This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft File: Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json) Hash identifier: VM76jMu7rrL8AqoKsBGv8dY7UjllvBD3m62bH6veRFw= Subject key identifier: 6B:CD:B6:7F:94:90:9F:99:41:AF:6A:9D:CA:98:4A:D6:B0:D9:B1:D1 Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86 Certificate issuer: /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486 Certificate serial: 019B31C34B3A68EBAF8607CA5B15869374A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft Manifest number: 0E4B Signing time: Thu 18 Dec 2025 14:00:40 +0000 Manifest this update: Thu 18 Dec 2025 14:00:40 +0000 Manifest next update: Fri 19 Dec 2025 14:00:40 +0000 Files and hashes: 1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: phyC8DJw0cVmvFYkaIr3wjrLfLRr31AxdGDVJ1DbCs0=) 2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:4b:3a:68:eb:af:86:07:ca:5b:15:86:93:74:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486 Validity Not Before: Dec 18 14:00:40 2025 GMT Not After : Dec 19 14:00:40 2025 GMT Subject: CN=6bcdb67f94909f9941af6a9dca984ad6b0d9b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:ae:9c:12:45:b7:ef:79:4f:9f:be:14:cd: e0:98:67:ba:a7:6f:1d:94:c4:81:7c:68:a8:88:d5: a7:6c:5d:4e:f3:1a:ae:a8:c2:e8:e4:00:27:82:6a: dc:7c:31:d8:ad:1e:5e:00:35:6d:eb:78:7e:b9:f7: 73:a0:76:1a:af:80:1e:40:8c:5a:0c:46:f1:77:14: ea:35:dc:de:be:3d:76:fc:c4:68:3e:41:c8:ee:01: b6:9b:be:fb:c8:c2:6b:f5:1c:62:f1:a8:fd:3a:c1: 0c:70:da:1b:2e:f3:b8:d9:c6:60:c2:a7:62:95:ae: 65:4c:a4:56:a0:cf:87:8f:45:c0:33:6f:81:76:87: c4:9c:21:a4:3d:1f:24:c7:a4:60:0f:e4:6a:15:e4: de:d2:0c:89:74:e3:5f:ef:06:81:cc:39:b0:bf:a7: a1:be:ad:52:35:2a:77:1f:66:b8:41:66:d3:8d:c4: 6b:5c:2b:67:31:2d:13:6c:a8:6a:2f:d5:b9:11:b7: 60:27:1f:32:11:e7:6b:6c:56:1c:16:89:8a:0b:b7: b8:ab:87:a7:16:14:aa:dd:ef:10:6c:94:2e:72:19: b8:43:8d:4e:3d:3c:a4:5b:8a:9c:ad:71:94:e1:9a: ae:e6:75:83:a2:2d:ab:0c:4a:4c:23:0b:a4:63:14: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:B6:7F:94:90:9F:99:41:AF:6A:9D:CA:98:4A:D6:B0:D9:B1:D1 X509v3 Authority Key Identifier: keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:38:22:a8:cc:87:c5:8f:b2:fa:a0:0e:98:8a:75:b4:de:bb: c8:ba:1c:7f:b8:81:7f:cd:d9:49:be:5f:09:d9:1e:25:12:4e: 26:44:2d:22:7f:db:3d:0f:d1:ef:ef:64:9b:d1:6b:f8:5f:4b: a3:9d:ef:23:8e:e0:1f:f2:5f:5a:62:86:3e:26:74:ba:40:09: 49:19:b5:51:d4:58:17:f4:e1:bf:db:74:96:1b:91:36:82:c0: 29:d8:bf:a5:a7:33:89:4b:8c:19:50:c6:39:06:de:99:df:d6: 20:ac:c7:e6:54:4d:78:89:91:73:09:70:f4:b1:f8:c2:e0:62: b3:32:79:aa:9f:78:b5:28:de:ca:bf:f6:e4:18:ed:b1:f4:a4: 47:94:e5:a7:f1:ee:14:98:72:08:1b:b5:05:f6:44:60:9a:a5: 0e:95:a1:8d:c6:ce:34:04:49:84:82:6a:72:1a:f5:22:cd:4e: 80:2a:c8:36:58:6f:6a:ee:64:5e:c6:e4:46:b3:90:05:dc:65: 6d:69:87:f6:43:56:d4:4d:ff:d8:9c:9f:a3:d8:f7:d0:cf:3e: df:9a:a7:f5:d8:cb:32:1b:9b:80:fb:24:10:ab:17:9d:ef:87: b5:37:1f:06:c2:3b:76:ab:04:91:7a:eb:83:08:54:f6:d8:34: b9:52:6d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw0s6aOuvhgfKWxWGk3SjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzliOWE4OTQ2ZDI2YmUyZDhmZmZlNmMxZTNjMjJjYjkz ZTA0ODYwHhcNMjUxMjE4MTQwMDQwWhcNMjUxMjE5MTQwMDQwWjAzMTEwLwYDVQQD Eyg2YmNkYjY3Zjk0OTA5Zjk5NDFhZjZhOWRjYTk4NGFkNmIwZDliMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JWunBJFt+95T5++FM3gmGe6p28d lMSBfGioiNWnbF1O8xquqMLo5AAngmrcfDHYrR5eADVt63h+ufdzoHYar4AeQIxa DEbxdxTqNdzevj12/MRoPkHI7gG2m777yMJr9Rxi8aj9OsEMcNobLvO42cZgwqdi la5lTKRWoM+Hj0XAM2+BdofEnCGkPR8kx6RgD+RqFeTe0gyJdONf7waBzDmwv6eh vq1SNSp3H2a4QWbTjcRrXCtnMS0TbKhqL9W5EbdgJx8yEedrbFYcFomKC7e4q4en FhSq3e8QbJQuchm4Q41OPTykW4qcrXGU4Zqu5nWDoi2rDEpMIwukYxQ1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvNtn+UkJ+ZQa9qncqYStaw2bHRMB8GA1UdIwQY MBaAFBM5uaiUbSa+LY//5sHjwiy5PgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzdjYzktYzA5NS00MmY1LTliYjYt OTQ2YzBmN2U4Zjc4LzEvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzdjYzktYzA5NS00MmY1LTliYjYtOTQ2YzBmN2U4Zjc4 LzEvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADgiqMyH xY+y+qAOmIp1tN67yLocf7iBf83ZSb5fCdkeJRJOJkQtIn/bPQ/R7+9km9Fr+F9L o53vI47gH/JfWmKGPiZ0ukAJSRm1UdRYF/Thv9t0lhuRNoLAKdi/pacziUuMGVDG OQbemd/WIKzH5lRNeImRcwlw9LH4wuBiszJ5qp94tSjeyr/25BjtsfSkR5Tlp/Hu FJhyCBu1BfZEYJqlDpWhjcbONARJhIJqchr1Is1OgCrINlhvau5kXsbkRrOQBdxl bWmH9kNW1E3/2Jyfo9j30M8+35qn9djLMhubgPskEKsXne+HtTcfBsI7dqsEkXrr gwhU9tg0uVJtsQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:04:10 2025 by rpki-client