This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json) Hash identifier: Z9gtbT86ujxrrMki/SDwq1RZ74PfC1BemDKxsKgBky0= Subject key identifier: 41:04:D8:CC:55:5C:25:C9:29:D1:A5:FD:FF:22:D9:EB:28:0B:CD:C4 Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Certificate serial: 019B4EF2235E4A79CAF56DD5FDC5C76DB8B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft Manifest number: 0825 Signing time: Wed 24 Dec 2025 06:00:50 +0000 Manifest this update: Wed 24 Dec 2025 06:00:50 +0000 Manifest next update: Thu 25 Dec 2025 06:00:50 +0000 Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: XCBQ9MJdxZ+jiiwvBxbz3+dahmrGQ5kkHZTbW0Se57g=) 2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:23:5e:4a:79:ca:f5:6d:d5:fd:c5:c7:6d:b8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Validity Not Before: Dec 24 06:00:50 2025 GMT Not After : Dec 25 06:00:50 2025 GMT Subject: CN=4104d8cc555c25c929d1a5fdff22d9eb280bcdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:d0:9d:df:06:40:ad:f5:11:90:e0:3e:77: 10:66:5f:64:03:9c:c2:f1:cf:b5:5c:e7:df:4c:ba: 48:9e:d4:60:51:0f:1a:e1:7e:e1:33:33:cf:b3:7f: ad:d6:c1:ea:da:68:8f:84:01:42:9e:b9:26:66:e5: 97:be:54:4f:60:64:3c:18:c8:80:20:8d:ef:b4:ba: 6c:63:39:b3:32:8c:f2:ec:08:66:8f:7a:20:af:a3: 01:29:ef:cc:b9:21:13:29:ca:ee:1a:18:c3:18:69: c9:b9:a2:6c:07:54:e9:0d:fa:6b:64:32:57:56:5f: 9c:34:0b:67:a9:f1:a1:20:e2:9a:28:03:2f:1e:a7: 02:be:18:ed:45:61:2e:59:37:a0:29:ce:e9:20:d9: a4:93:24:b7:0c:55:00:26:4d:42:22:8d:fa:5b:4e: 32:37:b6:14:94:ff:e9:bb:9b:fd:5b:95:bb:92:66: 49:9c:06:db:24:5a:c0:0c:21:b8:40:08:1c:46:e9: 7f:0f:f7:77:f7:7e:c4:48:24:fa:45:26:bf:d6:1b: 75:7c:25:9b:98:1e:f2:c3:1d:c6:90:3a:1a:7f:44: d8:29:66:1c:8e:89:87:c2:96:e5:48:9a:ec:12:6d: 68:eb:15:4b:ec:fe:13:30:41:01:44:37:99:7d:7b: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:D8:CC:55:5C:25:C9:29:D1:A5:FD:FF:22:D9:EB:28:0B:CD:C4 X509v3 Authority Key Identifier: keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0e:94:a8:b3:b5:cd:81:5a:b2:5d:97:e8:c7:10:3c:bb:3a: 20:75:97:39:25:27:6c:1a:c2:35:f0:79:e5:6c:41:6c:b1:60: 57:12:5f:26:f0:62:71:ca:89:6f:43:7c:d8:1d:ae:40:f7:21: d3:47:ac:52:8c:3b:bb:a9:47:1c:36:2c:c8:83:ba:e4:7a:02: dc:47:58:2c:a8:cd:ee:49:76:a2:5f:23:b7:c1:47:65:8e:7e: b8:e0:bb:f0:90:4b:20:99:c6:d0:65:2d:fc:03:46:60:dd:37: f2:af:2b:4b:15:ad:d7:7f:5b:2b:c9:8f:8d:fc:29:d1:58:5e: 0d:75:29:c2:5a:b4:29:94:85:d5:3b:01:8f:10:07:ab:00:62: f0:fc:32:67:19:65:b4:58:bb:31:dd:c3:0c:64:fa:06:d3:b4: aa:5d:6b:0b:26:54:c5:a4:f0:f1:88:33:51:1e:83:99:d5:b2: 49:6b:9a:60:a2:f2:cb:84:bc:17:09:11:f1:ec:57:0a:d3:aa: 00:ed:3e:f7:90:09:22:88:05:37:4d:71:72:f3:7e:b7:ca:4d: 76:b3:d0:96:c0:35:aa:10:8d:e0:aa:a7:e6:30:e4:f5:02:88: af:40:1d:18:23:95:44:51:ff:4d:76:fa:85:d7:1b:42:2a:8c: e3:a4:fc:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8iNeSnnK9W3V/cXHbbixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDNhOWIyMGQyYWZkMDFkOWExYzYyOGQzMDFiOTljODdj YzVhY2QwHhcNMjUxMjI0MDYwMDUwWhcNMjUxMjI1MDYwMDUwWjAzMTEwLwYDVQQD Eyg0MTA0ZDhjYzU1NWMyNWM5MjlkMWE1ZmRmZjIyZDllYjI4MGJjZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vXQnd8GQK31EZDgPncQZl9kA5zC 8c+1XOffTLpIntRgUQ8a4X7hMzPPs3+t1sHq2miPhAFCnrkmZuWXvlRPYGQ8GMiA II3vtLpsYzmzMozy7Ahmj3ogr6MBKe/MuSETKcruGhjDGGnJuaJsB1TpDfprZDJX Vl+cNAtnqfGhIOKaKAMvHqcCvhjtRWEuWTegKc7pINmkkyS3DFUAJk1CIo36W04y N7YUlP/pu5v9W5W7kmZJnAbbJFrADCG4QAgcRul/D/d3937ESCT6RSa/1ht1fCWb mB7ywx3GkDoaf0TYKWYcjomHwpblSJrsEm1o6xVL7P4TMEEBRDeZfXtFcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEE2MxVXCXJKdGl/f8i2esoC83EMB8GA1UdIwQY MBaAFHsDqbINKv0B2aHGKNMBuZyHzFrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMt YTdkMTllYzA3ZjEzLzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMtYTdkMTllYzA3ZjEz LzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw6UqLO1 zYFasl2X6McQPLs6IHWXOSUnbBrCNfB55WxBbLFgVxJfJvBiccqJb0N82B2uQPch 00esUow7u6lHHDYsyIO65HoC3EdYLKjN7kl2ol8jt8FHZY5+uOC78JBLIJnG0GUt /ANGYN038q8rSxWt139bK8mPjfwp0VheDXUpwlq0KZSF1TsBjxAHqwBi8PwyZxll tFi7Md3DDGT6BtO0ql1rCyZUxaTw8YgzUR6DmdWySWuaYKLyy4S8FwkR8exXCtOq AO0+95AJIogFN01xcvN+t8pNdrPQlsA1qhCN4Kqn5jDk9QKIr0AdGCOVRFH/TXb6 hdcbQiqM46T8jQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:24 2025 by rpki-client