This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json) Hash identifier: K843KjwWEPgCqBq7cEfqsFRX+WcQzfprqwJ0b5sbxuM= Subject key identifier: A5:BD:42:4C:19:E6:B8:1B:26:39:63:34:1F:AC:E2:42:46:58:17:5B Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Certificate serial: 019AF577A5B5A28ACCA7A4F644F52403166B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:50 +0000 Manifest this update: Sat 06 Dec 2025 21:00:50 +0000 Manifest next update: Sun 07 Dec 2025 21:00:50 +0000 Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=) 2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: uzMXWjdjHhg08azzaVgAqJU3b8bN3sqol+Z2p2kmqw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:a5:b5:a2:8a:cc:a7:a4:f6:44:f5:24:03:16:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Validity Not Before: Dec 6 21:00:50 2025 GMT Not After : Dec 7 21:00:50 2025 GMT Subject: CN=a5bd424c19e6b81b263963341face2424658175b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:ef:49:72:de:3e:09:5b:72:8d:7a:b2:9e: f7:ce:a1:85:d0:14:d0:ea:84:e3:56:06:24:37:e9: 91:85:5c:28:66:9d:5f:e8:f1:19:a1:8f:2c:30:9c: 29:25:97:c6:91:e1:53:7d:ee:ff:8a:ef:bb:e5:66: c6:18:46:ce:30:f3:a5:90:a8:9a:0d:ca:1b:18:63: e1:4e:a9:f5:67:d5:c9:38:33:c8:03:27:03:bc:10: ab:a7:d0:b0:fd:48:aa:73:fc:fb:22:ec:9a:71:f7: 8f:ba:95:70:05:22:9d:8f:f0:f8:2f:82:7d:ba:4e: 54:5c:11:9f:80:94:45:be:05:61:b1:2c:6f:04:9a: da:d4:7b:b2:5b:6f:38:94:6f:60:d4:7b:a9:14:e9: 20:07:6e:76:e1:91:8f:3c:07:73:8f:79:47:bd:a7: 82:a7:f8:0e:7f:99:f2:25:1d:5b:72:84:38:ab:61: 58:47:2a:05:55:11:d6:f7:dc:e3:37:46:93:3d:4c: 4a:bb:d9:35:95:98:3d:dc:85:c8:2f:f0:09:cc:cd: 0f:69:2b:5d:10:49:0f:fd:9e:38:4e:ed:32:d4:dd: 4b:61:23:c5:ab:f9:be:5d:5a:87:18:f6:79:a2:57: 33:68:6f:26:b0:30:d6:f0:49:12:41:3d:62:1a:d9: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BD:42:4C:19:E6:B8:1B:26:39:63:34:1F:AC:E2:42:46:58:17:5B X509v3 Authority Key Identifier: keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9b:2f:b0:76:a9:39:eb:5d:51:4d:85:8f:69:5c:99:c0:b4: 61:b5:44:80:50:42:ff:e8:9d:da:87:5a:53:0e:85:07:c3:bc: 37:e1:7c:e3:b4:da:7c:f7:ce:e6:cd:13:07:0d:5d:3c:8e:85: ab:b7:f2:de:54:55:f7:39:13:99:35:2a:47:61:2b:b0:c6:dd: 58:43:62:6e:8c:90:71:c0:61:5d:63:00:10:cb:cb:b1:00:22: fb:6c:f9:0f:d4:49:a0:0a:f9:cf:7a:89:e1:e8:ea:ce:f1:be: 47:cd:5f:4c:17:1f:53:99:15:17:47:83:1a:01:37:cf:4f:c0: 12:13:e4:70:90:30:ae:9c:d6:b1:bf:ed:ac:47:90:b4:4c:ff: f5:c3:2f:73:5c:46:79:ce:bf:36:42:92:21:ef:47:e8:d6:82: fa:02:61:74:cf:d2:ed:22:b8:41:51:a9:e9:54:d7:28:66:b8: a7:ef:9a:55:fd:1c:1e:0e:08:40:85:c7:02:03:c2:65:e1:bb: 0e:cd:2d:37:f5:86:1f:a1:4c:77:a4:dc:f9:c8:de:a2:cf:bf: a4:bc:76:b1:a0:41:f2:d4:14:e7:da:2c:dc:48:be:76:f1:e6: f5:e4:8b:66:1b:27:8c:ef:ae:1c:62:4b:a7:13:61:46:56:83: 14:eb:3b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d6W1oorMp6T2RPUkAxZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3 YThkZDIwHhcNMjUxMjA2MjEwMDUwWhcNMjUxMjA3MjEwMDUwWjAzMTEwLwYDVQQD EyhhNWJkNDI0YzE5ZTZiODFiMjYzOTYzMzQxZmFjZTI0MjQ2NTgxNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKLvSXLePglbco16sp73zqGF0BTQ 6oTjVgYkN+mRhVwoZp1f6PEZoY8sMJwpJZfGkeFTfe7/iu+75WbGGEbOMPOlkKia DcobGGPhTqn1Z9XJODPIAycDvBCrp9Cw/Uiqc/z7IuyacfePupVwBSKdj/D4L4J9 uk5UXBGfgJRFvgVhsSxvBJra1HuyW284lG9g1HupFOkgB2524ZGPPAdzj3lHvaeC p/gOf5nyJR1bcoQ4q2FYRyoFVRHW99zjN0aTPUxKu9k1lZg93IXIL/AJzM0PaStd EEkP/Z44Tu0y1N1LYSPFq/m+XVqHGPZ5olczaG8msDDW8EkSQT1iGtntNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW9QkwZ5rgbJjljNB+s4kJGWBdbMB8GA1UdIwQY MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5svsHap OetdUU2Fj2lcmcC0YbVEgFBC/+id2odaUw6FB8O8N+F847TafPfO5s0TBw1dPI6F q7fy3lRV9zkTmTUqR2ErsMbdWENiboyQccBhXWMAEMvLsQAi+2z5D9RJoAr5z3qJ 4ejqzvG+R81fTBcfU5kVF0eDGgE3z0/AEhPkcJAwrpzWsb/trEeQtEz/9cMvc1xG ec6/NkKSIe9H6NaC+gJhdM/S7SK4QVGp6VTXKGa4p++aVf0cHg4IQIXHAgPCZeG7 Ds0tN/WGH6FMd6Tc+cjeos+/pLx2saBB8tQU59os3Ei+dvHm9eSLZhsnjO+uHGJL pxNhRlaDFOs7jQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:50 2025 by rpki-client