This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json) Hash identifier: sCfuAmKl0T1vOQRrzfKUI4VzfhsTzRJCkh+iy9pDCak= Subject key identifier: 2F:34:20:77:0E:82:D9:1D:5E:D8:8C:43:D1:71:60:04:FF:6F:38:CD Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Certificate serial: 019AF23FB24818C16C15050EF4E840B2B764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft Manifest number: 07F5 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: rq1fPpTdrOgCDoBw3F0qzIfvO54TOkYiMqeMyjjBn1E=) 2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b2:48:18:c1:6c:15:05:0e:f4:e8:40:b2:b7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=2f3420770e82d91d5ed88c43d1716004ff6f38cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5e:61:1c:c7:2b:62:7f:e4:4e:06:fa:bc:e3: e5:bb:38:8a:e6:59:1a:8d:01:b9:f4:7b:91:84:57: e5:90:b4:a3:49:c9:cc:55:48:2f:e6:ec:7a:81:07: 36:d5:13:75:b0:12:76:d4:46:44:17:93:6c:07:8b: 69:4e:a5:86:02:6f:09:4c:11:02:1a:7b:26:68:f2: cf:a2:69:14:e7:68:4a:ac:36:e1:8e:d6:d2:e4:22: 92:d8:a0:41:d4:33:37:8e:d0:72:d9:1f:e2:f0:bc: 16:5a:fc:ac:41:a5:a3:2b:b7:b1:27:19:7b:d8:c0: 4a:d3:c2:a9:3f:2e:c9:46:68:c1:df:6e:58:54:9d: d3:9b:a9:4f:3f:bd:28:ec:d7:11:e2:99:56:dc:ed: 65:77:0a:fe:61:56:cd:15:bb:4a:5f:48:0f:37:28: ec:29:5d:ef:93:51:1f:99:3b:23:78:70:7e:f8:0c: 6c:b3:16:ac:d7:5d:39:e4:ae:3d:ac:d8:25:7a:3d: ea:60:dc:98:6c:48:2f:ef:28:49:27:0d:c0:e7:44: 80:00:2e:15:db:fc:bb:e1:6b:3d:76:2e:3c:3f:70: e2:9f:46:cd:28:7e:a5:53:2d:cd:5a:23:e1:de:9b: 25:88:a5:f4:cc:90:54:6b:95:49:8c:ab:2c:bc:25: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:20:77:0E:82:D9:1D:5E:D8:8C:43:D1:71:60:04:FF:6F:38:CD X509v3 Authority Key Identifier: keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:41:81:34:18:0c:0a:e0:39:9d:8d:64:dc:05:31:5b:93:8a: fd:2b:f9:b5:d4:f0:66:ab:e9:bd:c3:c3:26:18:86:4a:46:2d: bb:3a:6b:1f:2d:77:13:4c:8b:d1:95:3c:e7:28:c1:b1:18:59: ca:05:70:b3:c5:4f:00:8a:9a:b9:5c:ed:77:1e:28:d9:f8:39: f4:4e:73:e1:49:2c:a5:bc:f8:cb:d5:63:94:a0:5c:13:0b:64: 25:5f:3c:d5:44:7f:c1:c3:cd:31:2c:ac:ea:b3:08:6b:3d:f0: 2e:5c:7d:3b:e6:1c:17:14:0e:01:df:24:d7:6e:b7:d5:ba:13: 99:de:b3:fe:db:3a:01:e7:55:1e:87:d2:41:11:9a:24:15:96: d5:5c:c5:ad:48:92:af:c0:67:73:65:dc:d1:93:b7:d7:15:55: 6b:bb:56:ac:3e:13:e6:3a:44:ac:60:0d:18:52:03:cf:13:df: ab:36:7b:d3:af:7c:c5:16:b0:25:8c:6b:26:9c:10:bf:65:b8: 70:60:e0:52:7a:67:37:6f:1d:8e:ed:c2:d8:51:d8:dd:6e:a7: cc:50:8b:fb:0a:ab:a9:e8:00:2d:07:d1:20:ab:2c:c7:32:13: a9:a8:4d:1c:98:29:f1:4c:0e:51:66:d3:3f:53:9e:9a:7f:f9: d2:fe:96:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7JIGMFsFQUO9OhAsrdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDNhOWIyMGQyYWZkMDFkOWExYzYyOGQzMDFiOTljODdj YzVhY2QwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygyZjM0MjA3NzBlODJkOTFkNWVkODhjNDNkMTcxNjAwNGZmNmYzOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV5hHMcrYn/kTgb6vOPluziK5lka jQG59HuRhFflkLSjScnMVUgv5ux6gQc21RN1sBJ21EZEF5NsB4tpTqWGAm8JTBEC GnsmaPLPomkU52hKrDbhjtbS5CKS2KBB1DM3jtBy2R/i8LwWWvysQaWjK7exJxl7 2MBK08KpPy7JRmjB325YVJ3Tm6lPP70o7NcR4plW3O1ldwr+YVbNFbtKX0gPNyjs KV3vk1EfmTsjeHB++Axssxas11055K49rNglej3qYNyYbEgv7yhJJw3A50SAAC4V 2/y74Ws9di48P3Din0bNKH6lUy3NWiPh3psliKX0zJBUa5VJjKssvCX9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC80IHcOgtkdXtiMQ9FxYAT/bzjNMB8GA1UdIwQY MBaAFHsDqbINKv0B2aHGKNMBuZyHzFrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMt YTdkMTllYzA3ZjEzLzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMtYTdkMTllYzA3ZjEz LzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0GBNBgM CuA5nY1k3AUxW5OK/Sv5tdTwZqvpvcPDJhiGSkYtuzprHy13E0yL0ZU85yjBsRhZ ygVws8VPAIqauVztdx4o2fg59E5z4Ukspbz4y9VjlKBcEwtkJV881UR/wcPNMSys 6rMIaz3wLlx9O+YcFxQOAd8k12631boTmd6z/ts6AedVHofSQRGaJBWW1VzFrUiS r8Bnc2Xc0ZO31xVVa7tWrD4T5jpErGANGFIDzxPfqzZ70698xRawJYxrJpwQv2W4 cGDgUnpnN28dju3C2FHY3W6nzFCL+wqrqegALQfRIKssxzITqahNHJgp8UwOUWbT P1Oemn/50v6Wug== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:59 2025 by rpki-client