This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json) Hash identifier: VsnoiGbkQmFiSEzbevON+7HoW3QyamVqAiC02/cuBXI= Subject key identifier: 2E:BD:12:76:DA:C9:2C:58:7F:F5:28:CA:20:A0:01:4C:62:08:B5:00 Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27 Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27 Certificate serial: 019B3C7ED1940760B1CF07545475A50B60D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft Manifest number: 0D2B Signing time: Sat 20 Dec 2025 16:01:42 +0000 Manifest this update: Sat 20 Dec 2025 16:01:42 +0000 Manifest next update: Sun 21 Dec 2025 16:01:42 +0000 Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: EE+T3TRZniXHGdLrG1bk/BlDoqvsZqVPudiiqm3hE2k=) 2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=) 3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d1:94:07:60:b1:cf:07:54:54:75:a5:0b:60:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27 Validity Not Before: Dec 20 16:01:42 2025 GMT Not After : Dec 21 16:01:42 2025 GMT Subject: CN=2ebd1276dac92c587ff528ca20a0014c6208b500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:5e:42:ef:fc:b5:7f:ff:51:2b:c4:ad:19: 16:90:55:02:fc:88:68:a6:6d:1e:5d:1b:6b:be:76: ff:16:78:6d:1d:ba:1f:4a:8a:76:3e:f8:9c:e0:47: 12:65:a3:09:c9:cb:3a:c6:92:90:f6:75:57:57:d1: b2:62:c4:38:af:01:fa:ef:16:79:9a:d1:97:bd:7d: 4a:88:9e:14:4e:a7:47:5b:58:b2:98:ee:92:f3:2e: 8d:50:f4:14:ad:a7:1d:e6:e7:4c:ba:e9:16:7a:b5: 3e:e9:11:9c:30:c4:d2:a2:48:0a:d8:a0:7e:18:85: c1:c4:b8:fd:ef:85:be:fc:07:88:27:a8:46:69:5a: 01:77:0c:07:1f:a3:2a:9c:7e:ac:9a:5e:a6:8a:3d: b3:72:4c:24:ef:f1:d7:e1:40:1c:b8:cd:df:fa:e1: ce:f0:e3:ea:81:02:d7:a8:c8:46:68:ce:28:bd:4c: 70:b7:28:a7:6f:7f:28:bb:fa:94:27:aa:1e:8c:6d: 44:98:1a:5a:32:42:8f:42:f2:30:d2:f4:12:3b:65: 03:cc:7a:a9:4f:80:72:ea:57:63:25:d3:b9:fe:e1: f8:cf:a9:21:2e:70:89:f4:b6:0d:fd:a6:b2:f5:f5: d7:65:91:d8:fb:eb:5f:b7:fc:fe:e5:c3:00:b4:86: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:12:76:DA:C9:2C:58:7F:F5:28:CA:20:A0:01:4C:62:08:B5:00 X509v3 Authority Key Identifier: keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2a:88:bc:c8:2c:3c:b0:f8:74:14:6d:8b:1f:78:02:1a:3c: 22:41:0a:e8:fd:26:6d:d4:39:2c:45:a8:b4:46:8f:f0:a5:14: 79:2c:f0:65:ce:bc:4c:66:39:f3:5b:2a:e2:06:06:8a:ea:d3: 6e:07:26:db:e2:89:f7:6b:1a:35:8f:da:7c:71:96:0e:cf:bb: 31:93:6f:f4:06:f7:96:08:7b:e6:2d:2d:f0:03:12:8b:6a:eb: 07:1e:dd:76:d0:44:80:f6:67:43:e8:6c:01:74:b9:0b:80:69: 2e:6a:9a:ae:9e:dc:68:fc:96:13:13:25:03:61:6b:64:5b:0c: 24:e4:a1:a6:b0:59:2a:06:8e:50:df:08:bb:d8:6c:10:3a:28: 13:ba:3f:db:c7:34:e4:9b:4a:bc:e8:0b:20:5e:5f:6c:25:d6: d0:d4:a8:a1:f5:b3:ee:91:64:fa:ff:e1:90:7e:b8:61:fb:72: 49:08:2d:9f:5a:68:d3:f5:1e:08:75:98:8c:ca:fb:dd:6b:9f: 7e:87:cd:d4:cd:cd:68:71:40:93:80:04:49:9c:e9:35:9d:cd: 45:b1:ec:3a:41:37:37:dc:09:3c:88:d8:ea:85:54:63:b4:fa: fe:c9:93:d0:12:7a:9d:ec:9b:7f:cf:8a:62:40:8e:a0:5d:d0: c5:23:be:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftGUB2CxzwdUVHWlC2DSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz MGJkMjcwHhcNMjUxMjIwMTYwMTQyWhcNMjUxMjIxMTYwMTQyWjAzMTEwLwYDVQQD EygyZWJkMTI3NmRhYzkyYzU4N2ZmNTI4Y2EyMGEwMDE0YzYyMDhiNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvheQu/8tX//USvErRkWkFUC/Iho pm0eXRtrvnb/FnhtHbofSop2Pvic4EcSZaMJycs6xpKQ9nVXV9GyYsQ4rwH67xZ5 mtGXvX1KiJ4UTqdHW1iymO6S8y6NUPQUracd5udMuukWerU+6RGcMMTSokgK2KB+ GIXBxLj974W+/AeIJ6hGaVoBdwwHH6MqnH6sml6mij2zckwk7/HX4UAcuM3f+uHO 8OPqgQLXqMhGaM4ovUxwtyinb38ou/qUJ6oejG1EmBpaMkKPQvIw0vQSO2UDzHqp T4By6ldjJdO5/uH4z6khLnCJ9LYN/aay9fXXZZHY++tft/z+5cMAtIZaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC69EnbaySxYf/UoyiCgAUxiCLUAMB8GA1UdIwQY MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt ODY1MDMxZmEwYmY3LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3 LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyqIvMgs PLD4dBRtix94Aho8IkEK6P0mbdQ5LEWotEaP8KUUeSzwZc68TGY581sq4gYGiurT bgcm2+KJ92saNY/afHGWDs+7MZNv9Ab3lgh75i0t8AMSi2rrBx7ddtBEgPZnQ+hs AXS5C4BpLmqarp7caPyWExMlA2FrZFsMJOShprBZKgaOUN8Iu9hsEDooE7o/28c0 5JtKvOgLIF5fbCXW0NSoofWz7pFk+v/hkH64YftySQgtn1po0/UeCHWYjMr73Wuf fofN1M3NaHFAk4AESZzpNZ3NRbHsOkE3N9wJPIjY6oVUY7T6/smT0BJ6neybf8+K YkCOoF3QxSO+HA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:52 2025 by rpki-client