This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft File: EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json) Hash identifier: 1apKzlbxbr05GxDybEGhoEtfFn0pnUM0aplZTQhaftA= Subject key identifier: FE:B7:41:25:06:D6:5F:2B:44:90:7A:92:B9:EC:2C:E7:99:3B:EE:E4 Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Certificate serial: 019B7FA76996324B936C206E87F52E810168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft Manifest number: 1208 Signing time: Fri 02 Jan 2026 17:00:36 +0000 Manifest this update: Fri 02 Jan 2026 17:00:36 +0000 Manifest next update: Sat 03 Jan 2026 17:00:36 +0000 Files and hashes: 1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: 3biXx3VLOajIHflJNVCHWd58kkP0qTNlZAx7UZ+A+Zw=) 2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:69:96:32:4b:93:6c:20:6e:87:f5:2e:81:01:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Validity Not Before: Jan 2 17:00:36 2026 GMT Not After : Jan 3 17:00:36 2026 GMT Subject: CN=feb7412506d65f2b44907a92b9ec2ce7993beee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:67:34:b3:86:73:c6:8d:80:d9:a2:33:69: 7e:76:9f:55:45:32:1f:6d:52:ce:1a:1f:c2:0a:ee: 51:ac:ad:74:54:26:7b:41:e2:b9:dd:5c:24:f8:f6: 8a:56:50:db:cc:5b:7f:d4:5a:35:db:bc:8c:9e:af: 72:c8:4c:6d:3a:d5:86:96:e7:4f:f9:97:73:03:1e: 19:49:50:c3:e2:cd:60:57:c0:d8:57:b6:23:d5:b0: d6:50:30:60:da:99:1f:89:6c:31:7c:97:23:66:95: 9a:88:c8:05:d6:a1:79:86:bf:a3:dd:86:68:c5:ee: e4:9a:78:4a:88:21:85:f6:02:59:76:66:2f:15:21: a1:82:f9:0b:3f:93:85:45:0a:06:c0:d9:cd:b2:b9: e0:d7:60:c4:f5:c7:42:8f:7d:de:a0:73:57:15:84: f2:d2:ec:42:ec:f2:37:c5:c7:b7:c3:e9:2f:a8:91: 4e:a0:f5:3c:28:a9:e2:07:8e:f0:00:87:51:a0:00: e1:16:31:fd:cb:bd:2c:f0:a1:dd:af:c8:e5:b7:91: 34:af:1c:6a:bc:c5:c1:17:3d:61:69:45:72:b4:14: b2:d0:61:c4:76:c8:7f:36:69:e1:6e:61:0a:cc:13: 62:22:30:97:ea:79:67:74:ca:e3:d1:53:b5:88:b9: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B7:41:25:06:D6:5F:2B:44:90:7A:92:B9:EC:2C:E7:99:3B:EE:E4 X509v3 Authority Key Identifier: keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0f:47:ba:35:ca:16:ef:b5:df:2f:f2:8d:03:cb:cf:ad:86: 17:9a:40:9c:fe:f2:5d:1a:03:ab:04:45:fd:bf:0e:1e:5a:6d: 22:aa:90:4d:3c:c4:7e:b2:15:f5:18:51:4d:ca:5d:47:85:3f: 28:12:65:01:d1:c7:5e:de:5f:91:6e:6c:5c:c6:54:db:d7:2d: 82:c2:d5:d0:de:36:4c:b8:e4:5e:2d:c7:c3:ea:5c:e2:d6:4f: ae:a4:8d:fb:40:92:c3:df:c2:5f:f4:17:16:1a:b6:ba:ff:41: 8a:53:a4:f2:b8:b9:da:63:c1:a6:9e:ca:d1:c1:c2:8a:f4:4e: 34:c0:c2:7d:de:d2:c1:39:66:6e:00:b8:07:d5:cb:3a:d0:83: ae:a7:5a:26:42:1e:e2:e9:9a:3d:9c:3a:95:9f:f5:d1:35:08: aa:eb:bf:38:cb:f2:d4:92:10:a2:49:3b:2f:4a:e6:7e:8b:b2: 85:9c:72:de:71:54:68:34:26:82:ee:76:2b:70:83:35:ef:9b: 9a:a6:c3:9f:f1:45:49:72:76:0f:42:e2:2d:61:a3:57:dd:9e: dd:27:b5:4d:a3:bf:b3:91:0e:83:84:ef:df:42:96:51:35:e8: 0a:23:48:a6:40:7e:4b:05:95:39:84:67:ab:4e:d1:99:41:a3: e9:c1:97:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p2mWMkuTbCBuh/UugQFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi NGVjYjQwHhcNMjYwMTAyMTcwMDM2WhcNMjYwMTAzMTcwMDM2WjAzMTEwLwYDVQQD EyhmZWI3NDEyNTA2ZDY1ZjJiNDQ5MDdhOTJiOWVjMmNlNzk5M2JlZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WpnNLOGc8aNgNmiM2l+dp9VRTIf bVLOGh/CCu5RrK10VCZ7QeK53Vwk+PaKVlDbzFt/1Fo127yMnq9yyExtOtWGludP +ZdzAx4ZSVDD4s1gV8DYV7Yj1bDWUDBg2pkfiWwxfJcjZpWaiMgF1qF5hr+j3YZo xe7kmnhKiCGF9gJZdmYvFSGhgvkLP5OFRQoGwNnNsrng12DE9cdCj33eoHNXFYTy 0uxC7PI3xce3w+kvqJFOoPU8KKniB47wAIdRoADhFjH9y70s8KHdr8jlt5E0rxxq vMXBFz1haUVytBSy0GHEdsh/NmnhbmEKzBNiIjCX6nlndMrj0VO1iLlDqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP63QSUG1l8rRJB6krnsLOeZO+7kMB8GA1UdIwQY MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt ODMwMmVkODUwYzg3LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3 LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA9HujXK Fu+13y/yjQPLz62GF5pAnP7yXRoDqwRF/b8OHlptIqqQTTzEfrIV9RhRTcpdR4U/ KBJlAdHHXt5fkW5sXMZU29ctgsLV0N42TLjkXi3Hw+pc4tZPrqSN+0CSw9/CX/QX Fhq2uv9BilOk8ri52mPBpp7K0cHCivRONMDCfd7SwTlmbgC4B9XLOtCDrqdaJkIe 4umaPZw6lZ/10TUIquu/OMvy1JIQokk7L0rmfouyhZxy3nFUaDQmgu52K3CDNe+b mqbDn/FFSXJ2D0LiLWGjV92e3Se1TaO/s5EOg4Tv30KWUTXoCiNIpkB+SwWVOYRn q07RmUGj6cGXMA== -----END CERTIFICATE-----Generated at Sat Jan 3 00:56:20 2026 by rpki-client