This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json) Hash identifier: CP2ap9oSq3il6IopeJI2y8swjK8qqJnvBe0UQPTI+pc= Subject key identifier: 87:FC:10:25:D0:49:53:5B:94:EE:9C:DD:CF:46:C9:DE:A8:19:CB:BA Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457 Certificate serial: 019B5F418EAE033E86808C94A1E3A6B8F131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft Manifest number: 03AB Signing time: Sat 27 Dec 2025 10:01:30 +0000 Manifest this update: Sat 27 Dec 2025 10:01:30 +0000 Manifest next update: Sun 28 Dec 2025 10:01:30 +0000 Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: McU5qVQCP3zPs5fCBPEHm6W8q92Fk44cXI2jSCzCfz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:8e:ae:03:3e:86:80:8c:94:a1:e3:a6:b8:f1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457 Validity Not Before: Dec 27 10:01:30 2025 GMT Not After : Dec 28 10:01:30 2025 GMT Subject: CN=87fc1025d049535b94ee9cddcf46c9dea819cbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:ee:e3:9c:3e:75:93:69:a8:8c:7a:c4:8f: f1:12:6b:1c:28:0d:a0:2f:7b:3c:58:c4:0c:cb:51: 4c:1c:f2:89:0a:b4:e3:66:af:31:d6:98:17:c9:b9: cf:47:b5:52:3d:d1:05:02:34:fc:53:32:f3:d1:49: be:f4:00:71:38:c5:a7:18:fc:dd:f5:5e:e5:95:e6: 6f:2a:43:ff:db:9b:6e:4b:54:92:77:42:86:4d:75: 32:13:e5:d8:3c:aa:8d:3a:b0:08:43:cf:13:0e:11: 0d:59:91:6e:69:f5:db:13:fe:44:a7:cc:25:4d:a9: 4c:c3:1e:78:32:14:6c:f5:d5:d0:28:e4:cb:a9:25: 48:b5:57:0f:ba:d3:b9:c9:89:e0:c9:d1:f2:5f:8f: 87:7a:e4:86:f7:3f:50:6c:03:1e:29:7f:a6:15:0f: 8e:5d:4b:4d:d9:43:cc:47:f1:02:30:3a:27:ae:ac: cd:70:67:2c:11:60:40:d5:84:f3:64:1b:ed:37:5f: 21:14:67:a1:c1:b4:85:da:cd:72:dc:a2:5d:d9:d1: 1c:11:7a:9d:10:a6:d4:5d:05:0b:9b:a7:74:43:53: 98:f7:d3:26:e3:0c:91:f4:d1:66:ef:ab:59:98:5a: 79:80:56:5c:64:df:1e:24:a4:54:9c:00:91:b9:c3: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:10:25:D0:49:53:5B:94:EE:9C:DD:CF:46:C9:DE:A8:19:CB:BA X509v3 Authority Key Identifier: keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b7:ab:be:97:f1:61:7c:1a:d9:d7:39:36:1b:cb:57:02:7a: d0:81:1f:af:59:b9:94:09:93:ae:ba:91:76:60:f4:f0:e3:6e: a3:7e:be:9f:6d:27:b7:29:e6:92:d7:8c:bd:1e:6f:bd:7e:fc: bc:fc:3d:94:4f:bf:88:c5:b7:66:d2:2b:95:bb:c3:09:3c:ea: fd:72:36:6e:7b:b6:6e:9a:d1:d5:83:f1:1f:34:08:54:ef:1a: 2a:85:3b:0b:5d:66:cb:9d:df:c9:70:2d:3b:ef:61:92:a0:c6: 52:21:c5:e0:a4:98:02:36:12:7e:f7:0c:12:02:32:25:19:09: b2:62:83:9e:b6:e4:d3:2e:0f:8c:07:1f:38:bd:67:cf:e4:bb: 85:b3:4d:ba:a5:63:91:27:07:09:24:07:56:37:b8:ce:8a:52: 0c:69:93:3d:86:00:f6:ab:7f:75:9a:64:1b:cd:1b:6b:b1:44: 13:94:99:c7:9c:9f:73:d0:27:7b:f6:fa:38:34:30:d4:cc:f7: d3:b6:13:03:1d:a6:92:1a:28:49:60:62:5b:e8:4b:09:16:d0: 93:fb:10:06:06:4a:47:d1:fd:60:2f:31:62:82:e9:90:e7:c2: 09:42:dc:91:c0:6d:e5:36:f2:1d:40:ea:92:8a:99:3e:1f:39: e9:f4:3f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQY6uAz6GgIyUoeOmuPExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjhjNGQzZmZjYThlNzM3ODY4YTQ1Njk2YTE5OGZkZTA5 ZmQ0NTcwHhcNMjUxMjI3MTAwMTMwWhcNMjUxMjI4MTAwMTMwWjAzMTEwLwYDVQQD Eyg4N2ZjMTAyNWQwNDk1MzViOTRlZTljZGRjZjQ2YzlkZWE4MTljYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGzu45w+dZNpqIx6xI/xEmscKA2g L3s8WMQMy1FMHPKJCrTjZq8x1pgXybnPR7VSPdEFAjT8UzLz0Um+9ABxOMWnGPzd 9V7lleZvKkP/25tuS1SSd0KGTXUyE+XYPKqNOrAIQ88TDhENWZFuafXbE/5Ep8wl TalMwx54MhRs9dXQKOTLqSVItVcPutO5yYngydHyX4+HeuSG9z9QbAMeKX+mFQ+O XUtN2UPMR/ECMDonrqzNcGcsEWBA1YTzZBvtN18hFGehwbSF2s1y3KJd2dEcEXqd EKbUXQULm6d0Q1OY99Mm4wyR9NFm76tZmFp5gFZcZN8eJKRUnACRucNKWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf8ECXQSVNblO6c3c9Gyd6oGcu6MB8GA1UdIwQY MBaAFHloxNP/yo5zeGikVpahmP3gn9RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTkt MDc3M2VkNmY0ZmZkLzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTktMDc3M2VkNmY0ZmZk LzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbervpfx YXwa2dc5NhvLVwJ60IEfr1m5lAmTrrqRdmD08ONuo36+n20ntynmkteMvR5vvX78 vPw9lE+/iMW3ZtIrlbvDCTzq/XI2bnu2bprR1YPxHzQIVO8aKoU7C11my53fyXAt O+9hkqDGUiHF4KSYAjYSfvcMEgIyJRkJsmKDnrbk0y4PjAcfOL1nz+S7hbNNuqVj kScHCSQHVje4zopSDGmTPYYA9qt/dZpkG80ba7FEE5SZx5yfc9Ane/b6ODQw1Mz3 07YTAx2mkhooSWBiW+hLCRbQk/sQBgZKR9H9YC8xYoLpkOfCCULckcBt5TbyHUDq koqZPh856fQ/4g== -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:49 2025 by rpki-client