This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json) Hash identifier: t2Y4DgFfdMGwF02gy7pfnMa5OswSs+waI/R6OrqJaq8= Subject key identifier: A2:44:EE:A4:43:39:86:A8:45:FB:26:E0:63:01:97:D1:F1:4A:60:81 Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0 Certificate serial: 019AF3529CB3AC9FEBCD03FC6223C9F13ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: uYooSmtg4dVKbUZ2GSKqQS5y4TBDd+mtP45YsB23GBk=) 2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9c:b3:ac:9f:eb:cd:03:fc:62:23:c9:f1:3a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0 Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=a244eea4433986a845fb26e0630197d1f14a6081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e7:6e:47:cb:57:c5:84:e9:40:ed:7e:88:64: 2a:00:7d:3a:52:13:4c:a3:26:c4:99:88:a2:41:60: 16:12:67:e2:e6:1d:87:ad:82:62:9f:8e:e4:cb:85: ef:cd:e7:51:b0:2d:aa:18:1f:d2:41:69:20:02:2a: f9:18:36:2c:92:63:b8:21:24:9c:16:82:30:fb:07: 6a:ac:3a:b2:50:76:af:fb:15:17:e9:eb:a5:76:3b: 44:68:4a:1e:62:e8:00:23:94:a9:9f:15:0f:34:47: b5:7b:f1:69:08:11:5a:28:23:71:88:70:9c:c4:03: 9f:95:9e:8f:0f:07:24:96:14:b8:64:88:1f:d4:ab: 8f:f0:a3:02:cb:9a:e2:1d:c0:8d:a2:0a:fb:a9:5b: 46:62:86:a7:65:19:91:be:a3:01:97:19:90:3a:57: f2:ee:95:b8:5a:2e:d7:dc:07:2a:42:0d:1c:83:4e: 87:18:1d:5f:6b:17:2f:8f:d7:60:c6:f1:cc:42:23: 14:26:1c:fb:21:21:bb:30:1b:ce:ed:d3:52:91:11: 3f:5b:5a:ab:08:e7:07:7f:80:e5:59:9f:7b:70:9b: 8e:f9:11:84:8d:a6:a2:76:ec:6e:c4:6c:95:91:12: 51:05:7a:d8:eb:2d:a6:24:1b:84:04:d1:ef:f8:e7: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:44:EE:A4:43:39:86:A8:45:FB:26:E0:63:01:97:D1:F1:4A:60:81 X509v3 Authority Key Identifier: keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:eb:b4:9c:46:e1:66:ae:17:59:54:ea:46:80:a0:6a:fa:e6: ab:d9:31:75:a2:ab:03:db:4d:c1:e7:7c:17:90:8c:f5:c7:3a: a6:32:66:55:c9:cb:76:74:e0:af:ee:7f:56:ff:65:3d:db:6e: 64:d5:34:f4:ed:cf:e4:70:32:6a:4f:c6:fe:03:c4:45:91:c7: 80:95:c2:0a:37:4d:c8:55:ea:ac:d5:9a:35:cc:64:36:2d:cf: 45:9b:fc:3f:5d:8e:79:69:46:11:df:0e:da:18:96:ae:ef:0e: 03:82:d7:4e:19:e2:3a:6b:8a:a7:ed:5c:96:33:83:48:55:48: 26:d6:d3:ce:f5:87:d5:e9:3e:f7:0a:0c:0f:f8:91:90:8e:2e: e5:c8:cd:f9:67:af:d1:72:6d:83:6a:08:b8:f3:ac:1a:18:21: 32:2b:65:14:5a:41:56:cf:3b:df:81:b0:5f:02:3f:eb:80:41: a1:69:41:a7:70:6b:38:a2:5c:e4:97:58:8b:62:d3:30:b4:e9: e9:91:34:d3:d2:23:44:a4:45:09:de:dc:ba:38:d6:0f:11:b5: 32:a9:70:3d:60:da:93:72:59:28:26:0f:20:f8:31:d9:1a:63: 37:90:47:26:7f:38:31:3f:1b:8b:5f:74:b9:d4:a0:06:50:f8: cd:52:ba:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpyzrJ/rzQP8YiPJ8TrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzE3NTk4ODM3M2U1NmI2ZmZlMGIxNWExZmM3NWQ0Njkz YWUyYzAwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD EyhhMjQ0ZWVhNDQzMzk4NmE4NDVmYjI2ZTA2MzAxOTdkMWYxNGE2MDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eduR8tXxYTpQO1+iGQqAH06UhNM oybEmYiiQWAWEmfi5h2HrYJin47ky4XvzedRsC2qGB/SQWkgAir5GDYskmO4ISSc FoIw+wdqrDqyUHav+xUX6euldjtEaEoeYugAI5SpnxUPNEe1e/FpCBFaKCNxiHCc xAOflZ6PDwcklhS4ZIgf1KuP8KMCy5riHcCNogr7qVtGYoanZRmRvqMBlxmQOlfy 7pW4Wi7X3AcqQg0cg06HGB1faxcvj9dgxvHMQiMUJhz7ISG7MBvO7dNSkRE/W1qr COcHf4DlWZ97cJuO+RGEjaaiduxuxGyVkRJRBXrY6y2mJBuEBNHv+Od07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJE7qRDOYaoRfsm4GMBl9HxSmCBMB8GA1UdIwQY MBaAFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEt ZGZkNTFiMDZkZDk5LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEtZGZkNTFiMDZkZDk5 LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+u0nEbh Zq4XWVTqRoCgavrmq9kxdaKrA9tNwed8F5CM9cc6pjJmVcnLdnTgr+5/Vv9lPdtu ZNU09O3P5HAyak/G/gPERZHHgJXCCjdNyFXqrNWaNcxkNi3PRZv8P12OeWlGEd8O 2hiWru8OA4LXThniOmuKp+1cljODSFVIJtbTzvWH1ek+9woMD/iRkI4u5cjN+Wev 0XJtg2oIuPOsGhghMitlFFpBVs8734GwXwI/64BBoWlBp3BrOKJc5JdYi2LTMLTp 6ZE009IjRKRFCd7cujjWDxG1MqlwPWDak3JZKCYPIPgx2RpjN5BHJn84MT8bi190 udSgBlD4zVK6wA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:25 2025 by rpki-client