This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json) Hash identifier: CWOz0glJpsQHFeDa4cA3lSEglXlSufCJeKEUiwMJ/Qk= Subject key identifier: 1F:8D:4A:12:2B:2C:22:F0:8E:73:C4:48:50:18:B5:87:C0:30:30:B3 Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Certificate serial: 019AF31C2307EDF38022B9CE29573A634512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft Manifest number: 07C8 Signing time: Sat 06 Dec 2025 10:01:38 +0000 Manifest this update: Sat 06 Dec 2025 10:01:38 +0000 Manifest next update: Sun 07 Dec 2025 10:01:38 +0000 Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: V3IP0B9r31CQ1S9r3dyuSAFaXzDTAgTjnItr7hhUcbU=) 2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:23:07:ed:f3:80:22:b9:ce:29:57:3a:63:45:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Validity Not Before: Dec 6 10:01:38 2025 GMT Not After : Dec 7 10:01:38 2025 GMT Subject: CN=1f8d4a122b2c22f08e73c4485018b587c03030b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:0d:0c:b6:8e:33:0e:a0:ee:5d:cf:49:62: 2a:7b:07:dc:d7:e1:81:5e:25:8c:d9:9e:3c:ff:2f: 2e:5e:57:70:3f:9b:07:41:91:bf:be:24:de:d7:69: a7:06:ce:81:a1:ae:2e:a7:ae:76:39:ff:8f:ab:1a: 0d:d1:de:66:24:34:00:0a:cf:8f:95:be:4c:dc:8a: 6d:d1:e8:35:06:08:20:9b:9c:3e:92:ad:19:4b:e2: 05:53:00:b2:5f:2b:7e:6b:ef:b2:e0:4c:7f:0d:22: 9f:3b:0c:3b:a7:b1:cb:71:5e:9d:47:ce:9f:77:71: d4:f9:ae:e8:6d:d4:d4:9a:08:c5:dc:85:66:56:fc: 60:c9:a3:94:19:0b:23:b4:b1:47:71:86:3e:8f:94: 36:f2:a5:f8:c7:67:ee:9f:31:04:50:bf:93:2b:6b: eb:d0:24:79:ca:d1:70:67:94:ae:33:a7:0c:62:98: cd:63:6a:3c:8e:18:83:aa:ac:69:b7:24:24:be:02: b4:e1:c8:3d:d6:f3:9f:69:b4:ba:f2:3a:af:16:78: 09:e6:60:ae:75:8c:0d:b1:95:b7:30:b6:ba:7e:f5: e5:8c:cf:9f:4d:b3:f6:cb:19:3f:81:bf:4a:0c:ea: f2:f6:b9:55:1b:24:72:11:1a:e1:77:3b:6b:68:fb: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8D:4A:12:2B:2C:22:F0:8E:73:C4:48:50:18:B5:87:C0:30:30:B3 X509v3 Authority Key Identifier: keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:33:d9:eb:12:84:ef:b9:d0:b1:5d:d1:81:5a:f9:e4:67:08: 4a:08:a4:a3:60:f6:3a:6e:f2:e6:7c:5c:4d:1d:72:b5:56:ef: 54:e0:60:57:be:93:05:36:de:98:84:50:c1:58:d7:28:57:07: 51:42:eb:9e:fe:8c:17:ec:95:04:81:82:2d:9a:37:67:08:86: cf:6c:b6:6d:22:9b:4f:62:c5:24:21:b7:e4:57:16:1e:3b:e8: 53:64:c2:9c:3f:21:69:39:4f:79:1c:b3:89:fe:c7:a5:fb:96: 0d:36:d8:b1:69:c0:08:e4:49:17:10:a9:6e:1b:0a:ac:3c:7a: a4:d7:4f:bf:80:cf:b2:fe:8b:94:a0:24:ba:51:a3:44:70:b4: 8a:8a:72:5e:fb:09:0a:3f:3c:8a:d4:23:7e:42:18:64:11:8a: 1b:5f:99:64:fa:ad:61:e8:1f:b7:87:d2:23:d0:d8:0c:77:0b: be:d0:9e:38:37:93:bb:45:00:b2:5c:01:ba:d1:ae:8b:06:7c: 90:bc:b4:b3:71:43:25:28:e2:62:7e:2f:ab:e0:08:4f:06:b5: 8a:9d:cf:5d:bf:09:38:67:de:88:d8:cb:76:78:26:c2:8e:33: 04:e4:10:14:6f:10:ab:af:83:9f:f2:26:10:36:32:91:2d:70: 8a:2d:7d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCMH7fOAIrnOKVc6Y0USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1 Y2FlNGQwHhcNMjUxMjA2MTAwMTM4WhcNMjUxMjA3MTAwMTM4WjAzMTEwLwYDVQQD EygxZjhkNGExMjJiMmMyMmYwOGU3M2M0NDg1MDE4YjU4N2MwMzAzMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtcNDLaOMw6g7l3PSWIqewfc1+GB XiWM2Z48/y8uXldwP5sHQZG/viTe12mnBs6Boa4up652Of+PqxoN0d5mJDQACs+P lb5M3Ipt0eg1Bgggm5w+kq0ZS+IFUwCyXyt+a++y4Ex/DSKfOww7p7HLcV6dR86f d3HU+a7obdTUmgjF3IVmVvxgyaOUGQsjtLFHcYY+j5Q28qX4x2funzEEUL+TK2vr 0CR5ytFwZ5SuM6cMYpjNY2o8jhiDqqxptyQkvgK04cg91vOfabS68jqvFngJ5mCu dYwNsZW3MLa6fvXljM+fTbP2yxk/gb9KDOry9rlVGyRyERrhdztraPvfJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+NShIrLCLwjnPESFAYtYfAMDCzMB8GA1UdIwQY MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4 LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDPZ6xKE 77nQsV3RgVr55GcISgiko2D2Om7y5nxcTR1ytVbvVOBgV76TBTbemIRQwVjXKFcH UULrnv6MF+yVBIGCLZo3ZwiGz2y2bSKbT2LFJCG35FcWHjvoU2TCnD8haTlPeRyz if7HpfuWDTbYsWnACORJFxCpbhsKrDx6pNdPv4DPsv6LlKAkulGjRHC0iopyXvsJ Cj88itQjfkIYZBGKG1+ZZPqtYegft4fSI9DYDHcLvtCeODeTu0UAslwButGuiwZ8 kLy0s3FDJSjiYn4vq+AITwa1ip3PXb8JOGfeiNjLdngmwo4zBOQQFG8Qq6+Dn/Im EDYykS1wii19vw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:11 2025 by rpki-client