This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json) Hash identifier: vqpWHeCbwzvDGjZQKpT0dn4Zi+IiNT4G1DNcsy6dDe8= Subject key identifier: 85:B5:E6:7E:86:E5:1F:B2:D5:B9:C9:1F:CC:57:C8:4C:1C:15:BD:43 Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d Certificate serial: 019B4DDF776E2DE91981E2B62A9E81964F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 01:00:49 +0000 Manifest this update: Wed 24 Dec 2025 01:00:49 +0000 Manifest next update: Thu 25 Dec 2025 01:00:49 +0000 Files and hashes: 1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=) 2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=) 3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=) 4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=) 5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=) 6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=) 7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: h1byu6F7W0HKvDvNf8357qtb/IO2l5cRKLMPrNrjlOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:77:6e:2d:e9:19:81:e2:b6:2a:9e:81:96:4f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d Validity Not Before: Dec 24 01:00:49 2025 GMT Not After : Dec 25 01:00:49 2025 GMT Subject: CN=85b5e67e86e51fb2d5b9c91fcc57c84c1c15bd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:d6:cf:01:56:9c:bc:00:e8:03:1f:22:64: c5:5a:12:28:bf:f0:ef:0b:bc:67:99:e0:93:0d:8e: 60:c6:b8:48:7f:65:9f:25:07:c8:75:5d:64:20:e7: 0c:1f:a0:c4:fb:b4:92:14:89:09:89:8b:43:44:00: 3c:cf:7a:07:16:b0:a1:6d:22:d2:8a:b8:b3:93:9d: 64:c1:3d:8a:94:95:0a:e7:dc:fd:4e:94:27:bc:35: 24:e7:bc:a1:96:00:ee:5b:3e:4c:b4:13:5f:f9:60: 80:78:6f:5c:64:02:87:73:ad:46:c0:dd:74:a1:7e: 68:87:9a:5e:e0:80:4d:8c:5f:37:82:da:9c:f1:aa: e7:ce:da:ea:2d:94:53:53:c3:c5:45:03:b2:25:2a: b1:2d:3e:e2:08:71:67:ab:66:4f:29:72:bd:f3:c5: 74:9d:45:0c:9e:65:d2:5c:94:c2:8b:63:66:92:80: fe:19:05:4b:59:be:dd:ed:b4:0c:8f:49:f1:d5:74: be:53:7c:b2:57:cc:69:72:0b:be:8d:af:19:17:49: 25:6b:0a:08:c6:8d:75:51:44:c9:e3:d6:2d:ea:f0: 25:f3:f8:21:db:33:d0:f7:f0:a2:fc:a8:9a:0e:1f: ce:91:cf:9d:5d:27:a6:f6:a9:9c:93:ef:b0:60:20: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B5:E6:7E:86:E5:1F:B2:D5:B9:C9:1F:CC:57:C8:4C:1C:15:BD:43 X509v3 Authority Key Identifier: keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:91:56:b4:74:2b:31:b2:51:14:08:56:dd:d1:a1:11:41:67: f2:e7:7b:68:22:67:fc:72:6d:55:df:7d:0e:4f:df:04:2f:8e: 50:c6:94:81:70:af:00:b1:e9:d3:46:34:8d:93:75:2e:7d:63: ad:f8:ad:0c:d7:be:a9:7d:55:46:2a:22:73:15:76:1b:c5:9e: 25:b5:f8:0b:64:16:d9:2e:6f:73:25:64:37:02:d3:6b:06:3e: aa:85:f5:e9:74:a8:71:0c:bd:48:49:fc:83:79:a4:19:08:38: cc:13:c2:f9:74:c6:33:66:dd:2f:c8:1d:7e:03:ed:32:7b:79: 78:bf:10:70:69:a5:16:d4:b5:7f:a2:d3:1b:ac:3c:3c:84:34: 30:fb:d4:3c:0d:92:ef:08:67:9c:db:6b:7f:9a:1e:a4:57:ca: 7e:8b:c5:08:15:6b:66:0a:0e:fc:19:87:02:62:59:67:77:d7: 2d:d8:f1:22:0c:2f:f4:71:b4:e6:ee:e8:d9:a3:4f:94:ba:97: a9:b7:8a:b9:6c:ac:8c:ab:e5:e7:80:37:a2:04:18:3e:f3:a0: 0d:d5:ac:05:19:c2:90:89:15:51:ad:a3:99:3b:aa:bc:f9:bc: 46:50:50:e3:c5:7d:fc:aa:a7:ea:2e:35:cd:13:9c:56:f9:b2: e2:52:c1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN33duLekZgeK2Kp6Blk8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx ODRlMWQwHhcNMjUxMjI0MDEwMDQ5WhcNMjUxMjI1MDEwMDQ5WjAzMTEwLwYDVQQD Eyg4NWI1ZTY3ZTg2ZTUxZmIyZDViOWM5MWZjYzU3Yzg0YzFjMTViZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGDWzwFWnLwA6AMfImTFWhIov/Dv C7xnmeCTDY5gxrhIf2WfJQfIdV1kIOcMH6DE+7SSFIkJiYtDRAA8z3oHFrChbSLS irizk51kwT2KlJUK59z9TpQnvDUk57yhlgDuWz5MtBNf+WCAeG9cZAKHc61GwN10 oX5oh5pe4IBNjF83gtqc8arnztrqLZRTU8PFRQOyJSqxLT7iCHFnq2ZPKXK988V0 nUUMnmXSXJTCi2NmkoD+GQVLWb7d7bQMj0nx1XS+U3yyV8xpcgu+ja8ZF0klawoI xo11UUTJ49Yt6vAl8/gh2zPQ9/Ci/KiaDh/Okc+dXSem9qmck++wYCCOMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW15n6G5R+y1bnJH8xXyEwcFb1DMB8GA1UdIwQY MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt ZDAwM2U1NmZlNzUzLzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpFWtHQr MbJRFAhW3dGhEUFn8ud7aCJn/HJtVd99Dk/fBC+OUMaUgXCvALHp00Y0jZN1Ln1j rfitDNe+qX1VRioicxV2G8WeJbX4C2QW2S5vcyVkNwLTawY+qoX16XSocQy9SEn8 g3mkGQg4zBPC+XTGM2bdL8gdfgPtMnt5eL8QcGmlFtS1f6LTG6w8PIQ0MPvUPA2S 7whnnNtrf5oepFfKfovFCBVrZgoO/BmHAmJZZ3fXLdjxIgwv9HG05u7o2aNPlLqX qbeKuWysjKvl54A3ogQYPvOgDdWsBRnCkIkVUa2jmTuqvPm8RlBQ48V9/Kqn6i41 zROcVvmy4lLBFw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:48 2025 by rpki-client