This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json) Hash identifier: gX/Mb4UlPVFyhRLUOqLdM4n++jWowt7tnHItaCW62aU= Subject key identifier: 06:A1:76:13:9E:AC:09:F0:43:36:82:C5:A3:3D:BD:14:CB:60:A8:56 Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Certificate serial: 019AF163E58F23EF6EF3AABBC5C320D68174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=) 2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: KdEzMZzzBnDsQ0mebVWn9LEhHihTtrAQfEFvgrSYKeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:8f:23:ef:6e:f3:aa:bb:c5:c3:20:d6:81:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=06a176139eac09f0433682c5a33dbd14cb60a856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:78:29:82:a6:88:a7:40:a4:98:f2:bb:01: 94:cd:7e:93:d1:23:24:4f:44:83:00:b4:8b:70:89: e7:17:c1:94:d0:b3:fe:2b:fd:aa:cb:67:56:ea:f2: b5:1e:0d:a4:50:3d:b2:35:84:dc:f5:a3:89:ed:2e: ec:f8:2f:0b:f7:f2:ef:e7:e7:d6:26:b1:39:72:e6: c6:fd:06:66:75:df:a5:25:69:9a:ff:44:d1:4d:ca: 62:0b:eb:88:84:5d:5a:0f:07:00:11:f6:78:9f:e7: 68:a3:ce:ed:f7:cc:20:5a:c1:5d:ac:65:7f:e7:21: cb:d4:a2:8c:91:8a:64:a7:12:77:6c:7c:57:7c:ff: a5:d1:03:f9:51:b0:84:d3:2f:c9:f4:2e:85:7e:03: a1:23:b1:70:d0:28:58:20:09:6a:84:2c:fa:3d:02: dc:cd:6b:f9:92:63:70:a6:98:20:f2:02:ed:7c:2f: d2:af:73:ed:91:2d:fd:d8:a1:f0:3c:83:6d:54:0c: 73:0e:47:85:1a:e8:fd:d2:81:73:71:6f:49:0d:ce: da:af:58:3e:be:3a:f3:67:d6:05:f3:d9:1c:55:e5: b5:9d:cf:94:f7:7a:6f:c7:c3:28:76:a2:46:9e:7a: bc:17:45:c5:af:ad:3a:a3:1d:44:53:e5:29:11:1b: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A1:76:13:9E:AC:09:F0:43:36:82:C5:A3:3D:BD:14:CB:60:A8:56 X509v3 Authority Key Identifier: keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3f:7b:19:22:70:20:8b:ec:ba:8a:ac:bc:07:26:34:90:27: 4b:b9:e0:8d:47:0f:22:21:49:31:48:5b:29:f3:65:d5:f5:cb: c2:de:67:86:66:3e:5f:64:c6:07:8a:ec:bc:64:5a:81:2f:4a: cb:e6:ac:46:18:20:15:e0:aa:36:0a:f0:97:3a:de:87:f7:ba: 41:2b:36:dd:92:a9:c6:0c:69:03:23:39:1d:e0:0b:84:43:0b: c8:e4:20:35:aa:06:7e:89:15:71:68:3d:49:55:df:dc:e7:37: 98:0b:84:7a:59:80:7f:94:a5:20:4a:1b:34:0a:ea:96:31:09: a5:33:89:4d:42:eb:42:f1:3c:83:e9:87:84:c7:68:a9:bf:76: c8:92:40:e2:6a:44:84:5b:df:9d:b3:c0:e7:70:22:67:f7:ef: 21:f6:94:c8:f6:14:51:d1:78:0f:97:68:bc:14:7e:38:77:31: 13:d6:55:ad:50:d6:10:47:d6:6d:30:ee:fe:6d:3d:48:8f:d3: e1:54:08:79:e7:db:b8:20:0c:3d:42:ea:6d:d6:a8:31:e7:3a: db:8a:e2:53:aa:b8:e0:87:27:20:56:6a:11:0f:7d:11:3f:e1: 5f:5b:03:15:b9:a8:3c:18:c8:81:cd:c5:03:39:95:f9:93:1c: 05:d2:19:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+WPI+9u86q7xcMg1oF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4 OWZhYWYwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EygwNmExNzYxMzllYWMwOWYwNDMzNjgyYzVhMzNkYmQxNGNiNjBhODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBF4KYKmiKdApJjyuwGUzX6T0SMk T0SDALSLcInnF8GU0LP+K/2qy2dW6vK1Hg2kUD2yNYTc9aOJ7S7s+C8L9/Lv5+fW JrE5cubG/QZmdd+lJWma/0TRTcpiC+uIhF1aDwcAEfZ4n+doo87t98wgWsFdrGV/ 5yHL1KKMkYpkpxJ3bHxXfP+l0QP5UbCE0y/J9C6FfgOhI7Fw0ChYIAlqhCz6PQLc zWv5kmNwppgg8gLtfC/Sr3PtkS392KHwPINtVAxzDkeFGuj90oFzcW9JDc7ar1g+ vjrzZ9YF89kcVeW1nc+U93pvx8ModqJGnnq8F0XFr606ox1EU+UpERtSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAahdhOerAnwQzaCxaM9vRTLYKhWMB8GA1UdIwQY MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt MWIxOTIzNzFmNDQyLzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj97GSJw IIvsuoqsvAcmNJAnS7ngjUcPIiFJMUhbKfNl1fXLwt5nhmY+X2TGB4rsvGRagS9K y+asRhggFeCqNgrwlzreh/e6QSs23ZKpxgxpAyM5HeALhEMLyOQgNaoGfokVcWg9 SVXf3Oc3mAuEelmAf5SlIEobNArqljEJpTOJTULrQvE8g+mHhMdoqb92yJJA4mpE hFvfnbPA53AiZ/fvIfaUyPYUUdF4D5dovBR+OHcxE9ZVrVDWEEfWbTDu/m09SI/T 4VQIeefbuCAMPULqbdaoMec624riU6q44IcnIFZqEQ99ET/hX1sDFbmoPBjIgc3F AzmV+ZMcBdIZbg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client