69:c7:ae:c6:1c:41:9d:f0:de:4e:04:e2:ef:e4: d1:82:aa:2d:ad:4f:8f:c0:b4:c8:79:f0:ca:cf:e2:f0:5a:7b: 28:37:84:b8:5b:00:36:85:0a:31:8b:70:04:60:8b:9d:af:a3: e6:a1:f6:75:ac:b5:29:64:20:e7:67:92:ad:90:20:47:d9:b2: 6e:af:b8:37:b6:8e:dc:b2:ca:79:d2:3b:74:de:5d:52:c4:93: 4a:66:04:fa:8c:df:23:a9:87:44:fa:39:6d:c9:83:1c:85:c8: 77:10:5d:50:22:e8:df:31:32:27:43:79:15:d1:6d:70:eb:b7: 99:5c:ae:e8:af:68:74:05:25:20:55:d6:87:0d:22:de:4d:b8: 07:a0:0a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KXqFmCU81ls1LJHGiR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1 OGUyOTYwHhcNMjUxMjIwMTgwMTQwWhcNMjUxMjIxMTgwMTQwWjAzMTEwLwYDVQQD EyhkMTEwOWIyYTk3ZWMxZTkxNzY5YzU2ODIwYjNiNzFjYmJiZTg0ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hI19ELErpFefnCvzdRlKrVLOjCM QhwPCd8bBlovz5YY4mxqucWsSy1SDuvsOoEbukJU9JYs4JavaCbLi0OXryS4JHCV dKF2uWm7yMAq/HeApmqR9ZIfukAd4P9KHkW5GFXq9oyNHjGuZeN9x2LeLiUcICax vrl/VFgVnGeLygRqDC9+ULw0DJPQJ8rlPbiTpRBkt5gRX2SHpxf0oeJeRe5J6LcG lrreZHunE9Rz+ZyNqwNvN3Qg7pZPcOywBU7phOIphaodOgG9VYcEs5tHX6ea+7Sc BWa+N1WgdLJtjTR1IMFczbL6pTns96aR++1oez3YmF2fioaxksxrmFIr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEQmyqX7B6RdpxWggs7ccu76E42MB8GA1UdIwQY MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnp3bEpZ a5NLnzkD82vcAFuEjVp9THc8Ewi2durVsF5MQlBKGL57Cb4beA/QUHJ1+R6l0yIN Qq+di+gdgMJlHW3GlP+hw9pkmx4u54qjdvh4alt1ZEj074IVuLw86qHjpW4JOZBa s/jzorL5aY7nmWnHrsYcQZ3w3k4E4u/k0YKqLa1Pj8C0yHnwys/i8Fp7KDeEuFsA NoUKMYtwBGCLna+j5qH2day1KWQg52eSrZAgR9mybq+4N7aO3LLKedI7dN5dUsST SmYE+ozfI6mHRPo5bcmDHIXIdxBdUCLo3zEyJ0N5FdFtcOu3mVyu6K9odAUlIFXW hw0i3k24B6AKYg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:39:18 2025 by rpki-client