This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft File: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json) Hash identifier: 5DJ6OC8RruTnul0vrogkSmGoLnh0ZMkPqwm3LBu3t+o= Subject key identifier: 8E:B0:DF:C3:CD:72:8F:8F:46:45:24:C1:45:61:31:92:DD:14:BD:57 Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90 Certificate issuer: /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90 Certificate serial: 019B4C5F97C30D6DC237A59A5EFDF825B033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft Manifest number: 072A Signing time: Tue 23 Dec 2025 18:01:31 +0000 Manifest this update: Tue 23 Dec 2025 18:01:31 +0000 Manifest next update: Wed 24 Dec 2025 18:01:31 +0000 Files and hashes: 1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=) 2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: D1EC567BeX1IHUQL6q/yXom+boWXNUpHp06UdAHpkfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:97:c3:0d:6d:c2:37:a5:9a:5e:fd:f8:25:b0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90 Validity Not Before: Dec 23 18:01:31 2025 GMT Not After : Dec 24 18:01:31 2025 GMT Subject: CN=8eb0dfc3cd728f8f464524c145613192dd14bd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:88:8b:7a:9c:5c:e5:85:12:d9:b0:b7:87: b8:69:01:ce:9e:39:03:d8:66:8f:86:c3:83:32:a5: 37:91:0f:59:1b:b1:36:20:29:57:b5:c9:bd:e5:2e: 91:a3:11:79:d0:2e:0d:ad:9c:aa:6f:9a:f6:1b:44: d5:e0:5d:31:dd:f0:20:c3:bf:b9:53:08:95:3e:09: 2d:16:b7:11:9a:f4:6c:7c:61:d2:8e:8f:99:ca:52: 3e:76:4c:5b:bd:b0:12:e3:f1:de:b1:27:2c:3d:fd: 68:33:49:cf:97:d9:1c:f0:d4:5c:54:4b:1e:74:6d: 7d:1d:9b:d9:18:b3:44:a4:ca:c5:9d:2e:54:50:2d: 51:97:a8:fe:e6:6b:b6:06:9e:c0:d3:a0:33:8e:2b: 5c:a2:0c:61:4b:00:24:2c:0b:47:de:25:2d:50:3f: 55:b5:96:75:92:49:1a:e8:b2:02:04:44:8f:07:d4: 58:08:a3:53:59:6c:9d:b8:ef:d3:89:17:fb:d1:db: b9:09:cb:35:e0:44:95:24:41:08:05:46:6b:b9:b9: 7d:ba:01:3b:bf:a4:a0:46:1a:eb:04:9f:6b:68:f4: dd:c5:e5:74:9a:7e:1a:c5:f1:b7:d5:c1:1d:47:9e: 08:72:06:e0:2b:9e:3b:57:14:52:32:bc:a0:fa:dc: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B0:DF:C3:CD:72:8F:8F:46:45:24:C1:45:61:31:92:DD:14:BD:57 X509v3 Authority Key Identifier: keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c7:7c:55:27:d9:de:52:2a:51:ca:40:49:52:83:49:1a:e0: fe:7a:da:6c:1a:a8:79:27:73:2e:ea:6b:08:45:7d:e5:3e:cd: 5a:26:c6:1d:57:1b:92:f3:8f:cc:aa:02:80:da:9a:6a:8a:43: f2:82:02:f3:72:08:50:f8:87:eb:a3:66:06:6d:99:e4:49:ee: ae:75:67:3e:0d:8b:38:41:af:96:ad:98:aa:bb:1c:70:50:f8: f5:86:aa:1b:2b:77:30:e7:d0:1c:8e:57:a6:a8:8d:bf:54:cb: 19:d2:3d:5f:fc:65:f7:b7:c7:df:6b:83:b7:a0:09:c3:8e:55: f7:de:7f:30:90:31:fc:d5:54:3f:3f:e3:c2:62:ef:10:f6:39: 77:7e:99:5c:64:f6:28:68:cf:85:ff:ee:6c:c1:cf:fc:55:7f: e6:d8:25:78:67:12:50:39:25:78:37:a0:ec:4d:0e:b6:d2:f9: fe:d8:c4:79:39:e1:79:19:d3:28:47:07:f9:d7:f9:d3:2f:22: 06:a7:09:e1:a4:31:c0:1c:11:28:33:fc:53:db:77:46:88:b9: 4f:d1:40:d4:8e:1c:23:72:e5:5e:64:e4:68:3c:cb:da:4d:08: 75:de:5d:71:ec:9d:5a:00:07:ed:a5:8a:a2:44:32:4d:1e:c1: d3:7b:56:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX5fDDW3CN6WaXv34JbAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODNmM2YxOTU5NzRmMGU5MDA4NGUwZTMyN2ZmNWI2Njdl NmZkOTAwHhcNMjUxMjIzMTgwMTMxWhcNMjUxMjI0MTgwMTMxWjAzMTEwLwYDVQQD Eyg4ZWIwZGZjM2NkNzI4ZjhmNDY0NTI0YzE0NTYxMzE5MmRkMTRiZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUmIi3qcXOWFEtmwt4e4aQHOnjkD 2GaPhsODMqU3kQ9ZG7E2IClXtcm95S6RoxF50C4NrZyqb5r2G0TV4F0x3fAgw7+5 UwiVPgktFrcRmvRsfGHSjo+ZylI+dkxbvbAS4/HesScsPf1oM0nPl9kc8NRcVEse dG19HZvZGLNEpMrFnS5UUC1Rl6j+5mu2Bp7A06AzjitcogxhSwAkLAtH3iUtUD9V tZZ1kkka6LICBESPB9RYCKNTWWyduO/TiRf70du5Ccs14ESVJEEIBUZrubl9ugE7 v6SgRhrrBJ9raPTdxeV0mn4axfG31cEdR54IcgbgK547VxRSMryg+txTFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6w38PNco+PRkUkwUVhMZLdFL1XMB8GA1UdIwQY MBaAFBCD8/GVl08OkAhODjJ/9bZn5v2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUt M2IxYzU1ZTNkZTk3LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUtM2IxYzU1ZTNkZTk3 LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8d8VSfZ 3lIqUcpASVKDSRrg/nrabBqoeSdzLuprCEV95T7NWibGHVcbkvOPzKoCgNqaaopD 8oIC83IIUPiH66NmBm2Z5EnurnVnPg2LOEGvlq2YqrsccFD49YaqGyt3MOfQHI5X pqiNv1TLGdI9X/xl97fH32uDt6AJw45V995/MJAx/NVUPz/jwmLvEPY5d36ZXGT2 KGjPhf/ubMHP/FV/5tgleGcSUDkleDeg7E0OttL5/tjEeTnheRnTKEcH+df50y8i BqcJ4aQxwBwRKDP8U9t3Roi5T9FA1I4cI3LlXmTkaDzL2k0Idd5dceydWgAH7aWK okQyTR7B03tW+Q== -----END CERTIFICATE-----Generated at Wed Dec 24 03:36:07 2025 by rpki-client