This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json) Hash identifier: xMbg3GT9/r8YED+2KE6SMYwXvvp25kd8iK128h6frAM= Subject key identifier: 16:50:C5:6F:92:CF:3C:2C:6E:2D:3F:1E:C5:EB:5A:F1:18:1D:B0:9A Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca Certificate serial: 019B3B6BE0B0BBFF1B021C093640AEB19A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft Manifest number: 17A7 Signing time: Sat 20 Dec 2025 11:01:24 +0000 Manifest this update: Sat 20 Dec 2025 11:01:24 +0000 Manifest next update: Sun 21 Dec 2025 11:01:24 +0000 Files and hashes: 1: 1-pE2S6SDai37YLPWhTT0fvBo1oM.roa (hash: uI+LytW4sB5NsfK4jUCaDlDrFSrkJVm0Hu/DRqgWX7U=) 2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: B4g+tXIb02Q8cO74FVcwlRl2Bibi8CP8X1PFGevz7ww=) 3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=) 4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=) 5: cQoh3dUnUQ1YzZwVLdlyBcwaxe4.roa (hash: 4EDrOFVSqwn/K/22DG6BcqzcpQQ52pej8fb8v04J2sg=) 6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=) 7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e0:b0:bb:ff:1b:02:1c:09:36:40:ae:b1:9a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca Validity Not Before: Dec 20 11:01:24 2025 GMT Not After : Dec 21 11:01:24 2025 GMT Subject: CN=1650c56f92cf3c2c6e2d3f1ec5eb5af1181db09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:e5:ba:f5:fa:96:d5:3a:71:cd:01:1f:e5: 01:10:c6:f6:c7:d7:98:dc:19:8c:46:01:cb:c7:00: 96:9d:ec:d6:39:a9:b0:1a:14:ef:90:7d:40:5a:00: d4:70:4e:dc:72:98:81:e2:80:6d:e5:e1:65:82:e0: 1b:40:a2:ab:5e:e4:a2:36:27:64:ca:0b:52:e8:c9: 5d:d4:ad:9b:ab:f5:bc:60:e7:cb:16:01:c1:11:ca: 07:9d:d2:19:fa:85:cb:d4:95:d1:fe:6b:19:9a:8f: 08:94:92:53:5c:d0:ee:94:c1:70:ce:8c:ff:3c:26: 9c:64:f1:cc:65:ea:92:57:71:c6:cd:e8:b9:71:28: 54:6e:31:c3:9f:a7:94:96:4f:67:0f:b1:65:5d:44: 86:d7:21:2c:46:2f:c2:40:cd:54:79:6f:43:e1:dc: 8f:9a:6b:85:69:05:5b:4f:de:7c:09:91:b4:97:1d: 9e:39:ee:05:82:58:57:1a:65:82:95:a9:1c:0f:1f: f7:c4:05:ae:89:7d:8b:e1:91:59:23:c3:01:70:d9: 1c:e2:48:10:71:a4:41:48:14:53:ce:5a:ef:2e:25: 5e:f2:0b:9b:16:82:42:1a:ff:8d:8e:9f:fd:1e:5e: df:a7:41:e3:fa:7b:16:9b:f9:73:5b:96:29:62:de: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:50:C5:6F:92:CF:3C:2C:6E:2D:3F:1E:C5:EB:5A:F1:18:1D:B0:9A X509v3 Authority Key Identifier: keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1e:e0:74:19:ce:5e:c5:fe:ce:12:53:a5:c0:6e:7f:e3:0d: e8:0d:ec:12:aa:fd:63:d2:14:e0:5b:55:f6:24:9a:81:de:42: 68:4e:31:95:06:1b:8e:20:03:d3:46:d5:12:ad:76:d7:69:4b: bb:c9:24:d6:40:5a:f9:5e:cc:24:d6:b3:9f:df:4a:9d:d2:bf: cb:04:0c:1e:bd:d9:91:e2:14:8f:db:63:f7:6d:3d:9b:3c:31: fa:d5:14:13:20:9a:f5:da:c7:5a:1b:2f:b8:c0:23:25:20:d5: 29:3c:ec:e6:90:1e:28:d2:e8:73:66:ff:99:93:a2:e2:a0:60: 35:98:7f:1e:62:06:41:62:d7:64:b1:97:7c:11:50:c7:2a:7c: b0:11:5e:75:cc:ac:f8:f5:00:47:4a:76:e8:90:e4:14:8c:bb: 26:0f:d3:b0:f2:cf:1d:a4:7f:3e:e7:64:13:c6:9b:7f:2c:9b: 7c:c2:28:26:b2:5e:8b:a9:e7:6f:2c:da:82:ba:51:e2:5a:df: 2c:fa:7b:91:db:16:55:4c:65:31:d6:28:59:eb:0d:74:65:57: 2f:07:16:b2:2c:ce:db:09:3f:43:8e:fc:81:e3:2d:0f:f0:f6: 32:2d:a9:5f:a3:93:36:82:be:4b:15:4c:e3:8f:7e:0d:eb:0e: 02:46:69:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+Cwu/8bAhwJNkCusZobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3 YWRhY2EwHhcNMjUxMjIwMTEwMTI0WhcNMjUxMjIxMTEwMTI0WjAzMTEwLwYDVQQD EygxNjUwYzU2ZjkyY2YzYzJjNmUyZDNmMWVjNWViNWFmMTE4MWRiMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZvluvX6ltU6cc0BH+UBEMb2x9eY 3BmMRgHLxwCWnezWOamwGhTvkH1AWgDUcE7ccpiB4oBt5eFlguAbQKKrXuSiNidk ygtS6Mld1K2bq/W8YOfLFgHBEcoHndIZ+oXL1JXR/msZmo8IlJJTXNDulMFwzoz/ PCacZPHMZeqSV3HGzei5cShUbjHDn6eUlk9nD7FlXUSG1yEsRi/CQM1UeW9D4dyP mmuFaQVbT958CZG0lx2eOe4FglhXGmWClakcDx/3xAWuiX2L4ZFZI8MBcNkc4kgQ caRBSBRTzlrvLiVe8gubFoJCGv+Njp/9Hl7fp0Hj+nsWm/lzW5YpYt7mcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZQxW+Szzwsbi0/HsXrWvEYHbCaMB8GA1UdIwQY MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch7gdBnO XsX+zhJTpcBuf+MN6A3sEqr9Y9IU4FtV9iSagd5CaE4xlQYbjiAD00bVEq1212lL u8kk1kBa+V7MJNazn99KndK/ywQMHr3ZkeIUj9tj9209mzwx+tUUEyCa9drHWhsv uMAjJSDVKTzs5pAeKNLoc2b/mZOi4qBgNZh/HmIGQWLXZLGXfBFQxyp8sBFedcys +PUAR0p26JDkFIy7Jg/TsPLPHaR/PudkE8abfyybfMIoJrJei6nnbyzagrpR4lrf LPp7kdsWVUxlMdYoWesNdGVXLwcWsizO2wk/Q478geMtD/D2Mi2pX6OTNoK+SxVM 449+DesOAkZp1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 13:35:13 2025 by rpki-client