This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json) Hash identifier: BTzHFdf55AmGbew9YeOhCiJNUr8O1y8rKZVIDto/Fhs= Subject key identifier: D1:F9:BC:61:AA:CE:9B:23:18:7E:33:40:E0:2A:FA:BE:43:BD:4B:21 Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520 Certificate serial: 019AF49C51FE30F78EE65541E1C66C468948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft Manifest number: 0D91 Signing time: Sat 06 Dec 2025 17:01:16 +0000 Manifest this update: Sat 06 Dec 2025 17:01:16 +0000 Manifest next update: Sun 07 Dec 2025 17:01:16 +0000 Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=) 2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: J6NGITdsTLmOt8aXrks5g2MEydqBdKI/mGUpWFCVQqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:51:fe:30:f7:8e:e6:55:41:e1:c6:6c:46:89:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7965cd15030483d114b00419c25b99340058d520 Validity Not Before: Dec 6 17:01:16 2025 GMT Not After : Dec 7 17:01:16 2025 GMT Subject: CN=d1f9bc61aace9b23187e3340e02afabe43bd4b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:eb:f9:25:fe:96:12:38:26:a7:44:06:06: 99:68:9e:33:6b:e3:83:a8:32:48:46:1c:b6:d5:f5: e7:86:22:f0:24:a6:d9:f8:c3:0e:e3:a2:e3:3a:a5: eb:6f:a6:ac:63:23:00:65:1d:58:7f:6e:a9:90:35: 91:e7:99:85:5d:95:2c:73:8f:13:6a:ff:72:86:6c: f0:f0:29:4c:80:e0:57:49:39:e4:a5:27:29:af:3c: e2:1f:13:e9:09:9d:e1:83:8d:40:17:2b:95:71:7a: 91:78:88:04:97:9b:8c:6a:b8:08:b3:49:4c:92:47: 24:6c:1d:ab:9b:c2:8b:eb:79:32:73:9b:1c:54:1d: 97:39:d1:e4:c7:a7:23:08:2e:62:37:db:93:b1:37: c9:31:a1:dc:fa:8f:3d:13:53:c4:c5:7c:00:e5:39: cb:b9:d8:e1:a1:49:4b:0f:e3:a8:94:4b:7f:dd:f2: ed:8e:ce:c6:a6:2c:87:28:d0:e4:a9:62:09:d7:10: 8d:19:da:33:3e:25:14:5f:72:d9:dd:a3:5c:c1:7b: ab:26:a1:67:e7:2b:db:a2:04:3e:ee:8c:da:24:f9: fe:ce:9d:de:7e:a3:ca:03:45:56:fb:3f:f6:ab:81: e2:2f:04:8c:25:1e:09:c3:84:70:d9:7b:52:4c:91: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:BC:61:AA:CE:9B:23:18:7E:33:40:E0:2A:FA:BE:43:BD:4B:21 X509v3 Authority Key Identifier: keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:23:5a:f2:e6:83:07:a4:f6:6e:a6:36:ee:73:59:df:b3:72: e1:72:32:c6:6b:2a:b8:dc:67:86:ca:db:e6:cd:5e:ff:42:70: 11:91:70:79:35:49:76:19:05:68:c4:fa:6a:e6:bc:ca:25:bf: ad:cc:e0:bd:70:f7:6d:db:c9:a3:08:a2:bd:05:d6:a0:60:29: 6c:df:af:5c:79:a5:67:f4:27:fd:73:89:49:d8:ac:8b:00:be: ba:60:3a:09:1c:ff:54:ef:85:71:f4:3f:62:3f:77:ab:07:20: 68:3d:bc:c5:cd:69:ed:8a:03:7d:ac:9e:4d:4f:37:3b:50:e9: ea:86:06:0e:98:5a:cd:0d:78:4e:22:a5:82:73:c2:c4:33:fa: 25:ff:d2:ef:6a:24:85:0f:ba:6d:ac:74:91:94:ab:96:9b:1d: 2a:8d:8a:92:1b:a5:47:6a:49:51:cf:ba:f4:07:4a:b0:9f:2f: 50:c9:82:55:05:9e:aa:8e:c0:48:17:02:d2:ba:39:dd:79:cb: 68:71:ba:f4:b5:c9:73:13:1e:82:7c:ee:aa:b3:d5:b9:f5:dc: dd:88:46:93:73:74:d6:fc:f5:43:cc:2b:cc:2c:aa:b3:fd:40: dd:ce:43:a3:d4:26:1a:20:20:61:0b:d4:0d:4b:b2:c4:04:6e: 47:99:56:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFH+MPeO5lVB4cZsRolIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjVjZDE1MDMwNDgzZDExNGIwMDQxOWMyNWI5OTM0MDA1 OGQ1MjAwHhcNMjUxMjA2MTcwMTE2WhcNMjUxMjA3MTcwMTE2WjAzMTEwLwYDVQQD EyhkMWY5YmM2MWFhY2U5YjIzMTg3ZTMzNDBlMDJhZmFiZTQzYmQ0YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyLr+SX+lhI4JqdEBgaZaJ4za+OD qDJIRhy21fXnhiLwJKbZ+MMO46LjOqXrb6asYyMAZR1Yf26pkDWR55mFXZUsc48T av9yhmzw8ClMgOBXSTnkpScprzziHxPpCZ3hg41AFyuVcXqReIgEl5uMargIs0lM kkckbB2rm8KL63kyc5scVB2XOdHkx6cjCC5iN9uTsTfJMaHc+o89E1PExXwA5TnL udjhoUlLD+OolEt/3fLtjs7GpiyHKNDkqWIJ1xCNGdozPiUUX3LZ3aNcwXurJqFn 5yvbogQ+7ozaJPn+zp3efqPKA0VW+z/2q4HiLwSMJR4Jw4Rw2XtSTJFXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH5vGGqzpsjGH4zQOAq+r5DvUshMB8GA1UdIwQY MBaAFHllzRUDBIPRFLAEGcJbmTQAWNUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2Ut ZjlhMGY0OGMyNzVhLzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2UtZjlhMGY0OGMyNzVh LzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSNa8uaD B6T2bqY27nNZ37Ny4XIyxmsquNxnhsrb5s1e/0JwEZFweTVJdhkFaMT6aua8yiW/ rczgvXD3bdvJowiivQXWoGApbN+vXHmlZ/Qn/XOJSdisiwC+umA6CRz/VO+FcfQ/ Yj93qwcgaD28xc1p7YoDfayeTU83O1Dp6oYGDphazQ14TiKlgnPCxDP6Jf/S72ok hQ+6bax0kZSrlpsdKo2KkhulR2pJUc+69AdKsJ8vUMmCVQWeqo7ASBcC0ro53XnL aHG69LXJcxMegnzuqrPVufXc3YhGk3N01vz1Q8wrzCyqs/1A3c5Do9QmGiAgYQvU DUuyxARuR5lW9A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:33 2025 by rpki-client