This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json) Hash identifier: iFau9ALDp7kBimItSoYK9hUoe60OCjkdKAwbLO9/OME= Subject key identifier: AA:02:ED:69:2D:1F:BC:B7:AB:A3:6E:AF:52:4F:0B:CC:F3:84:F1:D3 Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Certificate serial: 019B3AFD82959600399821ACE77A0F966D09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:00:51 +0000 Manifest this update: Sat 20 Dec 2025 09:00:51 +0000 Manifest next update: Sun 21 Dec 2025 09:00:51 +0000 Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=) 2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: YQkz7hi9lsRxy0SIL6js1evmDrZ/qWaqQKCQ89aC2RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:82:95:96:00:39:98:21:ac:e7:7a:0f:96:6d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Validity Not Before: Dec 20 09:00:51 2025 GMT Not After : Dec 21 09:00:51 2025 GMT Subject: CN=aa02ed692d1fbcb7aba36eaf524f0bccf384f1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:d9:1f:c1:a8:09:b7:35:37:91:b1:0f:a3: d1:d3:c0:93:e4:7d:93:47:53:93:17:78:32:91:e5: f4:31:01:f1:0a:ef:67:be:32:a2:05:83:ca:b3:8e: e1:99:db:00:09:77:1f:8e:2c:87:c0:42:6f:b0:ff: 9a:d0:3d:cd:59:69:dd:4b:5c:b1:4c:29:36:f6:27: 95:6c:ee:db:f3:36:1c:d7:c4:60:14:d7:1f:a0:04: 95:09:22:53:bf:bf:8b:33:28:a4:e8:76:15:cb:4e: 9a:8a:ab:f2:d3:4f:c9:c6:8c:49:5a:fc:e4:5e:67: d1:0d:47:a0:e7:64:b8:7d:42:c8:c9:59:d1:71:06: dd:cc:5a:4e:cc:df:69:0f:dd:82:06:e0:6d:47:e4: 9b:a0:23:8f:5e:79:71:df:38:62:aa:99:f6:a4:f2: 58:fa:da:78:8f:6f:32:86:7e:14:e4:0d:28:5b:1f: 4f:ae:b3:b1:6e:fa:eb:2f:ee:92:5b:dd:b1:dd:f8: 7d:e6:de:2c:0c:0a:e4:e3:f0:09:94:87:60:75:8c: 84:91:87:15:49:6a:b5:0f:23:8d:dd:be:81:73:50: 65:3b:3d:3a:20:4c:d5:dc:2f:0e:df:7c:c0:46:95: da:5d:31:b8:d5:ff:ee:d3:34:27:9a:91:94:d4:d2: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:02:ED:69:2D:1F:BC:B7:AB:A3:6E:AF:52:4F:0B:CC:F3:84:F1:D3 X509v3 Authority Key Identifier: keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:61:5a:c5:3f:e8:43:8a:f1:9f:28:a4:de:0b:bb:9c:83: 3a:56:0c:f6:a2:70:73:1c:49:63:49:cc:8e:97:17:25:36:02: 8c:ad:2a:46:7b:bb:55:d4:37:3f:b3:47:64:79:a9:4e:32:22: 23:0c:90:78:94:ec:78:a7:df:e0:11:3f:8b:af:ee:33:f4:ec: 95:e6:6a:23:95:5c:49:ed:df:7e:8a:da:5b:c5:df:51:bc:2a: af:c3:43:5f:e5:2e:4b:c1:95:d2:60:06:8d:32:e1:63:e9:2a: ea:b6:23:05:3a:6c:51:2d:64:ab:58:6c:11:9d:3a:4b:77:0e: fe:d0:47:0c:5a:65:ba:74:7e:e8:d3:f0:22:72:03:4d:06:06: 11:19:ee:a6:3b:67:7b:47:d1:2c:3c:53:81:c4:37:85:06:af: d9:92:32:2d:e8:62:6e:b1:66:e3:4a:ba:1a:e5:4a:dc:34:e6: 76:53:f7:ab:19:ff:d2:eb:16:f0:e1:e9:4f:0c:b2:10:95:c1: 21:4b:6c:42:bc:09:93:e3:7c:a7:49:22:0e:5c:ea:40:2d:a5: d4:33:d4:1d:1a:a7:12:a5:ba:c2:74:5f:51:1e:8e:7b:68:07: 5e:68:c8:69:2c:5e:39:c9:ea:56:a8:75:c9:e9:4a:0b:5b:a0: e0:27:91:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/YKVlgA5mCGs53oPlm0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3 YThkZDIwHhcNMjUxMjIwMDkwMDUxWhcNMjUxMjIxMDkwMDUxWjAzMTEwLwYDVQQD EyhhYTAyZWQ2OTJkMWZiY2I3YWJhMzZlYWY1MjRmMGJjY2YzODRmMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmevZH8GoCbc1N5GxD6PR08CT5H2T R1OTF3gykeX0MQHxCu9nvjKiBYPKs47hmdsACXcfjiyHwEJvsP+a0D3NWWndS1yx TCk29ieVbO7b8zYc18RgFNcfoASVCSJTv7+LMyik6HYVy06aiqvy00/JxoxJWvzk XmfRDUeg52S4fULIyVnRcQbdzFpOzN9pD92CBuBtR+SboCOPXnlx3zhiqpn2pPJY +tp4j28yhn4U5A0oWx9PrrOxbvrrL+6SW92x3fh95t4sDArk4/AJlIdgdYyEkYcV SWq1DyON3b6Bc1BlOz06IEzV3C8O33zARpXaXTG41f/u0zQnmpGU1NITQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoC7WktH7y3q6Nur1JPC8zzhPHTMB8GA1UdIwQY MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFthWsU/ 6EOK8Z8opN4Lu5yDOlYM9qJwcxxJY0nMjpcXJTYCjK0qRnu7VdQ3P7NHZHmpTjIi IwyQeJTseKff4BE/i6/uM/TsleZqI5VcSe3fforaW8XfUbwqr8NDX+UuS8GV0mAG jTLhY+kq6rYjBTpsUS1kq1hsEZ06S3cO/tBHDFplunR+6NPwInIDTQYGERnupjtn e0fRLDxTgcQ3hQav2ZIyLehibrFm40q6GuVK3DTmdlP3qxn/0usW8OHpTwyyEJXB IUtsQrwJk+N8p0kiDlzqQC2l1DPUHRqnEqW6wnRfUR6Oe2gHXmjIaSxeOcnqVqh1 yelKC1ug4CeRQg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:17 2025 by rpki-client