This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft File: EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json) Hash identifier: JERZFBQIn79l7wHzmDkAwLdva6wDAjyQshPDAhFfbpM= Subject key identifier: FF:A1:DA:32:31:2A:46:DA:A3:5C:23:1D:BD:77:AE:8A:95:5D:6F:81 Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Certificate serial: 019B375848F69584238F433A675EBD063E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft Manifest number: 14CF Signing time: Fri 19 Dec 2025 16:01:31 +0000 Manifest this update: Fri 19 Dec 2025 16:01:31 +0000 Manifest next update: Sat 20 Dec 2025 16:01:31 +0000 Files and hashes: 1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: yxEXXIfi66w/14MAOEykBf8F/F94QU3F9Gu9cgdXro4=) 2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=) 3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=) 4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=) 5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:48:f6:95:84:23:8f:43:3a:67:5e:bd:06:3e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Validity Not Before: Dec 19 16:01:31 2025 GMT Not After : Dec 20 16:01:31 2025 GMT Subject: CN=ffa1da32312a46daa35c231dbd77ae8a955d6f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:f0:96:44:be:f9:5f:c8:36:cf:35:1f:61: 2b:39:0e:62:85:10:f7:0a:2d:25:f2:8d:5f:85:30: 59:cf:c1:69:32:71:0e:fa:c1:68:b0:e1:9f:f9:23: c5:4c:7a:2b:d2:39:01:94:fa:38:70:8b:cb:39:cc: a7:6c:54:ca:18:8a:69:b5:93:03:ef:7d:c6:74:84: d6:0b:cf:89:76:48:ad:e1:d6:ee:45:50:1e:65:46: 09:4a:a3:52:00:a9:82:65:72:83:0a:c1:fd:88:57: 15:e8:60:d1:1f:f5:ad:ce:36:d0:31:25:e3:0c:40: 05:23:fc:83:08:9b:79:30:c4:f7:24:d9:86:25:5e: 35:d3:e9:31:46:aa:21:68:7e:73:36:f6:17:9c:aa: e4:ea:60:af:76:3b:ab:b9:a2:ff:cc:c5:2e:34:27: 80:df:17:82:c3:3b:a3:f0:3d:75:20:ff:39:ff:06: ac:f3:a7:56:20:ae:fb:e7:5f:0f:55:61:91:dd:6d: 66:42:bf:20:f3:5d:f8:05:76:65:4e:fb:2e:c2:f7: 72:eb:7a:9c:93:c4:7f:bf:d8:eb:63:5d:b6:4b:35: 8f:1f:66:0c:93:a2:6c:7f:72:f0:b2:62:fb:7f:81: b1:69:c3:b1:28:fd:85:99:75:c8:a7:52:6c:0e:36: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:DA:32:31:2A:46:DA:A3:5C:23:1D:BD:77:AE:8A:95:5D:6F:81 X509v3 Authority Key Identifier: keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ff:4a:70:3c:9b:4a:54:eb:2d:7b:29:7d:db:af:93:17:87: 95:9a:89:1b:43:f6:37:54:02:9d:a7:76:c2:be:ee:c7:c3:5d: 0b:9c:e7:de:98:e0:f9:fb:3c:33:a3:7e:d8:53:24:94:95:f1: 87:79:a6:8b:1d:4b:f0:69:17:c1:ae:dc:b4:62:18:87:90:d5: c0:77:7b:56:f3:6b:27:e8:68:c3:1e:08:58:41:0f:5d:9f:ec: 33:0e:0b:0c:3c:1f:b9:95:46:43:b1:80:ef:62:a0:12:ee:d2: 52:85:78:a1:5e:13:d7:e4:eb:36:17:57:6a:eb:87:af:ce:2d: e3:55:fd:e3:36:01:83:3c:b4:21:8f:83:b8:e2:e9:30:b2:de: a1:72:a3:55:5f:ef:0c:6c:af:0e:07:9e:8f:0a:48:8e:89:77: 26:59:d4:b6:17:f0:53:79:d9:f1:ed:e1:f1:70:e7:34:ea:1a: f5:21:32:bf:bf:a6:7b:56:a6:d3:ac:10:4f:ac:ee:c8:4a:ee: 3c:bc:b8:f0:ef:41:49:69:64:0d:a1:88:5c:09:5e:f6:fd:fc: a7:3e:0d:7e:1e:1a:bd:d7:2e:a0:5c:58:a5:4a:fa:4a:91:6f: e5:c8:0b:0a:0e:87:fd:6a:24:a5:ee:63:c3:fd:db:f2:22:ce: 1a:f1:e7:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WEj2lYQjj0M6Z169Bj41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTUzZTYwNzY3MGZmNzM4ZWVlNmE2YjU3N2Q4YzhiMjgw NGUxZTEwHhcNMjUxMjE5MTYwMTMxWhcNMjUxMjIwMTYwMTMxWjAzMTEwLwYDVQQD EyhmZmExZGEzMjMxMmE0NmRhYTM1YzIzMWRiZDc3YWU4YTk1NWQ2ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+rwlkS++V/INs81H2ErOQ5ihRD3 Ci0l8o1fhTBZz8FpMnEO+sFosOGf+SPFTHor0jkBlPo4cIvLOcynbFTKGIpptZMD 733GdITWC8+Jdkit4dbuRVAeZUYJSqNSAKmCZXKDCsH9iFcV6GDRH/WtzjbQMSXj DEAFI/yDCJt5MMT3JNmGJV410+kxRqohaH5zNvYXnKrk6mCvdjuruaL/zMUuNCeA 3xeCwzuj8D11IP85/was86dWIK77518PVWGR3W1mQr8g8134BXZlTvsuwvdy63qc k8R/v9jrY122SzWPH2YMk6Jsf3LwsmL7f4GxacOxKP2FmXXIp1JsDjYWHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+h2jIxKkbao1wjHb13roqVXW+BMB8GA1UdIwQY MBaAFBCVPmB2cP9zju5qa1d9jIsoBOHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMt MWJjNTUyYzAwZGQ3LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMtMWJjNTUyYzAwZGQ3 LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/9KcDyb SlTrLXspfduvkxeHlZqJG0P2N1QCnad2wr7ux8NdC5zn3pjg+fs8M6N+2FMklJXx h3mmix1L8GkXwa7ctGIYh5DVwHd7VvNrJ+howx4IWEEPXZ/sMw4LDDwfuZVGQ7GA 72KgEu7SUoV4oV4T1+TrNhdXauuHr84t41X94zYBgzy0IY+DuOLpMLLeoXKjVV/v DGyvDgeejwpIjol3JlnUthfwU3nZ8e3h8XDnNOoa9SEyv7+me1am06wQT6zuyEru PLy48O9BSWlkDaGIXAle9v38pz4Nfh4avdcuoFxYpUr6SpFv5cgLCg6H/Wokpe5j w/3b8iLOGvHnGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:14 2025 by rpki-client