This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json) Hash identifier: jcu+S11MPH4SSNuIkuxRHCAqKOA1a+CjQEJEgVBQci8= Subject key identifier: 85:A2:25:68:F4:AC:B7:41:3C:9E:CF:5A:4A:7A:AB:86:61:4A:D5:EE Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520 Certificate serial: 019B4995242CFB6DD690EC4AAB7B0DCC76F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft Manifest number: 0DBD Signing time: Tue 23 Dec 2025 05:01:09 +0000 Manifest this update: Tue 23 Dec 2025 05:01:09 +0000 Manifest next update: Wed 24 Dec 2025 05:01:09 +0000 Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=) 2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: jTUyY/rInuKtGWqj6owLsgCDznCCisFJyHp0Gne8i+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:24:2c:fb:6d:d6:90:ec:4a:ab:7b:0d:cc:76:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7965cd15030483d114b00419c25b99340058d520 Validity Not Before: Dec 23 05:01:09 2025 GMT Not After : Dec 24 05:01:09 2025 GMT Subject: CN=85a22568f4acb7413c9ecf5a4a7aab86614ad5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:31:9e:08:fd:c7:70:a1:8a:b4:6d:40:fd: d7:c9:ad:2f:78:f5:62:72:73:be:e0:a6:9e:cf:e8: 86:45:ae:52:20:c5:bb:4d:f2:59:be:9b:38:93:1b: c5:fd:ac:6d:99:fa:24:55:1b:f4:aa:e4:da:12:4b: 93:7f:db:36:50:3b:76:78:c2:ca:78:52:97:a5:09: f9:61:b1:a8:c6:c6:5f:3c:9d:73:c0:25:57:31:c9: 87:c8:e4:bb:ea:b6:4c:0e:31:6d:86:eb:9a:cf:78: b9:71:2a:d8:3b:a7:7f:c7:03:81:ef:89:54:ff:e5: c3:cb:5c:14:67:42:35:19:4a:c4:09:81:d5:43:56: 3b:24:51:8c:47:40:ff:98:36:4d:1d:e1:3c:cb:0d: d5:bb:94:24:4b:66:7c:77:60:51:d0:0a:cf:77:86: bf:78:60:ea:8d:a9:61:01:fd:26:fb:1e:a8:d1:5d: 86:3c:8f:b4:8c:09:b3:29:76:27:29:35:35:eb:b7: e4:11:b9:4f:20:75:66:11:79:ec:e7:72:d8:b7:02: e6:e7:d3:fc:42:0c:8f:8c:0a:95:f9:a9:72:33:df: 06:bb:6d:cc:02:57:f9:3b:3b:b7:e2:b9:63:57:69: 30:06:3d:e4:9e:29:91:8a:18:41:de:da:be:fa:dc: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:25:68:F4:AC:B7:41:3C:9E:CF:5A:4A:7A:AB:86:61:4A:D5:EE X509v3 Authority Key Identifier: keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:31:22:30:da:73:52:e1:13:65:7b:87:a0:82:3d:d9:ec:e1: 22:9b:8a:20:96:5f:19:d0:69:0f:ef:d8:eb:59:97:1f:8f:71: b1:71:b5:5f:23:1f:e1:85:bb:27:95:b2:93:e3:3e:48:82:1b: 4f:ef:15:23:08:34:a5:c7:34:0c:66:59:1c:a9:21:31:a7:d7: a3:49:e1:5f:f2:63:59:62:ee:6c:d9:86:4e:54:b5:90:25:77: 95:ea:d8:93:56:df:5e:28:cc:a2:9d:42:2f:e2:62:a3:0e:cf: 8e:88:5b:87:40:e8:17:ba:ef:c5:43:09:83:6c:ee:29:13:0d: 88:db:ef:ed:88:e5:5b:28:af:7a:fc:23:4a:1f:63:15:12:d3: 85:d4:f0:e0:4d:97:21:e2:ce:ee:67:0c:93:23:33:f5:cd:39: d0:59:74:d7:36:d7:de:d7:81:ae:74:36:d1:13:58:b8:15:91: 40:4e:f1:80:5d:95:61:42:be:f5:ab:4a:63:95:95:c4:cb:9a: e2:2b:cb:b3:aa:2e:a4:a8:f2:1c:e9:00:9a:6c:9c:84:67:6b: 26:6b:86:78:60:93:50:a5:ed:da:a2:a4:30:18:ce:b6:10:92: f2:93:fe:ea:fe:f3:0e:c7:90:fe:04:19:6d:72:d8:af:3b:8f: 4d:c0:51:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlSQs+23WkOxKq3sNzHb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjVjZDE1MDMwNDgzZDExNGIwMDQxOWMyNWI5OTM0MDA1 OGQ1MjAwHhcNMjUxMjIzMDUwMTA5WhcNMjUxMjI0MDUwMTA5WjAzMTEwLwYDVQQD Eyg4NWEyMjU2OGY0YWNiNzQxM2M5ZWNmNWE0YTdhYWI4NjYxNGFkNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Exngj9x3ChirRtQP3Xya0vePVi cnO+4Kaez+iGRa5SIMW7TfJZvps4kxvF/axtmfokVRv0quTaEkuTf9s2UDt2eMLK eFKXpQn5YbGoxsZfPJ1zwCVXMcmHyOS76rZMDjFthuuaz3i5cSrYO6d/xwOB74lU /+XDy1wUZ0I1GUrECYHVQ1Y7JFGMR0D/mDZNHeE8yw3Vu5QkS2Z8d2BR0ArPd4a/ eGDqjalhAf0m+x6o0V2GPI+0jAmzKXYnKTU167fkEblPIHVmEXns53LYtwLm59P8 QgyPjAqV+alyM98Gu23MAlf5Ozu34rljV2kwBj3knimRihhB3tq++tz8JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWiJWj0rLdBPJ7PWkp6q4ZhStXuMB8GA1UdIwQY MBaAFHllzRUDBIPRFLAEGcJbmTQAWNUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2Ut ZjlhMGY0OGMyNzVhLzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2UtZjlhMGY0OGMyNzVh LzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDEiMNpz UuETZXuHoII92ezhIpuKIJZfGdBpD+/Y61mXH49xsXG1XyMf4YW7J5Wyk+M+SIIb T+8VIwg0pcc0DGZZHKkhMafXo0nhX/JjWWLubNmGTlS1kCV3lerYk1bfXijMop1C L+Jiow7Pjohbh0DoF7rvxUMJg2zuKRMNiNvv7YjlWyivevwjSh9jFRLThdTw4E2X IeLO7mcMkyMz9c050Fl01zbX3teBrnQ20RNYuBWRQE7xgF2VYUK+9atKY5WVxMua 4ivLs6oupKjyHOkAmmychGdrJmuGeGCTUKXt2qKkMBjOthCS8pP+6v7zDseQ/gQZ bXLYrzuPTcBRKQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:20:40 2025 by rpki-client