This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json) Hash identifier: QZpsF5MtQg6Ki6GWLS8LgTSXBZXOSGfrwweVA1vUUps= Subject key identifier: 4A:A9:61:4F:AC:02:DE:F7:C3:82:6E:3B:B1:94:4B:96:FF:78:AF:5A Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Certificate serial: 019AF72EE0DB4D43534FCC4C0D548260CB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft Manifest number: 0276 Signing time: Sun 07 Dec 2025 05:00:35 +0000 Manifest this update: Sun 07 Dec 2025 05:00:35 +0000 Manifest next update: Mon 08 Dec 2025 05:00:35 +0000 Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: lRucL7j+ydp1F5bU7T+uu7+qGeM8tmyDQ5xlfV1xdSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:e0:db:4d:43:53:4f:cc:4c:0d:54:82:60:cb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Validity Not Before: Dec 7 05:00:35 2025 GMT Not After : Dec 8 05:00:35 2025 GMT Subject: CN=4aa9614fac02def7c3826e3bb1944b96ff78af5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:42:40:30:6d:0a:2d:49:51:a5:04:07:0f: c8:a5:0b:43:a9:86:8d:dd:88:ea:6a:cc:1d:63:8d: 3a:a8:ed:7e:25:93:1d:d5:46:ce:98:cd:f1:a1:02: 71:53:dc:74:09:c2:99:97:8a:46:13:cf:a7:3e:b7: b1:8a:df:f9:3a:df:12:5f:03:6d:07:55:10:0b:f2: 79:d4:d3:6d:b2:d4:70:66:0c:b7:b8:16:21:9b:8d: de:3e:2f:4c:70:06:7e:ec:f7:a6:a6:5a:7d:5f:a5: 91:35:86:8d:99:5c:86:5f:e5:47:3a:c0:95:1e:ab: 24:fc:8f:5d:4c:b2:3d:5b:ed:d7:e7:11:56:72:35: bd:7e:54:05:f8:b1:cf:7a:fe:4a:6d:31:c0:47:75: b8:15:d4:47:ac:c8:98:1b:ee:84:99:2a:e3:77:40: 3c:99:9c:25:4a:4c:61:1c:74:a8:ef:c6:f2:44:00: f2:9b:09:cd:3b:b0:30:60:2e:75:40:18:96:51:8b: 90:74:f0:e1:16:2a:84:af:50:46:fc:6e:73:5c:d7: bf:17:82:3c:94:ae:ff:c7:38:3b:6b:6e:2a:a5:e7: 8f:21:39:44:d5:93:cb:8d:1c:01:27:08:2a:43:d2: 74:7f:97:a2:07:53:1f:d1:c2:e9:a8:08:a9:0f:fe: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:61:4F:AC:02:DE:F7:C3:82:6E:3B:B1:94:4B:96:FF:78:AF:5A X509v3 Authority Key Identifier: keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:bd:a0:19:d8:2a:95:5e:dc:ad:95:ed:8a:fc:85:e3:0d: c2:1e:8e:58:0d:c4:fb:9c:a7:7d:c9:b3:31:39:c2:6d:b9:40: b5:21:b2:e4:67:16:2a:0f:f8:07:d7:62:f7:7a:d6:bc:0c:70: a6:98:c0:89:03:87:6d:c5:bb:4e:5d:2b:5f:81:08:47:c6:b2: 80:80:1a:12:05:c7:8d:95:5b:b5:9c:f7:f1:b8:ca:f0:e8:62: dd:e8:fa:9a:75:11:24:82:50:3b:74:55:95:e5:ba:39:5c:4d: ad:27:61:d2:99:e0:db:db:55:4e:9d:ad:fb:79:51:bd:e9:32: d1:7f:00:db:81:e2:e7:f9:6c:d1:bc:18:c7:55:51:03:78:8f: 2c:64:0d:5a:ba:21:69:4a:55:cb:d8:f0:da:eb:01:9c:3c:29: ec:ca:96:df:16:d7:2f:54:f9:8f:1e:41:62:6b:a4:06:e0:f1: 15:e7:69:6a:16:68:59:0a:9a:01:e7:c5:ce:36:aa:dc:f8:9c: 49:2d:f8:f9:13:a1:b5:f4:1b:81:87:9b:d4:37:c6:9d:e4:2a: ff:c0:81:d8:47:d2:6e:16:31:18:ed:44:90:55:ea:17:17:06: fd:7e:52:73:cd:90:07:50:33:bb:9a:80:08:d4:da:09:f7:98: d5:d9:ff:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LuDbTUNTT8xMDVSCYMsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk N2YzYWQwHhcNMjUxMjA3MDUwMDM1WhcNMjUxMjA4MDUwMDM1WjAzMTEwLwYDVQQD Eyg0YWE5NjE0ZmFjMDJkZWY3YzM4MjZlM2JiMTk0NGI5NmZmNzhhZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aRCQDBtCi1JUaUEBw/IpQtDqYaN 3YjqaswdY406qO1+JZMd1UbOmM3xoQJxU9x0CcKZl4pGE8+nPrexit/5Ot8SXwNt B1UQC/J51NNtstRwZgy3uBYhm43ePi9McAZ+7Pemplp9X6WRNYaNmVyGX+VHOsCV Hqsk/I9dTLI9W+3X5xFWcjW9flQF+LHPev5KbTHAR3W4FdRHrMiYG+6EmSrjd0A8 mZwlSkxhHHSo78byRADymwnNO7AwYC51QBiWUYuQdPDhFiqEr1BG/G5zXNe/F4I8 lK7/xzg7a24qpeePITlE1ZPLjRwBJwgqQ9J0f5eiB1Mf0cLpqAipD/7pEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqpYU+sAt73w4JuO7GUS5b/eK9aMB8GA1UdIwQY MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy69oBnY KpVe3K2V7Yr8heMNwh6OWA3E+5ynfcmzMTnCbblAtSGy5GcWKg/4B9di93rWvAxw ppjAiQOHbcW7Tl0rX4EIR8aygIAaEgXHjZVbtZz38bjK8Ohi3ej6mnURJIJQO3RV leW6OVxNrSdh0png29tVTp2t+3lRveky0X8A24Hi5/ls0bwYx1VRA3iPLGQNWroh aUpVy9jw2usBnDwp7MqW3xbXL1T5jx5BYmukBuDxFedpahZoWQqaAefFzjaq3Pic SS34+ROhtfQbgYeb1DfGneQq/8CB2EfSbhYxGO1EkFXqFxcG/X5Sc82QB1Azu5qA CNTaCfeY1dn/6g== -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:04 2025 by rpki-client