This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft File: EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json) Hash identifier: sqvbLLzuB4OtDKc+By1ZcEcNXgQAnov18cJ55H7KyN8= Subject key identifier: 31:FB:13:7B:77:50:62:01:ED:CF:2E:73:A6:D1:B2:12:53:77:48:D8 Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4 Certificate issuer: /CN=108ecb64ba2998b6c41501427238518922d630e4 Certificate serial: 019AF1647197B3FFAFA947F89799FD0CF629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft Manifest number: 96 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: dAIsbFqBGjWzFzqgKaPU4xxQBXBFHyU+JesWv5l8jxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:71:97:b3:ff:af:a9:47:f8:97:99:fd:0c:f6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4 Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=31fb137b77506201edcf2e73a6d1b212537748d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:81:78:6e:15:95:d8:32:0b:40:cc:48:0f: e1:43:26:f1:12:eb:80:28:9f:fb:ec:ce:0e:c7:cf: 54:34:6d:d6:8f:cb:6f:ba:c3:af:7e:16:8e:7c:80: 47:27:f2:7d:ea:0e:4c:ab:46:e8:33:ef:15:2b:d7: 17:43:22:ab:cc:92:1c:39:ea:22:d1:b2:92:fe:d5: d2:07:a7:45:81:36:98:2a:42:36:56:f2:a4:20:c5: 9c:4a:66:a0:69:ae:2b:6e:68:65:67:57:e4:88:42: f2:92:65:14:9b:bf:5d:b6:08:6e:30:84:76:97:9e: 15:94:bb:6e:6e:dd:47:e9:b6:1b:78:00:e4:4a:ee: 22:e8:5a:1e:c0:ea:53:70:e5:52:1a:bb:14:ea:5a: 5f:fc:1d:53:28:0d:32:a6:be:4e:c0:99:e9:a2:ab: 29:16:01:00:67:c2:3c:6d:19:36:a5:3f:0c:aa:9e: d4:49:87:10:0a:bb:59:aa:1c:4d:83:40:5a:d0:e8: 7b:70:7e:38:6d:84:b1:30:54:2d:3e:5a:f8:b8:e0: 9f:69:70:25:c7:c2:6d:1c:c6:3b:35:31:63:6b:1b: 11:d6:fe:a8:c5:dd:02:3d:c0:92:8c:59:8e:2d:19: 1f:0d:70:d6:f1:0e:cb:d2:a4:d6:c9:85:49:c7:40: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:13:7B:77:50:62:01:ED:CF:2E:73:A6:D1:B2:12:53:77:48:D8 X509v3 Authority Key Identifier: keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:66:78:b3:8d:30:61:e5:03:17:60:14:76:b4:63:ec:47:98: a7:f6:17:90:a1:a1:8b:d3:9b:17:64:ed:83:b4:1b:d8:28:83: 76:fb:ef:ed:7b:8c:a6:2c:84:52:df:b8:ee:0d:49:1d:62:50: c8:60:83:55:c6:a6:15:26:10:77:49:b5:cc:20:c8:24:f3:df: 60:51:d7:e0:e3:d9:89:1a:ef:52:ed:9f:33:93:d1:e6:f1:ed: 5e:93:74:28:2f:22:c8:2d:4b:05:38:bc:db:da:bc:5f:ff:45: 0d:96:e0:29:98:c4:ba:73:88:d6:a7:aa:12:44:49:8c:5e:da: be:fa:44:ec:43:61:f9:a5:5a:cd:cd:73:63:ab:77:f7:70:a8: 1a:e2:65:76:99:c8:b1:fb:28:66:08:10:e7:50:4e:ad:15:7f: db:70:8e:5f:75:e0:7f:94:45:9f:92:87:37:86:16:88:38:90: 04:af:b8:c8:16:e6:a3:af:b2:87:bf:a9:2c:45:f8:b4:ab:7e: a3:9e:40:6b:b9:f2:d2:b0:5f:be:ee:b6:bd:5c:4c:bd:d9:c5: d3:68:9f:dd:10:ed:bb:2d:b9:09:a0:68:9c:3a:63:74:a8:e2: 71:32:75:7c:e9:f1:8e:2e:36:5c:54:1a:24:d0:2b:11:e4:62: 96:bf:e0:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHGXs/+vqUf4l5n9DPYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOGVjYjY0YmEyOTk4YjZjNDE1MDE0MjcyMzg1MTg5MjJk NjMwZTQwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD EygzMWZiMTM3Yjc3NTA2MjAxZWRjZjJlNzNhNmQxYjIxMjUzNzc0OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSBeG4VldgyC0DMSA/hQybxEuuA KJ/77M4Ox89UNG3Wj8tvusOvfhaOfIBHJ/J96g5Mq0boM+8VK9cXQyKrzJIcOeoi 0bKS/tXSB6dFgTaYKkI2VvKkIMWcSmagaa4rbmhlZ1fkiELykmUUm79dtghuMIR2 l54VlLtubt1H6bYbeADkSu4i6FoewOpTcOVSGrsU6lpf/B1TKA0ypr5OwJnpoqsp FgEAZ8I8bRk2pT8Mqp7USYcQCrtZqhxNg0Ba0Oh7cH44bYSxMFQtPlr4uOCfaXAl x8JtHMY7NTFjaxsR1v6oxd0CPcCSjFmOLRkfDXDW8Q7L0qTWyYVJx0A0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH7E3t3UGIB7c8uc6bRshJTd0jYMB8GA1UdIwQY MBaAFBCOy2S6KZi2xBUBQnI4UYki1jDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUk3TFpMb3BtTGJFRlFGQ2NqaFJpU0xXTU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNmU2OWQtZDMyZC00YmIxLTk1Yjgt YjdmMTE5M2JhMjAyLzEvRUk3TFpMb3BtTGJFRlFGQ2NqaFJpU0xXTU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hNmU2OWQtZDMyZC00YmIxLTk1YjgtYjdmMTE5M2JhMjAy LzEvRUk3TFpMb3BtTGJFRlFGQ2NqaFJpU0xXTU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWZ4s40w YeUDF2AUdrRj7EeYp/YXkKGhi9ObF2Ttg7Qb2CiDdvvv7XuMpiyEUt+47g1JHWJQ yGCDVcamFSYQd0m1zCDIJPPfYFHX4OPZiRrvUu2fM5PR5vHtXpN0KC8iyC1LBTi8 29q8X/9FDZbgKZjEunOI1qeqEkRJjF7avvpE7ENh+aVazc1zY6t393CoGuJldpnI sfsoZggQ51BOrRV/23COX3Xgf5RFn5KHN4YWiDiQBK+4yBbmo6+yh7+pLEX4tKt+ o55Aa7ny0rBfvu62vVxMvdnF02if3RDtuy25CaBonDpjdKjicTJ1fOnxji42XFQa JNArEeRilr/gGw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:48 2025 by rpki-client