This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json) Hash identifier: YOF6TnxffzPmw1XFC/1tdstd9gx6NjOs4ns1ussTsUM= Subject key identifier: 47:03:E4:1B:C8:A7:39:21:77:7B:5F:23:7F:56:CD:04:3B:67:B3:08 Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Certificate serial: 019AF277276120BE9C3D485A3360804856E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft Manifest number: 1623 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: VgX+Y3RPecPsxTsGbTHuH55gzmhl3rMny6S15Qr5Wdw=) 2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:27:61:20:be:9c:3d:48:5a:33:60:80:48:56:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=4703e41bc8a73921777b5f237f56cd043b67b308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:dc:00:45:5d:72:8b:a8:a1:70:79:6f:b7: 7a:ff:5e:b0:5b:9d:a6:2f:0e:47:33:91:19:5a:ce: a2:77:9f:97:c4:ea:68:ae:60:a4:39:51:13:d9:41: 62:63:f8:22:08:c4:20:ac:b8:cd:f7:dc:8b:72:6c: bf:bf:5a:42:79:f2:54:93:2f:54:9c:81:98:a3:a6: 9d:bd:43:ce:b1:fb:94:af:21:50:66:3f:18:11:0f: 16:28:21:09:01:28:f6:62:98:ab:46:99:e8:3a:9c: 83:0a:ab:1d:64:13:80:c9:6d:d4:44:e7:16:b4:18: 53:d5:f4:c6:ca:80:02:e4:4c:c3:07:6c:9b:d6:89: 43:eb:eb:13:19:c2:cc:77:f2:cb:d8:81:d5:dd:f0: c5:dd:41:3d:2d:33:a5:31:00:73:c4:e5:01:b0:a0: 3c:d3:28:4c:78:8d:2f:60:73:63:75:32:21:26:eb: 5f:87:c8:f8:04:e2:8a:d7:db:67:03:93:36:4b:23: 4f:79:47:87:3b:79:e2:e2:a0:2d:a8:3b:0c:09:fa: 58:56:c3:00:ef:bd:a1:23:76:e3:e7:12:81:18:b3: eb:2c:a8:e9:1b:ab:a2:23:33:38:fd:01:34:af:69: c4:e0:ea:c6:fd:e7:f7:6b:1d:64:06:96:7b:23:3e: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:E4:1B:C8:A7:39:21:77:7B:5F:23:7F:56:CD:04:3B:67:B3:08 X509v3 Authority Key Identifier: keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4f:ee:ec:5e:09:b8:ba:e8:8e:64:bf:5f:67:f8:19:f3:59: 45:3b:65:6e:f4:6c:08:54:86:a6:34:7a:65:18:5a:bb:65:59: 13:a7:aa:23:ea:10:1a:46:00:78:6b:6a:54:40:d9:b1:a1:74: 1f:da:60:2c:04:fb:b8:40:69:58:97:7a:bd:91:47:7e:c3:c4: f6:e3:82:57:a6:fb:e0:10:19:56:32:4e:ff:2d:06:3c:31:b3: f4:94:c9:42:52:ba:e3:49:62:ee:bd:73:ba:00:bc:9b:dc:0c: ce:10:3d:7c:8e:98:dd:91:ef:89:f2:0f:a7:22:95:d3:b4:a8: c4:6c:5a:10:1d:6c:7e:1d:ef:f5:d0:bb:60:91:61:07:f5:49: 02:46:07:1f:75:a8:16:d4:9a:36:ee:aa:39:e6:21:2b:12:9a: dc:32:1e:fc:2e:d4:e5:df:f7:81:e0:ef:b6:10:94:fa:88:2b: 6b:f4:0a:63:06:59:38:c4:70:d8:1a:0b:4b:a9:01:55:6c:b6: f7:10:3e:70:e7:bf:b2:6a:40:b0:18:d2:1c:33:38:8f:85:c7: e0:43:7e:f7:c0:9a:90:89:b2:6f:47:16:21:de:4a:1d:dc:e0: f0:dd:5f:1e:33:b6:c0:50:3a:34:2d:51:98:5f:b6:87:18:12: 3b:5a:3d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydydhIL6cPUhaM2CASFbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4 OGEwZmMwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD Eyg0NzAzZTQxYmM4YTczOTIxNzc3YjVmMjM3ZjU2Y2QwNDNiNjdiMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPcAEVdcouooXB5b7d6/16wW52m Lw5HM5EZWs6id5+XxOpormCkOVET2UFiY/giCMQgrLjN99yLcmy/v1pCefJUky9U nIGYo6advUPOsfuUryFQZj8YEQ8WKCEJASj2YpirRpnoOpyDCqsdZBOAyW3UROcW tBhT1fTGyoAC5EzDB2yb1olD6+sTGcLMd/LL2IHV3fDF3UE9LTOlMQBzxOUBsKA8 0yhMeI0vYHNjdTIhJutfh8j4BOKK19tnA5M2SyNPeUeHO3ni4qAtqDsMCfpYVsMA 772hI3bj5xKBGLPrLKjpG6uiIzM4/QE0r2nE4OrG/ef3ax1kBpZ7Iz63tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcD5BvIpzkhd3tfI39WzQQ7Z7MIMB8GA1UdIwQY MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3 LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek/u7F4J uLrojmS/X2f4GfNZRTtlbvRsCFSGpjR6ZRhau2VZE6eqI+oQGkYAeGtqVEDZsaF0 H9pgLAT7uEBpWJd6vZFHfsPE9uOCV6b74BAZVjJO/y0GPDGz9JTJQlK640li7r1z ugC8m9wMzhA9fI6Y3ZHvifIPpyKV07SoxGxaEB1sfh3v9dC7YJFhB/VJAkYHH3Wo FtSaNu6qOeYhKxKa3DIe/C7U5d/3geDvthCU+ogra/QKYwZZOMRw2BoLS6kBVWy2 9xA+cOe/smpAsBjSHDM4j4XH4EN+98CakImyb0cWId5KHdzg8N1fHjO2wFA6NC1R mF+2hxgSO1o9bg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:32 2025 by rpki-client