This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json) Hash identifier: OXIKtxSbnsJoW8T2O2GmdP+hUSpHjZvbubE3CSRxcO4= Subject key identifier: 04:DB:C8:F4:AA:32:46:77:83:45:96:81:0B:E7:47:50:05:FB:0C:DF Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Certificate serial: 019B2C665AEF3BC45BF0BC0CC4D65A7E2C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft Manifest number: 1641 Signing time: Wed 17 Dec 2025 13:01:04 +0000 Manifest this update: Wed 17 Dec 2025 13:01:04 +0000 Manifest next update: Thu 18 Dec 2025 13:01:04 +0000 Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: PjSzQgRmbmobm/0PO3V6KJ1kz1qu9GKwUIKVIsoR1Yk=) 2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:5a:ef:3b:c4:5b:f0:bc:0c:c4:d6:5a:7e:2c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Validity Not Before: Dec 17 13:01:04 2025 GMT Not After : Dec 18 13:01:04 2025 GMT Subject: CN=04dbc8f4aa324677834596810be7475005fb0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:9a:0c:f4:b8:90:c9:95:87:bf:fe:c9:a0: 8c:8b:4d:b8:f6:56:3c:b3:86:f4:e6:df:2f:20:cc: 73:9f:d2:c1:01:10:5d:30:ae:b1:ae:c0:89:9e:c3: 13:de:91:30:bf:c5:32:b8:8b:11:cf:be:f1:00:61: 19:23:b0:32:ea:7d:4d:2d:f5:f4:d3:7a:73:1c:02: 8a:55:be:15:fb:91:e9:a3:c4:fb:d3:a4:59:14:b3: db:66:fc:69:68:88:df:dd:59:fe:ae:08:2f:a5:c0: 9c:34:f6:16:4d:62:15:4d:9d:ab:1f:e3:24:f3:4e: d3:17:6e:b6:24:77:ce:49:bc:09:dc:a0:c0:2e:ce: f5:37:eb:53:0f:b9:96:35:ba:bd:e8:0c:0b:a7:9e: cf:1e:ca:ac:18:3b:91:cc:49:14:cd:91:e3:0e:ad: 4d:cc:25:6d:e7:0b:c0:f3:42:bf:10:4e:ec:36:5e: dc:50:46:90:19:39:64:ab:35:54:ca:a2:bb:5a:da: af:02:c6:4d:4e:5f:8a:64:ae:1f:6e:c9:b5:8c:86: cc:25:b3:1a:73:18:5a:dc:b1:0d:3f:a0:eb:0b:93: 08:56:84:80:1d:36:d7:fc:8b:24:3e:ad:d5:57:fe: 10:bd:c5:f4:2e:f2:07:86:db:ee:ce:78:97:45:22: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:C8:F4:AA:32:46:77:83:45:96:81:0B:E7:47:50:05:FB:0C:DF X509v3 Authority Key Identifier: keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:a5:42:2a:f7:ed:64:36:f2:5f:cd:74:60:f4:c5:6b:43: cb:ba:77:c6:a7:b1:84:b6:e2:83:6f:b7:70:6b:c8:21:04:fd: 4c:29:55:01:fa:34:77:5b:31:30:2f:34:8e:81:0d:d4:f9:a8: fb:e5:65:68:fb:f9:c7:2c:b0:7c:cd:f4:e9:73:ee:08:ec:bd: 83:d7:97:8a:b0:39:88:95:7c:b5:f1:cd:f5:ef:a0:21:5e:91: 91:ef:7d:ae:a3:73:da:12:15:fb:39:cf:dc:1d:61:9d:b6:8d: 6d:91:5e:5f:fc:5e:f9:ea:90:9e:af:0f:0e:f6:be:3f:39:71: 43:3e:8e:41:1b:8d:b3:c8:97:1e:3f:39:d3:ea:47:aa:32:22: 86:a5:3c:be:62:0e:66:08:b9:dd:9e:43:9c:16:aa:c5:64:78: bf:48:09:dc:44:dc:ea:1d:eb:bd:50:66:4c:5d:98:14:12:52: af:8a:5a:21:f7:c1:da:8f:0b:be:9f:95:cd:0b:97:72:62:b0: 6e:96:9b:1d:80:b5:65:ea:8c:ec:92:5f:1b:a2:17:27:22:9b: 82:3c:24:82:fd:8d:0c:c2:a7:7e:36:4a:aa:5f:0e:98:a1:db: 2c:19:75:1e:f9:11:78:30:71:07:45:70:3e:d6:43:4b:6a:b0: 7e:0d:25:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZlrvO8Rb8LwMxNZafix1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4 OGEwZmMwHhcNMjUxMjE3MTMwMTA0WhcNMjUxMjE4MTMwMTA0WjAzMTEwLwYDVQQD EygwNGRiYzhmNGFhMzI0Njc3ODM0NTk2ODEwYmU3NDc1MDA1ZmIwY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHCaDPS4kMmVh7/+yaCMi0249lY8 s4b05t8vIMxzn9LBARBdMK6xrsCJnsMT3pEwv8UyuIsRz77xAGEZI7Ay6n1NLfX0 03pzHAKKVb4V+5Hpo8T706RZFLPbZvxpaIjf3Vn+rggvpcCcNPYWTWIVTZ2rH+Mk 807TF262JHfOSbwJ3KDALs71N+tTD7mWNbq96AwLp57PHsqsGDuRzEkUzZHjDq1N zCVt5wvA80K/EE7sNl7cUEaQGTlkqzVUyqK7WtqvAsZNTl+KZK4fbsm1jIbMJbMa cxha3LENP6DrC5MIVoSAHTbX/IskPq3VV/4QvcX0LvIHhtvuzniXRSIJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATbyPSqMkZ3g0WWgQvnR1AF+wzfMB8GA1UdIwQY MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3 LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj2lQir3 7WQ28l/NdGD0xWtDy7p3xqexhLbig2+3cGvIIQT9TClVAfo0d1sxMC80joEN1Pmo ++VlaPv5xyywfM306XPuCOy9g9eXirA5iJV8tfHN9e+gIV6Rke99rqNz2hIV+znP 3B1hnbaNbZFeX/xe+eqQnq8PDva+PzlxQz6OQRuNs8iXHj850+pHqjIihqU8vmIO Zgi53Z5DnBaqxWR4v0gJ3ETc6h3rvVBmTF2YFBJSr4paIffB2o8Lvp+VzQuXcmKw bpabHYC1ZeqM7JJfG6IXJyKbgjwkgv2NDMKnfjZKql8OmKHbLBl1HvkReDBxB0Vw PtZDS2qwfg0l5g== -----END CERTIFICATE-----Generated at Wed Dec 17 15:29:49 2025 by rpki-client