This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json) Hash identifier: XXZw290MUfjn5burfdBXYTekn6Dt5XXTA7DVMMu9ovA= Subject key identifier: 0F:A8:55:4F:64:C0:37:DB:DC:BF:FB:E2:9F:A3:6F:59:38:37:F2:3D Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Certificate serial: 019B6CC56A967C305C7D49B95A35BD298590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft Manifest number: 0807 Signing time: Tue 30 Dec 2025 01:00:35 +0000 Manifest this update: Tue 30 Dec 2025 01:00:35 +0000 Manifest next update: Wed 31 Dec 2025 01:00:35 +0000 Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: jqZyAYsM9ADkWST6lUuRS37OpXE5fW5MsCXrKBidv78=) 2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:6a:96:7c:30:5c:7d:49:b9:5a:35:bd:29:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Validity Not Before: Dec 30 01:00:35 2025 GMT Not After : Dec 31 01:00:35 2025 GMT Subject: CN=0fa8554f64c037dbdcbffbe29fa36f593837f23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:ec:2e:f9:de:36:1e:3b:23:38:a0:fc:7b: 40:b4:a8:d0:70:4e:63:6a:ad:72:71:59:fd:d2:ee: 0f:0b:1d:aa:9a:a3:5f:33:b0:f8:7e:e3:ed:5b:68: dd:cf:43:5d:df:2e:d0:2d:e0:50:ff:ce:1b:9e:8c: 49:25:4c:76:f1:d4:df:0f:b8:0d:4e:f1:68:8f:fd: 1e:45:41:de:48:3e:0e:e7:d7:9f:9f:21:63:89:c4: 5a:63:5b:ec:fb:84:74:b0:36:ff:29:43:cd:83:e6: 97:b2:74:a0:34:07:f6:8c:10:4f:a3:f6:bf:ac:ac: e2:22:02:e5:7d:da:7d:d4:bc:68:fa:3a:90:cb:34: db:dd:4c:5f:64:74:cf:b3:f9:83:42:d0:e8:4e:39: f2:0c:ae:f2:15:ea:d1:a9:fb:a5:69:b7:c2:b9:83: d6:ce:ab:13:86:2a:ef:d9:69:fc:31:58:7b:bc:ac: 7c:53:76:ea:f3:d0:54:62:e3:04:1e:58:a6:09:cc: a0:95:ec:83:70:f2:a2:15:5c:ac:6e:1a:9b:83:a4: 1f:ad:c3:7b:99:6e:2e:d5:46:60:92:6a:48:e3:8b: ae:f2:58:78:c4:8d:4d:a2:69:b7:01:a7:b5:0d:ab: fb:db:7f:38:4d:29:d4:db:25:c4:82:b4:6d:51:5d: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:55:4F:64:C0:37:DB:DC:BF:FB:E2:9F:A3:6F:59:38:37:F2:3D X509v3 Authority Key Identifier: keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:67:92:6e:44:fe:e5:71:56:32:e4:3d:5b:01:e5:e6:53:cd: 2e:e1:c4:81:8e:b7:88:e0:c8:18:4b:f0:4c:60:5c:10:41:6c: 61:38:bd:2e:99:c7:22:3b:f2:d8:f3:e2:6f:d8:af:a4:88:e4: 93:2d:5e:29:29:a3:4e:52:28:76:18:40:08:8a:f7:08:2f:a6: 08:38:00:30:f5:60:3f:57:ef:81:1e:a0:39:03:ac:51:cf:38: f5:f5:81:3c:d9:b0:35:ca:4f:84:e5:73:53:e4:f0:5f:c9:b2: ec:a6:20:d6:dc:ee:83:f2:19:03:c6:91:44:59:c7:ef:93:c1: aa:5e:84:31:5a:f1:18:38:12:fc:b4:33:e7:98:0d:59:67:4d: 98:2f:be:3f:ed:fb:64:95:89:92:dc:9b:03:1d:12:80:3c:ce: 0d:79:a2:70:89:c5:60:fa:ef:b7:0d:b1:f6:04:71:fe:e1:0c: ec:3a:31:0c:c1:d1:2d:0a:2d:91:84:f5:7e:ae:40:ce:b8:a3: 8a:2a:ce:ad:ef:2c:df:bd:a6:c3:99:cf:d9:27:6e:11:cc:87: 8d:53:52:b1:b0:ab:fe:fd:d0:2f:c7:0b:aa:07:47:42:61:4b: 88:3d:f8:b1:25:1d:7f:d5:08:34:aa:92:a3:39:c9:94:b1:1e: 93:ac:53:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxWqWfDBcfUm5WjW9KYWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1 Y2FlNGQwHhcNMjUxMjMwMDEwMDM1WhcNMjUxMjMxMDEwMDM1WjAzMTEwLwYDVQQD EygwZmE4NTU0ZjY0YzAzN2RiZGNiZmZiZTI5ZmEzNmY1OTM4MzdmMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bPsLvneNh47Izig/HtAtKjQcE5j aq1ycVn90u4PCx2qmqNfM7D4fuPtW2jdz0Nd3y7QLeBQ/84bnoxJJUx28dTfD7gN TvFoj/0eRUHeSD4O59efnyFjicRaY1vs+4R0sDb/KUPNg+aXsnSgNAf2jBBPo/a/ rKziIgLlfdp91Lxo+jqQyzTb3UxfZHTPs/mDQtDoTjnyDK7yFerRqfulabfCuYPW zqsThirv2Wn8MVh7vKx8U3bq89BUYuMEHlimCcygleyDcPKiFVysbhqbg6QfrcN7 mW4u1UZgkmpI44uu8lh4xI1Nomm3Aae1Dav72384TSnU2yXEgrRtUV2rBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+oVU9kwDfb3L/74p+jb1k4N/I9MB8GA1UdIwQY MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4 LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmeSbkT+ 5XFWMuQ9WwHl5lPNLuHEgY63iODIGEvwTGBcEEFsYTi9LpnHIjvy2PPib9ivpIjk ky1eKSmjTlIodhhACIr3CC+mCDgAMPVgP1fvgR6gOQOsUc849fWBPNmwNcpPhOVz U+TwX8my7KYg1tzug/IZA8aRRFnH75PBql6EMVrxGDgS/LQz55gNWWdNmC++P+37 ZJWJktybAx0SgDzODXmicInFYPrvtw2x9gRx/uEM7DoxDMHRLQotkYT1fq5Azrij iirOre8s372mw5nP2SduEcyHjVNSsbCr/v3QL8cLqgdHQmFLiD34sSUdf9UINKqS oznJlLEek6xTLg== -----END CERTIFICATE-----Generated at Tue Dec 30 09:08:07 2025 by rpki-client