This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json) Hash identifier: mRIasycSmdxE2s9zd2T9clellg7/JLna4jR8nAKfrEo= Subject key identifier: D2:49:54:C6:13:EB:21:22:E3:9F:12:F4:BC:76:16:3C:B6:2C:5A:6A Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09 Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009 Certificate serial: 019AF1D1C4E4914611F9BBA9C4EB93EAB41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft Manifest number: 0E04 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: Mvkb2d3cdrrzMT65eh9CS43Bq4QMQlnjnvroDTY8Bck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:e4:91:46:11:f9:bb:a9:c4:eb:93:ea:b4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=d24954c613eb2122e39f12f4bc76163cb62c5a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:7e:85:16:be:c7:7b:08:3a:51:88:41:27: 37:8b:1d:be:f7:a0:7d:66:e7:ad:bf:26:37:73:99: 26:cf:fd:ab:e6:9c:a6:7e:96:3b:46:e7:bd:ae:9f: cf:54:86:b1:73:91:49:fd:23:24:8b:84:13:64:77: f9:83:06:75:34:d9:d6:75:5f:19:ee:89:b1:e4:25: c6:66:04:e7:5f:68:a7:59:bc:5d:de:9b:ff:88:ae: 87:5f:97:44:ec:8c:1d:e6:12:8c:d5:30:e1:12:03: 00:23:54:fb:28:ae:4d:e3:4a:b0:ea:36:b0:30:2b: 5d:0e:10:00:89:0d:21:f1:f4:ff:1f:3b:10:c0:18: 87:30:21:ea:76:5a:a4:aa:46:1b:da:e7:f2:52:c5: 0e:95:c0:b1:d9:a4:bf:d2:5d:a8:2a:73:95:95:7a: cd:f4:d1:58:09:d2:aa:fd:52:47:c2:28:34:a1:d1: 1f:1f:f0:82:7f:96:a0:b6:3f:db:27:62:13:c6:79: 28:2d:e0:e7:3c:12:57:e7:45:2b:49:2b:66:ab:05: 74:f9:12:e2:29:8d:b1:a9:04:44:f9:d4:57:4a:7f: 58:7c:1b:c3:e0:1d:08:1a:94:e1:0e:aa:30:d0:71: e8:9c:f9:fc:ee:0d:a4:61:93:fd:83:7f:06:72:80: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:49:54:C6:13:EB:21:22:E3:9F:12:F4:BC:76:16:3C:B6:2C:5A:6A X509v3 Authority Key Identifier: keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c9:8e:76:ef:da:ba:b5:3d:47:6d:10:bb:b4:35:a3:2c:fb: ff:25:06:4f:fc:bb:12:f7:e6:d0:c6:6c:69:21:f0:77:43:d8: 0f:79:cf:cc:e6:55:46:cf:cf:82:18:7f:d9:50:2d:09:cb:ca: 82:79:16:4c:4c:22:67:c6:f8:97:c5:92:79:86:a2:0d:7d:cb: c1:7b:8b:a5:22:80:94:d1:83:9e:ab:29:bb:f8:43:75:a2:0a: 70:ec:47:e9:a8:83:94:06:b4:ff:9a:d7:4b:cd:c7:95:80:02: ea:57:98:f4:ce:19:3c:d4:5a:8f:5e:a9:2e:5c:4b:b3:df:28: 37:6a:90:15:63:6e:12:2f:b9:8d:56:b2:78:a5:98:4e:0a:a2: 43:40:4d:54:4d:e2:97:23:34:31:51:22:c9:d6:f5:10:93:c2: f4:5f:d7:6e:f2:65:20:09:5a:f3:11:eb:ad:72:a2:1c:5a:01: 64:b5:c5:9f:2a:21:d0:75:c4:66:41:62:78:85:74:30:76:68: 5f:90:a8:18:eb:c2:76:47:40:79:d6:58:17:8a:95:2c:a7:9d: 70:72:6e:49:f1:b4:9f:e1:50:10:95:4d:79:6c:ad:4c:af:37: 29:d6:18:05:fd:ec:0e:5e:cf:01:45:cf:22:1d:89:2f:c6:28: 27:a3:e2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cTkkUYR+bupxOuT6rQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzg5ZmI0OGZiMDVkNDgxZjFmMjM5MTk0YzUzN2QxNWIz NTcwMDkwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhkMjQ5NTRjNjEzZWIyMTIyZTM5ZjEyZjRiYzc2MTYzY2I2MmM1YTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZF+hRa+x3sIOlGIQSc3ix2+96B9 ZuetvyY3c5kmz/2r5pymfpY7Rue9rp/PVIaxc5FJ/SMki4QTZHf5gwZ1NNnWdV8Z 7omx5CXGZgTnX2inWbxd3pv/iK6HX5dE7Iwd5hKM1TDhEgMAI1T7KK5N40qw6jaw MCtdDhAAiQ0h8fT/HzsQwBiHMCHqdlqkqkYb2ufyUsUOlcCx2aS/0l2oKnOVlXrN 9NFYCdKq/VJHwig0odEfH/CCf5agtj/bJ2ITxnkoLeDnPBJX50UrSStmqwV0+RLi KY2xqQRE+dRXSn9YfBvD4B0IGpThDqow0HHonPn87g2kYZP9g38GcoBp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJJVMYT6yEi458S9Lx2Fjy2LFpqMB8GA1UdIwQY MBaAFHo4n7SPsF1IHx8jkZTFN9FbNXAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUt YTFhMDhlYmY0ZWVhLzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUtYTFhMDhlYmY0ZWVh LzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8mOdu/a urU9R20Qu7Q1oyz7/yUGT/y7Evfm0MZsaSHwd0PYD3nPzOZVRs/Pghh/2VAtCcvK gnkWTEwiZ8b4l8WSeYaiDX3LwXuLpSKAlNGDnqspu/hDdaIKcOxH6aiDlAa0/5rX S83HlYAC6leY9M4ZPNRaj16pLlxLs98oN2qQFWNuEi+5jVayeKWYTgqiQ0BNVE3i lyM0MVEiydb1EJPC9F/XbvJlIAla8xHrrXKiHFoBZLXFnyoh0HXEZkFieIV0MHZo X5CoGOvCdkdAedZYF4qVLKedcHJuSfG0n+FQEJVNeWytTK83KdYYBf3sDl7PAUXP Ih2JL8YoJ6PiLA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:28 2025 by rpki-client