This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft File: ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json) Hash identifier: YL/nscLb209jfnYXguUHKYyMDjKO7M38ZK7SLh2tS48= Subject key identifier: 06:3B:FA:45:ED:87:81:79:6C:1E:3A:1B:3F:05:44:19:B5:07:E0:64 Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F Certificate issuer: /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f Certificate serial: 019B416D5EC1E050933BD5D2F6A4ADF9A926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft Manifest number: 09A2 Signing time: Sun 21 Dec 2025 15:00:45 +0000 Manifest this update: Sun 21 Dec 2025 15:00:45 +0000 Manifest next update: Mon 22 Dec 2025 15:00:45 +0000 Files and hashes: 1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: swHMdbAkSYQzQtad8hWtPPKlLSd2XGpNXp9ILM0rVJE=) 2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:5e:c1:e0:50:93:3b:d5:d2:f6:a4:ad:f9:a9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f Validity Not Before: Dec 21 15:00:45 2025 GMT Not After : Dec 22 15:00:45 2025 GMT Subject: CN=063bfa45ed8781796c1e3a1b3f054419b507e064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:0d:d5:5a:9b:9d:8f:3a:eb:df:ef:2d:7f: 04:1a:7e:4a:11:2e:ee:ea:bc:23:4a:56:38:44:90: 57:3d:e0:87:a2:e5:84:c2:45:ed:cc:24:b5:3d:c5: 21:2a:c2:6c:41:df:55:15:d8:c7:f4:5c:fe:3b:5e: 24:57:82:23:b4:b1:e2:45:02:bc:61:c5:91:5d:cc: 98:6c:17:67:56:e1:04:33:8f:39:3b:68:8c:c8:94: 2f:8b:ab:c1:d4:af:14:4a:51:0f:b4:30:f1:dc:d9: cc:9e:ed:ae:ef:f9:ca:2b:87:b9:29:5f:95:b0:1b: c7:a6:ff:19:a8:b7:f5:1e:34:96:13:66:ef:45:4a: c2:57:c1:05:b4:75:b7:72:88:d7:04:b8:0b:7e:85: e7:f5:1e:fb:99:63:d8:73:09:56:80:f2:0e:8d:4a: 05:39:81:3d:b1:ba:31:84:15:7c:70:61:a5:1d:47: fd:1b:5f:94:f4:1e:92:8f:ef:33:f1:fa:bf:8f:e5: fd:ae:62:d4:bd:8d:04:7f:0f:19:f1:5b:5a:f0:70: 97:4c:48:9b:d5:ee:99:a6:41:f3:59:26:b5:88:ab: b7:0d:39:7e:5f:8a:34:2a:0d:3c:b2:75:b2:ac:d9: 84:9b:ae:e1:fc:ff:bf:9a:24:42:ee:9d:7a:43:07: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:FA:45:ED:87:81:79:6C:1E:3A:1B:3F:05:44:19:B5:07:E0:64 X509v3 Authority Key Identifier: keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:0c:ac:8d:25:98:b2:ea:e5:78:b7:c8:16:dc:72:78:4e: e6:ca:2d:b4:1c:17:01:be:fb:da:be:e2:d4:b1:76:3d:fc:9c: be:26:60:5e:1c:3b:be:f4:1d:db:f1:c6:c7:1b:a2:66:06:9f: 6b:85:28:da:45:63:5e:81:a3:d4:c0:f5:a8:6e:15:1e:5c:f9: 73:26:f8:13:cc:e1:16:b1:d4:ab:5f:db:d1:17:84:8b:29:e3: 62:d2:ff:16:5e:82:58:00:f6:98:a6:30:59:71:b7:af:ea:a2: 65:9a:14:97:6d:09:d5:5e:70:47:3c:94:cb:b7:b5:2d:57:a1: 1b:fe:d2:c0:17:a4:ab:a6:74:2b:2c:63:8b:14:b0:30:47:9d: ac:e4:8c:49:95:73:a5:fb:fd:95:51:38:20:df:ed:c7:56:0c: 34:5c:49:67:76:40:3e:04:d5:55:06:11:de:41:03:89:c9:62: 23:26:bc:a4:f5:d0:b8:51:d1:8e:29:be:f8:59:f8:da:b8:fb: c1:75:7c:9d:82:a6:2f:dc:94:f0:65:d5:31:af:79:f4:ec:0b: c8:a2:05:85:9f:df:75:f3:55:a8:a4:18:d5:52:14:15:e6:75: ab:2a:7f:64:8b:c6:32:77:eb:6b:78:b4:54:f3:a8:51:b0:7a: 35:53:ad:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbV7B4FCTO9XS9qSt+akmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhM2JjYjQwYTFjOGM4ZjlmNzU4ZGNkZTFjMjkwNzkzOGQ4 Njg1MmYwHhcNMjUxMjIxMTUwMDQ1WhcNMjUxMjIyMTUwMDQ1WjAzMTEwLwYDVQQD EygwNjNiZmE0NWVkODc4MTc5NmMxZTNhMWIzZjA1NDQxOWI1MDdlMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcUN1VqbnY8669/vLX8EGn5KES7u 6rwjSlY4RJBXPeCHouWEwkXtzCS1PcUhKsJsQd9VFdjH9Fz+O14kV4IjtLHiRQK8 YcWRXcyYbBdnVuEEM485O2iMyJQvi6vB1K8USlEPtDDx3NnMnu2u7/nKK4e5KV+V sBvHpv8ZqLf1HjSWE2bvRUrCV8EFtHW3cojXBLgLfoXn9R77mWPYcwlWgPIOjUoF OYE9sboxhBV8cGGlHUf9G1+U9B6Sj+8z8fq/j+X9rmLUvY0Efw8Z8Vta8HCXTEib 1e6ZpkHzWSa1iKu3DTl+X4o0Kg08snWyrNmEm67h/P+/miRC7p16QwdHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY7+kXth4F5bB46Gz8FRBm1B+BkMB8GA1UdIwQY MBaAFHo7y0ChyMj591jc3hwpB5ONhoUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgt MDE2NTI1NzZmNWEyLzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgtMDE2NTI1NzZmNWEy LzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkoMrI0l mLLq5Xi3yBbccnhO5sottBwXAb772r7i1LF2PfycviZgXhw7vvQd2/HGxxuiZgaf a4Uo2kVjXoGj1MD1qG4VHlz5cyb4E8zhFrHUq1/b0ReEiynjYtL/Fl6CWAD2mKYw WXG3r+qiZZoUl20J1V5wRzyUy7e1LVehG/7SwBekq6Z0KyxjixSwMEedrOSMSZVz pfv9lVE4IN/tx1YMNFxJZ3ZAPgTVVQYR3kEDicliIya8pPXQuFHRjim++Fn42rj7 wXV8nYKmL9yU8GXVMa959OwLyKIFhZ/fdfNVqKQY1VIUFeZ1qyp/ZIvGMnfra3i0 VPOoUbB6NVOtbg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:57:32 2025 by rpki-client