This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json) Hash identifier: emcAj0b8thG0E61iV40WxDeNwXuNcmD5YQ68TEjkx2Q= Subject key identifier: CE:0E:5C:28:40:0D:F8:A1:D0:FC:C1:5A:EF:21:24:C5:49:1E:52:74 Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Certificate serial: 019AF1D1AE7657C8BFF70CE110B7DF7D5A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft Manifest number: 02EA Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: u9esIxbAsUzQb330UJ68iptEi4rC31y43YHy0YHF5cA=) 2: s5l9rjSPorbmJ6DV5XzzuHrSRWc.roa (hash: j3es1QhJ3BxNSOr+OOVs21FGOEaNLK9nKvgzFCuGlpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:76:57:c8:bf:f7:0c:e1:10:b7:df:7d:5a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=ce0e5c28400df8a1d0fcc15aef2124c5491e5274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c8:fa:32:d6:84:8d:f7:b0:77:51:85:6a:34: cd:63:89:30:68:28:46:f1:a4:03:9e:38:d7:71:3a: 4a:bd:e5:73:82:1b:0c:06:2d:27:c9:ba:ca:93:d0: fa:3b:e9:c8:4c:7a:14:65:dd:de:bb:ad:90:a8:ec: 49:63:1e:e5:ad:0d:5d:c0:a9:21:ae:92:ec:e0:77: 18:91:59:86:3f:6f:10:9e:3c:c4:3c:eb:b2:a3:7e: a4:5f:17:b6:73:91:03:b0:cf:96:bc:7d:fc:d4:8a: 19:8d:9f:d1:83:1a:7e:71:4e:c0:29:2a:2c:71:00: a3:f0:cc:f2:0c:88:df:d6:27:c0:40:b2:3f:b2:8c: a4:a7:79:36:47:1b:10:9d:15:34:e1:2d:14:02:a1: cd:d4:35:c2:5c:90:bd:4f:54:e9:6a:8c:a4:7c:ed: fa:dc:b1:9b:a2:e1:64:1a:38:57:e8:04:cb:e0:bc: 4f:e0:74:8c:a8:f1:76:c2:0c:0b:2f:da:2a:01:97: 42:96:08:07:ff:8d:4c:5b:fe:60:ed:73:f8:ea:ed: 19:25:7a:4f:f2:9b:dd:a3:be:ea:12:7f:31:d7:e2: e3:27:36:dd:b1:de:f2:78:e6:38:d8:8b:fb:ac:d6: 04:e0:69:9c:c0:8c:86:9b:8a:63:c8:82:6a:cf:05: 0d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:5C:28:40:0D:F8:A1:D0:FC:C1:5A:EF:21:24:C5:49:1E:52:74 X509v3 Authority Key Identifier: keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:3d:e5:d3:78:e7:08:d2:4a:53:17:9c:d0:37:55:ed:71:30: 7a:65:2d:63:46:88:51:9c:9c:eb:1a:f6:6b:f8:14:09:af:45: 28:58:34:c6:48:73:5d:63:df:c4:d3:c8:ca:94:8f:55:05:e3: 78:aa:83:17:c5:e9:e1:48:27:3f:99:5c:eb:20:f4:e6:71:d6: 63:b7:a7:7c:32:1a:0c:51:a7:fd:11:ca:f4:ce:87:50:07:05: 32:5f:50:cd:1a:62:89:f7:bd:67:4f:57:43:41:32:bd:f0:01: 25:48:1d:fd:8e:9e:3f:24:f3:0e:25:cb:d1:d6:2e:70:12:45: dc:c0:58:b3:bc:91:6f:4d:f2:4b:26:b3:fc:74:b3:ff:7c:00: e0:70:42:a0:8c:96:9e:5b:6c:a0:72:4a:21:55:23:4d:b5:85: 02:c5:f6:99:e7:8d:da:13:51:44:66:21:8f:1d:25:90:f6:0b: 57:da:b5:c5:85:fc:a2:2b:bd:e2:ca:5e:8e:6d:09:22:fd:8b: 62:61:6a:93:2c:94:ae:2d:15:12:a9:b2:9a:32:65:64:4f:9f: 20:fb:2f:73:a6:d2:4e:4d:4e:84:d2:95:be:d6:c3:35:d2:7c: 57:8a:bc:82:1b:c6:ba:8f:f3:10:7b:99:80:85:0f:92:b9:42: be:29:27:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a52V8i/9wzhELfffVoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2 MTIxYzgwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhjZTBlNWMyODQwMGRmOGExZDBmY2MxNWFlZjIxMjRjNTQ5MWU1Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sj6MtaEjfewd1GFajTNY4kwaChG 8aQDnjjXcTpKveVzghsMBi0nybrKk9D6O+nITHoUZd3eu62QqOxJYx7lrQ1dwKkh rpLs4HcYkVmGP28QnjzEPOuyo36kXxe2c5EDsM+WvH381IoZjZ/Rgxp+cU7AKSos cQCj8MzyDIjf1ifAQLI/soykp3k2RxsQnRU04S0UAqHN1DXCXJC9T1TpaoykfO36 3LGbouFkGjhX6ATL4LxP4HSMqPF2wgwLL9oqAZdClggH/41MW/5g7XP46u0ZJXpP 8pvdo77qEn8x1+LjJzbdsd7yeOY42Iv7rNYE4GmcwIyGm4pjyIJqzwUNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4OXChADfih0PzBWu8hJMVJHlJ0MB8GA1UdIwQY MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt YTAwMWEyOWMyM2YwLzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuT3l03jn CNJKUxec0DdV7XEwemUtY0aIUZyc6xr2a/gUCa9FKFg0xkhzXWPfxNPIypSPVQXj eKqDF8Xp4UgnP5lc6yD05nHWY7enfDIaDFGn/RHK9M6HUAcFMl9QzRpiife9Z09X Q0EyvfABJUgd/Y6ePyTzDiXL0dYucBJF3MBYs7yRb03ySyaz/HSz/3wA4HBCoIyW nltsoHJKIVUjTbWFAsX2meeN2hNRRGYhjx0lkPYLV9q1xYX8oiu94spejm0JIv2L YmFqkyyUri0VEqmymjJlZE+fIPsvc6bSTk1OhNKVvtbDNdJ8V4q8ghvGuo/zEHuZ gIUPkrlCviknTw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:14 2025 by rpki-client