This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft File: EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json) Hash identifier: vcy0KJgi1gGnOKJNd+z9Cv0jBPVyw5iAmh9p9KziVxE= Subject key identifier: 49:3D:78:25:18:F8:93:72:32:39:25:F8:D9:78:13:08:76:C9:20:3E Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2 Certificate issuer: /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2 Certificate serial: 019AF352358F4F3F3CD37F4326BC724C4B24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:42 +0000 Manifest this update: Sat 06 Dec 2025 11:00:42 +0000 Manifest next update: Sun 07 Dec 2025 11:00:42 +0000 Files and hashes: 1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: iwVcz/qwNODNoyHfm+ZywRoW/Jv4QmZdLXLoKNZVgU8=) 2: z4wrQiroOiNSFdcGbPHcbs9V-dU.roa (hash: yP/GR3Nqgj7O85i1wNDr+BiQRFYWk5p1kifG1naqNAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:35:8f:4f:3f:3c:d3:7f:43:26:bc:72:4c:4b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2 Validity Not Before: Dec 6 11:00:42 2025 GMT Not After : Dec 7 11:00:42 2025 GMT Subject: CN=493d782518f89372323925f8d978130876c9203e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:49:b2:79:f0:89:21:d1:f4:4a:4b:15:68: 63:f3:4b:7d:0d:42:52:75:e2:8b:e5:95:70:b6:e4: 0f:35:ed:4c:81:00:71:b7:d5:d6:05:fa:bb:79:f6: d3:08:f8:16:9d:66:96:4f:de:cb:05:ba:7a:fb:44: d4:72:30:25:ba:cf:19:a7:e0:76:6f:ea:7a:e7:8e: cf:5b:97:7f:64:c9:97:9b:ba:f1:97:5c:80:c8:39: 42:e2:71:4e:e9:3e:bb:cf:ed:09:cc:68:80:7b:f8: e3:e1:9a:e9:ec:10:04:5a:ba:40:26:3e:cd:d8:91: 07:67:96:b5:ba:58:59:d0:e8:29:0d:8e:0b:5a:39: 73:c4:a8:e1:6a:1f:c0:31:fd:b6:89:8d:14:c6:a9: c5:5a:5e:31:dd:ce:b2:88:c4:58:a2:19:99:5a:34: 8d:84:70:19:0f:04:d8:7a:20:e6:0b:d4:2c:6c:53: 46:2a:06:e1:87:ac:5c:72:a3:b4:74:a6:71:1e:f3: 6d:40:48:f4:be:da:43:65:61:be:40:c3:70:b2:ec: 50:c3:93:76:f8:7d:bb:2f:ad:a7:82:01:5f:3a:fd: 9b:6a:44:16:d8:48:71:38:45:11:95:1d:2d:d9:a7: 60:2a:52:84:74:1b:28:1f:9d:c8:25:b3:3c:19:69: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3D:78:25:18:F8:93:72:32:39:25:F8:D9:78:13:08:76:C9:20:3E X509v3 Authority Key Identifier: keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:21:b2:3f:3d:f9:47:18:dc:81:f0:ca:a1:5e:56:71:f7:78: d0:23:df:51:5b:25:76:58:22:3f:97:89:1d:d0:f2:24:12:8a: 2c:b7:52:b7:64:9b:8c:fe:fc:6f:3c:e7:38:01:08:39:c5:f1: dc:a6:5c:a2:56:28:da:47:0c:01:3d:b3:23:7a:12:49:0a:2e: 37:79:ea:c3:ca:dc:6d:24:d7:c0:29:48:36:bf:fb:aa:97:b6: 26:87:9e:49:d2:9a:89:77:8d:3f:6d:73:a1:88:e4:a5:c0:fc: e0:be:cd:cd:a2:38:05:92:ce:7d:22:5f:a0:d0:c5:8e:f0:98: af:53:aa:05:62:39:20:6d:1c:80:1f:14:34:4a:74:a8:5e:15: e7:8c:c0:34:37:29:c3:c6:a5:82:7f:46:df:f0:72:d6:87:a5: 56:2a:14:db:27:4a:f8:f7:c9:76:b7:d1:d3:98:5a:aa:1e:3b: 6f:10:ca:96:25:a6:f7:df:47:39:2e:c7:f0:49:cf:da:f2:79: be:3d:9c:d1:0a:f3:b3:76:f2:b2:4a:93:82:6e:43:77:fc:b7: 3c:15:c5:be:0e:53:8f:23:4b:cc:b0:df:da:21:25:46:1b:13: 30:44:86:3b:64:47:eb:f9:a2:e0:b3:92:b2:03:01:e1:f2:61: 85:6f:ef:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjWPTz88039DJrxyTEskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzQ5NTQ1YWI4YmZkMjY1MjczZThkNDg0M2I5OGJmMGI0 MTQ4ZjIwHhcNMjUxMjA2MTEwMDQyWhcNMjUxMjA3MTEwMDQyWjAzMTEwLwYDVQQD Eyg0OTNkNzgyNTE4Zjg5MzcyMzIzOTI1ZjhkOTc4MTMwODc2YzkyMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlRJsnnwiSHR9EpLFWhj80t9DUJS deKL5ZVwtuQPNe1MgQBxt9XWBfq7efbTCPgWnWaWT97LBbp6+0TUcjAlus8Zp+B2 b+p6547PW5d/ZMmXm7rxl1yAyDlC4nFO6T67z+0JzGiAe/jj4Zrp7BAEWrpAJj7N 2JEHZ5a1ulhZ0OgpDY4LWjlzxKjhah/AMf22iY0UxqnFWl4x3c6yiMRYohmZWjSN hHAZDwTYeiDmC9QsbFNGKgbhh6xccqO0dKZxHvNtQEj0vtpDZWG+QMNwsuxQw5N2 +H27L62nggFfOv2bakQW2EhxOEURlR0t2adgKlKEdBsoH53IJbM8GWkLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk9eCUY+JNyMjkl+Nl4Ewh2ySA+MB8GA1UdIwQY MBaAFBM0lUWri/0mUnPo1IQ7mL8LQUjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xNzUyNjAtOGY5YS00YjdmLWIwMTEt NGMyNjQ3YTU4OTY3LzEvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xNzUyNjAtOGY5YS00YjdmLWIwMTEtNGMyNjQ3YTU4OTY3 LzEvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiGyPz35 RxjcgfDKoV5Wcfd40CPfUVsldlgiP5eJHdDyJBKKLLdSt2SbjP78bzznOAEIOcXx 3KZcolYo2kcMAT2zI3oSSQouN3nqw8rcbSTXwClINr/7qpe2JoeeSdKaiXeNP21z oYjkpcD84L7NzaI4BZLOfSJfoNDFjvCYr1OqBWI5IG0cgB8UNEp0qF4V54zANDcp w8algn9G3/By1oelVioU2ydK+PfJdrfR05haqh47bxDKliWm999HOS7H8EnP2vJ5 vj2c0Qrzs3byskqTgm5Dd/y3PBXFvg5TjyNLzLDf2iElRhsTMESGO2RH6/mi4LOS sgMB4fJhhW/vyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:00 2025 by rpki-client