This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json) Hash identifier: DFrMyyUSoRkEJX+oAB2BY3Z/r6gLOWvXda4apbNYsuI= Subject key identifier: F3:EC:EC:FC:85:8E:6C:6E:19:B9:C2:86:4E:61:84:A6:8E:6A:93:9A Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Certificate serial: 019B4626B6883E4687896464447405BC0F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft Manifest number: 14DD Signing time: Mon 22 Dec 2025 13:01:40 +0000 Manifest this update: Mon 22 Dec 2025 13:01:40 +0000 Manifest next update: Tue 23 Dec 2025 13:01:40 +0000 Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: OPkKcZt4VA3ULu6q5KyLX6oUZRfCNc/FxF+9irJ1O74=) 2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:b6:88:3e:46:87:89:64:64:44:74:05:bc:0f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Validity Not Before: Dec 22 13:01:40 2025 GMT Not After : Dec 23 13:01:40 2025 GMT Subject: CN=f3ececfc858e6c6e19b9c2864e6184a68e6a939a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:06:0d:d1:9d:dc:51:74:bd:30:bf:33:1b: 71:8e:6a:d1:5b:b9:0a:04:9f:09:d1:38:93:df:3a: 7b:1c:e2:71:4f:b4:a4:81:82:4b:b1:30:08:65:05: e7:80:c2:21:2a:dc:37:07:bb:5b:0e:21:17:d7:af: b0:4a:d1:ef:2e:63:e6:68:32:3a:27:66:0f:c1:86: ee:2f:da:4a:bc:28:4d:e0:bb:e0:f8:f7:e8:97:61: d9:85:0a:a0:47:47:e5:ad:10:95:b8:56:6a:e4:c5: 44:34:b3:49:57:29:f9:68:80:7b:0b:85:69:f6:03: 40:6b:ed:22:d8:49:14:85:e8:9d:b5:ca:d7:87:35: 37:b2:e8:04:a2:44:dd:6e:90:08:94:94:4b:81:d3: 5f:8b:fb:96:76:1d:9a:cd:b0:e6:e5:2c:e5:b3:30: 9e:80:84:34:02:8d:57:1e:88:e4:1d:d4:d8:47:51: 0a:3f:d8:c2:e2:d0:f2:49:ce:d5:50:80:04:d1:0f: 99:49:43:69:66:5e:a1:5c:49:a9:e1:b9:08:20:2c: d3:76:51:c4:b9:07:96:f2:ba:92:35:fd:89:a0:e5: 32:04:29:7f:c4:27:c8:73:d0:dc:63:30:93:82:0f: 07:7e:ae:cd:2f:13:46:39:66:a1:28:ba:f6:30:9d: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EC:EC:FC:85:8E:6C:6E:19:B9:C2:86:4E:61:84:A6:8E:6A:93:9A X509v3 Authority Key Identifier: keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bb:9a:39:0f:df:cc:55:3c:5e:2f:f5:6a:36:b1:2a:c7:92: e1:9e:f3:6d:f7:01:06:df:1b:87:f1:c9:e1:a3:9d:80:7e:57: 3c:80:0b:ea:3c:8e:6c:90:23:7a:15:ab:2b:8b:84:80:22:83: 52:08:25:2d:29:0d:c4:92:b3:4c:65:30:39:d7:4e:6e:21:e9: 92:32:21:f2:26:a2:c5:08:d2:9f:3c:7d:33:47:0c:2a:4c:c3: aa:66:95:a6:03:07:03:88:ef:b7:70:a6:2a:fe:0e:6c:0f:2a: 76:9c:97:4d:db:db:42:9f:e7:00:ac:01:1e:d9:e8:ec:20:36: cc:65:db:18:01:f3:d0:64:0b:09:aa:1f:4b:51:f1:ac:37:35: 72:35:9e:4b:37:63:b4:07:08:57:69:92:f3:58:b4:71:1d:2f: 81:16:f1:9a:fe:27:22:7e:72:85:d9:bd:06:76:83:7c:c3:28: ea:77:7f:91:17:c5:04:0f:12:25:05:b8:45:7b:b2:44:01:38: a1:2c:82:6a:9a:0d:eb:a7:97:b0:28:2f:e3:af:75:cc:55:d2: a0:ce:2b:16:95:9a:09:78:86:78:48:d1:36:13:a4:7f:a0:87: e1:00:d6:27:f6:a6:44:d9:30:9b:99:e6:b7:af:89:5d:cf:1d: 3f:8e:a8:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJraIPkaHiWRkRHQFvA9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm YzAzYmUwHhcNMjUxMjIyMTMwMTQwWhcNMjUxMjIzMTMwMTQwWjAzMTEwLwYDVQQD EyhmM2VjZWNmYzg1OGU2YzZlMTliOWMyODY0ZTYxODRhNjhlNmE5MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMoGDdGd3FF0vTC/MxtxjmrRW7kK BJ8J0TiT3zp7HOJxT7SkgYJLsTAIZQXngMIhKtw3B7tbDiEX16+wStHvLmPmaDI6 J2YPwYbuL9pKvChN4Lvg+Pfol2HZhQqgR0flrRCVuFZq5MVENLNJVyn5aIB7C4Vp 9gNAa+0i2EkUheidtcrXhzU3sugEokTdbpAIlJRLgdNfi/uWdh2azbDm5SzlszCe gIQ0Ao1XHojkHdTYR1EKP9jC4tDySc7VUIAE0Q+ZSUNpZl6hXEmp4bkIICzTdlHE uQeW8rqSNf2JoOUyBCl/xCfIc9DcYzCTgg8Hfq7NLxNGOWahKLr2MJ1MGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPs7PyFjmxuGbnChk5hhKaOapOaMB8GA1UdIwQY MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7uaOQ/f zFU8Xi/1ajaxKseS4Z7zbfcBBt8bh/HJ4aOdgH5XPIAL6jyObJAjehWrK4uEgCKD UgglLSkNxJKzTGUwOddObiHpkjIh8iaixQjSnzx9M0cMKkzDqmaVpgMHA4jvt3Cm Kv4ObA8qdpyXTdvbQp/nAKwBHtno7CA2zGXbGAHz0GQLCaofS1HxrDc1cjWeSzdj tAcIV2mS81i0cR0vgRbxmv4nIn5yhdm9BnaDfMMo6nd/kRfFBA8SJQW4RXuyRAE4 oSyCapoN66eXsCgv4691zFXSoM4rFpWaCXiGeEjRNhOkf6CH4QDWJ/amRNkwm5nm t6+JXc8dP46o4g== -----END CERTIFICATE-----Generated at Mon Dec 22 22:58:24 2025 by rpki-client