This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft File: Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json) Hash identifier: 7CV0Fpp0HNtT0HIvm7rTwtR1XISJL6u59LYz1s034Pc= Subject key identifier: 1B:15:A9:10:62:78:15:2F:05:16:71:23:A5:D9:6B:EA:E7:F8:12:49 Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00 Certificate issuer: /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00 Certificate serial: 019AF6F949EF620877471F35517E538488B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft Manifest number: 0FCC Signing time: Sun 07 Dec 2025 04:02:03 +0000 Manifest this update: Sun 07 Dec 2025 04:02:03 +0000 Manifest next update: Mon 08 Dec 2025 04:02:03 +0000 Files and hashes: 1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: zUsT/FK380ugCr8FkmzgY+U+XAO+QlTRhkKPzXyzATY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:49:ef:62:08:77:47:1f:35:51:7e:53:84:88:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00 Validity Not Before: Dec 7 04:02:03 2025 GMT Not After : Dec 8 04:02:03 2025 GMT Subject: CN=1b15a9106278152f05167123a5d96beae7f81249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:2f:5d:87:0b:83:a2:c4:ec:b7:25:f1:2f: 05:c9:e2:31:e1:c7:1b:55:a7:9e:4b:e7:31:f0:eb: e1:42:57:0a:c9:bc:8f:e5:a7:ad:98:fc:e1:76:9e: 40:1d:db:fa:26:ac:d5:bc:fb:79:e2:71:ff:83:42: 34:0f:9a:ee:fc:e7:55:ad:5d:d0:2e:d6:6c:34:1d: 8a:da:64:45:2d:16:84:01:5a:2a:b7:e2:88:52:ad: f2:aa:db:a1:73:5e:70:8d:65:29:ee:73:f0:7c:df: b3:ef:2a:00:47:fb:75:77:d4:fb:b8:f6:80:29:83: 28:85:97:ca:8d:01:1b:e8:5d:d8:d4:89:52:6f:48: aa:9b:51:26:16:f9:80:ae:c9:7f:8c:b2:ca:60:5f: 1a:d4:5f:b6:2e:2a:f4:f9:56:71:c4:d4:c2:e6:b0: 3d:f0:7e:7d:24:60:fd:45:c1:69:dc:65:ba:33:fb: 56:c7:87:4b:17:60:8c:4e:37:ea:36:22:ed:85:82: 50:c6:01:55:11:f9:92:53:9f:df:5d:d3:38:3f:2d: 35:15:57:8c:6f:a6:3e:2a:f7:55:9f:b7:73:9d:ec: 9b:b2:5b:49:ba:12:a4:03:91:97:a5:b0:8c:cc:3b: d9:2a:83:82:66:00:f1:f7:9f:36:75:ea:ea:fa:f1: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:A9:10:62:78:15:2F:05:16:71:23:A5:D9:6B:EA:E7:F8:12:49 X509v3 Authority Key Identifier: keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:52:65:3c:27:ff:ec:dd:10:0b:d0:fb:0a:2d:0c:f4:26: 98:41:81:fe:03:bc:56:f2:a5:c1:ff:47:ba:af:14:11:84:ff: 4b:fa:3a:25:97:3b:eb:59:32:96:e8:ac:b8:f9:be:c5:c0:6e: 8e:3f:20:69:49:93:c7:6d:08:e4:45:cf:21:18:98:9d:05:4f: 28:17:28:ba:ba:2b:4e:41:c3:b6:6e:e2:07:7b:3d:22:69:25: 7d:8b:3d:65:6f:5b:19:f1:f1:77:dd:31:4f:42:bb:7b:60:62: 37:7b:27:aa:ad:38:e7:2d:b0:a5:e3:9d:23:a7:b1:30:7c:29: f2:cf:60:94:00:40:30:0b:e1:4f:40:f2:36:cd:59:c9:6b:11: f6:44:3e:4f:31:4f:13:cb:41:25:ee:78:eb:98:44:82:f2:af: 0f:38:95:a7:f5:87:3d:00:7a:fd:06:7b:23:b7:9e:c6:30:fe: ef:3b:6a:4e:64:a1:20:d8:37:15:42:05:d9:9d:3a:67:49:31: 68:21:e6:42:9b:e6:7d:84:f2:37:38:d6:a8:8c:49:81:b3:15: 3f:79:f5:30:d7:5a:72:eb:67:9e:3e:fa:eb:2a:12:4d:4a:0e: 1f:51:16:63:45:1f:63:86:09:ae:94:0d:c0:00:64:66:65:89: 6e:d4:8b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+UnvYgh3Rx81UX5ThIi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjlmZTY3N2Y0N2RmMGZkN2NjMzQ5NWYxNzJkOTNiM2Ni YTBlMDAwHhcNMjUxMjA3MDQwMjAzWhcNMjUxMjA4MDQwMjAzWjAzMTEwLwYDVQQD EygxYjE1YTkxMDYyNzgxNTJmMDUxNjcxMjNhNWQ5NmJlYWU3ZjgxMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1IvXYcLg6LE7Lcl8S8FyeIx4ccb VaeeS+cx8OvhQlcKybyP5aetmPzhdp5AHdv6JqzVvPt54nH/g0I0D5ru/OdVrV3Q LtZsNB2K2mRFLRaEAVoqt+KIUq3yqtuhc15wjWUp7nPwfN+z7yoAR/t1d9T7uPaA KYMohZfKjQEb6F3Y1IlSb0iqm1EmFvmArsl/jLLKYF8a1F+2Lir0+VZxxNTC5rA9 8H59JGD9RcFp3GW6M/tWx4dLF2CMTjfqNiLthYJQxgFVEfmSU5/fXdM4Py01FVeM b6Y+KvdVn7dzneybsltJuhKkA5GXpbCMzDvZKoOCZgDx9582derq+vFmpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsVqRBieBUvBRZxI6XZa+rn+BJJMB8GA1UdIwQY MBaAFBIp/md/R98P18w0lfFy2Ts8ug4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDIt M2FiNjZiZjQ3YmQzLzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDItM2FiNjZiZjQ3YmQz LzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN1SZTwn /+zdEAvQ+wotDPQmmEGB/gO8VvKlwf9Huq8UEYT/S/o6JZc761kyluisuPm+xcBu jj8gaUmTx20I5EXPIRiYnQVPKBcourorTkHDtm7iB3s9ImklfYs9ZW9bGfHxd90x T0K7e2BiN3snqq045y2wpeOdI6exMHwp8s9glABAMAvhT0DyNs1ZyWsR9kQ+TzFP E8tBJe5465hEgvKvDziVp/WHPQB6/QZ7I7eexjD+7ztqTmShINg3FUIF2Z06Z0kx aCHmQpvmfYTyNzjWqIxJgbMVP3n1MNdacutnnj766yoSTUoOH1EWY0UfY4YJrpQN wABkZmWJbtSLlA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:43 2025 by rpki-client