This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json) Hash identifier: Ip97nu1fYdis4EXdcDgDBswDX/5ypJRpIB/SAmZGC3c= Subject key identifier: BB:0C:BD:45:CD:A6:AC:4A:91:BF:10:04:93:38:76:08:EB:62:44:79 Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Certificate serial: 019AF654025D7AF44A0A0CADA3585C7AF941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft Manifest number: 14C9 Signing time: Sun 07 Dec 2025 01:01:31 +0000 Manifest this update: Sun 07 Dec 2025 01:01:31 +0000 Manifest next update: Mon 08 Dec 2025 01:01:31 +0000 Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: MRXoiyE5ughAUYDdLYwlLURXFAPedrkKeEx4raVk9cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:54:02:5d:7a:f4:4a:0a:0c:ad:a3:58:5c:7a:f9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Validity Not Before: Dec 7 01:01:31 2025 GMT Not After : Dec 8 01:01:31 2025 GMT Subject: CN=bb0cbd45cda6ac4a91bf100493387608eb624479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:67:56:a7:a6:c2:cf:92:62:85:e0:79:47: de:49:9d:d9:97:1a:2d:21:04:38:cb:c0:69:07:c3: 98:69:48:96:0b:12:07:71:f2:53:5a:21:15:31:c7: b2:41:8f:27:07:b1:51:84:24:7f:04:3c:91:98:e2: 7a:c8:41:a3:16:1b:08:8c:f5:2c:51:bc:d4:11:74: 17:37:af:74:6c:c4:f3:83:96:64:cc:f5:8b:0d:e6: 00:f0:96:21:16:ab:fc:65:22:07:9f:1b:4d:5b:f0: 31:4d:fc:67:c7:ce:f8:69:7a:18:95:06:ae:6c:6a: 56:89:b4:83:64:8a:af:a8:34:f7:78:4a:93:8f:51: 22:3b:87:11:51:f7:44:36:d7:6f:14:27:31:2c:2d: 4c:8b:43:c0:3e:52:8e:fd:da:98:83:a9:fa:23:3c: 10:ca:47:ff:50:71:63:44:79:ae:b8:25:f3:8d:14: 2b:a3:d8:fb:d5:b0:ec:f4:59:54:fa:16:67:cb:ea: 3c:7d:4e:1c:82:58:65:b1:ad:af:35:5b:60:29:85: eb:a5:86:9a:6d:83:56:b3:e5:45:6a:04:90:19:c8: d2:5b:45:6c:3f:cd:41:40:d4:f9:2b:08:cb:d3:aa: 6d:b3:a7:cf:3d:08:c9:23:bb:a9:71:3d:44:36:a8: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:BD:45:CD:A6:AC:4A:91:BF:10:04:93:38:76:08:EB:62:44:79 X509v3 Authority Key Identifier: keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f8:cf:c7:69:e0:f5:56:06:67:53:eb:86:77:40:f1:74:08: 9b:40:44:58:69:7b:5a:fc:52:88:77:10:b5:a5:84:0d:f4:3b: 25:a0:54:67:eb:29:55:ea:a5:72:d9:97:cc:ac:db:84:2c:a0: ec:57:cd:0a:5b:88:c9:2a:42:4c:d8:dd:f1:b9:8c:9b:f8:ae: fc:65:94:eb:7f:ab:67:60:63:38:cb:2b:09:e8:ec:7a:e0:ae: c7:56:6d:9f:27:fd:1b:36:44:73:47:b8:c0:1e:65:39:2b:cd: b0:9b:54:00:c6:f2:14:52:c2:8e:92:91:75:d1:63:02:49:c5: 51:0b:3a:6c:cf:62:2c:68:2b:99:e6:8f:c4:80:14:0b:70:ec: 54:eb:0c:12:f1:17:44:35:10:9b:2f:fd:0e:a3:7e:49:72:61: 14:d5:fb:c2:c8:52:8f:ae:51:fb:af:be:eb:b7:32:79:7f:bf: 85:17:e3:d1:db:02:c4:99:da:10:29:dc:4f:5a:ce:d8:be:34: e2:d7:57:c3:75:dd:7a:38:d2:d8:52:a1:d9:b8:48:ef:9f:4e: a6:a6:e0:12:4b:fc:3b:e6:29:5d:ab:1e:14:ec:f2:ad:2e:17: 64:88:02:70:11:d4:3f:50:2e:0d:8f:b8:56:4f:96:58:48:cf: 5e:91:41:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2VAJdevRKCgyto1hcevlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk OGRmMzEwHhcNMjUxMjA3MDEwMTMxWhcNMjUxMjA4MDEwMTMxWjAzMTEwLwYDVQQD EyhiYjBjYmQ0NWNkYTZhYzRhOTFiZjEwMDQ5MzM4NzYwOGViNjI0NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFFnVqemws+SYoXgeUfeSZ3Zlxot IQQ4y8BpB8OYaUiWCxIHcfJTWiEVMceyQY8nB7FRhCR/BDyRmOJ6yEGjFhsIjPUs UbzUEXQXN690bMTzg5ZkzPWLDeYA8JYhFqv8ZSIHnxtNW/AxTfxnx874aXoYlQau bGpWibSDZIqvqDT3eEqTj1EiO4cRUfdENtdvFCcxLC1Mi0PAPlKO/dqYg6n6IzwQ ykf/UHFjRHmuuCXzjRQro9j71bDs9FlU+hZny+o8fU4cglhlsa2vNVtgKYXrpYaa bYNWs+VFagSQGcjSW0VsP81BQNT5KwjL06pts6fPPQjJI7upcT1ENqhOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsMvUXNpqxKkb8QBJM4dgjrYkR5MB8GA1UdIwQY MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfjPx2ng 9VYGZ1PrhndA8XQIm0BEWGl7WvxSiHcQtaWEDfQ7JaBUZ+spVeqlctmXzKzbhCyg 7FfNCluIySpCTNjd8bmMm/iu/GWU63+rZ2BjOMsrCejseuCux1Ztnyf9GzZEc0e4 wB5lOSvNsJtUAMbyFFLCjpKRddFjAknFUQs6bM9iLGgrmeaPxIAUC3DsVOsMEvEX RDUQmy/9DqN+SXJhFNX7wshSj65R+6++67cyeX+/hRfj0dsCxJnaECncT1rO2L40 4tdXw3XdejjS2FKh2bhI759OpqbgEkv8O+YpXaseFOzyrS4XZIgCcBHUP1AuDY+4 Vk+WWEjPXpFBqw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:36 2025 by rpki-client