This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft File: Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json) Hash identifier: MPwmhjtSg8Di6CEXLY1U9/+bUmPt2s9Tju22joJitV4= Subject key identifier: 56:E9:97:E1:82:03:2E:7C:EA:33:22:49:A0:22:A3:7C:CA:C7:FD:AC Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d Certificate serial: 019AF12D988434E75E18C038C9BE6776495B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft Manifest number: 0E2B Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: QL6Fx6sTUtiztWacYhgej/OGz49RZzaVnchFI30gsX8=) 2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:98:84:34:e7:5e:18:c0:38:c9:be:67:76:49:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=56e997e182032e7cea332249a022a37ccac7fdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:10:1c:18:75:d6:10:86:73:ba:59:ff:d6: 03:b5:2e:50:64:3c:67:44:43:73:bb:66:6b:9c:56: 62:38:6c:32:71:fa:1c:af:d7:00:d9:d4:df:56:cb: 8a:1d:c6:33:42:48:de:ab:f0:ec:82:1a:51:3c:02: 76:6b:c4:be:ea:27:02:84:1b:53:e7:e6:1e:0a:5e: f7:b5:2c:ad:91:97:93:57:48:fd:8a:89:71:f7:97: 71:ac:ea:e9:18:79:c9:62:8a:0d:34:fb:d1:6e:02: 10:98:97:05:12:ac:33:e9:c4:16:d3:6b:4b:91:af: 2d:7a:d0:2e:e4:9a:6d:15:2c:65:d0:79:15:4f:25: 5b:b1:e9:71:bc:c7:f6:8b:19:41:b1:77:84:35:18: 49:64:46:52:0e:b8:ed:e9:4d:42:79:8a:af:40:ee: cc:d2:67:8f:9f:33:17:65:ef:77:ac:bf:d9:40:0d: 7e:48:83:87:9f:25:61:11:36:98:62:ed:05:63:6b: c0:5e:a9:e6:42:30:b0:5e:33:11:5f:18:be:05:f9: 29:6b:a4:ed:47:e3:33:7a:de:dd:e0:aa:f1:e7:9c: 98:d5:ac:23:51:6a:9c:86:8f:5d:60:a3:42:53:70: 92:84:9a:07:8e:9f:35:59:3d:23:66:6c:55:b5:ad: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E9:97:E1:82:03:2E:7C:EA:33:22:49:A0:22:A3:7C:CA:C7:FD:AC X509v3 Authority Key Identifier: keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:bf:be:d6:10:e6:e1:81:5a:03:a7:9b:ad:60:8c:db:ac:f9: 78:a5:3f:50:c7:d0:09:74:8c:be:82:d1:39:79:cf:64:37:69: 2d:ff:bb:54:4e:b5:f4:2e:93:dd:31:49:59:cf:76:ba:d8:9e: 0e:e5:57:97:c0:c6:f6:81:34:8d:68:5d:18:cf:0c:50:06:33: 9a:70:61:e8:79:49:85:fa:db:9f:b4:db:32:41:be:92:24:f7: 09:af:8d:83:9f:b5:4a:5a:45:b9:52:c3:c7:5e:f3:86:e2:58: d8:09:00:c7:22:b3:1f:d3:56:ba:ab:d1:77:4b:2b:69:65:92: 96:8d:ae:5d:94:3a:1a:4d:68:d1:35:8b:a1:d4:23:58:68:87: cc:72:e3:9e:20:98:31:5c:9c:43:e3:9c:c8:96:d4:2e:e5:31: e8:3a:7d:96:ca:e1:c2:3c:9f:d1:b3:42:14:93:75:38:e9:71: 06:ef:c9:81:24:62:11:58:ca:bf:e9:a1:3b:93:19:da:ba:6b: 0e:05:78:c6:a8:e8:36:0d:85:2b:0c:e1:a0:26:ee:15:7b:98: fe:d2:68:c7:cf:55:ab:9b:c3:d3:64:8b:b8:f4:d3:09:c0:0a: 37:06:9b:08:94:7a:d9:7e:ce:93:ae:de:c2:65:6d:7b:f8:79: 79:3b:f9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZiENOdeGMA4yb5ndklbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMmUxZTQ4NGZjYThlOTUyOGRmNmFjMTQ4MzA1NmM4ODc4 Njc3MWQwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg1NmU5OTdlMTgyMDMyZTdjZWEzMzIyNDlhMDIyYTM3Y2NhYzdmZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypMQHBh11hCGc7pZ/9YDtS5QZDxn RENzu2ZrnFZiOGwycfocr9cA2dTfVsuKHcYzQkjeq/DsghpRPAJ2a8S+6icChBtT 5+YeCl73tSytkZeTV0j9iolx95dxrOrpGHnJYooNNPvRbgIQmJcFEqwz6cQW02tL ka8tetAu5JptFSxl0HkVTyVbselxvMf2ixlBsXeENRhJZEZSDrjt6U1CeYqvQO7M 0mePnzMXZe93rL/ZQA1+SIOHnyVhETaYYu0FY2vAXqnmQjCwXjMRXxi+Bfkpa6Tt R+Mzet7d4Krx55yY1awjUWqcho9dYKNCU3CShJoHjp81WT0jZmxVta2KLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbpl+GCAy586jMiSaAio3zKx/2sMB8GA1UdIwQY MBaAFBMuHkhPyo6VKN9qwUgwVsiHhncdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQt NzlkNmY1M2M3YTJlLzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQtNzlkNmY1M2M3YTJl LzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7++1hDm 4YFaA6ebrWCM26z5eKU/UMfQCXSMvoLROXnPZDdpLf+7VE619C6T3TFJWc92utie DuVXl8DG9oE0jWhdGM8MUAYzmnBh6HlJhfrbn7TbMkG+kiT3Ca+Ng5+1SlpFuVLD x17zhuJY2AkAxyKzH9NWuqvRd0sraWWSlo2uXZQ6Gk1o0TWLodQjWGiHzHLjniCY MVycQ+OcyJbULuUx6Dp9lsrhwjyf0bNCFJN1OOlxBu/JgSRiEVjKv+mhO5MZ2rpr DgV4xqjoNg2FKwzhoCbuFXuY/tJox89Vq5vD02SLuPTTCcAKNwabCJR62X7Ok67e wmVte/h5eTv5Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:15 2025 by rpki-client