This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json) Hash identifier: xCrFd2w5y9cWvaaYFOgsoT9D30RR2XDkRReB1aM1uY0= Subject key identifier: 90:6F:FF:E2:D4:F5:D5:0B:77:09:A9:8E:6E:31:16:FA:A8:36:F7:E6 Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Certificate serial: 019B6CFC29C1BDD4212BA0D3C65AC8C4B619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 02:00:23 +0000 Manifest this update: Tue 30 Dec 2025 02:00:23 +0000 Manifest next update: Wed 31 Dec 2025 02:00:23 +0000 Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=) 2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: +KYjb1D+e5ApVpjB/IuDW8RtJTfg6q9XCvyVE359gNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:29:c1:bd:d4:21:2b:a0:d3:c6:5a:c8:c4:b6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Validity Not Before: Dec 30 02:00:23 2025 GMT Not After : Dec 31 02:00:23 2025 GMT Subject: CN=906fffe2d4f5d50b7709a98e6e3116faa836f7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:05:38:66:6a:43:3b:47:3c:3d:6b:d5:ab:e9: a4:7e:60:36:66:c6:cc:b8:0b:d3:d5:4e:df:92:33: 3a:82:fb:4c:0a:cd:f8:e8:40:71:5f:01:12:fe:0a: c7:aa:cb:e4:3c:a0:3d:a2:f7:75:ae:09:5d:fe:22: 3a:6c:34:ca:51:ff:49:5f:42:c2:1a:c8:a2:f5:2d: f8:3c:74:47:91:8c:30:a6:58:a2:95:e6:28:5d:9c: 0e:50:02:b7:0b:7a:eb:b2:53:89:f3:24:bd:43:b8: 0f:4f:a9:04:5e:8b:22:a2:69:9e:1e:89:76:77:50: 33:71:22:9f:7e:07:00:2e:f5:02:e5:c4:9d:99:51: 04:ae:66:33:3c:20:8a:af:0e:fa:bf:1f:f5:66:71: c8:c7:e6:ca:16:82:b8:7e:3d:84:c2:59:1d:f4:5f: 44:23:2e:04:09:ec:31:4d:f9:f5:eb:9f:9f:80:17: e0:c3:7e:f1:9b:94:7f:ea:75:8e:fb:2b:8d:68:49: 60:49:f5:23:4e:eb:72:bf:f5:62:8f:8d:5e:38:c0: ee:86:0f:6f:68:1b:a1:9d:cf:57:37:52:af:9b:7c: 1d:c9:83:f8:c1:7d:73:fa:b7:66:cf:de:c8:e0:42: 3c:6c:d6:1f:7d:21:ae:73:8b:2e:f1:1c:d6:88:bd: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6F:FF:E2:D4:F5:D5:0B:77:09:A9:8E:6E:31:16:FA:A8:36:F7:E6 X509v3 Authority Key Identifier: keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:24:9c:de:2e:a3:53:f4:e8:b5:34:ec:e0:3b:f2:a4:75: 69:7b:3b:c0:4f:98:f0:8a:7f:54:0e:79:68:64:4e:01:60:bf: 74:64:97:09:6e:30:20:30:39:b8:21:42:b2:ee:d9:32:6e:cc: 77:a2:33:c0:1f:c9:2e:e5:7f:0a:63:e6:c3:aa:14:cb:7d:f9: 8d:cb:95:19:94:2c:af:41:79:3d:2d:bf:0d:c1:7d:07:48:6d: 43:e3:78:4c:95:cd:77:96:f4:9a:72:8c:df:e0:b1:d3:2d:1a: 66:a2:2b:84:62:41:e2:6c:54:41:00:60:46:ed:d6:dd:38:bd: 12:0a:b8:01:29:f8:ac:1c:8f:d5:d7:47:18:35:35:f6:b6:0d: c3:4d:3c:12:db:a0:82:54:12:61:48:a6:2f:f1:3c:d4:91:e8: bb:2e:48:8b:4d:59:09:cf:3a:8d:e6:72:06:36:62:57:99:4c: 98:41:d7:63:d7:2f:2a:89:1d:c9:a0:37:3c:00:83:ac:ee:a1: 8e:e5:0c:9c:d9:7a:ef:24:1d:b9:94:0c:f7:de:28:d7:25:13: 99:d6:96:f8:24:d0:3f:f3:2b:84:9f:8e:fe:63:40:4c:23:e7: 6d:57:cd:f9:cd:be:03:31:78:58:bf:2f:48:45:91:c7:97:51: be:f7:e8:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/CnBvdQhK6DTxlrIxLYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4 OWZhYWYwHhcNMjUxMjMwMDIwMDIzWhcNMjUxMjMxMDIwMDIzWjAzMTEwLwYDVQQD Eyg5MDZmZmZlMmQ0ZjVkNTBiNzcwOWE5OGU2ZTMxMTZmYWE4MzZmN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gU4ZmpDO0c8PWvVq+mkfmA2ZsbM uAvT1U7fkjM6gvtMCs346EBxXwES/grHqsvkPKA9ovd1rgld/iI6bDTKUf9JX0LC Gsii9S34PHRHkYwwpliileYoXZwOUAK3C3rrslOJ8yS9Q7gPT6kEXosiommeHol2 d1AzcSKffgcALvUC5cSdmVEErmYzPCCKrw76vx/1ZnHIx+bKFoK4fj2Ewlkd9F9E Iy4ECewxTfn165+fgBfgw37xm5R/6nWO+yuNaElgSfUjTutyv/Vij41eOMDuhg9v aBuhnc9XN1Kvm3wdyYP4wX1z+rdmz97I4EI8bNYffSGuc4su8RzWiL0KYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBv/+LU9dULdwmpjm4xFvqoNvfmMB8GA1UdIwQY MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt MWIxOTIzNzFmNDQyLzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYYknN4u o1P06LU07OA78qR1aXs7wE+Y8Ip/VA55aGROAWC/dGSXCW4wIDA5uCFCsu7ZMm7M d6IzwB/JLuV/CmPmw6oUy335jcuVGZQsr0F5PS2/DcF9B0htQ+N4TJXNd5b0mnKM 3+Cx0y0aZqIrhGJB4mxUQQBgRu3W3Ti9Egq4ASn4rByP1ddHGDU19rYNw008Etug glQSYUimL/E81JHouy5Ii01ZCc86jeZyBjZiV5lMmEHXY9cvKokdyaA3PACDrO6h juUMnNl67yQduZQM994o1yUTmdaW+CTQP/MrhJ+O/mNATCPnbVfN+c2+AzF4WL8v SEWRx5dRvvfocw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:55:24 2025 by rpki-client