This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft File: eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json) Hash identifier: QNnAzaWGv+2wVMMQ+VhryziHGfg8kguSLlOzJkm/6tk= Subject key identifier: AE:5C:EC:33:8E:1A:81:A8:69:37:EC:58:9F:D0:63:1D:83:AF:80:06 Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75 Certificate issuer: /CN=7819b096edf8760e8e500f94169bc00378ae9475 Certificate serial: 019B2F305A46EB4B05274D5AB753C1544735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft Manifest number: 12C2 Signing time: Thu 18 Dec 2025 02:00:56 +0000 Manifest this update: Thu 18 Dec 2025 02:00:56 +0000 Manifest next update: Fri 19 Dec 2025 02:00:56 +0000 Files and hashes: 1: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: J0QDWZSjnUedAge5eRkSJTeOKBUOayzioUXCAqOovGA=) 2: kvpjW1OQ3nnqnZospDXyTTjms3c.roa (hash: jdHb9YcJtduSRgTK6EOa2Lgs5rNOzEsJ93AqGYpkqHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:5a:46:eb:4b:05:27:4d:5a:b7:53:c1:54:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475 Validity Not Before: Dec 18 02:00:56 2025 GMT Not After : Dec 19 02:00:56 2025 GMT Subject: CN=ae5cec338e1a81a86937ec589fd0631d83af8006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:70:aa:47:3d:a6:08:20:e2:f9:dc:98:4a: a6:c5:88:e2:9f:35:2c:5b:d9:9c:5e:09:e3:c0:74: 8a:a9:b2:01:77:62:bc:50:dd:3f:de:9b:ec:ba:43: 9d:30:0b:0c:ce:30:50:43:56:a3:dc:e6:9a:22:cc: c9:42:d3:17:79:cf:22:d6:10:a3:57:10:c8:5c:e9: dc:8f:a8:12:34:b0:26:d3:99:06:55:6e:f4:90:05: 38:80:66:d5:b8:e4:a5:b2:65:35:30:e9:e2:f2:07: 10:92:f6:a9:c8:cc:fd:d5:71:e3:8a:61:ba:9f:78: e2:84:07:5d:bc:1b:e4:2d:ad:a7:a4:bb:07:03:27: c0:38:51:1b:ee:41:74:b0:23:cb:c7:76:0d:51:b1: 9b:ce:63:ed:07:e6:57:e6:9f:ab:bb:e6:37:94:51: 7d:eb:32:69:b8:01:02:c0:51:44:71:54:87:14:a1: 23:2f:23:5d:b7:b4:b3:4b:43:7a:50:60:5b:93:71: db:27:82:48:97:8e:6e:9a:00:39:fd:9e:db:e5:4f: 3f:d5:91:b5:e9:f3:4f:0e:60:06:33:a7:c4:2a:63: a2:12:76:b4:3a:fd:30:a7:3a:60:66:64:b4:47:f3: 64:07:58:d2:50:4e:a5:2d:e2:2d:51:a2:a7:a8:30: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:EC:33:8E:1A:81:A8:69:37:EC:58:9F:D0:63:1D:83:AF:80:06 X509v3 Authority Key Identifier: keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:d7:9a:cd:42:a8:ae:c1:de:44:d7:cd:17:4d:22:fa:eb: eb:17:c9:af:0e:c3:81:50:14:2a:b2:c1:81:4c:af:d6:5a:60: d4:26:c4:be:f3:21:dc:d6:21:ef:57:1b:e1:6f:62:86:a3:bd: e6:9a:fa:73:5d:e6:ce:14:a9:8e:6c:d7:d5:25:a2:41:87:40: 29:da:67:bb:65:e1:9c:ce:06:3a:6c:47:2d:14:89:0b:5f:ce: a4:f3:ce:ba:31:eb:d6:d7:a0:8c:70:67:c8:ba:c9:d8:5c:e7: e4:54:a3:5f:62:d5:72:f2:17:27:f6:63:08:43:47:7e:ca:26: 1c:dc:33:49:ba:13:b9:25:01:ed:f3:6f:c4:c6:f1:37:6c:01: 00:8d:1b:ba:f9:07:6f:1f:28:fb:62:9e:a7:2c:c1:0e:f2:8d: 68:b1:4a:87:42:4c:90:27:13:12:59:ea:96:f5:4f:52:ea:e9: df:2d:16:e2:29:c9:5c:b6:f9:d2:61:a5:2e:08:f5:fa:94:4a: 74:fb:da:51:cf:31:9a:9b:e9:1b:55:03:c1:e0:ed:88:9d:bc: 48:5b:6b:35:47:4f:fa:fe:5c:ce:c7:73:b3:57:cd:5a:80:35: c0:4e:a5:60:e5:c6:24:77:b6:2b:a2:e2:41:f7:41:a8:56:10: 63:0f:03:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFpG60sFJ01at1PBVEc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTliMDk2ZWRmODc2MGU4ZTUwMGY5NDE2OWJjMDAzNzhh ZTk0NzUwHhcNMjUxMjE4MDIwMDU2WhcNMjUxMjE5MDIwMDU2WjAzMTEwLwYDVQQD EyhhZTVjZWMzMzhlMWE4MWE4NjkzN2VjNTg5ZmQwNjMxZDgzYWY4MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS1wqkc9pggg4vncmEqmxYjinzUs W9mcXgnjwHSKqbIBd2K8UN0/3pvsukOdMAsMzjBQQ1aj3OaaIszJQtMXec8i1hCj VxDIXOncj6gSNLAm05kGVW70kAU4gGbVuOSlsmU1MOni8gcQkvapyMz91XHjimG6 n3jihAddvBvkLa2npLsHAyfAOFEb7kF0sCPLx3YNUbGbzmPtB+ZX5p+ru+Y3lFF9 6zJpuAECwFFEcVSHFKEjLyNdt7SzS0N6UGBbk3HbJ4JIl45umgA5/Z7b5U8/1ZG1 6fNPDmAGM6fEKmOiEna0Ov0wpzpgZmS0R/NkB1jSUE6lLeItUaKnqDARPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5c7DOOGoGoaTfsWJ/QYx2Dr4AGMB8GA1UdIwQY MBaAFHgZsJbt+HYOjlAPlBabwAN4rpR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEt YzUyYzZjMGUzYThhLzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEtYzUyYzZjMGUzYThh LzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfbXms1C qK7B3kTXzRdNIvrr6xfJrw7DgVAUKrLBgUyv1lpg1CbEvvMh3NYh71cb4W9ihqO9 5pr6c13mzhSpjmzX1SWiQYdAKdpnu2XhnM4GOmxHLRSJC1/OpPPOujHr1tegjHBn yLrJ2Fzn5FSjX2LVcvIXJ/ZjCENHfsomHNwzSboTuSUB7fNvxMbxN2wBAI0buvkH bx8o+2KepyzBDvKNaLFKh0JMkCcTElnqlvVPUurp3y0W4inJXLb50mGlLgj1+pRK dPvaUc8xmpvpG1UDweDtiJ28SFtrNUdP+v5czsdzs1fNWoA1wE6lYOXGJHe2K6Li QfdBqFYQYw8Dig== -----END CERTIFICATE-----Generated at Thu Dec 18 07:56:54 2025 by rpki-client