This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json) Hash identifier: +5yUnjAoFdWgZQvFrhTY3vmwhNjkKjMMKTSXp9Kp0JM= Subject key identifier: A4:F8:69:70:99:D4:C3:27:47:1B:2E:75:F1:90:A5:76:E4:43:D1:14 Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4 Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4 Certificate serial: 019AF31CFC6C0509A2F0EBEEAED78D9BAB94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft Manifest number: 1512 Signing time: Sat 06 Dec 2025 10:02:34 +0000 Manifest this update: Sat 06 Dec 2025 10:02:34 +0000 Manifest next update: Sun 07 Dec 2025 10:02:34 +0000 Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: 5DzsBR1aLzkcmFTpPWYYxPPlzKefw12+sZKWiFXCFTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fc:6c:05:09:a2:f0:eb:ee:ae:d7:8d:9b:ab:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4 Validity Not Before: Dec 6 10:02:34 2025 GMT Not After : Dec 7 10:02:34 2025 GMT Subject: CN=a4f8697099d4c327471b2e75f190a576e443d114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:71:de:54:a0:24:5d:79:ff:5b:0e:b3:61: 66:41:84:09:5a:54:5f:36:f6:b2:7d:8c:d7:a9:b2: 1a:ae:b6:3e:d0:ed:a7:bc:b0:95:db:32:c6:51:09: 05:c0:04:35:b1:fb:15:a2:f5:7a:9d:95:11:76:4a: a1:2d:43:03:6c:da:be:6e:f7:f9:58:ed:72:0f:ab: 6b:52:0d:7d:28:fd:23:da:e3:56:25:e1:0d:2f:c9: 65:f1:60:01:e6:42:5e:de:54:85:fe:38:fa:fc:70: 69:3a:9f:6f:50:3f:07:76:68:ea:e0:4e:0b:c4:09: 18:4a:d1:47:95:c1:43:e3:a3:5f:04:e5:1d:15:54: 91:73:32:94:8c:44:8d:1c:98:e6:8d:82:3a:8d:b8: 76:17:de:d4:7d:c7:9f:4f:43:14:ed:e5:cd:de:b9: 95:f1:5e:42:25:dd:c3:17:7e:29:36:43:ce:d0:4e: 41:74:d8:10:26:55:49:e2:fc:36:bc:d7:7f:29:ac: de:79:11:7c:fa:d7:b5:d6:3b:58:d0:37:97:5c:cf: 7f:63:a3:1e:63:4a:72:f3:db:db:55:d5:05:94:33: 7c:f0:4b:40:df:34:1a:1d:3d:21:f8:8b:95:59:69: f7:2c:d4:6b:76:02:c5:a4:8e:b9:06:b1:75:5c:8a: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F8:69:70:99:D4:C3:27:47:1B:2E:75:F1:90:A5:76:E4:43:D1:14 X509v3 Authority Key Identifier: keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:03:bc:19:2b:e0:57:c7:aa:3f:d9:1e:50:4e:e7:b5:4e: a5:22:45:86:9e:10:9f:29:b8:fd:6e:09:c9:fd:ec:d9:b5:90: d5:f4:50:98:49:24:1c:7a:f5:7e:98:20:21:a3:2e:2d:6f:c4: e8:f2:44:41:8d:a8:cf:dd:6f:bd:e7:e4:76:d1:eb:3d:e5:dc: 20:0d:8c:8d:75:e8:b6:41:7c:37:d2:f6:34:ca:ae:d0:ef:61: 88:77:5c:5c:b7:2c:a9:49:fc:0b:79:76:a3:8b:aa:f2:db:7b: 36:9a:e5:49:85:31:c8:02:e7:38:aa:79:dc:43:1a:28:26:02: a6:fa:2a:4c:b5:7a:c4:99:c2:41:60:6c:ae:eb:bf:c1:f7:60: 2a:22:c6:24:5f:1e:67:df:3d:a6:76:8a:2b:e6:90:08:8a:3e: 37:79:bb:0c:40:d3:a4:af:71:95:7c:af:6a:e0:d9:86:3e:ab: cc:4c:df:33:a9:d3:3b:be:0a:cd:17:b8:59:a3:0b:7f:a5:ff: a9:59:10:cd:a0:4a:2e:8c:48:40:21:c0:1c:03:bd:cc:19:9c: c8:36:33:9f:45:e3:4b:50:69:87:cb:98:7d:d5:66:d1:57:e7: a5:45:64:dd:4a:e2:6f:0a:2f:b0:2f:0d:36:f8:10:1f:1b:10: cb:12:e8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPxsBQmi8OvurteNm6uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGZhYWI1Nzk4NDcwZWU1MTY5ZDNlYmYyZDEzMTU4NTlj ZmFkYTQwHhcNMjUxMjA2MTAwMjM0WhcNMjUxMjA3MTAwMjM0WjAzMTEwLwYDVQQD EyhhNGY4Njk3MDk5ZDRjMzI3NDcxYjJlNzVmMTkwYTU3NmU0NDNkMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Fx3lSgJF15/1sOs2FmQYQJWlRf NvayfYzXqbIarrY+0O2nvLCV2zLGUQkFwAQ1sfsVovV6nZURdkqhLUMDbNq+bvf5 WO1yD6trUg19KP0j2uNWJeENL8ll8WAB5kJe3lSF/jj6/HBpOp9vUD8Hdmjq4E4L xAkYStFHlcFD46NfBOUdFVSRczKUjESNHJjmjYI6jbh2F97UfcefT0MU7eXN3rmV 8V5CJd3DF34pNkPO0E5BdNgQJlVJ4vw2vNd/KazeeRF8+te11jtY0DeXXM9/Y6Me Y0py89vbVdUFlDN88EtA3zQaHT0h+IuVWWn3LNRrdgLFpI65BrF1XIqWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT4aXCZ1MMnRxsudfGQpXbkQ9EUMB8GA1UdIwQY MBaAFHsPqrV5hHDuUWnT6/LRMVhZz62kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXctcXRYbUVjTzVSYWRQcjh0RXhXRm5QcmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lMzc5ODgtODA4MS00ZGE0LWI5OGYt YmY4NjU5Yzc4MjNkLzEvZXctcXRYbUVjTzVSYWRQcjh0RXhXRm5QcmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lMzc5ODgtODA4MS00ZGE0LWI5OGYtYmY4NjU5Yzc4MjNk LzEvZXctcXRYbUVjTzVSYWRQcjh0RXhXRm5QcmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeygDvBkr 4FfHqj/ZHlBO57VOpSJFhp4Qnym4/W4Jyf3s2bWQ1fRQmEkkHHr1fpggIaMuLW/E 6PJEQY2oz91vvefkdtHrPeXcIA2MjXXotkF8N9L2NMqu0O9hiHdcXLcsqUn8C3l2 o4uq8tt7NprlSYUxyALnOKp53EMaKCYCpvoqTLV6xJnCQWBsruu/wfdgKiLGJF8e Z989pnaKK+aQCIo+N3m7DEDTpK9xlXyvauDZhj6rzEzfM6nTO74KzRe4WaMLf6X/ qVkQzaBKLoxIQCHAHAO9zBmcyDYzn0XjS1Bph8uYfdVm0VfnpUVk3UribwovsC8N NvgQHxsQyxLoBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:31 2025 by rpki-client