This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json) Hash identifier: KhNcZLGgTfvgN0cHMRWwF5ACnzI2XAwtGtP6b8RHmA0= Subject key identifier: 85:DB:75:74:EC:BE:C3:11:AD:C7:E4:13:C6:D8:D5:B3:14:BD:83:5C Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Certificate serial: 019AF1D220E3E674D3B2A53869C3D3C72EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: GieJHrgB9VxQantxm5pKFVgBixEwWLmt2ucD5JFsYqE=) 2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:20:e3:e6:74:d3:b2:a5:38:69:c3:d3:c7:2e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=85db7574ecbec311adc7e413c6d8d5b314bd835c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:37:c3:be:e3:39:98:81:9c:cb:69:ad:bc: e9:b5:3b:fb:8a:f0:5a:82:cc:c3:40:bd:a8:5c:48: f8:c6:1e:92:1a:2f:e2:2c:01:14:7e:9c:53:b3:89: 8b:b7:c6:18:a2:78:53:a7:f5:8e:6e:7c:aa:ab:28: 94:63:df:7b:ab:e4:17:a0:af:88:02:76:dc:bd:62: c8:c8:eb:0c:53:86:04:88:d1:f0:3e:98:2f:f6:ee: ad:02:c9:7d:16:56:86:c2:cd:13:8b:53:76:ab:ea: b4:ac:b4:7c:d5:f7:53:87:4f:d4:81:a9:a0:96:1f: fb:e1:69:0a:8a:0c:05:67:4a:8f:b9:a9:76:23:15: 09:8a:b2:7c:49:72:6c:b3:41:60:d8:7c:2a:5c:69: 21:82:5e:4f:b1:ee:45:c5:8f:3c:4d:e0:d4:6b:f0: da:f4:12:0a:a7:28:66:f2:36:4c:fd:07:21:8b:b7: 03:16:ea:5e:e3:3c:da:d7:7c:c3:a7:4c:31:e2:b6: f8:7f:10:3d:b3:a0:5a:58:6a:a0:53:9f:f5:79:f5: 15:6b:9f:7b:af:f5:d4:7f:91:75:22:d2:28:fb:01: 53:1b:ea:d3:b1:ff:27:9c:c6:73:9d:39:67:e9:a1: 7d:81:c4:cd:da:ef:5a:09:c6:f3:52:19:74:73:5f: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DB:75:74:EC:BE:C3:11:AD:C7:E4:13:C6:D8:D5:B3:14:BD:83:5C X509v3 Authority Key Identifier: keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0d:56:84:e3:1d:fa:44:74:6f:fc:e2:53:bc:06:32:38:fb: 97:20:7b:ba:66:86:eb:d7:cb:08:dd:9e:00:20:d7:36:4d:6b: c2:28:c9:cf:84:19:ee:93:3c:51:bc:ec:61:e2:e7:24:1f:1e: d1:12:15:e4:99:bb:c4:70:ec:95:3e:fa:e5:a3:08:21:ce:55: 92:ae:26:20:b2:d1:9c:68:ff:18:ea:46:ec:5a:26:8a:94:70: 26:37:06:7c:21:fe:e3:f3:4a:e6:30:75:1f:80:e8:94:a6:3c: f3:0c:6d:fb:45:53:0a:6a:a3:3c:76:2f:cf:d5:cf:c1:8b:52: fd:21:15:82:1d:c3:4d:f9:dc:5b:83:1d:be:95:fe:ec:45:61: f8:93:de:c7:4a:c1:70:0f:39:ed:25:8e:86:b4:5e:84:d5:43: 8e:29:26:4f:76:85:0a:b7:59:92:06:f7:8d:38:e6:e1:32:6a: c8:1a:33:fe:d2:c0:72:39:12:e5:ff:41:91:d0:52:4e:44:e3: 7c:58:85:4d:46:a3:86:a0:be:b7:d9:ea:01:06:20:ed:f3:54: e4:45:f0:ae:96:b9:9d:67:d3:98:03:fa:93:48:a7:9d:2a:2a: 5a:e8:bc:3e:1c:1b:70:90:ba:58:e3:2a:b8:c3:59:5f:4a:81: 66:d6:32:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iDj5nTTsqU4acPTxy72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDZjNzg3OGY3YjNmNWRhMDkwMWRlYzc0NzNhYTIyOTE1 NTZlNzIwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg4NWRiNzU3NGVjYmVjMzExYWRjN2U0MTNjNmQ4ZDViMzE0YmQ4MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQ3w77jOZiBnMtprbzptTv7ivBa gszDQL2oXEj4xh6SGi/iLAEUfpxTs4mLt8YYonhTp/WObnyqqyiUY997q+QXoK+I AnbcvWLIyOsMU4YEiNHwPpgv9u6tAsl9FlaGws0Ti1N2q+q0rLR81fdTh0/Ugamg lh/74WkKigwFZ0qPual2IxUJirJ8SXJss0Fg2HwqXGkhgl5Pse5FxY88TeDUa/Da 9BIKpyhm8jZM/Qchi7cDFupe4zza13zDp0wx4rb4fxA9s6BaWGqgU5/1efUVa597 r/XUf5F1ItIo+wFTG+rTsf8nnMZznTln6aF9gcTN2u9aCcbzUhl0c1/y8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXbdXTsvsMRrcfkE8bY1bMUvYNcMB8GA1UdIwQY MBaAFBMGx4ePez9doJAd7HRzqiKRVW5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTIt ZGEzNGZjYjdiOTQyLzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTItZGEzNGZjYjdiOTQy LzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvA1WhOMd +kR0b/ziU7wGMjj7lyB7umaG69fLCN2eACDXNk1rwijJz4QZ7pM8UbzsYeLnJB8e 0RIV5Jm7xHDslT765aMIIc5Vkq4mILLRnGj/GOpG7FomipRwJjcGfCH+4/NK5jB1 H4DolKY88wxt+0VTCmqjPHYvz9XPwYtS/SEVgh3DTfncW4MdvpX+7EVh+JPex0rB cA857SWOhrRehNVDjikmT3aFCrdZkgb3jTjm4TJqyBoz/tLAcjkS5f9BkdBSTkTj fFiFTUajhqC+t9nqAQYg7fNU5EXwrpa5nWfTmAP6k0innSoqWui8PhwbcJC6WOMq uMNZX0qBZtYy3A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:56 2025 by rpki-client