This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json) Hash identifier: uikzdtZteVGgpwpQf+WJxzIlhdJAFbzIshT5u8IyQXw= Subject key identifier: 1E:19:2B:86:A1:32:3F:05:20:BD:82:5A:68:44:09:86:DE:A2:FE:08 Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Certificate serial: 019B66FB66BE2D4B05A2E0744A25D59C253E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft Manifest number: 0804 Signing time: Sun 28 Dec 2025 22:01:50 +0000 Manifest this update: Sun 28 Dec 2025 22:01:50 +0000 Manifest next update: Mon 29 Dec 2025 22:01:50 +0000 Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: sQSeTcN+mS3J93NUlB1q+/e+S1oNj2kAT5qanauPR1s=) 2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:66:be:2d:4b:05:a2:e0:74:4a:25:d5:9c:25:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Validity Not Before: Dec 28 22:01:50 2025 GMT Not After : Dec 29 22:01:50 2025 GMT Subject: CN=1e192b86a1323f0520bd825a68440986dea2fe08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:f7:63:b0:1c:0b:62:c4:9c:7d:f0:ef:38: a6:0e:8c:f5:aa:a4:81:1e:f1:f2:cb:b6:2d:ad:a4: d7:b1:64:b0:9b:3f:2c:2e:b6:ab:84:ee:6e:70:2a: 4f:e5:77:bc:59:4b:cc:af:77:64:ca:cf:e3:d4:7d: 3d:5e:b3:2e:c5:21:1c:6c:09:85:3c:35:3a:7a:83: 0e:9e:f0:3e:5f:62:0b:e2:89:7c:d0:99:ec:7c:c9: ad:57:d0:b4:4c:63:b9:7c:86:40:75:28:83:34:04: 42:8a:50:d4:40:66:d2:21:b8:09:5c:69:70:c7:7f: 50:80:fb:7e:b8:71:8d:78:53:50:06:42:d4:b7:88: fd:6f:c5:e6:12:a0:c8:2d:d8:01:7b:f7:a1:06:de: 03:cd:d3:8a:f8:fd:9f:53:7c:50:94:c1:62:ed:fe: d5:e6:93:03:84:06:1e:a7:bf:3f:40:4e:0e:06:7e: 19:ce:62:d0:ae:0f:b5:5c:b4:48:c3:12:22:50:58: 35:a7:04:3e:0a:e1:62:53:92:5d:1d:9d:3a:0c:a3: 45:80:b1:88:97:28:33:6a:66:9c:ad:0c:1b:25:b2: 87:f9:9d:fe:8e:07:a4:d7:9c:e3:75:b3:3c:ba:36: aa:bc:ae:da:67:78:2b:a5:05:f8:39:03:2f:bd:bd: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:2B:86:A1:32:3F:05:20:BD:82:5A:68:44:09:86:DE:A2:FE:08 X509v3 Authority Key Identifier: keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:31:b4:97:1d:fe:89:7a:07:29:7d:22:83:20:91:a9:f8:b8: 35:99:f8:43:c9:4c:73:8f:0c:db:8f:4d:09:6e:12:3b:83:82: 35:23:b2:9d:e1:e8:c6:39:d5:75:b9:57:3f:d8:fa:71:e2:75: c9:c1:c1:69:2c:1f:a3:a0:a3:9e:eb:c4:52:7c:c9:08:df:04: b8:6a:de:4a:cf:d9:75:63:26:f1:91:de:fa:83:57:82:38:b1: 84:27:48:63:b9:1d:9b:54:4d:e6:70:a0:0d:08:82:c6:55:63: 24:9a:95:9f:da:77:66:a3:b6:6a:28:ff:0c:59:93:8e:fd:04: fa:87:84:76:b5:0d:b6:08:5b:fa:78:cb:23:31:5c:34:15:b1: 9c:b5:1e:81:6c:2f:41:5d:9d:95:20:53:d0:c2:7b:eb:f8:d5: 06:0a:17:45:f0:66:7d:77:d4:ce:82:c9:3a:e3:62:2e:bc:cb: 7d:1a:8b:d6:18:0d:d4:26:d5:cb:ee:57:71:af:1e:a1:16:2d: db:9e:e5:ab:67:2b:ed:b5:c2:48:45:6c:3e:59:2d:a0:7b:6c: 1b:36:a7:ff:81:3f:fc:fe:4d:6c:1c:50:62:a0:fb:f5:c4:75: d9:e2:d6:ba:89:9e:64:9d:b0:ff:f2:93:8e:ce:66:83:2a:d5: 7e:65:9f:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+2a+LUsFouB0SiXVnCU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1 Y2FlNGQwHhcNMjUxMjI4MjIwMTUwWhcNMjUxMjI5MjIwMTUwWjAzMTEwLwYDVQQD EygxZTE5MmI4NmExMzIzZjA1MjBiZDgyNWE2ODQ0MDk4NmRlYTJmZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllj3Y7AcC2LEnH3w7zimDoz1qqSB HvHyy7YtraTXsWSwmz8sLrarhO5ucCpP5Xe8WUvMr3dkys/j1H09XrMuxSEcbAmF PDU6eoMOnvA+X2IL4ol80JnsfMmtV9C0TGO5fIZAdSiDNARCilDUQGbSIbgJXGlw x39QgPt+uHGNeFNQBkLUt4j9b8XmEqDILdgBe/ehBt4DzdOK+P2fU3xQlMFi7f7V 5pMDhAYep78/QE4OBn4ZzmLQrg+1XLRIwxIiUFg1pwQ+CuFiU5JdHZ06DKNFgLGI lygzamacrQwbJbKH+Z3+jgek15zjdbM8ujaqvK7aZ3grpQX4OQMvvb2ZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4ZK4ahMj8FIL2CWmhECYbeov4IMB8GA1UdIwQY MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4 LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjG0lx3+ iXoHKX0igyCRqfi4NZn4Q8lMc48M249NCW4SO4OCNSOyneHoxjnVdblXP9j6ceJ1 ycHBaSwfo6CjnuvEUnzJCN8EuGreSs/ZdWMm8ZHe+oNXgjixhCdIY7kdm1RN5nCg DQiCxlVjJJqVn9p3ZqO2aij/DFmTjv0E+oeEdrUNtghb+njLIzFcNBWxnLUegWwv QV2dlSBT0MJ76/jVBgoXRfBmfXfUzoLJOuNiLrzLfRqL1hgN1CbVy+5Xca8eoRYt 257lq2cr7bXCSEVsPlktoHtsGzan/4E//P5NbBxQYqD79cR12eLWuomeZJ2w//KT js5mgyrVfmWfCg== -----END CERTIFICATE-----Generated at Mon Dec 29 05:23:55 2025 by rpki-client