This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json) Hash identifier: FxuWFAg60AyvJp13kSKThzCCPH8VBSDYeHw9ooGmpPY= Subject key identifier: BB:81:AF:9C:EB:5C:37:E9:3A:87:02:B2:0E:AC:E2:B0:44:CE:A0:53 Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Certificate serial: 019B6E0F8F79FCC6362ADAE3E0D8D646B06C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft Manifest number: 1507 Signing time: Tue 30 Dec 2025 07:01:11 +0000 Manifest this update: Tue 30 Dec 2025 07:01:11 +0000 Manifest next update: Wed 31 Dec 2025 07:01:11 +0000 Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: /+3VJ7uCifLQQ2ZteHn1Dderloof4c0SfzLNMJEDDaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:8f:79:fc:c6:36:2a:da:e3:e0:d8:d6:46:b0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Validity Not Before: Dec 30 07:01:11 2025 GMT Not After : Dec 31 07:01:11 2025 GMT Subject: CN=bb81af9ceb5c37e93a8702b20eace2b044cea053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:3d:ca:4b:6b:a9:8e:0d:ed:7f:ad:02:71: 01:bd:ea:72:a9:e3:fd:71:6a:49:6a:65:55:3c:2c: 90:60:b7:ff:27:3e:53:3a:c7:aa:31:12:d7:2d:71: 41:1a:4b:22:6f:d2:63:3f:d8:9d:fa:34:a8:3d:e2: f6:d4:34:ac:b4:2d:75:4b:f9:50:6a:ea:81:4b:3f: 61:55:72:d9:1b:7b:f1:8f:c6:35:ee:e9:9d:43:94: 2e:18:ef:f7:d6:8e:04:4d:79:f0:65:10:71:cb:5c: 54:44:de:bb:90:da:66:d0:44:4c:91:be:1c:8d:c5: cd:58:83:37:fb:50:0e:7a:42:96:2d:ff:31:83:0c: 89:78:cb:1d:75:0d:f6:bb:66:02:3a:22:2c:42:8f: 28:1b:a9:4c:ff:b9:cb:ed:4d:2b:a1:9a:39:cd:89: 1b:80:59:76:1f:37:7a:85:f8:b7:07:90:9d:b4:43: 45:73:79:5e:a2:db:2d:d8:ab:89:66:6a:46:e7:d1: 93:da:b0:c7:c4:cf:67:c7:f9:49:be:71:10:b7:7e: 29:70:13:d0:c2:d1:9f:2a:62:8d:71:bd:27:67:08: 3a:4a:57:64:d8:57:1d:a3:1f:8b:22:50:76:92:16: 40:04:cc:0a:c4:74:21:c5:e6:95:cc:d4:6a:9c:a4: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:AF:9C:EB:5C:37:E9:3A:87:02:B2:0E:AC:E2:B0:44:CE:A0:53 X509v3 Authority Key Identifier: keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ec:ec:11:06:53:d0:c8:6d:1c:30:04:97:d4:2e:66:12:0e: 4a:0c:55:33:dd:1f:e2:6f:11:72:38:db:dd:9e:fb:fe:a2:a4: ab:1d:00:ff:61:8a:b5:7c:fa:e5:f8:93:8b:0c:89:a0:36:c5: 53:e8:2a:f4:77:fa:94:c8:e8:ee:06:2c:72:8f:66:49:6b:21: 7f:9c:39:93:67:29:1d:a9:a0:a9:24:d8:a2:0f:15:b4:75:85: 32:13:e7:74:d9:5b:4a:9e:a3:c2:dc:48:7b:78:75:be:8a:e7: 1f:dd:ef:95:fc:41:2d:8f:96:71:ce:87:97:42:72:b8:05:27: 22:73:40:a5:6f:31:21:8d:81:f2:4a:fa:da:78:bb:81:ba:2d: e0:55:c6:43:b8:4f:2f:25:00:46:a3:1e:34:b7:c0:6b:ab:10: 03:54:05:9d:76:52:dc:00:58:4b:df:3d:3e:98:9d:ec:0b:53: 21:48:e8:aa:03:fa:26:eb:e9:53:06:fa:38:8c:11:8a:0d:2c: 0a:a0:b8:8d:85:a7:df:61:d6:e3:39:9b:ba:bb:8c:bf:a4:c9: 9d:0b:19:5d:56:b3:9c:69:14:53:f1:da:d4:c6:c2:6c:ad:ef: 36:39:67:a1:d4:74:65:09:c1:11:3e:e1:fa:e9:2c:cd:90:37: 33:fe:41:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD495/MY2Ktrj4NjWRrBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk OGRmMzEwHhcNMjUxMjMwMDcwMTExWhcNMjUxMjMxMDcwMTExWjAzMTEwLwYDVQQD EyhiYjgxYWY5Y2ViNWMzN2U5M2E4NzAyYjIwZWFjZTJiMDQ0Y2VhMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY49yktrqY4N7X+tAnEBvepyqeP9 cWpJamVVPCyQYLf/Jz5TOseqMRLXLXFBGksib9JjP9id+jSoPeL21DSstC11S/lQ auqBSz9hVXLZG3vxj8Y17umdQ5QuGO/31o4ETXnwZRBxy1xURN67kNpm0ERMkb4c jcXNWIM3+1AOekKWLf8xgwyJeMsddQ32u2YCOiIsQo8oG6lM/7nL7U0roZo5zYkb gFl2Hzd6hfi3B5CdtENFc3leotst2KuJZmpG59GT2rDHxM9nx/lJvnEQt34pcBPQ wtGfKmKNcb0nZwg6Sldk2Fcdox+LIlB2khZABMwKxHQhxeaVzNRqnKTUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuBr5zrXDfpOocCsg6s4rBEzqBTMB8GA1UdIwQY MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOzsEQZT 0MhtHDAEl9QuZhIOSgxVM90f4m8Rcjjb3Z77/qKkqx0A/2GKtXz65fiTiwyJoDbF U+gq9Hf6lMjo7gYsco9mSWshf5w5k2cpHamgqSTYog8VtHWFMhPndNlbSp6jwtxI e3h1vornH93vlfxBLY+Wcc6Hl0JyuAUnInNApW8xIY2B8kr62ni7gbot4FXGQ7hP LyUARqMeNLfAa6sQA1QFnXZS3ABYS989Ppid7AtTIUjoqgP6JuvpUwb6OIwRig0s CqC4jYWn32HW4zmburuMv6TJnQsZXVaznGkUU/Ha1MbCbK3vNjlnodR0ZQnBET7h +ukszZA3M/5Bow== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:49 2025 by rpki-client