This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft File: mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json) Hash identifier: v/XQwPXYDU5XN/C2hGSRR5KTzAVlES0lOuE7so13drg= Subject key identifier: 59:F5:AC:36:5E:15:94:1A:00:0B:24:22:05:AE:70:18:06:CD:5E:95 Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94 Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094 Certificate serial: 019B3B3501372335351D00C1BFB6D480AFFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 10:01:28 +0000 Manifest this update: Sat 20 Dec 2025 10:01:28 +0000 Manifest next update: Sun 21 Dec 2025 10:01:28 +0000 Files and hashes: 1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=) 2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: n7MvdwpSOvmc7NsD1zGrPNBP04ilsqz5autJgMh6Vf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:01:37:23:35:35:1d:00:c1:bf:b6:d4:80:af:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094 Validity Not Before: Dec 20 10:01:28 2025 GMT Not After : Dec 21 10:01:28 2025 GMT Subject: CN=59f5ac365e15941a000b242205ae701806cd5e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:2b:80:9d:ae:b1:50:06:78:5a:ec:13:e2: 7d:c0:10:0f:71:73:48:45:7d:f8:e0:96:c8:c2:70: 11:a3:5b:d6:c9:2d:03:e5:26:d6:45:c9:22:f6:0c: af:56:ce:6d:48:c0:1d:f4:83:79:e7:88:33:c1:6e: 09:33:7b:a9:a5:ea:42:26:6d:d8:e6:0a:c8:b6:0c: 10:69:b8:c6:07:d7:46:15:2f:db:ab:02:13:7e:40: 7c:02:9e:69:e8:fc:c7:7b:9a:a4:6e:4a:75:2e:d9: 85:bb:2d:13:65:ca:2b:f3:4c:6b:dd:83:14:a4:49: d2:63:6a:71:6e:4b:44:a3:85:e3:bd:4f:d8:78:ab: 18:df:32:bf:7d:c4:9f:e1:28:d7:d7:24:04:e3:7e: 88:4b:7c:f3:2b:c7:ad:2d:78:b8:44:f0:d6:66:40: 56:1d:b2:81:0f:39:54:ca:91:04:75:15:29:ef:fa: 60:75:ca:0a:fc:4d:25:b2:33:4e:a9:f9:81:68:81: da:63:d1:b6:f3:d9:47:89:16:fe:a9:ca:be:0b:2a: 6d:d8:9e:a1:a2:40:d2:c6:48:56:96:93:0b:6c:f5: 7b:28:8c:c2:3e:33:3e:d1:56:2f:9e:91:75:89:bb: da:9e:48:d5:fc:20:83:82:08:c7:85:8b:c2:5d:d0: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:AC:36:5E:15:94:1A:00:0B:24:22:05:AE:70:18:06:CD:5E:95 X509v3 Authority Key Identifier: keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:55:a0:ab:c5:9f:b7:fb:62:db:40:a5:3f:b9:7c:bc:f5:6c: 6e:aa:57:9d:61:d0:d7:a6:a1:17:53:21:b8:fb:90:8f:95:f6: 59:ec:33:cf:2d:6d:de:05:af:e1:a1:d3:fd:e2:80:67:12:dc: c1:07:5e:9d:68:37:7a:ed:5d:7e:63:c7:c5:c6:30:e9:21:d3: 88:bb:c4:88:f4:11:d5:d4:28:60:1e:f4:6a:3a:a9:ab:d5:39: 85:52:95:94:13:a6:37:4c:4f:6b:81:4f:c4:27:a4:3e:80:89: df:f9:49:11:8c:15:45:95:a3:1c:c3:e7:27:62:40:c1:1f:ee: c5:69:22:c3:15:22:d5:a9:39:20:68:b2:b6:8b:30:b4:e2:e5: a2:95:d5:2d:c8:32:17:79:7b:44:37:da:33:5e:50:3d:16:7d: a9:33:10:cd:26:b2:7c:09:95:89:57:50:1d:cc:8d:d3:fd:2b: 5f:47:cd:40:87:f9:5d:64:a7:c9:5f:ac:ab:e0:ea:d8:37:af: f2:c1:9f:23:b5:d0:f4:b4:61:f2:22:e0:e8:81:da:5f:71:4c: 7d:72:0e:90:7e:c5:72:a7:e2:19:e9:a2:30:e8:d9:b4:e6:97: 3a:f7:4f:e6:7c:1c:f1:92:3f:76:de:7c:12:f8:ef:25:7a:f4: a4:5e:26:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQE3IzU1HQDBv7bUgK/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NDEzM2IzMWQ5NmIyN2MxYWY4MTgxMTRiMTY5YzlhNTc0 NWUwOTQwHhcNMjUxMjIwMTAwMTI4WhcNMjUxMjIxMTAwMTI4WjAzMTEwLwYDVQQD Eyg1OWY1YWMzNjVlMTU5NDFhMDAwYjI0MjIwNWFlNzAxODA2Y2Q1ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JErgJ2usVAGeFrsE+J9wBAPcXNI RX344JbIwnARo1vWyS0D5SbWRcki9gyvVs5tSMAd9IN554gzwW4JM3uppepCJm3Y 5grItgwQabjGB9dGFS/bqwITfkB8Ap5p6PzHe5qkbkp1LtmFuy0TZcor80xr3YMU pEnSY2pxbktEo4XjvU/YeKsY3zK/fcSf4SjX1yQE436IS3zzK8etLXi4RPDWZkBW HbKBDzlUypEEdRUp7/pgdcoK/E0lsjNOqfmBaIHaY9G289lHiRb+qcq+Cypt2J6h okDSxkhWlpMLbPV7KIzCPjM+0VYvnpF1ibvankjV/CCDggjHhYvCXdD9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn1rDZeFZQaAAskIgWucBgGzV6VMB8GA1UdIwQY MBaAFJhBM7MdlrJ8GvgYEUsWnJpXReCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEt NzUwNjlhZTc3MzI2LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEtNzUwNjlhZTc3MzI2 LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVWgq8Wf t/ti20ClP7l8vPVsbqpXnWHQ16ahF1MhuPuQj5X2Wewzzy1t3gWv4aHT/eKAZxLc wQdenWg3eu1dfmPHxcYw6SHTiLvEiPQR1dQoYB70ajqpq9U5hVKVlBOmN0xPa4FP xCekPoCJ3/lJEYwVRZWjHMPnJ2JAwR/uxWkiwxUi1ak5IGiytoswtOLlopXVLcgy F3l7RDfaM15QPRZ9qTMQzSayfAmViVdQHcyN0/0rX0fNQIf5XWSnyV+sq+Dq2Dev 8sGfI7XQ9LRh8iLg6IHaX3FMfXIOkH7FcqfiGemiMOjZtOaXOvdP5nwc8ZI/dt58 EvjvJXr0pF4m+w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:18:12 2025 by rpki-client