This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json) Hash identifier: DoNXfPrTzUvzfZsgqlDrX3kA6smcu6nggDRGrDpqibM= Subject key identifier: CE:3A:2F:0D:F4:65:C3:5B:5C:99:10:6F:05:9E:F8:A8:3D:B9:AA:66 Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5 Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5 Certificate serial: 019AF5E66E8D047D9E8851EC624AAF66BF38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft Manifest number: 0784 Signing time: Sat 06 Dec 2025 23:01:50 +0000 Manifest this update: Sat 06 Dec 2025 23:01:50 +0000 Manifest next update: Sun 07 Dec 2025 23:01:50 +0000 Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: 1zn9pzB/O/nm0uA80KPx98w4WDbSdRnrm5F5iSRNxRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:6e:8d:04:7d:9e:88:51:ec:62:4a:af:66:bf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5 Validity Not Before: Dec 6 23:01:50 2025 GMT Not After : Dec 7 23:01:50 2025 GMT Subject: CN=ce3a2f0df465c35b5c99106f059ef8a83db9aa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:a6:3f:ab:c2:7e:e2:a9:2f:48:05:f9:06: cc:75:0a:b7:60:04:01:64:44:1e:39:d4:17:23:bb: d8:81:a9:ac:c6:56:9d:8f:19:96:c3:d1:a1:48:ca: 29:be:95:00:c4:54:83:13:18:67:fd:3c:3d:f3:59: db:13:75:54:53:b4:b8:ac:c5:c4:39:4d:af:32:6f: c7:50:e6:f5:21:9c:1d:6b:da:38:b0:cc:fd:7d:a3: bf:61:10:09:33:a3:42:3d:55:48:4c:26:a2:91:a0: 28:67:3a:8c:32:ee:4c:a6:ab:41:84:36:81:d1:88: 94:e3:7a:07:8c:4d:f2:cf:0a:0a:ac:38:a0:30:5a: fa:79:1f:44:cb:d9:a3:dc:fd:68:79:df:5c:de:4f: f7:9d:d2:41:72:5f:9f:00:24:6a:e2:79:33:e1:e5: 19:45:26:0a:fa:14:b9:0f:6f:b0:ce:15:d9:8b:bc: 26:db:55:9c:6b:b8:aa:a8:9b:73:18:2d:94:6f:e2: 29:d4:e6:f5:be:eb:e1:df:cf:f4:33:e0:f2:cd:a8: 53:52:d1:b6:ba:06:18:18:10:b0:c8:46:92:d2:84: 21:09:d5:b6:a9:a8:5d:f5:3e:9d:39:6c:b1:81:b0: 55:07:f8:06:9a:29:d5:c3:12:ea:03:2a:f6:f4:27: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3A:2F:0D:F4:65:C3:5B:5C:99:10:6F:05:9E:F8:A8:3D:B9:AA:66 X509v3 Authority Key Identifier: keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:94:94:70:ad:10:1b:a2:d0:62:eb:7f:cc:1b:f3:72:4b:40: 40:f5:04:52:f3:1b:10:eb:e4:b5:3b:b0:27:75:76:96:1a:9c: 36:4a:38:cc:f2:53:88:6c:bb:a0:d7:f1:8e:ef:39:c6:1c:77: 4c:0f:0c:b2:56:ae:91:2d:f8:b3:df:79:50:fb:e8:92:5b:0e: b6:ec:3c:0b:a8:77:8b:36:49:86:2a:35:6a:88:e6:6f:09:e9: df:34:03:f3:50:01:29:31:e7:15:8b:29:c7:8d:16:ff:3a:ad: 2f:cf:6d:12:64:36:53:35:33:40:68:fc:60:3f:b3:ff:35:63: c8:b6:24:71:2c:ba:c0:01:78:03:2f:80:8a:ea:26:ea:0d:ca: 72:79:c0:0c:9a:12:f7:ca:0f:c3:76:62:f3:dc:7d:c8:af:1d: bb:42:71:a9:2a:b2:06:2a:99:dc:75:6e:93:55:b5:1e:f6:32: 69:10:ca:b6:89:59:54:44:c1:3e:c6:3d:f3:49:cd:a6:0c:8a: 78:2e:bc:74:f2:80:c4:fc:58:99:bb:29:00:f0:b2:36:59:b5: 0b:60:54:d4:3e:5e:bf:fc:f8:94:b4:f4:69:94:e5:3a:d8:19: fa:d9:9d:80:a4:b0:2d:ef:33:6a:1c:13:4f:4c:4a:4d:76:6e: 46:e1:8f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15m6NBH2eiFHsYkqvZr84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzQ3N2M1MmFhYzEwZGFjMmVkZDQxNzNhYjZkOTRkNWUy NGRlZjUwHhcNMjUxMjA2MjMwMTUwWhcNMjUxMjA3MjMwMTUwWjAzMTEwLwYDVQQD EyhjZTNhMmYwZGY0NjVjMzViNWM5OTEwNmYwNTllZjhhODNkYjlhYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro2mP6vCfuKpL0gF+QbMdQq3YAQB ZEQeOdQXI7vYgamsxladjxmWw9GhSMopvpUAxFSDExhn/Tw981nbE3VUU7S4rMXE OU2vMm/HUOb1IZwda9o4sMz9faO/YRAJM6NCPVVITCaikaAoZzqMMu5MpqtBhDaB 0YiU43oHjE3yzwoKrDigMFr6eR9Ey9mj3P1oed9c3k/3ndJBcl+fACRq4nkz4eUZ RSYK+hS5D2+wzhXZi7wm21Wca7iqqJtzGC2Ub+Ip1Ob1vuvh38/0M+DyzahTUtG2 ugYYGBCwyEaS0oQhCdW2qahd9T6dOWyxgbBVB/gGminVwxLqAyr29CcqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM46Lw30ZcNbXJkQbwWe+Kg9uapmMB8GA1UdIwQY MBaAFHs0d8UqrBDawu3UFzq22U1eJN71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iY2EzNDctOTgzYS00YzFhLTg4Yjgt Y2M2OWEyMzg2ZWRjLzEvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iY2EzNDctOTgzYS00YzFhLTg4YjgtY2M2OWEyMzg2ZWRj LzEvZXpSM3hTcXNFTnJDN2RRWE9yYlpUVjRrM3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5SUcK0Q G6LQYut/zBvzcktAQPUEUvMbEOvktTuwJ3V2lhqcNko4zPJTiGy7oNfxju85xhx3 TA8MslaukS34s995UPvoklsOtuw8C6h3izZJhio1aojmbwnp3zQD81ABKTHnFYsp x40W/zqtL89tEmQ2UzUzQGj8YD+z/zVjyLYkcSy6wAF4Ay+Aiuom6g3KcnnADJoS 98oPw3Zi89x9yK8du0JxqSqyBiqZ3HVuk1W1HvYyaRDKtolZVETBPsY980nNpgyK eC68dPKAxPxYmbspAPCyNlm1C2BU1D5ev/z4lLT0aZTlOtgZ+tmdgKSwLe8zahwT T0xKTXZuRuGPVQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:54 2025 by rpki-client