This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json) Hash identifier: dzRw4PIPFM4pQWnG0FggFW0gjES0kR2/FjHSuDSXEqk= Subject key identifier: 1E:73:03:48:11:09:C4:D9:7E:3C:E2:D1:44:2C:68:90:AF:E7:CC:B8 Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a Certificate serial: 019AF3F7B2E7896C5658E9561BAB97EFD3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:27 +0000 Manifest this update: Sat 06 Dec 2025 14:01:27 +0000 Manifest next update: Sun 07 Dec 2025 14:01:27 +0000 Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: 1Zno/1hUuvIOkO7uuBGgemg2Y0Yo7p+p+chVaTFKa78=) 2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b2:e7:89:6c:56:58:e9:56:1b:ab:97:ef:d3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a Validity Not Before: Dec 6 14:01:27 2025 GMT Not After : Dec 7 14:01:27 2025 GMT Subject: CN=1e7303481109c4d97e3ce2d1442c6890afe7ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:c7:17:b5:80:45:6f:24:f9:27:57:c5:20: 46:f9:75:2c:cc:b1:cf:8f:f7:cd:fd:0c:e5:5f:c9: 8a:58:62:ef:fe:a2:65:48:18:db:e6:6d:ec:3b:1a: 1b:2f:10:f4:7a:a1:ad:29:fc:57:e0:f3:23:6e:35: bd:74:7a:09:ac:f3:a8:89:c2:49:fa:b8:0a:9f:5a: 22:a4:ac:4a:cc:65:a6:09:f5:46:4b:c6:bb:9f:0f: 4c:9a:21:ac:c1:9d:54:18:ba:5a:ee:7e:13:e1:7e: 58:32:6c:c8:24:9f:58:26:70:bc:12:e2:c6:b8:85: 70:4e:49:67:06:9c:ed:9d:f5:7b:e9:60:0d:91:91: bc:a7:ae:fe:9e:1f:18:22:48:cb:b5:07:8b:87:70: 0f:1d:3e:9f:6d:9b:03:be:e8:43:51:af:98:3e:75: 8b:0b:f6:32:67:07:4b:1c:c0:c4:41:7e:eb:51:1e: 69:78:90:3f:cf:fc:dd:e8:c5:ea:5d:35:85:f7:b8: 6e:23:04:d5:50:64:28:0d:41:ea:70:b2:41:20:db: e5:04:b4:1c:5b:49:c5:d2:e3:81:52:07:65:6e:ca: 07:89:12:cd:26:33:78:3d:a7:24:92:42:64:1d:e6: 97:ea:58:22:58:12:21:ce:8b:0c:f4:f4:f0:cb:18: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:03:48:11:09:C4:D9:7E:3C:E2:D1:44:2C:68:90:AF:E7:CC:B8 X509v3 Authority Key Identifier: keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:53:2d:ee:57:bd:18:d2:cb:d5:63:c6:76:89:63:c2:6e: 0b:5f:92:cc:94:b9:25:56:ad:b5:0f:20:43:24:57:ea:16:31: 4d:53:e4:4f:3e:5c:4d:ca:4b:49:6f:10:dc:9e:c1:6c:8d:4d: d5:1e:b7:70:b6:e3:c6:b8:3c:a0:7f:bb:8d:44:00:39:e2:25: 10:6f:b8:57:bc:66:0b:ca:bd:7e:99:08:d1:59:48:1b:8b:ba: 95:60:1d:82:27:65:ce:0b:e1:fb:d2:90:c7:17:a1:f6:0a:4b: 51:42:25:c0:86:46:38:61:c7:ae:eb:e4:44:50:43:5c:d2:21: a6:8f:8d:bd:bb:bc:94:a5:ca:0f:62:c2:89:47:91:a3:ea:26: 70:f7:7a:98:3d:24:9f:89:2f:5f:5f:52:db:7d:de:12:f0:b1: 45:c8:2f:d7:30:19:b5:51:88:bb:1d:47:f5:31:c1:62:c5:41: ae:f9:0a:99:31:90:4c:a5:6d:4b:98:37:0e:de:46:29:73:8d: 2c:77:53:20:db:2b:3a:ac:5a:e3:c6:c2:20:36:e9:84:41:3e: 17:58:6f:4c:a9:18:c1:55:50:8d:82:8b:fd:41:3d:22:37:27: 1b:d3:78:13:7c:b4:b0:c9:4f:3a:58:de:de:f7:b0:80:7f:00: 30:62:fb:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97LniWxWWOlWG6uX79O+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOWIwNWEzNWQ0MTA5YTFlNGE4MzRjY2FkYWNkZDJjNmY1 NmIwNWEwHhcNMjUxMjA2MTQwMTI3WhcNMjUxMjA3MTQwMTI3WjAzMTEwLwYDVQQD EygxZTczMDM0ODExMDljNGQ5N2UzY2UyZDE0NDJjNjg5MGFmZTdjY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJTHF7WARW8k+SdXxSBG+XUszLHP j/fN/QzlX8mKWGLv/qJlSBjb5m3sOxobLxD0eqGtKfxX4PMjbjW9dHoJrPOoicJJ +rgKn1oipKxKzGWmCfVGS8a7nw9MmiGswZ1UGLpa7n4T4X5YMmzIJJ9YJnC8EuLG uIVwTklnBpztnfV76WANkZG8p67+nh8YIkjLtQeLh3APHT6fbZsDvuhDUa+YPnWL C/YyZwdLHMDEQX7rUR5peJA/z/zd6MXqXTWF97huIwTVUGQoDUHqcLJBINvlBLQc W0nF0uOBUgdlbsoHiRLNJjN4PackkkJkHeaX6lgiWBIhzosM9PTwyxiVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5zA0gRCcTZfjzi0UQsaJCv58y4MB8GA1UdIwQY MBaAFBCbBaNdQQmh5Kg0zK2s3SxvVrBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAt NDQ5MTUyZjFkM2I3LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAtNDQ5MTUyZjFkM2I3 LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdBTLe5X vRjSy9VjxnaJY8JuC1+SzJS5JVattQ8gQyRX6hYxTVPkTz5cTcpLSW8Q3J7BbI1N 1R63cLbjxrg8oH+7jUQAOeIlEG+4V7xmC8q9fpkI0VlIG4u6lWAdgidlzgvh+9KQ xxeh9gpLUUIlwIZGOGHHruvkRFBDXNIhpo+Nvbu8lKXKD2LCiUeRo+omcPd6mD0k n4kvX19S233eEvCxRcgv1zAZtVGIux1H9THBYsVBrvkKmTGQTKVtS5g3Dt5GKXON LHdTINsrOqxa48bCIDbphEE+F1hvTKkYwVVQjYKL/UE9IjcnG9N4E3y0sMlPOlje 3vewgH8AMGL7oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:39:56 2025 by rpki-client