This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json) Hash identifier: olF1zZIlyhqH3R4HSgtU07sjXui5qDNTZ++2vZBE7Qw= Subject key identifier: C2:2A:EA:79:A7:19:CD:52:4D:FC:62:4E:9F:60:EA:17:06:AC:0C:04 Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0 Certificate serial: 019B3EA3A1867D1507C7CB67D5F1C65E823C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 02:01:09 +0000 Manifest this update: Sun 21 Dec 2025 02:01:09 +0000 Manifest next update: Mon 22 Dec 2025 02:01:09 +0000 Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: o5IkwDYeDDzAjj48Zol9vdq/BLdtuhTdKU8oDXVPzaw=) 2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a1:86:7d:15:07:c7:cb:67:d5:f1:c6:5e:82:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0 Validity Not Before: Dec 21 02:01:09 2025 GMT Not After : Dec 22 02:01:09 2025 GMT Subject: CN=c22aea79a719cd524dfc624e9f60ea1706ac0c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:ba:31:d4:b1:cb:51:94:b8:87:47:89:54: 1a:cd:4d:ed:a1:b0:06:9b:86:41:e0:f4:c1:9e:74: f2:ca:d9:30:07:ea:3a:81:15:e4:61:16:e4:38:d6: 0a:88:81:39:cf:40:f1:1f:e3:59:07:d0:e1:f0:93: 4e:c6:86:e0:e0:55:a1:12:83:3b:49:ef:3f:24:90: 40:aa:e1:6c:fa:a9:4f:2a:46:da:0d:01:bc:da:39: 49:f2:a6:8d:b5:3c:45:4c:11:93:02:0a:2c:41:24: 92:7a:7a:0f:77:65:fa:c9:67:fd:3e:6b:13:f9:fa: cf:0f:c5:94:ae:0e:4c:6c:8d:aa:09:bb:be:22:4b: 77:43:1b:1c:b1:f6:9f:db:35:68:ad:9f:9b:02:9b: 59:ae:f6:19:b5:36:36:b5:dd:4e:28:45:fe:b5:09: dc:07:75:50:36:c0:58:4d:f1:e9:c2:ec:52:54:f1: 9c:2d:ef:12:70:ab:96:56:4f:55:a1:f6:cd:2e:c8: 69:e5:62:53:7d:24:c3:e2:88:ac:fe:dd:55:f5:79: f1:cb:e9:31:50:72:0e:cd:a6:18:cc:41:b7:eb:23: 44:bc:62:a1:70:81:34:b1:3e:06:5f:d5:12:75:6e: f3:de:4a:c8:c3:e3:36:84:da:e4:3b:31:cc:db:85: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:EA:79:A7:19:CD:52:4D:FC:62:4E:9F:60:EA:17:06:AC:0C:04 X509v3 Authority Key Identifier: keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:37:c3:ca:b4:7e:09:6c:14:d6:6c:b7:65:f7:5f:fe:c8:be: ac:04:97:9e:3e:df:9c:7a:59:ba:1b:60:7a:03:c6:0c:9a:5d: 9b:3f:cd:64:43:ae:a0:f7:31:83:20:fc:79:17:3f:11:b5:9d: 11:2a:9e:6e:b8:7a:ba:0b:81:37:7c:c3:67:47:f2:22:de:3b: 32:a5:69:1a:6a:e5:3c:34:de:bb:95:2a:95:26:01:f3:05:70: ec:8d:57:72:c1:5b:17:ec:68:a8:c4:fd:15:66:64:c5:a2:2c: 4a:27:2f:d4:bb:1f:40:c5:de:c7:d6:68:18:57:a0:ac:92:62: fa:8c:70:24:84:ee:f3:7a:26:69:2d:ea:13:82:17:9b:90:f1: a5:0f:d2:ef:a7:8a:f3:79:5f:d2:59:7c:4e:e2:93:36:11:16: 4b:00:74:0a:c4:b3:cf:10:f7:e8:ce:da:8b:d6:de:b9:ae:92: a9:ec:66:42:a1:8a:f1:3c:45:cb:91:bd:eb:9e:35:ab:2f:ad: c0:84:4b:12:14:43:65:e4:06:2e:38:be:59:f0:d2:2e:ad:1e: 7c:e6:8e:ce:70:71:ea:3c:bc:2f:06:30:a8:56:bc:2c:27:1a: 5c:5a:b1:28:2a:9c:e6:77:56:6f:c9:b5:45:a7:7a:c5:8a:98: de:79:93:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6GGfRUHx8tn1fHGXoI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzE3NTk4ODM3M2U1NmI2ZmZlMGIxNWExZmM3NWQ0Njkz YWUyYzAwHhcNMjUxMjIxMDIwMTA5WhcNMjUxMjIyMDIwMTA5WjAzMTEwLwYDVQQD EyhjMjJhZWE3OWE3MTljZDUyNGRmYzYyNGU5ZjYwZWExNzA2YWMwYzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYW6MdSxy1GUuIdHiVQazU3tobAG m4ZB4PTBnnTyytkwB+o6gRXkYRbkONYKiIE5z0DxH+NZB9Dh8JNOxobg4FWhEoM7 Se8/JJBAquFs+qlPKkbaDQG82jlJ8qaNtTxFTBGTAgosQSSSenoPd2X6yWf9PmsT +frPD8WUrg5MbI2qCbu+Ikt3Qxscsfaf2zVorZ+bAptZrvYZtTY2td1OKEX+tQnc B3VQNsBYTfHpwuxSVPGcLe8ScKuWVk9VofbNLshp5WJTfSTD4ois/t1V9Xnxy+kx UHIOzaYYzEG36yNEvGKhcIE0sT4GX9USdW7z3krIw+M2hNrkOzHM24VeDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIq6nmnGc1STfxiTp9g6hcGrAwEMB8GA1UdIwQY MBaAFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEt ZGZkNTFiMDZkZDk5LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEtZGZkNTFiMDZkZDk5 LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDfDyrR+ CWwU1my3Zfdf/si+rASXnj7fnHpZuhtgegPGDJpdmz/NZEOuoPcxgyD8eRc/EbWd ESqebrh6uguBN3zDZ0fyIt47MqVpGmrlPDTeu5UqlSYB8wVw7I1XcsFbF+xoqMT9 FWZkxaIsSicv1LsfQMXex9ZoGFegrJJi+oxwJITu83omaS3qE4IXm5DxpQ/S76eK 83lf0ll8TuKTNhEWSwB0CsSzzxD36M7ai9beua6SqexmQqGK8TxFy5G96541qy+t wIRLEhRDZeQGLji+WfDSLq0efOaOznBx6jy8LwYwqFa8LCcaXFqxKCqc5ndWb8m1 Rad6xYqY3nmTYg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:11 2025 by rpki-client