This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json) Hash identifier: jYSRof7SnCyX+eHMYyY1C1qa7V/EMMqs3hqcuaFs2b8= Subject key identifier: 77:AA:F3:3E:70:1D:B7:CC:2A:40:56:F4:31:33:5F:E8:CC:91:46:9D Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e Certificate serial: 019B390FBF2E75639F79501D5B0720E5DF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft Manifest number: 0D33 Signing time: Sat 20 Dec 2025 00:01:31 +0000 Manifest this update: Sat 20 Dec 2025 00:01:31 +0000 Manifest next update: Sun 21 Dec 2025 00:01:31 +0000 Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: lfEudOqJ+992meOIVAAtgBYqlFm5mHjKnRe6l4U3wKI=) 2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=) 3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:bf:2e:75:63:9f:79:50:1d:5b:07:20:e5:df:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e Validity Not Before: Dec 20 00:01:31 2025 GMT Not After : Dec 21 00:01:31 2025 GMT Subject: CN=77aaf33e701db7cc2a4056f431335fe8cc91469d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:42:80:7f:aa:02:9f:2c:c7:90:cc:c5:9e: 82:d0:74:1b:f1:c2:d1:11:81:84:16:d8:56:a3:03: 94:01:47:1b:08:b0:ca:3c:96:0e:13:1a:80:26:87: 72:a8:79:fd:9e:04:db:42:37:cc:41:6d:ce:24:a6: aa:7e:63:9f:9f:4c:8c:6f:11:5a:1c:02:68:90:02: d0:a2:46:eb:a4:32:c3:c1:5d:36:13:23:40:8f:4b: 56:60:43:ca:7c:bd:08:88:6f:7f:0f:a1:89:78:75: ce:3b:06:a0:b6:46:45:09:52:73:c9:b2:39:99:b3: ff:14:19:7b:32:6d:49:72:46:83:96:4a:bc:34:09: d3:b0:e7:1e:a7:57:d5:68:7e:3d:7c:8c:2c:18:28: 29:94:ef:c9:3d:2e:f7:16:3e:81:b0:09:73:5d:ab: 76:db:1a:90:06:05:a2:50:86:03:aa:ac:b2:f7:d7: d4:27:16:57:e5:25:38:5d:54:86:56:7b:1f:9c:46: 10:73:25:88:dd:3b:ca:0f:e3:0e:ab:7a:a4:72:e7: a2:4f:aa:6a:22:aa:44:84:90:9e:4b:9d:f5:59:ed: 39:bd:7c:83:11:f4:9e:c6:e9:9a:00:31:03:dd:16: 0e:ef:d0:9b:30:8c:b1:c9:35:2b:98:61:d2:38:4f: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:F3:3E:70:1D:B7:CC:2A:40:56:F4:31:33:5F:E8:CC:91:46:9D X509v3 Authority Key Identifier: keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e8:e6:28:23:3c:37:6c:10:9b:d3:66:35:2f:38:8d:52:22: 60:0d:35:e9:60:1e:ba:58:db:91:3f:ac:78:1b:7f:ad:cc:e0: 7d:c2:e0:d7:b1:b7:9f:3f:d9:ac:c8:48:8b:00:30:76:99:62: 59:c1:17:bd:85:2d:d3:97:a1:5e:98:f8:44:b7:b3:df:d5:b5: 87:3e:4c:47:aa:90:12:46:e4:4b:8f:76:81:ad:ff:93:19:ad: d1:77:69:4a:66:b2:b8:1d:0b:38:36:47:66:2c:07:d6:63:0a: 5e:91:03:1c:aa:80:37:b8:ad:d7:4a:dc:d8:5d:e9:65:74:0a: d0:7a:36:78:f2:42:46:24:96:61:64:46:77:07:8c:7b:e5:33: e7:02:09:cd:08:b2:3c:bf:a4:fd:69:33:9c:f9:d7:d7:f9:bb: 80:66:f2:29:97:20:b9:c3:07:4e:24:9a:ec:02:ea:81:67:1e: f8:7f:1c:e4:dd:78:7f:e6:d4:3a:e1:cc:39:8d:4e:bb:dc:98: 20:85:73:cf:95:8f:b7:83:fb:3c:1c:41:13:96:75:5a:95:a0: 55:db:a2:d7:30:02:6b:ce:ec:43:3b:91:e2:dd:9f:e8:ac:4b: cb:dd:a5:5f:27:70:d7:23:70:2f:68:f0:0b:bb:9e:4a:60:6d: dc:3f:16:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D78udWOfeVAdWwcg5d9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzAzYTY0NjJkYmEyOTUxN2RlMGRlZDg3Mzk3ZmE5ZTVj NDA1MmUwHhcNMjUxMjIwMDAwMTMxWhcNMjUxMjIxMDAwMTMxWjAzMTEwLwYDVQQD Eyg3N2FhZjMzZTcwMWRiN2NjMmE0MDU2ZjQzMTMzNWZlOGNjOTE0NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03FCgH+qAp8sx5DMxZ6C0HQb8cLR EYGEFthWowOUAUcbCLDKPJYOExqAJodyqHn9ngTbQjfMQW3OJKaqfmOfn0yMbxFa HAJokALQokbrpDLDwV02EyNAj0tWYEPKfL0IiG9/D6GJeHXOOwagtkZFCVJzybI5 mbP/FBl7Mm1JckaDlkq8NAnTsOcep1fVaH49fIwsGCgplO/JPS73Fj6BsAlzXat2 2xqQBgWiUIYDqqyy99fUJxZX5SU4XVSGVnsfnEYQcyWI3TvKD+MOq3qkcueiT6pq IqpEhJCeS531We05vXyDEfSexumaADED3RYO79CbMIyxyTUrmGHSOE/JFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeq8z5wHbfMKkBW9DEzX+jMkUadMB8GA1UdIwQY MBaAFBIwOmRi26KVF94N7Yc5f6nlxAUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzIt M2VjZjcxYTcxMTViLzEvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hODk5NTQtYWQyZi00YTQ4LWE4NzItM2VjZjcxYTcxMTVi LzEvRWpBNlpHTGJvcFVYM2czdGh6bF9xZVhFQlM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJejmKCM8 N2wQm9NmNS84jVIiYA016WAeuljbkT+seBt/rczgfcLg17G3nz/ZrMhIiwAwdpli WcEXvYUt05ehXpj4RLez39W1hz5MR6qQEkbkS492ga3/kxmt0XdpSmayuB0LODZH ZiwH1mMKXpEDHKqAN7it10rc2F3pZXQK0Ho2ePJCRiSWYWRGdweMe+Uz5wIJzQiy PL+k/WkznPnX1/m7gGbyKZcgucMHTiSa7ALqgWce+H8c5N14f+bUOuHMOY1Ou9yY IIVzz5WPt4P7PBxBE5Z1WpWgVdui1zACa87sQzuR4t2f6KxLy92lXydw1yNwL2jw C7ueSmBt3D8WQg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:14:59 2025 by rpki-client