This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft File: EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json) Hash identifier: 0vd2rTzeIiMxEIMA/zDvcKgWzGL6Vkm02fe44U7bGCg= Subject key identifier: A2:C7:E3:B7:E4:93:D9:E9:27:66:28:79:96:EA:00:53:35:BC:8D:E0 Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c Certificate serial: 019B30E89954ED2BC73F3BC8DC6E3E5136CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 10:01:48 +0000 Manifest this update: Thu 18 Dec 2025 10:01:48 +0000 Manifest next update: Fri 19 Dec 2025 10:01:48 +0000 Files and hashes: 1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: cEHkieEv/99X7BxyA5GmG9NQIfCembl3Nud4JoD0CIo=) 2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=) 3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=) 4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=) 5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:99:54:ed:2b:c7:3f:3b:c8:dc:6e:3e:51:36:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c Validity Not Before: Dec 18 10:01:48 2025 GMT Not After : Dec 19 10:01:48 2025 GMT Subject: CN=a2c7e3b7e493d9e92766287996ea005335bc8de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:16:72:2a:f4:c2:43:77:50:e2:29:ae:d8:27: 58:57:de:3e:db:8d:5c:6d:4d:9b:e7:25:60:25:b1: ec:cb:a0:14:51:8c:1f:d3:f5:74:6f:fe:e2:58:6e: 77:dc:b5:a8:05:0e:75:65:6c:3d:b7:fe:a1:98:11: bd:1a:4e:b7:97:1b:29:92:b1:88:4c:44:eb:85:0a: 6f:91:b8:99:e1:1f:1c:17:3e:bb:b2:d1:30:ec:0d: 83:a9:f4:05:9d:ec:b3:1c:c4:6e:89:c1:6b:86:30: 0a:3f:22:8b:ee:e4:50:38:63:24:8b:ed:5e:8f:04: a9:45:1d:09:a2:6a:52:6e:51:e4:dd:ff:5e:3d:0b: 9d:fb:c7:07:81:2d:c8:7e:9f:1f:97:5d:63:ea:59: 9e:f8:2c:65:73:2b:fb:7a:44:b8:92:25:39:c5:c5: 34:5f:b1:c8:16:13:b8:26:41:29:45:c0:7e:fc:d3: 1c:3c:96:d2:bb:ab:6b:3b:b7:d3:68:d4:4a:67:cf: 15:98:52:82:4b:68:fa:11:dc:66:06:aa:b0:31:38: b4:3c:39:e5:be:bc:43:40:8f:44:ca:43:51:f3:5f: 09:8a:e0:6a:e4:78:44:81:f4:ff:6d:fc:8c:0b:1b: 28:ad:e4:49:f4:86:77:53:8b:ef:f5:87:b1:a2:99: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:E3:B7:E4:93:D9:E9:27:66:28:79:96:EA:00:53:35:BC:8D:E0 X509v3 Authority Key Identifier: keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:57:5c:cd:16:9e:9d:93:77:36:95:48:1e:cf:76:19:54: 9b:cd:ee:c7:0e:85:3b:23:d2:c7:93:47:40:d2:92:e2:df:c7: d7:62:ea:ce:cf:36:51:2f:73:3f:28:b7:7d:8d:8d:d8:00:fc: f0:39:29:99:6a:8b:97:19:a1:dc:c0:2d:24:5b:21:6c:83:81: c5:44:3d:a8:ac:08:57:d7:aa:33:68:66:c1:9c:42:c7:f7:9d: fb:30:d1:2b:0d:75:a0:43:09:a7:5f:e1:40:66:8f:03:59:09: 0c:87:07:4c:8e:3a:e9:88:be:a2:c7:7a:5f:a4:7a:c8:eb:e9: bf:93:0c:4d:e6:9e:ba:d3:8b:b3:87:d2:8b:e3:02:c6:b7:1d: 0b:e0:7b:af:d7:92:78:bc:d4:ad:28:25:be:93:6b:fe:ce:16: e8:10:97:96:0a:e2:6f:7e:77:5b:e1:bb:87:c8:1a:f5:2a:17: 20:76:0a:de:ab:1d:5c:16:6c:fe:75:04:2e:f9:9d:67:e4:d6: 2b:4c:34:49:da:dc:6f:d6:ef:04:40:31:ed:33:93:32:78:5e: 37:9f:7d:27:50:a6:ab:1b:36:cd:30:28:3f:7d:99:66:21:19: 91:e6:27:8e:93:95:2d:14:9d:e4:c1:d7:81:52:8a:2b:c5:1e: 5d:4a:dc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6JlU7SvHPzvI3G4+UTbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzBjZDhlMTNjODZkOGVmODM1YzFhYWM3ZDVmOTUzNDU1 YzAzNWMwHhcNMjUxMjE4MTAwMTQ4WhcNMjUxMjE5MTAwMTQ4WjAzMTEwLwYDVQQD EyhhMmM3ZTNiN2U0OTNkOWU5Mjc2NjI4Nzk5NmVhMDA1MzM1YmM4ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BZyKvTCQ3dQ4imu2CdYV94+241c bU2b5yVgJbHsy6AUUYwf0/V0b/7iWG533LWoBQ51ZWw9t/6hmBG9Gk63lxspkrGI TETrhQpvkbiZ4R8cFz67stEw7A2DqfQFneyzHMRuicFrhjAKPyKL7uRQOGMki+1e jwSpRR0JompSblHk3f9ePQud+8cHgS3Ifp8fl11j6lme+Cxlcyv7ekS4kiU5xcU0 X7HIFhO4JkEpRcB+/NMcPJbSu6trO7fTaNRKZ88VmFKCS2j6EdxmBqqwMTi0PDnl vrxDQI9EykNR818JiuBq5HhEgfT/bfyMCxsoreRJ9IZ3U4vv9Yexopn8gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLH47fkk9npJ2YoeZbqAFM1vI3gMB8GA1UdIwQY MBaAFBIwzY4TyG2O+DXBqsfV+VNFXANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQt MDFmYjQ2YTQzM2UxLzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQtMDFmYjQ2YTQzM2Ux LzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVg5XXM0W np2TdzaVSB7PdhlUm83uxw6FOyPSx5NHQNKS4t/H12Lqzs82US9zPyi3fY2N2AD8 8DkpmWqLlxmh3MAtJFshbIOBxUQ9qKwIV9eqM2hmwZxCx/ed+zDRKw11oEMJp1/h QGaPA1kJDIcHTI466Yi+osd6X6R6yOvpv5MMTeaeutOLs4fSi+MCxrcdC+B7r9eS eLzUrSglvpNr/s4W6BCXlgrib353W+G7h8ga9SoXIHYK3qsdXBZs/nUELvmdZ+TW K0w0Sdrcb9bvBEAx7TOTMnheN599J1Cmqxs2zTAoP32ZZiEZkeYnjpOVLRSd5MHX gVKKK8UeXUrc6w== -----END CERTIFICATE-----Generated at Thu Dec 18 14:24:29 2025 by rpki-client