This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft File: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json) Hash identifier: tRiC19hIrT7E4p/NTtLZMF68AqIs2vlE932/OBE/ots= Subject key identifier: 22:BB:70:3A:20:1B:DB:CF:2C:20:DE:A5:01:98:00:FE:C7:32:F8:2C Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7 Certificate issuer: /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7 Certificate serial: 019B5606E0ECD293D4E49DC7358D485AAFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft Manifest number: 1791 Signing time: Thu 25 Dec 2025 15:00:49 +0000 Manifest this update: Thu 25 Dec 2025 15:00:49 +0000 Manifest next update: Fri 26 Dec 2025 15:00:49 +0000 Files and hashes: 1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: ALVaBJpJ2RVgASLQsiB0BazyCIKo1pg817++fJBxpPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:e0:ec:d2:93:d4:e4:9d:c7:35:8d:48:5a:af:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7 Validity Not Before: Dec 25 15:00:49 2025 GMT Not After : Dec 26 15:00:49 2025 GMT Subject: CN=22bb703a201bdbcf2c20dea5019800fec732f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:b5:55:90:27:3a:8e:95:ac:d9:97:51:a4: 3f:c0:d1:36:7f:9b:11:9f:ca:9c:e2:f9:ec:2b:78: 9f:21:c0:05:30:cf:a1:ee:d6:dc:ba:c4:a7:1f:f9: c5:ee:d9:ac:b0:69:a7:74:23:b2:ed:4a:62:34:fa: f9:a1:2b:7c:7b:32:07:9f:61:b5:5b:74:27:86:33: 3a:d9:5a:41:4b:de:d7:98:c9:d1:ba:ec:04:18:14: 53:f7:71:c1:57:16:d0:87:b8:5b:89:19:29:5c:a1: d9:b1:03:7b:97:18:49:c3:41:f6:e8:71:7b:c4:9c: d6:55:d1:50:79:ea:99:9a:ab:17:88:b6:3d:01:74: 25:cb:e6:c9:b2:2d:fb:ea:34:4b:d2:df:03:51:01: fc:a2:3f:e7:87:29:4d:82:97:1b:ac:3f:56:6d:2e: 34:03:87:cd:2a:b6:c7:09:47:68:04:37:b3:4b:46: 5e:88:81:ea:54:1d:1c:3d:dd:67:6d:7b:22:f0:4a: 6a:8c:d5:5a:21:d9:2f:c9:a9:92:42:e1:77:af:af: 5c:67:d8:0d:eb:b2:b8:b8:00:95:4c:e2:e5:b5:23: 2f:f5:05:bc:f7:71:12:c8:73:6f:87:b3:94:32:9b: 9d:a6:b0:b8:4b:53:e3:e9:24:ee:16:a8:51:31:ee: ef:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BB:70:3A:20:1B:DB:CF:2C:20:DE:A5:01:98:00:FE:C7:32:F8:2C X509v3 Authority Key Identifier: keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:40:3f:f2:fa:a3:72:d1:2e:e2:c7:d1:91:5c:b3:92:47:3f: 23:d0:cb:b9:89:49:e9:7b:b4:a9:d7:49:6d:af:10:95:0d:b7: 8e:85:ad:c6:a4:39:f1:8e:bc:71:ff:bf:2f:74:24:e4:40:37: f3:88:91:60:43:b9:ba:55:db:f8:e7:42:3e:3b:19:e4:c0:a8: 2a:5c:c3:98:35:e4:20:dd:61:2c:67:54:f0:72:a4:8a:0a:c4: 39:65:15:b3:77:be:fc:aa:28:61:7f:3d:4f:65:79:c8:f7:c4: fd:4d:13:ee:0f:70:4d:0f:64:d1:23:00:35:7a:33:38:3d:97: f4:9c:20:e6:a9:a0:41:7c:9d:1e:08:b2:42:bd:9d:13:b1:5d: ec:7f:aa:3d:ae:39:40:85:32:6c:32:d4:90:ea:66:e8:b3:73: 55:61:53:30:67:cc:46:01:d2:9d:f1:b1:0d:3c:de:ce:09:f0: c1:79:3f:56:22:45:fe:7c:a0:70:fa:2a:a8:e5:14:32:c2:15: a6:59:c7:f5:98:10:4e:f1:b9:6b:7f:81:5c:17:d9:64:d0:3b: ba:4a:5c:c5:39:67:72:8f:ca:b9:ee:90:1b:1e:27:7a:48:3a: 87:9d:06:83:3d:d9:dd:62:1c:c5:ed:93:e2:dc:f7:84:57:30: 26:79:7b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBuDs0pPU5J3HNY1IWq+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNGY5OTFkNTVkNmE1MTcxNDMxYzc0YzFhYTVjYmViMjk5 NTQ3ZTcwHhcNMjUxMjI1MTUwMDQ5WhcNMjUxMjI2MTUwMDQ5WjAzMTEwLwYDVQQD EygyMmJiNzAzYTIwMWJkYmNmMmMyMGRlYTUwMTk4MDBmZWM3MzJmODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApki1VZAnOo6VrNmXUaQ/wNE2f5sR n8qc4vnsK3ifIcAFMM+h7tbcusSnH/nF7tmssGmndCOy7UpiNPr5oSt8ezIHn2G1 W3QnhjM62VpBS97XmMnRuuwEGBRT93HBVxbQh7hbiRkpXKHZsQN7lxhJw0H26HF7 xJzWVdFQeeqZmqsXiLY9AXQly+bJsi376jRL0t8DUQH8oj/nhylNgpcbrD9WbS40 A4fNKrbHCUdoBDezS0ZeiIHqVB0cPd1nbXsi8EpqjNVaIdkvyamSQuF3r69cZ9gN 67K4uACVTOLltSMv9QW893ESyHNvh7OUMpudprC4S1Pj6STuFqhRMe7vRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK7cDogG9vPLCDepQGYAP7HMvgsMB8GA1UdIwQY MBaAFBBPmR1V1qUXFDHHTBqly+splUfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEt MjVhOGMwZDlmMDAyLzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEtMjVhOGMwZDlmMDAy LzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEA/8vqj ctEu4sfRkVyzkkc/I9DLuYlJ6Xu0qddJba8QlQ23joWtxqQ58Y68cf+/L3Qk5EA3 84iRYEO5ulXb+OdCPjsZ5MCoKlzDmDXkIN1hLGdU8HKkigrEOWUVs3e+/KooYX89 T2V5yPfE/U0T7g9wTQ9k0SMANXozOD2X9Jwg5qmgQXydHgiyQr2dE7Fd7H+qPa45 QIUybDLUkOpm6LNzVWFTMGfMRgHSnfGxDTzezgnwwXk/ViJF/nygcPoqqOUUMsIV plnH9ZgQTvG5a3+BXBfZZNA7ukpcxTlnco/Kue6QGx4nekg6h50Ggz3Z3WIcxe2T 4tz3hFcwJnl7Ag== -----END CERTIFICATE-----Generated at Thu Dec 25 23:52:39 2025 by rpki-client