This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json) Hash identifier: NlelErlEgwt0f1338mulVlGaS8FhXihYOCO5EyA+7W4= Subject key identifier: C4:69:97:BC:6F:77:CB:86:1B:79:C9:54:9C:2E:AE:9E:3E:0E:85:9A Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393 Certificate serial: 019B668D15082B73CCF5FBB8A79095F7D4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft Manifest number: 0D53 Signing time: Sun 28 Dec 2025 20:01:20 +0000 Manifest this update: Sun 28 Dec 2025 20:01:20 +0000 Manifest next update: Mon 29 Dec 2025 20:01:20 +0000 Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: LWqWvDKLf5M0Nhq81pnRRl7ToQC4W1MiJcDVJui1iSc=) 2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8d:15:08:2b:73:cc:f5:fb:b8:a7:90:95:f7:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393 Validity Not Before: Dec 28 20:01:20 2025 GMT Not After : Dec 29 20:01:20 2025 GMT Subject: CN=c46997bc6f77cb861b79c9549c2eae9e3e0e859a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:04:2d:3b:47:94:ff:80:9c:1f:a3:ad:eb:b2: a0:0d:5e:4e:17:c3:a9:e4:76:af:c8:e5:0d:43:29: e2:5e:4b:f6:81:f6:4d:d2:eb:4c:95:e7:0a:92:a3: 2d:58:b2:93:87:b3:a1:61:de:c0:d1:21:b3:de:5d: 25:1a:f5:28:ee:df:39:34:1b:9e:1e:07:8e:74:5d: 2c:af:78:27:28:d2:9c:68:75:83:cb:5e:69:ea:db: c1:6d:19:d4:a0:b1:99:0c:4f:0f:1e:7c:97:91:21: b6:f3:e9:ca:9c:f7:b4:3d:09:86:86:c5:10:3e:2c: 5d:b9:0b:94:c9:ab:f5:c9:72:b9:0b:ff:83:56:1e: 60:1a:dd:d1:01:e0:be:68:33:34:9d:83:db:ba:ff: 55:b5:18:fc:9c:f6:16:72:27:a9:f1:3b:20:b1:cf: 58:0b:1a:83:74:f2:f1:38:0e:70:1b:37:59:a4:91: ea:92:05:b8:00:7a:31:6f:44:ac:a1:08:3e:56:68: b9:3f:54:e4:d1:94:7a:b9:5b:42:20:ee:05:df:29: 00:c0:c2:dc:f1:99:76:b8:7d:a8:4e:1d:d9:eb:dd: 02:04:c2:fe:f2:50:df:e0:3d:fa:a1:cb:ac:56:9a: b7:99:aa:00:79:e8:60:ea:92:7b:e8:cc:0b:6d:12: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:97:BC:6F:77:CB:86:1B:79:C9:54:9C:2E:AE:9E:3E:0E:85:9A X509v3 Authority Key Identifier: keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9f:48:7f:50:d8:2b:a9:3e:25:de:fa:a1:79:8f:c5:69:2f: 46:71:51:c9:c1:76:c5:2f:a8:0c:1c:8b:a9:68:05:91:43:4c: c9:ab:19:61:65:c6:08:06:0c:3a:3b:cf:a8:c1:11:6c:7f:a7: 49:b9:4f:54:0d:4d:29:8b:3f:04:8f:55:13:f1:9c:2c:ca:36: 07:7b:fb:a7:8f:2b:79:37:b5:2c:7c:ad:71:fa:0a:bd:bd:77: 31:6a:4d:a3:9d:6d:7f:86:f2:a4:de:89:b4:b3:0b:06:f8:ca: 8f:79:e3:34:13:2f:83:69:41:26:36:96:89:5f:14:dd:ff:88: 26:6b:bd:93:c3:c8:ce:22:f0:94:2d:3c:3a:87:d8:96:e4:38: 3b:30:f7:ea:16:8b:e5:4a:8b:aa:6a:11:86:5f:3d:f2:af:35: 51:60:21:f0:93:f2:93:b5:29:8e:54:33:0c:fc:93:a4:3f:04: 9c:07:32:ca:42:39:66:3f:14:09:a7:c1:49:99:c4:29:89:2e: da:81:ed:00:a2:24:44:12:0e:57:70:2b:1b:b6:92:ac:81:fa: e1:01:1a:41:eb:44:5f:02:ef:ea:75:3b:8b:e1:a2:63:87:1e: f9:29:30:c2:96:1a:8b:a5:6b:17:0a:39:9e:f0:f3:41:c7:06: 63:64:3d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjRUIK3PM9fu4p5CV99SmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3 N2YzOTMwHhcNMjUxMjI4MjAwMTIwWhcNMjUxMjI5MjAwMTIwWjAzMTEwLwYDVQQD EyhjNDY5OTdiYzZmNzdjYjg2MWI3OWM5NTQ5YzJlYWU5ZTNlMGU4NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wQtO0eU/4CcH6Ot67KgDV5OF8Op 5HavyOUNQyniXkv2gfZN0utMlecKkqMtWLKTh7OhYd7A0SGz3l0lGvUo7t85NBue HgeOdF0sr3gnKNKcaHWDy15p6tvBbRnUoLGZDE8PHnyXkSG28+nKnPe0PQmGhsUQ PixduQuUyav1yXK5C/+DVh5gGt3RAeC+aDM0nYPbuv9VtRj8nPYWciep8Tsgsc9Y CxqDdPLxOA5wGzdZpJHqkgW4AHoxb0SsoQg+Vmi5P1Tk0ZR6uVtCIO4F3ykAwMLc 8Zl2uH2oTh3Z690CBML+8lDf4D36ocusVpq3maoAeehg6pJ76MwLbRLA1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRpl7xvd8uGG3nJVJwurp4+DoWaMB8GA1UdIwQY MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ9If1DY K6k+Jd76oXmPxWkvRnFRycF2xS+oDByLqWgFkUNMyasZYWXGCAYMOjvPqMERbH+n SblPVA1NKYs/BI9VE/GcLMo2B3v7p48reTe1LHytcfoKvb13MWpNo51tf4bypN6J tLMLBvjKj3njNBMvg2lBJjaWiV8U3f+IJmu9k8PIziLwlC08OofYluQ4OzD36haL 5UqLqmoRhl898q81UWAh8JPyk7UpjlQzDPyTpD8EnAcyykI5Zj8UCafBSZnEKYku 2oHtAKIkRBIOV3ArG7aSrIH64QEaQetEXwLv6nU7i+GiY4ce+SkwwpYai6VrFwo5 nvDzQccGY2Q9Ig== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:44 2025 by rpki-client