This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft File: ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json) Hash identifier: rVTbO45HTXBO1KEhcPa8kGwD1CBE5vlU6nfDcP3mYL8= Subject key identifier: FD:30:BE:5B:E6:07:59:C2:8C:99:2A:E8:34:85:AB:1A:14:D2:53:B2 Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85 Certificate issuer: /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285 Certificate serial: 019B6542EB4BF82704891289D2937D2828C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft Manifest number: 06AE Signing time: Sun 28 Dec 2025 14:00:42 +0000 Manifest this update: Sun 28 Dec 2025 14:00:42 +0000 Manifest next update: Mon 29 Dec 2025 14:00:42 +0000 Files and hashes: 1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: z1IF+VQa3k92qfTHwVKSVUX4eVJ1u+mzu5sFXMRu0fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:42:eb:4b:f8:27:04:89:12:89:d2:93:7d:28:28:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285 Validity Not Before: Dec 28 14:00:42 2025 GMT Not After : Dec 29 14:00:42 2025 GMT Subject: CN=fd30be5be60759c28c992ae83485ab1a14d253b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:67:f8:30:eb:51:1c:6e:66:e3:25:a0:99: 37:ba:b8:7e:09:eb:d1:45:1d:82:1d:67:e9:a3:20: 21:99:ed:ff:8f:b8:7f:a1:fa:ba:b2:14:77:2e:0d: 80:fa:91:19:0e:39:c3:df:da:b1:be:68:bc:00:b7: d9:20:be:fd:a8:89:b5:b1:fb:7e:f6:e1:ba:3b:16: 7b:c9:a8:b9:c4:67:9f:86:0e:0d:7b:ea:67:6c:3f: 20:0c:7f:9b:02:e1:c3:20:60:80:ad:fa:c5:e4:af: db:38:d3:fd:d7:e7:e3:13:fc:03:5e:af:78:20:c3: 68:33:59:e4:44:fd:1e:22:be:e2:d2:b6:3d:e8:ac: 5a:08:e6:4f:a2:97:16:f2:8d:f8:e7:d8:03:fd:b2: b8:73:db:60:72:b8:4b:f1:34:08:36:b8:d6:ae:15: ba:f7:19:42:ba:81:6c:eb:ed:8c:48:e1:45:af:a5: 8b:28:0f:72:7b:2d:f7:42:45:68:54:91:6a:40:a7: 0a:3b:18:33:d8:c6:1a:d0:bb:b9:3a:0d:a5:c2:3d: 00:42:23:af:3a:b3:50:8f:4a:26:95:04:d0:f6:6a: 9e:a4:1c:e4:a5:60:ce:90:97:fa:2e:21:54:65:77: c9:38:00:b0:fa:fb:19:98:36:90:39:68:a3:8a:20: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:30:BE:5B:E6:07:59:C2:8C:99:2A:E8:34:85:AB:1A:14:D2:53:B2 X509v3 Authority Key Identifier: keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:6c:0d:2a:d6:2b:83:e0:56:79:be:76:17:29:c9:54:88: aa:01:2c:b8:c8:5f:58:51:4c:fe:ed:e1:26:e0:43:a5:92:54: b6:65:2f:04:76:23:99:9b:e9:e2:8e:cd:73:03:90:28:b0:1d: 67:e5:8d:fc:26:32:be:10:88:23:fc:2b:c0:48:a9:d2:73:f7: 5b:f5:32:ae:cd:7d:dd:5e:43:9f:5f:13:40:39:ad:2b:cd:cf: 26:f9:8f:d5:ea:90:ba:e3:f7:8b:cd:dc:60:3e:0e:bd:d1:70: 40:91:d3:ee:8d:0b:dc:17:ea:e5:ea:90:d4:b1:2b:7a:d9:33: f4:37:b1:f2:f7:e8:5c:af:0a:4d:a1:43:46:0c:b3:01:87:6e: 71:5d:64:4f:d2:b0:a3:2c:b4:88:57:d8:91:fe:52:10:61:ed: a1:ec:13:7e:d5:37:b4:0a:ac:73:5f:29:10:8c:60:26:79:73: 1b:c3:43:1a:ee:6e:3a:e0:dc:b9:95:fa:d7:c0:d3:e4:b7:2c: 0a:cb:21:2b:ed:dc:0f:38:57:a5:fe:ff:1b:a2:3d:1b:34:51: 1f:ec:f1:29:14:c8:47:a5:c5:71:fe:70:78:c0:6a:a5:db:79: 92:79:6f:43:7f:15:0c:c6:bf:b3:05:66:38:ef:0f:4c:07:97: 52:c5:52:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQutL+CcEiRKJ0pN9KCjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZWY4MDc1NzVmNTVhYzVmZTlkZjRhNGE4NGM0Yzg3NjA4 ZjAyODUwHhcNMjUxMjI4MTQwMDQyWhcNMjUxMjI5MTQwMDQyWjAzMTEwLwYDVQQD EyhmZDMwYmU1YmU2MDc1OWMyOGM5OTJhZTgzNDg1YWIxYTE0ZDI1M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Rn+DDrURxuZuMloJk3urh+CevR RR2CHWfpoyAhme3/j7h/ofq6shR3Lg2A+pEZDjnD39qxvmi8ALfZIL79qIm1sft+ 9uG6OxZ7yai5xGefhg4Ne+pnbD8gDH+bAuHDIGCArfrF5K/bONP91+fjE/wDXq94 IMNoM1nkRP0eIr7i0rY96KxaCOZPopcW8o3459gD/bK4c9tgcrhL8TQINrjWrhW6 9xlCuoFs6+2MSOFFr6WLKA9yey33QkVoVJFqQKcKOxgz2MYa0Lu5Og2lwj0AQiOv OrNQj0omlQTQ9mqepBzkpWDOkJf6LiFUZXfJOACw+vsZmDaQOWijiiDjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0wvlvmB1nCjJkq6DSFqxoU0lOyMB8GA1UdIwQY MBaAFHnvgHV19VrF/p30pKhMTIdgjwKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTkt OWE0YThiOTMzYmRkLzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTktOWE0YThiOTMzYmRk LzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOtsDSrW K4PgVnm+dhcpyVSIqgEsuMhfWFFM/u3hJuBDpZJUtmUvBHYjmZvp4o7NcwOQKLAd Z+WN/CYyvhCII/wrwEip0nP3W/Uyrs193V5Dn18TQDmtK83PJvmP1eqQuuP3i83c YD4OvdFwQJHT7o0L3Bfq5eqQ1LEretkz9Dex8vfoXK8KTaFDRgyzAYducV1kT9Kw oyy0iFfYkf5SEGHtoewTftU3tAqsc18pEIxgJnlzG8NDGu5uOuDcuZX618DT5Lcs CsshK+3cDzhXpf7/G6I9GzRRH+zxKRTIR6XFcf5weMBqpdt5knlvQ38VDMa/swVm OO8PTAeXUsVSDA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:06 2025 by rpki-client