This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json) Hash identifier: jSDHsxkVcJnHwQXUX1y5jk4EvEho64ceY7KLnZDIQL0= Subject key identifier: 66:BD:A2:8E:DF:AF:79:A5:C8:70:BD:C6:29:B1:CB:42:FA:BE:2D:4D Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7 Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7 Certificate serial: 019B40FFF1B914977402E01B1E3CA989FE86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft Manifest number: 15DA Signing time: Sun 21 Dec 2025 13:01:13 +0000 Manifest this update: Sun 21 Dec 2025 13:01:13 +0000 Manifest next update: Mon 22 Dec 2025 13:01:13 +0000 Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=) 2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: qhMzdTHNu1WL7grc9wQr697WqkID0IVko5U5P44QKSw=) 3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f1:b9:14:97:74:02:e0:1b:1e:3c:a9:89:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7 Validity Not Before: Dec 21 13:01:13 2025 GMT Not After : Dec 22 13:01:13 2025 GMT Subject: CN=66bda28edfaf79a5c870bdc629b1cb42fabe2d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:c9:5b:78:1a:b3:db:76:ab:c3:f5:1e:83: 52:07:7a:e8:8b:d3:56:e0:69:0e:24:ec:2a:a1:de: b8:16:5d:79:90:4f:50:91:6d:39:54:c1:3d:51:3e: 90:da:eb:d6:73:b2:39:23:22:42:0f:45:09:0b:aa: 6d:41:56:80:89:97:44:c8:ad:40:16:2b:1f:57:1d: 19:3b:b5:a7:29:13:1d:36:cb:be:26:f7:8e:1a:64: f1:8d:3b:2b:c4:40:0f:9c:cd:f3:44:fe:92:45:cc: 70:b5:46:f0:d4:ea:10:c5:d2:a5:e5:18:75:f9:24: cc:36:d3:82:1c:e4:02:59:e4:b2:e6:cb:79:1f:a1: 7b:bb:4a:7b:96:7f:d6:de:7d:0f:14:5a:07:b5:b2: 70:7d:b9:a5:38:31:fc:23:7f:10:90:74:5a:f9:ff: ca:ce:a5:c7:4f:6e:86:04:b9:4e:4c:06:4f:be:36: 23:91:2f:2b:c1:9a:63:42:12:0c:ac:e8:27:4d:e0: f7:49:e9:29:00:a1:59:93:bc:0f:bd:1c:45:5d:78: 42:e0:e5:8e:f8:80:b8:55:33:48:6d:ab:af:54:6a: 29:9c:88:04:61:7c:4f:97:c6:d5:19:20:56:c8:5f: 8c:c6:bf:f9:f6:e7:bb:52:82:a8:12:e2:a0:64:3d: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BD:A2:8E:DF:AF:79:A5:C8:70:BD:C6:29:B1:CB:42:FA:BE:2D:4D X509v3 Authority Key Identifier: keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:21:d6:1c:b4:9f:64:82:4b:38:df:4d:ba:fc:37:94:05:c3: 93:55:68:a9:28:67:39:49:82:3c:c8:9a:df:40:ff:01:98:b9: 10:59:0c:fa:45:31:35:3b:cc:71:d0:24:58:cd:5a:3d:7e:f1: d4:4d:e0:9c:66:5f:68:cf:31:a2:07:e6:af:26:8f:53:23:79: 46:ba:1e:a6:13:b5:65:56:1a:d2:6c:9e:40:fa:ad:a0:92:14: 1b:3e:d9:85:0a:43:cd:23:e4:cd:1d:d8:b2:de:2f:d4:aa:08: 90:67:4f:70:46:8b:f9:58:d6:6a:e0:f5:7d:a4:5b:e6:07:02: 06:73:f1:a8:48:7a:ed:cf:9c:cd:a5:c1:fe:3c:4a:75:1e:43: 94:bf:8c:d3:d6:13:71:c1:50:74:82:d0:39:2f:dd:d1:92:fe: de:59:81:78:5a:cb:d0:71:d1:b4:f3:4a:cb:ff:75:70:55:30: 35:54:bc:61:0b:3a:cf:1e:7f:23:9a:e4:68:6c:c0:28:5e:f2: de:9c:e0:6f:10:d7:8d:a1:ef:f9:67:42:d6:ae:00:89:87:ea: 2b:be:82:d7:b3:f5:1a:1f:6c:48:fa:b0:5d:ef:5b:e5:93:2d: 03:a7:c9:f7:bd:c4:8f:f8:86:2b:3d:e1:ca:fd:55:d8:9a:b3: f0:3d:49:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//G5FJd0AuAbHjypif6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi MjVmZDcwHhcNMjUxMjIxMTMwMTEzWhcNMjUxMjIyMTMwMTEzWjAzMTEwLwYDVQQD Eyg2NmJkYTI4ZWRmYWY3OWE1Yzg3MGJkYzYyOWIxY2I0MmZhYmUyZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7JW3gas9t2q8P1HoNSB3roi9NW 4GkOJOwqod64Fl15kE9QkW05VME9UT6Q2uvWc7I5IyJCD0UJC6ptQVaAiZdEyK1A FisfVx0ZO7WnKRMdNsu+JveOGmTxjTsrxEAPnM3zRP6SRcxwtUbw1OoQxdKl5Rh1 +STMNtOCHOQCWeSy5st5H6F7u0p7ln/W3n0PFFoHtbJwfbmlODH8I38QkHRa+f/K zqXHT26GBLlOTAZPvjYjkS8rwZpjQhIMrOgnTeD3SekpAKFZk7wPvRxFXXhC4OWO +IC4VTNIbauvVGopnIgEYXxPl8bVGSBWyF+Mxr/59ue7UoKoEuKgZD0VIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa9oo7fr3mlyHC9ximxy0L6vi1NMB8GA1UdIwQY MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt NGJlZGQzYmQ2ZWExLzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCHWHLSf ZIJLON9Nuvw3lAXDk1VoqShnOUmCPMia30D/AZi5EFkM+kUxNTvMcdAkWM1aPX7x 1E3gnGZfaM8xogfmryaPUyN5RroephO1ZVYa0myeQPqtoJIUGz7ZhQpDzSPkzR3Y st4v1KoIkGdPcEaL+VjWauD1faRb5gcCBnPxqEh67c+czaXB/jxKdR5DlL+M09YT ccFQdILQOS/d0ZL+3lmBeFrL0HHRtPNKy/91cFUwNVS8YQs6zx5/I5rkaGzAKF7y 3pzgbxDXjaHv+WdC1q4AiYfqK76C17P1Gh9sSPqwXe9b5ZMtA6fJ973Ej/iGKz3h yv1V2Jqz8D1JVw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:16:00 2025 by rpki-client