This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft File: EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json) Hash identifier: splFmRQAe6csHkDib8cDHHUQn+pF+6DhUIgtYoI2v8M= Subject key identifier: 2C:9A:0C:E6:A2:BD:DA:AD:8F:3D:76:9F:BD:0F:F0:10:D7:76:16:80 Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Certificate serial: 019AF1D2432DA61DB10DAE314C6A51C3B7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft Manifest number: 14AB Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: hkDPOFhkW76YM+djzJ7udY0gTsFfpPEzdLfHeHP6TXE=) 2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=) 3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=) 4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=) 5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:2d:a6:1d:b1:0d:ae:31:4c:6a:51:c3:b7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=2c9a0ce6a2bddaad8f3d769fbd0ff010d7761680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:81:90:b6:bb:23:40:5a:57:eb:02:81:d6: b0:a7:10:fc:2e:aa:3a:c5:12:e5:20:90:7c:67:87: 22:0c:36:54:b1:02:be:ba:17:1f:b6:0b:59:1f:32: 34:61:87:b8:67:47:72:c4:17:35:08:92:30:01:97: 23:88:c9:c0:d4:ae:5d:28:3f:30:3d:70:6c:c9:de: 59:d9:e1:ad:ae:09:0f:8b:d8:ce:b0:f2:c5:6f:76: 1c:58:04:01:a8:71:98:70:64:16:43:9a:27:6f:40: e9:28:b1:af:5e:fa:00:69:ca:af:ec:d6:5f:04:38: 97:13:51:a3:9b:1a:73:5c:9a:9e:80:8b:fb:c7:71: 8a:c4:14:28:68:d4:1e:87:04:5f:63:51:c6:73:ab: 02:c2:06:d6:fa:10:d1:52:cd:0c:d4:6d:43:e8:a8: a6:b3:4c:cf:eb:87:42:3f:1b:49:60:10:e6:f3:4b: f1:7d:a1:84:1e:ed:02:2a:f3:3e:e3:61:13:4f:6d: 3e:09:68:9d:b3:d4:97:2d:bf:eb:d3:e6:72:8b:d1: ef:0a:48:f0:e8:ff:10:cf:0e:8d:9c:58:9c:ff:e6: 94:51:b6:71:41:f7:5f:65:f3:cf:6f:17:29:64:3f: 46:80:2b:1e:a3:94:f9:bb:f3:4a:18:52:cc:d8:ca: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:0C:E6:A2:BD:DA:AD:8F:3D:76:9F:BD:0F:F0:10:D7:76:16:80 X509v3 Authority Key Identifier: keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d6:ad:02:1f:b8:7d:96:95:fd:69:10:09:81:1d:e1:a5:4e: 68:70:34:ca:f7:42:80:6a:f0:4d:3d:36:2a:78:1f:07:b8:58: 51:fd:05:bc:e6:b3:98:a4:bc:db:48:a6:60:63:b8:cc:4e:4e: df:91:50:4a:37:2d:8b:4f:b8:2b:b2:65:9d:32:5c:24:a3:f5: 76:b7:32:1d:23:c3:e2:42:31:5c:e7:4e:47:0a:36:fa:75:21: 03:c1:b3:66:8f:09:2b:cc:07:bd:07:03:36:b1:43:83:0b:01: ea:b3:fe:99:7e:71:97:d5:f3:fe:83:32:4f:9f:c2:28:80:21: 0a:b4:20:94:16:3c:bb:72:c8:b0:34:5e:c5:58:f9:fb:28:68: 09:01:6f:6b:74:0d:ec:c8:d3:09:21:c1:5d:f1:5b:e0:9a:f4: df:2e:77:5b:1a:34:97:12:45:b4:2f:ba:d0:6e:ce:29:c2:55: b8:06:ad:18:d9:66:30:c7:76:58:2d:73:68:c4:dc:5f:82:b6: b0:55:d8:be:15:8d:7a:b1:15:4b:d5:e9:dc:86:19:cb:8f:cd: 52:58:99:be:f8:7c:8d:25:fd:e6:9c:27:b0:98:2c:aa:8a:4a: 81:62:85:59:36:f3:75:b7:d2:64:42:91:aa:64:b9:0e:af:e9: 32:7c:19:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kMtph2xDa4xTGpRw7elMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTUzZTYwNzY3MGZmNzM4ZWVlNmE2YjU3N2Q4YzhiMjgw NGUxZTEwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygyYzlhMGNlNmEyYmRkYWFkOGYzZDc2OWZiZDBmZjAxMGQ3NzYxNjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndyBkLa7I0BaV+sCgdawpxD8Lqo6 xRLlIJB8Z4ciDDZUsQK+uhcftgtZHzI0YYe4Z0dyxBc1CJIwAZcjiMnA1K5dKD8w PXBsyd5Z2eGtrgkPi9jOsPLFb3YcWAQBqHGYcGQWQ5onb0DpKLGvXvoAacqv7NZf BDiXE1GjmxpzXJqegIv7x3GKxBQoaNQehwRfY1HGc6sCwgbW+hDRUs0M1G1D6Kim s0zP64dCPxtJYBDm80vxfaGEHu0CKvM+42ETT20+CWids9SXLb/r0+Zyi9HvCkjw 6P8Qzw6NnFic/+aUUbZxQfdfZfPPbxcpZD9GgCseo5T5u/NKGFLM2MonDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyaDOaivdqtjz12n70P8BDXdhaAMB8GA1UdIwQY MBaAFBCVPmB2cP9zju5qa1d9jIsoBOHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMt MWJjNTUyYzAwZGQ3LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMtMWJjNTUyYzAwZGQ3 LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9atAh+4 fZaV/WkQCYEd4aVOaHA0yvdCgGrwTT02KngfB7hYUf0FvOazmKS820imYGO4zE5O 35FQSjcti0+4K7JlnTJcJKP1drcyHSPD4kIxXOdORwo2+nUhA8GzZo8JK8wHvQcD NrFDgwsB6rP+mX5xl9Xz/oMyT5/CKIAhCrQglBY8u3LIsDRexVj5+yhoCQFva3QN 7MjTCSHBXfFb4Jr03y53Wxo0lxJFtC+60G7OKcJVuAatGNlmMMd2WC1zaMTcX4K2 sFXYvhWNerEVS9Xp3IYZy4/NUliZvvh8jSX95pwnsJgsqopKgWKFWTbzdbfSZEKR qmS5Dq/pMnwZEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:44 2025 by rpki-client