This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json) Hash identifier: kZjYV55sk1G3krmuwEb79po8utkQ7yKqPHuJMZXDzAQ= Subject key identifier: A2:8E:82:A8:2E:26:48:39:B4:77:68:5A:73:16:16:6F:1B:72:AD:32 Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393 Certificate serial: 019AF2ADDDD6EC360A2C2E573B74F6D1865D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft Manifest number: 0D17 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: AsgDHg8Vvp0iA+LTWnWFRmVYWiHKj5xxQnun5CRc28U=) 2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:dd:d6:ec:36:0a:2c:2e:57:3b:74:f6:d1:86:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393 Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=a28e82a82e264839b477685a7316166f1b72ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:6f:22:b4:84:7c:6e:eb:5d:52:f0:41:54: e4:75:fa:f6:af:66:ee:67:36:3a:9d:ef:c4:a6:7c: 41:37:82:ad:5d:42:25:44:f9:f6:92:b6:14:f0:b4: 94:a1:01:a2:63:31:5b:27:9f:8f:cb:7f:3a:cf:e8: f0:b6:71:f2:27:7a:50:75:8f:7d:66:67:b8:c8:f4: 8f:00:a3:98:b0:67:69:4d:12:e7:00:d1:84:41:22: 86:b3:fe:a3:66:4d:97:73:cd:59:63:88:46:94:4e: 18:a4:29:74:4e:ee:b6:3c:d5:68:cf:fd:85:c0:60: 52:d1:bf:02:d9:3e:82:24:08:b0:09:48:6d:51:dc: 90:31:d6:d2:f3:71:59:26:f1:fe:a1:06:20:f9:e6: f2:62:95:3b:49:eb:be:df:5b:7d:75:8e:f6:0c:2f: 46:66:9f:7c:54:0d:8e:f7:f9:99:c7:c4:08:00:0c: bf:25:94:5b:a9:e3:e2:ff:c1:51:6f:c8:3c:12:a0: fd:4e:c7:d9:eb:cd:53:95:b1:21:f7:b6:06:2c:98: 8f:ad:8c:51:7b:c2:8d:33:80:df:de:c8:0e:e7:ea: 4d:e9:e6:52:9b:ad:07:90:35:90:c9:81:39:bc:7b: 8b:04:22:fd:e6:ce:8e:b9:08:29:59:fb:71:78:31: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:82:A8:2E:26:48:39:B4:77:68:5A:73:16:16:6F:1B:72:AD:32 X509v3 Authority Key Identifier: keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3f:27:0e:2b:4a:2b:ff:64:99:69:7d:4e:4d:6f:4f:ed:cc: 5a:86:c5:a8:c8:6e:36:14:29:68:31:29:f2:7f:e4:bc:1f:4c: a8:08:c4:7b:29:ea:73:36:5e:5e:75:e2:2c:75:52:1a:32:90: 4c:19:f7:20:a8:34:cf:04:8a:57:8c:54:eb:9c:45:f8:a4:b1: b1:c9:df:7c:51:2c:20:eb:ae:3a:f9:d0:0f:a5:02:09:d0:5d: fe:2a:4a:1c:71:c0:10:53:43:2a:3e:39:36:79:8a:34:84:ec: cf:44:1a:e0:d3:e7:05:b2:3c:81:e0:ee:5f:21:cb:76:b6:fc: aa:a8:fd:41:e3:42:48:9d:18:7b:95:cf:09:55:03:6b:ae:1c: 1d:85:73:ee:2c:de:0b:9e:07:0b:cd:42:d2:fc:d9:ff:3e:8b: 51:9f:65:43:a6:c7:34:75:1c:67:99:ee:31:f7:00:95:30:6b: 76:81:2f:0f:a7:66:1b:73:df:4c:b4:0a:03:df:a7:4f:39:23: d1:30:e1:38:0e:89:6b:e8:72:c7:7a:f0:bc:85:9e:d0:ac:04: 3c:d4:11:66:a5:57:b8:d1:60:05:38:c7:8f:06:aa:5b:a9:4b: 46:31:84:28:cc:c0:3b:3b:d3:12:11:49:d1:59:dc:d7:dd:5a: 7c:7a:c6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrd3W7DYKLC5XO3T20YZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3 N2YzOTMwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EyhhMjhlODJhODJlMjY0ODM5YjQ3NzY4NWE3MzE2MTY2ZjFiNzJhZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRFvIrSEfG7rXVLwQVTkdfr2r2bu ZzY6ne/EpnxBN4KtXUIlRPn2krYU8LSUoQGiYzFbJ5+Py386z+jwtnHyJ3pQdY99 Zme4yPSPAKOYsGdpTRLnANGEQSKGs/6jZk2Xc81ZY4hGlE4YpCl0Tu62PNVoz/2F wGBS0b8C2T6CJAiwCUhtUdyQMdbS83FZJvH+oQYg+ebyYpU7Seu+31t9dY72DC9G Zp98VA2O9/mZx8QIAAy/JZRbqePi/8FRb8g8EqD9TsfZ681TlbEh97YGLJiPrYxR e8KNM4Df3sgO5+pN6eZSm60HkDWQyYE5vHuLBCL95s6OuQgpWftxeDF9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKOgqguJkg5tHdoWnMWFm8bcq0yMB8GA1UdIwQY MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj8nDitK K/9kmWl9Tk1vT+3MWobFqMhuNhQpaDEp8n/kvB9MqAjEeynqczZeXnXiLHVSGjKQ TBn3IKg0zwSKV4xU65xF+KSxscnffFEsIOuuOvnQD6UCCdBd/ipKHHHAEFNDKj45 NnmKNITsz0Qa4NPnBbI8geDuXyHLdrb8qqj9QeNCSJ0Ye5XPCVUDa64cHYVz7ize C54HC81C0vzZ/z6LUZ9lQ6bHNHUcZ5nuMfcAlTBrdoEvD6dmG3PfTLQKA9+nTzkj 0TDhOA6Ja+hyx3rwvIWe0KwEPNQRZqVXuNFgBTjHjwaqW6lLRjGEKMzAOzvTEhFJ 0Vnc191afHrG0A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:22 2025 by rpki-client