This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json) Hash identifier: q7Juu/S0Ck85UxyCn57ym5oBp4N/kBqsdhXm5rwkMQE= Subject key identifier: 46:4B:DA:C2:68:2C:79:F2:7E:0A:28:2D:5E:25:D6:B2:BB:5C:1C:82 Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392 Certificate serial: 019B5AF64CCBA61B7D66D43FC1003B345986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 14:00:49 +0000 Manifest this update: Fri 26 Dec 2025 14:00:49 +0000 Manifest next update: Sat 27 Dec 2025 14:00:49 +0000 Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: OYxEWkRLLliMTecoLTGL+fSgMn5mv2v7THnUAcINUZo=) 2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:4c:cb:a6:1b:7d:66:d4:3f:c1:00:3b:34:59:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392 Validity Not Before: Dec 26 14:00:49 2025 GMT Not After : Dec 27 14:00:49 2025 GMT Subject: CN=464bdac2682c79f27e0a282d5e25d6b2bb5c1c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:ad:5c:35:89:63:ef:cd:9a:41:d3:1a:73: bc:55:39:7a:4c:ab:a5:f5:89:01:fe:41:1c:6f:0c: 0b:6a:f8:e3:4c:55:29:ba:1c:1b:fa:c2:9b:b0:04: bc:a3:8f:f6:82:52:c8:21:3e:6b:15:08:c5:44:de: e2:a7:dc:d8:fc:56:c1:cf:48:c9:26:32:54:16:69: fc:4d:2d:7e:f6:ad:aa:b1:bd:50:61:a0:cf:5a:52: 1c:22:c8:30:7a:91:c5:79:d6:d7:bd:8c:7e:88:bf: 80:40:f9:ce:50:9d:95:c1:50:16:40:39:51:b4:b1: 90:88:c1:40:1a:33:8e:ce:98:94:75:85:84:34:83: 26:15:c8:2a:ca:e8:d8:bb:55:82:52:bf:8b:1f:a6: 6f:76:8b:aa:71:b7:28:77:27:f2:b5:54:9c:fe:3f: 99:ee:a8:3b:20:bd:26:10:a6:b7:da:bc:31:11:b3: 07:3b:f9:d0:78:71:bf:ce:ff:7f:9b:24:5f:10:88: cc:f5:e5:22:0d:38:bc:ef:df:bb:11:9b:8d:2c:08: be:04:e0:14:63:e8:5b:48:f2:21:0d:29:91:0d:40: de:18:fc:25:3a:dc:da:9f:b7:10:4f:17:7f:af:86: 06:00:6f:db:e2:d9:4a:4c:e7:94:f3:82:20:94:05: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4B:DA:C2:68:2C:79:F2:7E:0A:28:2D:5E:25:D6:B2:BB:5C:1C:82 X509v3 Authority Key Identifier: keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:64:8c:9b:94:17:55:11:3a:f9:71:d9:6f:9b:75:ca:84:d0: 22:11:12:6c:ba:f7:bb:bb:6e:b0:94:ae:1d:8c:a2:15:d0:12: 2c:20:32:5e:63:df:3b:98:2e:cb:55:9d:08:e6:f3:e2:25:b3: 85:85:4a:d2:9d:43:c4:f8:1c:c5:40:d0:1e:8e:24:12:3a:af: 16:46:b4:97:a5:30:be:e1:ed:fd:15:43:11:c4:bf:3f:1d:8c: 29:fc:3c:a2:12:d4:6c:96:8e:a2:9a:b7:12:3d:f3:d4:f1:33: 08:1f:0e:c8:e2:c5:23:5b:34:3c:32:c6:20:b7:33:02:ad:1f: 55:46:21:e8:4a:64:60:cf:90:68:80:e6:97:76:d2:e6:e9:04: 06:79:e4:b7:14:d7:54:e6:08:94:31:88:09:29:81:c1:43:bd: c0:36:9c:19:dd:03:be:ff:ad:97:b7:2b:63:55:47:af:a7:c7: 40:65:ef:fb:c1:06:d0:9e:ef:82:b3:38:0d:39:68:68:c3:9f: dc:91:d1:b9:16:82:d1:80:73:9c:90:86:d4:0b:10:4f:e9:80: b6:31:f3:89:0b:21:26:5e:99:b8:0d:c6:ed:04:db:09:06:18: ad:b7:26:70:98:43:2d:a1:85:d5:27:46:df:01:d2:4a:ab:9c: a0:03:b6:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9kzLpht9ZtQ/wQA7NFmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz YTEzOTIwHhcNMjUxMjI2MTQwMDQ5WhcNMjUxMjI3MTQwMDQ5WjAzMTEwLwYDVQQD Eyg0NjRiZGFjMjY4MmM3OWYyN2UwYTI4MmQ1ZTI1ZDZiMmJiNWMxYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4GtXDWJY+/NmkHTGnO8VTl6TKul 9YkB/kEcbwwLavjjTFUpuhwb+sKbsAS8o4/2glLIIT5rFQjFRN7ip9zY/FbBz0jJ JjJUFmn8TS1+9q2qsb1QYaDPWlIcIsgwepHFedbXvYx+iL+AQPnOUJ2VwVAWQDlR tLGQiMFAGjOOzpiUdYWENIMmFcgqyujYu1WCUr+LH6ZvdouqcbcodyfytVSc/j+Z 7qg7IL0mEKa32rwxEbMHO/nQeHG/zv9/myRfEIjM9eUiDTi879+7EZuNLAi+BOAU Y+hbSPIhDSmRDUDeGPwlOtzan7cQTxd/r4YGAG/b4tlKTOeU84IglAW4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZL2sJoLHnyfgooLV4l1rK7XByCMB8GA1UdIwQY MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt OGJkZjk4YzBjOGYwLzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGSMm5QX VRE6+XHZb5t1yoTQIhESbLr3u7tusJSuHYyiFdASLCAyXmPfO5guy1WdCObz4iWz hYVK0p1DxPgcxUDQHo4kEjqvFka0l6UwvuHt/RVDEcS/Px2MKfw8ohLUbJaOopq3 Ej3z1PEzCB8OyOLFI1s0PDLGILczAq0fVUYh6EpkYM+QaIDml3bS5ukEBnnktxTX VOYIlDGICSmBwUO9wDacGd0Dvv+tl7crY1VHr6fHQGXv+8EG0J7vgrM4DTloaMOf 3JHRuRaC0YBznJCG1AsQT+mAtjHziQshJl6ZuA3G7QTbCQYYrbcmcJhDLaGF1SdG 3wHSSqucoAO2nQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:41 2025 by rpki-client