This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json) Hash identifier: f7iYATUUBJGCcYdY13up7GAxOEyQUWSc8vi9Jnxeg/Q= Subject key identifier: 5D:D7:40:DA:F7:01:F1:6C:39:63:13:CA:47:67:6C:C0:A5:48:7D:A8 Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8 Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8 Certificate serial: 019AF208C502F51C533E0636D2470CCA1F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft Manifest number: 167F Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=) 2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: EOo1QLyD+M6D5i2p6ZGOn0W8nUiO+VDx7bupLQxTtbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:02:f5:1c:53:3e:06:36:d2:47:0c:ca:1f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=5dd740daf701f16c396313ca47676cc0a5487da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:7e:57:24:32:f6:03:76:ab:07:69:90:ea: 8e:a9:f7:ab:4b:77:90:7e:0f:4b:15:58:ca:4d:ab: 3e:a7:53:e8:c6:23:38:60:8a:ed:70:21:63:5c:e3: ec:77:65:d5:65:9a:12:21:dd:12:42:63:0e:a4:53: 07:ff:64:c2:b2:43:9c:b9:61:da:63:41:b1:94:ea: e9:0e:93:55:ae:ec:21:f3:29:25:e7:92:b6:7b:e8: 36:d8:75:24:be:ba:36:e4:ce:5f:77:a2:f4:d5:8a: ba:89:a2:c7:52:88:cc:c7:c4:0e:54:3b:a3:83:c4: 31:69:ce:cc:ea:b6:b0:f5:da:1a:25:cd:de:cb:e6: 04:a8:60:c7:f7:3d:27:a5:cd:e6:25:05:a9:d5:6b: ee:f7:79:05:94:0c:2d:df:e1:42:17:15:f6:29:17: 9a:8d:25:f8:00:70:9e:37:b0:ef:aa:e7:c4:4b:ac: 3b:dd:e3:58:54:6f:7d:06:c3:d0:23:86:f2:b2:ca: cb:50:4d:e9:3d:3d:5b:4f:dc:7e:fe:28:8a:42:b4: e5:ad:0e:e7:d5:14:d1:2d:21:77:fc:b8:93:9c:45: ea:25:d2:97:ae:ca:40:c5:7a:66:8e:d0:7c:3d:3c: 55:94:06:65:c1:34:d5:cf:6e:74:a4:0e:84:2c:80: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:40:DA:F7:01:F1:6C:39:63:13:CA:47:67:6C:C0:A5:48:7D:A8 X509v3 Authority Key Identifier: keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:10:3e:83:b8:f3:a6:58:62:49:0f:b6:9c:7c:30:fd:e4:87: 50:3c:d0:e6:86:42:b4:f7:06:5a:c2:eb:22:a0:ea:57:42:34: da:9a:51:d0:01:58:41:af:27:f6:10:d5:d0:ee:ba:06:f7:3a: 1d:66:3b:c2:9c:b8:8b:e6:ed:ce:0e:cc:3f:9c:36:6b:9e:0d: bc:1d:d4:4d:3e:80:05:ab:83:9a:19:ba:6a:95:de:c1:ff:6a: ce:a8:4d:5d:51:43:23:7f:62:40:c4:d8:d1:0f:0c:f8:fb:3e: 56:7f:8d:6b:35:a5:ff:1a:fc:89:b2:f7:ef:5e:98:8b:ae:c8: 17:0a:53:bd:9f:0e:3b:f9:5f:8c:56:35:04:89:86:6f:3f:b5: f1:a5:6d:bd:3b:3f:f7:12:27:6c:32:b9:36:ec:5b:73:f9:37: b5:70:2c:4b:cc:d8:19:d3:9e:63:cf:51:2f:0e:1b:2f:2a:30: ef:01:8a:eb:08:66:bc:69:c5:bc:bb:62:2d:c7:c6:23:dc:ee: 3a:6e:1d:db:6e:66:c7:64:93:7d:a3:22:c3:72:a6:01:69:13: 8c:57:9e:25:d0:c1:35:89:09:b2:b6:57:1c:4b:4f:b6:a2:31: 9c:88:dd:21:97:12:2c:8b:08:68:40:d4:47:11:ae:ba:e7:f1: ba:d0:ce:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMUC9RxTPgY20kcMyh9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGFmOTczOGM5Zjc5OWI1NmY0YjkwMTdiZjgyMWI0ZmNh MTM1YjgwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg1ZGQ3NDBkYWY3MDFmMTZjMzk2MzEzY2E0NzY3NmNjMGE1NDg3ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIV+VyQy9gN2qwdpkOqOqferS3eQ fg9LFVjKTas+p1PoxiM4YIrtcCFjXOPsd2XVZZoSId0SQmMOpFMH/2TCskOcuWHa Y0GxlOrpDpNVruwh8ykl55K2e+g22HUkvro25M5fd6L01Yq6iaLHUojMx8QOVDuj g8Qxac7M6raw9doaJc3ey+YEqGDH9z0npc3mJQWp1Wvu93kFlAwt3+FCFxX2KRea jSX4AHCeN7DvqufES6w73eNYVG99BsPQI4byssrLUE3pPT1bT9x+/iiKQrTlrQ7n 1RTRLSF3/LiTnEXqJdKXrspAxXpmjtB8PTxVlAZlwTTVz250pA6ELIDLYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3XQNr3AfFsOWMTykdnbMClSH2oMB8GA1UdIwQY MBaAFHsK+XOMn3mbVvS5AXv4IbT8oTW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAt Y2ExMmY1M2Q3YjM0LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAtY2ExMmY1M2Q3YjM0 LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxA+g7jz plhiSQ+2nHww/eSHUDzQ5oZCtPcGWsLrIqDqV0I02ppR0AFYQa8n9hDV0O66Bvc6 HWY7wpy4i+btzg7MP5w2a54NvB3UTT6ABauDmhm6apXewf9qzqhNXVFDI39iQMTY 0Q8M+Ps+Vn+NazWl/xr8ibL3716Yi67IFwpTvZ8OO/lfjFY1BImGbz+18aVtvTs/ 9xInbDK5Nuxbc/k3tXAsS8zYGdOeY89RLw4bLyow7wGK6whmvGnFvLtiLcfGI9zu Om4d225mx2STfaMiw3KmAWkTjFeeJdDBNYkJsrZXHEtPtqIxnIjdIZcSLIsIaEDU RxGuuufxutDO6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:14 2025 by rpki-client