This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json) Hash identifier: e9iu5c/mkOc1+94Vk41Pl9tNDx3IXf87MoZlzx0wt7E= Subject key identifier: DB:8E:90:D2:ED:BC:AA:8A:C2:A3:FE:5A:A1:AB:94:13:70:6E:87:96 Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a Certificate serial: 019AF1D1CF05A4BB2157BEBF5AC4AA517A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft Manifest number: 047C Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=) 2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: 2ctLzBtNmP93gYHsXd91o8mHibDH8z4qh8ZPTV6kn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:05:a4:bb:21:57:be:bf:5a:c4:aa:51:7a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=db8e90d2edbcaa8ac2a3fe5aa1ab9413706e8796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:7d:3a:42:44:79:76:fb:46:b7:7b:ec:41: 13:85:02:86:56:67:e1:ee:e2:8d:9d:16:7f:0d:7b: 22:cd:fe:d7:1a:b4:2f:a8:6f:57:ba:d1:e3:f5:90: 28:16:ae:50:a2:84:9d:7e:89:03:c6:ee:12:40:e0: f9:70:f0:d4:1a:c5:f1:f4:55:07:e4:81:00:e3:f6: b6:69:3e:8a:10:88:ee:d6:80:04:52:40:b1:c4:83: dc:c8:c0:73:38:12:3f:95:c5:63:94:dd:8e:bf:d7: ac:9e:b4:b2:46:f8:40:84:53:c7:b0:8f:b2:68:a7: 09:96:02:18:c8:5a:83:b5:a7:f7:4b:1a:2c:36:df: ba:c0:f0:ff:48:76:24:9e:63:d4:17:71:04:c5:97: b4:aa:2e:8a:ea:63:ec:ef:80:df:06:b5:f5:07:47: 98:bc:91:97:11:b0:72:bc:b2:76:fe:93:2f:7e:6f: 2e:8b:ca:43:cd:e0:fb:29:52:63:ab:ab:83:22:5c: 4e:4e:77:09:9c:75:d2:a4:8a:ee:77:f5:3e:12:3a: d9:7b:ca:7d:f9:c1:37:52:9a:bf:31:a9:c7:4f:08: bb:6a:58:75:ef:12:29:7a:3a:06:01:78:d9:20:6a: bd:4e:dd:a6:85:11:38:9e:c1:27:5f:29:00:9f:5c: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8E:90:D2:ED:BC:AA:8A:C2:A3:FE:5A:A1:AB:94:13:70:6E:87:96 X509v3 Authority Key Identifier: keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3f:e3:01:c2:d8:31:c7:52:65:d4:40:a9:7f:51:68:27:7d: 9f:6a:25:b3:75:02:a5:e1:03:a5:b9:b3:7d:e5:f1:84:0a:94: a0:d4:96:bd:8f:d3:c0:4e:8b:ab:ea:84:7e:c7:fa:c2:8c:e8: fa:c8:fe:14:22:65:d1:3a:c3:01:17:ba:19:58:d8:f0:07:9f: ab:12:57:eb:cc:f7:18:67:a0:d1:a8:11:db:08:a8:34:4a:1d: 08:27:78:9f:f4:c2:8e:bd:e3:2c:7e:d3:11:90:c8:2f:52:8f: b8:ef:8b:fc:3a:14:ae:09:4d:20:fb:69:7a:f6:35:b6:1f:d9: 80:4c:13:d4:4b:29:67:a8:c9:4b:11:1f:81:cf:0f:6c:08:4b: ee:3f:b2:b2:1c:53:cb:01:72:1f:37:c0:b8:4c:32:22:33:45: 77:9e:1b:50:2d:a9:c6:76:a1:52:0b:70:f7:2c:3e:b7:9c:3d: 7f:75:6f:3d:72:1c:dd:c2:25:12:f2:0d:3d:a2:97:f9:b3:b7: 36:ce:4e:28:a4:21:20:15:c5:66:5e:ef:aa:a7:97:36:95:c9: ef:c9:b1:c6:f8:ae:d2:b5:6b:54:1b:0d:90:d5:88:78:01:e9: 3f:fc:a2:ff:be:3b:5f:56:6c:2d:95:fa:97:d6:09:48:39:fa: 6a:93:ea:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c8FpLshV76/WsSqUXpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODNjNDM2Mjc5NTM3ZDRmNzI2ZDIzMTBjZWYxNGE0MmYx YjJiOGEwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhkYjhlOTBkMmVkYmNhYThhYzJhM2ZlNWFhMWFiOTQxMzcwNmU4Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxN9OkJEeXb7Rrd77EEThQKGVmfh 7uKNnRZ/DXsizf7XGrQvqG9XutHj9ZAoFq5QooSdfokDxu4SQOD5cPDUGsXx9FUH 5IEA4/a2aT6KEIju1oAEUkCxxIPcyMBzOBI/lcVjlN2Ov9esnrSyRvhAhFPHsI+y aKcJlgIYyFqDtaf3SxosNt+6wPD/SHYknmPUF3EExZe0qi6K6mPs74DfBrX1B0eY vJGXEbByvLJ2/pMvfm8ui8pDzeD7KVJjq6uDIlxOTncJnHXSpIrud/U+EjrZe8p9 +cE3Upq/ManHTwi7alh17xIpejoGAXjZIGq9Tt2mhRE4nsEnXykAn1ygWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuOkNLtvKqKwqP+WqGrlBNwboeWMB8GA1UdIwQY MBaAFBCDxDYnlTfU9ybSMQzvFKQvGyuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTIt ODEyMjQ4YjY1MzcwLzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTItODEyMjQ4YjY1Mzcw LzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj/jAcLY McdSZdRAqX9RaCd9n2ols3UCpeEDpbmzfeXxhAqUoNSWvY/TwE6Lq+qEfsf6wozo +sj+FCJl0TrDARe6GVjY8AefqxJX68z3GGeg0agR2wioNEodCCd4n/TCjr3jLH7T EZDIL1KPuO+L/DoUrglNIPtpevY1th/ZgEwT1EspZ6jJSxEfgc8PbAhL7j+yshxT ywFyHzfAuEwyIjNFd54bUC2pxnahUgtw9yw+t5w9f3VvPXIc3cIlEvINPaKX+bO3 Ns5OKKQhIBXFZl7vqqeXNpXJ78mxxviu0rVrVBsNkNWIeAHpP/yi/747X1ZsLZX6 l9YJSDn6apPqvA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:07 2025 by rpki-client