This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json) Hash identifier: BfrdtQedJSTmclIbLGygYoCKT7GueAA9jCde3KjDOmE= Subject key identifier: 42:04:17:EE:7A:49:A1:C4:03:F6:AA:5F:24:01:5A:CA:44:F7:AB:38 Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Certificate serial: 019B5DC0724DD8FD9D2985908E019EEF6569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft Manifest number: 0653 Signing time: Sat 27 Dec 2025 03:00:51 +0000 Manifest this update: Sat 27 Dec 2025 03:00:51 +0000 Manifest next update: Sun 28 Dec 2025 03:00:51 +0000 Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: V6c5smOnGvZEQm58KBopb0bZm95d556FvQ8y7kVee0w=) 2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=) 3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:72:4d:d8:fd:9d:29:85:90:8e:01:9e:ef:65:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Validity Not Before: Dec 27 03:00:51 2025 GMT Not After : Dec 28 03:00:51 2025 GMT Subject: CN=420417ee7a49a1c403f6aa5f24015aca44f7ab38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:2b:98:b7:24:9a:92:f3:fb:25:15:dd:98: 32:e6:0b:20:73:3c:f5:00:e8:d0:71:eb:d8:39:3d: a5:c0:0b:27:9f:00:59:56:0a:1b:62:6e:a2:15:28: 94:c0:92:9c:77:c6:23:b1:f0:b3:e5:dd:dd:4b:1d: 4a:41:10:7d:39:bc:0b:d9:e3:df:5f:32:76:d4:eb: 67:b1:85:11:ca:35:64:65:e3:3f:db:cd:bb:b3:5d: aa:3f:9d:af:6e:a1:02:04:d7:5c:62:1d:4e:64:69: 93:13:87:57:9b:89:be:6d:d0:50:db:70:2a:51:f4: d9:3d:6b:9c:79:ea:62:a4:78:10:7e:7d:87:e9:d7: 49:bb:2d:85:04:23:ad:8c:8f:9a:cc:a7:a4:ee:f1: 8f:b9:88:98:e8:ae:96:f9:9e:92:74:02:24:2c:1a: fa:01:60:17:96:1d:ae:09:6d:56:fa:e7:0c:9f:ed: 40:ff:9e:49:55:1c:7d:43:d3:76:06:10:a7:03:29: 3d:3f:e6:b4:e5:c7:f5:45:d9:83:d4:21:95:82:ff: b0:bf:47:97:f2:ea:34:d5:40:de:21:ee:72:5b:1c: c2:a5:35:76:27:87:5d:7c:ef:72:a2:71:91:ec:10: 44:4c:74:b7:1e:86:f1:d8:bc:82:01:cd:fe:10:9f: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:17:EE:7A:49:A1:C4:03:F6:AA:5F:24:01:5A:CA:44:F7:AB:38 X509v3 Authority Key Identifier: keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:86:c6:f7:51:da:a5:09:d3:63:d8:91:1b:f0:9a:51:2f: 2f:e2:d4:f7:b4:21:d2:66:32:2e:0b:33:21:c8:f0:5f:32:8b: 06:13:e9:c8:4f:d5:af:9d:91:85:9e:c5:39:7b:b7:22:d6:a5: 05:f5:cc:1e:cc:31:41:6d:f4:54:37:4e:6d:97:d3:77:3b:1d: b9:bc:21:d9:73:a3:7f:6c:2a:02:d9:da:8e:ff:85:35:85:30: c4:de:97:47:50:97:46:bb:bb:8b:1e:7a:05:18:0d:54:e7:19: 44:ea:0d:6a:d6:da:c3:03:c8:f2:a1:c4:ce:91:38:e0:7e:08: 51:66:5a:df:bc:55:c8:29:be:29:e2:71:8f:d8:c0:62:69:2a: 8e:71:41:86:85:04:a5:8c:26:77:43:34:8f:ef:ee:e6:3c:ec: 0a:92:4e:a6:20:56:20:a4:f2:1d:f4:61:4b:45:b5:eb:7d:a5: b5:51:5a:98:a3:ce:f9:69:84:8a:18:f3:70:67:75:f2:9d:48: 39:c2:04:c5:2e:01:56:7c:16:c8:72:d2:c7:4f:e5:29:72:74: 6a:44:42:04:eb:d4:cb:44:11:02:22:d9:70:64:be:57:c5:dd: ac:c7:d9:e9:4f:4b:31:32:6f:d9:60:76:7b:3d:c5:ef:72:d9: 4c:3d:c0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwHJN2P2dKYWQjgGe72VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDZjZGM2ZmQzMzJkODhiZTJhYjA5MWVjZTc0ZDc2MjRk MzU5ZjEwHhcNMjUxMjI3MDMwMDUxWhcNMjUxMjI4MDMwMDUxWjAzMTEwLwYDVQQD Eyg0MjA0MTdlZTdhNDlhMWM0MDNmNmFhNWYyNDAxNWFjYTQ0ZjdhYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAgrmLckmpLz+yUV3Zgy5gsgczz1 AOjQcevYOT2lwAsnnwBZVgobYm6iFSiUwJKcd8YjsfCz5d3dSx1KQRB9ObwL2ePf XzJ21OtnsYURyjVkZeM/2827s12qP52vbqECBNdcYh1OZGmTE4dXm4m+bdBQ23Aq UfTZPWuceepipHgQfn2H6ddJuy2FBCOtjI+azKek7vGPuYiY6K6W+Z6SdAIkLBr6 AWAXlh2uCW1W+ucMn+1A/55JVRx9Q9N2BhCnAyk9P+a05cf1RdmD1CGVgv+wv0eX 8uo01UDeIe5yWxzCpTV2J4ddfO9yonGR7BBETHS3Hobx2LyCAc3+EJ9KYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIEF+56SaHEA/aqXyQBWspE96s4MB8GA1UdIwQY MBaAFHvWzcb9My2IviqwkeznTXYk01nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEt NjFjNGEyNTZmOWFkLzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEtNjFjNGEyNTZmOWFk LzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMaGxvdR 2qUJ02PYkRvwmlEvL+LU97Qh0mYyLgszIcjwXzKLBhPpyE/Vr52RhZ7FOXu3Ital BfXMHswxQW30VDdObZfTdzsdubwh2XOjf2wqAtnajv+FNYUwxN6XR1CXRru7ix56 BRgNVOcZROoNatbawwPI8qHEzpE44H4IUWZa37xVyCm+KeJxj9jAYmkqjnFBhoUE pYwmd0M0j+/u5jzsCpJOpiBWIKTyHfRhS0W1632ltVFamKPO+WmEihjzcGd18p1I OcIExS4BVnwWyHLSx0/lKXJ0akRCBOvUy0QRAiLZcGS+V8XdrMfZ6U9LMTJv2WB2 ez3F73LZTD3AZQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:28 2025 by rpki-client