This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json) Hash identifier: xSd2C1VwRponCtXWaiPT9LqTbhr6aPmrLaMwbP2Pi5U= Subject key identifier: 57:DD:1B:CA:2F:32:28:A3:35:0C:01:75:93:D2:59:9A:E9:13:75:F5 Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Certificate serial: 019B522AEFB86FAD66B810B812ECEA36871F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 21:01:44 +0000 Manifest this update: Wed 24 Dec 2025 21:01:44 +0000 Manifest next update: Thu 25 Dec 2025 21:01:44 +0000 Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=) 2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: fjCU1sMt901IoiHP4hpBUJzlcU61DZFGs4+tCDBeVmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:ef:b8:6f:ad:66:b8:10:b8:12:ec:ea:36:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Validity Not Before: Dec 24 21:01:44 2025 GMT Not After : Dec 25 21:01:44 2025 GMT Subject: CN=57dd1bca2f3228a3350c017593d2599ae91375f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:cf:d4:af:a4:f9:4a:ab:ed:0e:7e:2d:7c: 02:ab:2f:29:5a:07:10:e6:24:a2:39:67:70:c9:b4: 8d:de:6f:68:c9:0c:12:99:fd:f1:89:d1:eb:d1:39: 5e:dd:77:db:0c:27:bb:df:aa:5b:5b:08:83:d6:0c: 21:fc:58:c9:5e:53:f3:83:60:58:fa:de:88:f2:26: ac:73:f5:f6:f2:c7:67:02:3a:65:52:44:0d:ef:b1: 98:46:5b:e8:e9:b8:fb:84:96:b3:2b:9a:c8:8e:f9: bd:04:0c:02:4a:7d:30:91:7e:31:36:b7:31:0f:d0: 16:ee:77:02:66:92:fd:86:a9:68:15:65:c0:9e:3f: 15:5b:82:00:37:b2:82:59:3e:18:b3:4a:bc:6f:26: 82:d2:0b:28:4e:46:f6:d1:38:47:ca:4a:48:9e:a3: e1:a2:6b:e8:62:dd:c3:9c:15:92:13:36:c4:8c:6b: 1c:13:0f:0d:5d:9a:48:0d:70:68:ff:fa:fb:a6:d7: 1e:f9:b8:8f:44:85:19:39:eb:54:fa:fc:ac:85:22: 71:7d:28:12:66:35:27:0f:a9:ce:8d:ce:14:8f:4f: d2:c7:af:e0:32:fd:98:43:10:c6:4f:7e:13:16:b4: 78:aa:c2:19:e7:32:ce:1f:3b:64:ed:29:ae:90:0d: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:1B:CA:2F:32:28:A3:35:0C:01:75:93:D2:59:9A:E9:13:75:F5 X509v3 Authority Key Identifier: keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:ee:2d:73:c4:7e:5c:4d:b7:a6:6f:15:42:2d:1e:f4:95: af:af:d2:33:97:d0:d5:d0:22:c5:d4:5b:a7:72:4a:5b:09:cb: 2e:92:97:b9:7c:58:33:eb:f9:d4:9f:81:9e:52:5d:a6:a2:99: 99:5d:d6:ef:a2:4c:ae:e4:95:38:cf:fe:64:94:6d:c3:01:91: 23:86:e3:26:e9:f1:24:46:8e:ca:85:35:32:08:f2:c2:c3:b4: 2c:a0:3c:81:31:b0:a3:da:e9:10:62:2d:2f:5c:39:94:73:ae: 53:df:8a:b3:15:b4:da:5c:c7:e5:b5:ab:3e:ee:ac:fb:0d:fb: 44:86:cf:39:c2:64:21:ea:ff:ee:1c:4a:8d:fa:10:59:a0:3d: 42:7c:50:ef:ba:57:df:d4:5a:8d:87:ad:c2:64:a0:33:52:3a: 60:8f:90:06:32:b1:26:ae:b6:57:35:84:a9:a5:38:0c:b8:f0: aa:f2:09:38:6b:d5:9d:e5:67:92:6a:8d:8e:ab:6c:d8:18:1b: f6:2b:81:90:ac:a1:33:05:ac:ec:a5:1e:3a:51:3b:a0:88:72: 92:a0:e9:a3:bf:19:a2:7e:3b:9d:7d:49:59:db:0e:77:41:54: a6:59:ab:44:7a:2d:cb:a1:db:ee:9f:93:87:2d:92:84:0b:53: 6c:b2:9e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKu+4b61muBC4EuzqNocfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3 YThkZDIwHhcNMjUxMjI0MjEwMTQ0WhcNMjUxMjI1MjEwMTQ0WjAzMTEwLwYDVQQD Eyg1N2RkMWJjYTJmMzIyOGEzMzUwYzAxNzU5M2QyNTk5YWU5MTM3NWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezP1K+k+Uqr7Q5+LXwCqy8pWgcQ 5iSiOWdwybSN3m9oyQwSmf3xidHr0Tle3XfbDCe736pbWwiD1gwh/FjJXlPzg2BY +t6I8iasc/X28sdnAjplUkQN77GYRlvo6bj7hJazK5rIjvm9BAwCSn0wkX4xNrcx D9AW7ncCZpL9hqloFWXAnj8VW4IAN7KCWT4Ys0q8byaC0gsoTkb20ThHykpInqPh omvoYt3DnBWSEzbEjGscEw8NXZpIDXBo//r7ptce+biPRIUZOetU+vyshSJxfSgS ZjUnD6nOjc4Uj0/Sx6/gMv2YQxDGT34TFrR4qsIZ5zLOHztk7SmukA1FkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfdG8ovMiijNQwBdZPSWZrpE3X1MB8GA1UdIwQY MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuXuLXPE flxNt6ZvFUItHvSVr6/SM5fQ1dAixdRbp3JKWwnLLpKXuXxYM+v51J+BnlJdpqKZ mV3W76JMruSVOM/+ZJRtwwGRI4bjJunxJEaOyoU1MgjywsO0LKA8gTGwo9rpEGIt L1w5lHOuU9+KsxW02lzH5bWrPu6s+w37RIbPOcJkIer/7hxKjfoQWaA9QnxQ77pX 39RajYetwmSgM1I6YI+QBjKxJq62VzWEqaU4DLjwqvIJOGvVneVnkmqNjqts2Bgb 9iuBkKyhMwWs7KUeOlE7oIhykqDpo78Zon47nX1JWdsOd0FUplmrRHoty6Hb7p+T hy2ShAtTbLKedQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:19:37 2025 by rpki-client