This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json) Hash identifier: Q27M/Ln2TzQYMqdz/DKhu+aUL1JIztJrfVVcq4LOZHQ= Subject key identifier: 41:8A:8E:39:19:EF:7D:AD:25:47:1C:DC:B3:C5:26:99:57:C8:81:02 Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Certificate serial: 019B3343FE3FDB2BA1EE1A0D725F444A783F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:52 +0000 Manifest this update: Thu 18 Dec 2025 21:00:52 +0000 Manifest next update: Fri 19 Dec 2025 21:00:52 +0000 Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=) 2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: v37P+ZgWpm9B4E6vNrzCFEaMbTZmNSIpYA4RFVzQ+7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:fe:3f:db:2b:a1:ee:1a:0d:72:5f:44:4a:78:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Validity Not Before: Dec 18 21:00:52 2025 GMT Not After : Dec 19 21:00:52 2025 GMT Subject: CN=418a8e3919ef7dad25471cdcb3c5269957c88102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:89:71:d1:67:0e:0f:36:01:42:2a:f9:bb: 95:8f:59:e2:02:6e:c5:38:ca:38:d7:46:0a:0b:df: 60:8f:5e:12:a4:dd:dc:b6:58:f9:2a:d6:f3:9f:5c: e7:30:24:b8:e2:83:7f:8c:4f:e2:cb:92:9e:52:97: 36:4b:a9:4f:fa:9d:24:2b:25:4b:fd:1a:86:07:4a: 7f:b2:d0:a1:70:33:42:6a:aa:d8:90:65:0f:40:ad: 40:b0:5d:83:44:66:2b:65:3d:d0:28:4c:97:75:07: f2:3c:05:1d:22:0e:d4:c6:40:32:90:d7:ee:c0:4f: cc:65:b0:b0:82:9a:1a:80:a2:0d:36:73:07:46:c7: 68:84:02:b5:c8:fd:ba:74:43:3b:13:67:cd:7a:4e: 1f:0a:24:f5:a1:2a:d3:8e:ce:1a:28:a3:b5:51:7d: db:2b:dc:b2:d7:f6:2b:e0:55:b1:ab:e1:3a:d5:2e: b8:ce:60:a3:98:cd:d6:df:54:88:0c:20:7f:af:d0: b5:b2:17:b6:42:0d:ba:6f:29:e9:3b:19:2f:62:51: 5a:7c:cc:ec:3a:aa:94:73:62:c6:c5:73:fa:82:cb: cd:fa:ba:b3:e1:8d:47:53:50:c2:99:ef:87:b1:7c: aa:70:d9:e2:fd:c5:12:a5:06:a0:89:ec:b4:38:9b: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8A:8E:39:19:EF:7D:AD:25:47:1C:DC:B3:C5:26:99:57:C8:81:02 X509v3 Authority Key Identifier: keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1b:8c:94:e9:ef:68:59:c9:09:e7:c7:f4:f3:5a:83:9a:99: c6:53:a5:a4:c6:1f:fb:b5:68:4f:7f:51:60:7b:cf:50:8d:28: 7e:e7:24:1a:d0:07:56:9b:9f:9a:e0:6c:44:80:fb:46:44:dc: e8:4e:ed:ff:03:9c:07:a2:8a:f4:ad:a1:e7:04:fa:ee:d3:e9: b2:59:36:3b:78:b4:f3:e2:ae:88:92:af:30:79:d8:d7:3d:d4: cc:d4:bc:94:f7:fe:ec:a0:33:68:13:83:4d:d9:56:68:2c:eb: b8:d0:78:c0:d2:3a:a1:ae:b9:7f:1b:79:f3:13:4f:ae:3e:23: c0:9f:fc:d4:45:92:b9:fb:64:f3:ff:3a:50:d5:51:9b:e9:e2: ec:a9:07:2e:54:5d:39:fc:28:31:21:66:30:bd:49:e9:5b:87: 76:20:03:cf:7e:fa:3a:60:36:b4:2f:30:f1:8c:0b:9c:7c:16: 90:d1:2e:98:d6:cf:12:77:d9:5f:df:40:67:b2:39:cd:d8:27: 95:2a:26:7e:8c:38:1a:eb:91:31:79:7d:9c:23:d9:bf:54:23: ed:99:7c:53:7c:1e:77:ee:eb:11:45:19:6d:c8:64:34:61:c3: 6c:4a:7e:c5:45:a1:cd:0a:86:62:4c:d1:6d:9d:19:7d:23:55: 88:d5:fd:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ/4/2yuh7hoNcl9ESng/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3 YThkZDIwHhcNMjUxMjE4MjEwMDUyWhcNMjUxMjE5MjEwMDUyWjAzMTEwLwYDVQQD Eyg0MThhOGUzOTE5ZWY3ZGFkMjU0NzFjZGNiM2M1MjY5OTU3Yzg4MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvimJcdFnDg82AUIq+buVj1niAm7F OMo410YKC99gj14SpN3ctlj5Ktbzn1znMCS44oN/jE/iy5KeUpc2S6lP+p0kKyVL /RqGB0p/stChcDNCaqrYkGUPQK1AsF2DRGYrZT3QKEyXdQfyPAUdIg7UxkAykNfu wE/MZbCwgpoagKINNnMHRsdohAK1yP26dEM7E2fNek4fCiT1oSrTjs4aKKO1UX3b K9yy1/Yr4FWxq+E61S64zmCjmM3W31SIDCB/r9C1she2Qg26bynpOxkvYlFafMzs OqqUc2LGxXP6gsvN+rqz4Y1HU1DCme+HsXyqcNni/cUSpQagiey0OJvCmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGKjjkZ732tJUcc3LPFJplXyIECMB8GA1UdIwQY MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThuMlOnv aFnJCefH9PNag5qZxlOlpMYf+7VoT39RYHvPUI0ofuckGtAHVpufmuBsRID7RkTc 6E7t/wOcB6KK9K2h5wT67tPpslk2O3i08+KuiJKvMHnY1z3UzNS8lPf+7KAzaBOD TdlWaCzruNB4wNI6oa65fxt58xNPrj4jwJ/81EWSuftk8/86UNVRm+ni7KkHLlRd OfwoMSFmML1J6VuHdiADz376OmA2tC8w8YwLnHwWkNEumNbPEnfZX99AZ7I5zdgn lSomfow4GuuRMXl9nCPZv1Qj7Zl8U3wed+7rEUUZbchkNGHDbEp+xUWhzQqGYkzR bZ0ZfSNViNX95Q== -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:16 2025 by rpki-client