This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft File: eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json) Hash identifier: fD4AXazACKlxRrND+43OM2mGHGX2y9jDMBiQQ6aGFXg= Subject key identifier: 5A:0F:33:7C:D9:50:58:B9:AB:CD:84:F2:E1:4B:7F:93:76:2E:8B:00 Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Certificate serial: 019B3CEBF5F287F4F1062E58A1E8969E9DF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft Manifest number: 0B27 Signing time: Sat 20 Dec 2025 18:00:55 +0000 Manifest this update: Sat 20 Dec 2025 18:00:55 +0000 Manifest next update: Sun 21 Dec 2025 18:00:55 +0000 Files and hashes: 1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=) 2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: k/HbMXmCyzuk12+1PJdag9BV81wnz+gFtKXL5VLnYwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f5:f2:87:f4:f1:06:2e:58:a1:e8:96:9e:9d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Validity Not Before: Dec 20 18:00:55 2025 GMT Not After : Dec 21 18:00:55 2025 GMT Subject: CN=5a0f337cd95058b9abcd84f2e14b7f93762e8b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:cf:e1:ac:29:24:b6:8c:23:16:da:fb:4c: 2d:d7:7e:f4:50:8c:be:db:01:30:ec:af:47:4a:8e: 31:98:1a:43:98:15:7b:f3:9a:14:c9:6b:37:f5:e9: e2:ed:ad:e2:37:ff:30:73:39:4f:46:03:7c:e4:49: d9:bf:78:ac:6f:7f:f7:1e:c1:5e:2d:1a:85:72:48: d6:64:38:33:e8:d8:3d:6c:8e:6f:9a:07:8b:a5:05: 70:f0:63:19:8a:bb:52:7c:e7:d9:d0:c4:fc:91:d9: 6f:ac:e5:d0:af:98:b7:a0:7b:5c:5b:d8:a3:bd:36: 17:0e:64:de:58:d4:c5:e9:d4:68:72:b4:e3:96:38: c3:67:c2:3a:02:81:8d:ff:11:6d:a3:51:ed:5c:8d: 8a:f9:83:2c:63:18:dd:4b:4f:78:94:00:77:a1:e7: 4a:1c:61:fb:1b:08:2b:b9:51:25:98:16:d5:6a:26: 1e:d9:83:01:0d:e3:3d:6b:ad:94:f8:eb:30:6f:86: 4f:82:bd:4e:0a:7a:30:b6:af:de:e8:c0:3c:e2:de: 69:53:e1:78:0a:e0:8c:ff:fb:6a:d7:25:f8:f3:1b: 4c:95:47:f1:1f:2d:94:89:2c:67:4a:a4:11:ab:e6: a6:a8:bf:61:f9:40:6b:76:6c:25:b8:d2:dc:95:a8: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:33:7C:D9:50:58:B9:AB:CD:84:F2:E1:4B:7F:93:76:2E:8B:00 X509v3 Authority Key Identifier: keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:85:bd:01:70:a1:5d:b5:ea:b9:91:63:d4:8e:d1:a0:7c:b0: ba:88:69:80:86:d0:3a:68:ef:1a:6c:b3:89:9a:9e:84:8b:d6: 27:e7:66:f1:1c:79:81:23:a4:80:10:83:9c:02:c8:de:2e:82: 61:ab:df:a5:a2:f9:6b:83:6c:25:92:b6:07:47:57:0b:43:c7: f8:9e:40:c8:7f:1e:c8:00:14:c3:f8:85:15:03:2d:e9:f2:f6: a4:d8:c1:ce:6c:2f:9f:eb:54:74:7e:6a:38:a9:63:09:b0:d3: 96:db:39:b8:34:77:a3:f6:8d:c8:83:be:81:93:68:ec:dc:55: 59:9b:5f:b3:ac:ce:8b:25:10:0b:76:58:89:74:e9:ee:37:9c: f8:fd:0d:e2:ac:41:c5:23:e0:a8:81:cf:c4:8c:36:53:95:a2: 72:91:ee:c7:bc:80:22:88:c0:df:c3:9f:9b:22:80:a8:de:3a: f1:6f:93:75:46:9a:11:e9:ca:6e:65:f1:36:0d:f1:41:44:3b: 8b:46:6d:c3:0b:3c:5d:e5:1a:15:44:c5:19:28:a1:67:64:51: 7c:4b:b8:24:0a:8c:1e:89:4e:20:69:8a:05:1f:89:2c:e3:58: 84:4d:25:38:9f:78:5d:cf:11:85:df:97:7d:3c:0d:13:d9:4b: ec:22:90:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/Xyh/TxBi5YoeiWnp32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl OGM5OGYwHhcNMjUxMjIwMTgwMDU1WhcNMjUxMjIxMTgwMDU1WjAzMTEwLwYDVQQD Eyg1YTBmMzM3Y2Q5NTA1OGI5YWJjZDg0ZjJlMTRiN2Y5Mzc2MmU4YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjTP4awpJLaMIxba+0wt1370UIy+ 2wEw7K9HSo4xmBpDmBV785oUyWs39eni7a3iN/8wczlPRgN85EnZv3isb3/3HsFe LRqFckjWZDgz6Ng9bI5vmgeLpQVw8GMZirtSfOfZ0MT8kdlvrOXQr5i3oHtcW9ij vTYXDmTeWNTF6dRocrTjljjDZ8I6AoGN/xFto1HtXI2K+YMsYxjdS094lAB3oedK HGH7GwgruVElmBbVaiYe2YMBDeM9a62U+Oswb4ZPgr1OCnowtq/e6MA84t5pU+F4 CuCM//tq1yX48xtMlUfxHy2UiSxnSqQRq+amqL9h+UBrdmwluNLclaj20QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoPM3zZUFi5q82E8uFLf5N2LosAMB8GA1UdIwQY MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt OGFhY2MxZjQ4MTA4LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4 LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4W9AXCh XbXquZFj1I7RoHywuohpgIbQOmjvGmyziZqehIvWJ+dm8Rx5gSOkgBCDnALI3i6C YavfpaL5a4NsJZK2B0dXC0PH+J5AyH8eyAAUw/iFFQMt6fL2pNjBzmwvn+tUdH5q OKljCbDTlts5uDR3o/aNyIO+gZNo7NxVWZtfs6zOiyUQC3ZYiXTp7jec+P0N4qxB xSPgqIHPxIw2U5WicpHux7yAIojA38OfmyKAqN468W+TdUaaEenKbmXxNg3xQUQ7 i0Ztwws8XeUaFUTFGSihZ2RRfEu4JAqMHolOIGmKBR+JLONYhE0lOJ94Xc8Rhd+X fTwNE9lL7CKQdA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:00 2025 by rpki-client