This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json) Hash identifier: ew5d0w5s13xs1svw47mgBYeAXnBQuKEabPrUhBGRWDU= Subject key identifier: 53:A0:50:0B:06:77:E5:42:B7:4F:99:F9:56:86:CB:96:91:DF:90:AD Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392 Certificate serial: 019B4F5FE59FBCE3FA40212B647EB7621265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 08:00:43 +0000 Manifest this update: Wed 24 Dec 2025 08:00:43 +0000 Manifest next update: Thu 25 Dec 2025 08:00:43 +0000 Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: NHQM8fxIEERCpGQPJjOnaYCAwfnda7VwAtfGbP53J08=) 2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:e5:9f:bc:e3:fa:40:21:2b:64:7e:b7:62:12:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392 Validity Not Before: Dec 24 08:00:43 2025 GMT Not After : Dec 25 08:00:43 2025 GMT Subject: CN=53a0500b0677e542b74f99f95686cb9691df90ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0d:60:d1:36:54:7f:4d:f3:f8:e1:e0:82:49: 75:cf:55:50:6f:f5:72:8e:20:09:b5:d9:d7:df:ac: 2d:1a:3e:48:41:28:c5:1f:1d:d7:4d:c3:1a:04:c7: ed:46:2a:b7:85:5b:59:2a:20:a2:09:d9:10:40:2f: 63:60:83:4b:ea:03:0a:02:0c:08:b0:c8:90:ab:75: b1:a0:0a:e1:cf:36:ef:b6:84:bc:79:f6:81:b7:6d: 5d:4e:cc:06:5c:67:40:d8:9b:f9:e0:72:3d:a6:ba: 4e:9b:c8:8b:a8:c9:c2:45:30:02:33:5f:5a:13:ab: f9:c8:af:b1:62:0c:82:ee:9c:4d:e8:48:ad:d7:2a: d1:91:16:b6:02:64:9c:b0:49:5d:ba:ab:d2:25:ae: 1c:a0:88:d0:6f:ea:d3:83:1a:61:e4:d5:5a:58:21: 2d:63:77:8e:9f:4c:ab:e1:14:13:48:06:b1:dd:27: f0:3d:5c:8f:10:a6:a3:45:fa:b2:17:e0:8e:9b:18: 99:fd:f4:04:7d:8d:d5:b1:42:b8:37:80:7c:04:8e: 08:d2:96:a2:d6:c0:56:e6:51:a0:cb:52:06:29:7a: 9d:2b:51:77:bc:1c:17:5f:be:5c:23:1f:1a:85:92: a3:f7:58:30:68:98:c4:27:d5:85:24:7a:04:7e:07: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:50:0B:06:77:E5:42:B7:4F:99:F9:56:86:CB:96:91:DF:90:AD X509v3 Authority Key Identifier: keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:40:8a:8b:96:f5:9d:e7:22:2b:2a:d7:35:aa:a9:41:f2:7d: c0:ed:a0:9b:01:38:a6:39:f5:9a:fa:0d:a7:b1:81:3f:02:27: 66:68:a9:fd:e6:b0:77:4e:1e:15:ee:ca:ce:32:d3:2b:eb:3b: 7a:e0:21:e3:5e:f8:b5:d4:e9:11:44:e8:84:ef:d2:03:2f:42: 6b:42:2f:47:92:46:b5:4e:f4:2a:e2:5b:cf:f9:90:39:7c:ee: d6:b1:f5:92:70:76:cc:a9:2d:45:ce:7b:40:20:a5:e9:9f:85: b3:c3:9b:7d:1c:7c:2c:8d:2c:e4:3f:5e:80:f7:e4:15:08:a2: 56:78:99:99:3a:43:f0:9a:16:09:7a:ab:dc:04:1c:c5:53:54: 08:a2:b0:9c:ea:c9:dd:9c:ed:14:95:bd:0e:cd:72:69:40:eb: cc:dc:b7:42:ac:8a:37:a1:e8:0a:cf:07:aa:ef:f6:40:97:d2: c2:48:b3:bc:39:03:4f:73:c5:8f:d3:d4:b4:dc:b2:62:1a:42: fa:9b:32:77:72:e9:cc:1c:3c:2d:b2:02:f7:6e:27:13:ee:1e: 9a:81:61:98:44:2e:21:9f:37:5e:15:9f:aa:0d:e3:39:67:a8: 57:c0:3f:10:8f:b5:53:c7:01:a7:7d:e5:92:01:33:ac:82:27: 67:05:d1:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX+WfvOP6QCErZH63YhJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz YTEzOTIwHhcNMjUxMjI0MDgwMDQzWhcNMjUxMjI1MDgwMDQzWjAzMTEwLwYDVQQD Eyg1M2EwNTAwYjA2NzdlNTQyYjc0Zjk5Zjk1Njg2Y2I5NjkxZGY5MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A1g0TZUf03z+OHggkl1z1VQb/Vy jiAJtdnX36wtGj5IQSjFHx3XTcMaBMftRiq3hVtZKiCiCdkQQC9jYINL6gMKAgwI sMiQq3WxoArhzzbvtoS8efaBt21dTswGXGdA2Jv54HI9prpOm8iLqMnCRTACM19a E6v5yK+xYgyC7pxN6Eit1yrRkRa2AmScsElduqvSJa4coIjQb+rTgxph5NVaWCEt Y3eOn0yr4RQTSAax3SfwPVyPEKajRfqyF+COmxiZ/fQEfY3VsUK4N4B8BI4I0pai 1sBW5lGgy1IGKXqdK1F3vBwXX75cIx8ahZKj91gwaJjEJ9WFJHoEfgca+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOgUAsGd+VCt0+Z+VaGy5aR35CtMB8GA1UdIwQY MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt OGJkZjk4YzBjOGYwLzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkCKi5b1 neciKyrXNaqpQfJ9wO2gmwE4pjn1mvoNp7GBPwInZmip/eawd04eFe7KzjLTK+s7 euAh4174tdTpEUTohO/SAy9Ca0IvR5JGtU70KuJbz/mQOXzu1rH1knB2zKktRc57 QCCl6Z+Fs8ObfRx8LI0s5D9egPfkFQiiVniZmTpD8JoWCXqr3AQcxVNUCKKwnOrJ 3ZztFJW9Ds1yaUDrzNy3QqyKN6HoCs8Hqu/2QJfSwkizvDkDT3PFj9PUtNyyYhpC +psyd3LpzBw8LbIC924nE+4emoFhmEQuIZ83XhWfqg3jOWeoV8A/EI+1U8cBp33l kgEzrIInZwXR6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:21 2025 by rpki-client