This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft File: Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json) Hash identifier: 3fEj9A8BEAV9YzqVe0FnUTI6qgx366gGPSawVlIxvOM= Subject key identifier: 29:E3:DC:DA:65:54:4B:61:00:1F:2C:D4:D1:B4:4F:79:BE:3C:B8:33 Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Certificate serial: 019B3D597DC7BB6147F6E0C891D2A1E4C742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft Manifest number: 0C53 Signing time: Sat 20 Dec 2025 20:00:33 +0000 Manifest this update: Sat 20 Dec 2025 20:00:33 +0000 Manifest next update: Sun 21 Dec 2025 20:00:33 +0000 Files and hashes: 1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=) 2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: 1ttGXjIkhgoVl+Kz0MWUFzgpXHlHvbck1rMGRDkbImk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:7d:c7:bb:61:47:f6:e0:c8:91:d2:a1:e4:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Validity Not Before: Dec 20 20:00:33 2025 GMT Not After : Dec 21 20:00:33 2025 GMT Subject: CN=29e3dcda65544b61001f2cd4d1b44f79be3cb833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:bc:c4:a7:95:a1:94:1e:a6:47:fc:61:62: 77:34:90:d7:19:cf:80:03:28:a4:bc:6e:de:e3:5d: c0:3c:af:ba:29:53:93:b1:5a:6d:76:31:18:33:58: 3b:1b:3d:9f:8b:e4:37:31:cf:db:68:03:c8:0e:f0: dd:d1:61:81:95:d2:55:a0:30:42:15:86:f9:84:e7: 7d:77:7d:4b:23:35:76:8e:8d:35:a4:b9:91:13:7b: f4:0b:da:a1:c5:aa:4c:a2:7a:9d:c1:06:f5:5d:ab: 77:2b:91:db:5c:48:11:02:24:27:28:e0:8c:41:dd: 37:7b:75:64:b4:f6:92:65:db:88:4d:60:49:c3:ec: 8d:26:a5:8e:0c:d6:72:2f:4f:f0:a5:40:87:7a:c4: 5b:bb:55:99:4a:df:91:8a:7e:65:b5:3e:35:71:f0: 7d:0c:15:fd:98:83:e1:b7:0e:3e:7a:15:d4:f4:71: a4:18:65:e6:50:50:24:58:73:9d:95:78:37:b1:50: 2f:f1:56:26:b2:de:e7:87:83:52:99:5b:a0:95:8e: fe:ef:8c:ef:7b:cd:09:7c:df:c1:46:f2:b0:eb:ee: 9a:04:1c:bc:2b:72:5c:d1:62:76:d9:d1:78:07:45: 44:69:c4:f7:9d:48:ec:96:83:f5:d1:0c:31:ea:88: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E3:DC:DA:65:54:4B:61:00:1F:2C:D4:D1:B4:4F:79:BE:3C:B8:33 X509v3 Authority Key Identifier: keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:5e:e9:e2:83:73:b8:e0:90:17:62:bb:54:c4:82:1e:b4: 42:6d:de:72:23:0c:b0:cd:01:d6:9c:22:b4:22:bb:b5:ac:97: b4:bd:c5:b8:c7:7e:0f:67:5d:96:98:ce:b6:23:9a:06:06:20: c6:0f:53:c1:5a:7a:51:c7:91:62:ce:ec:79:57:6a:5a:ed:62: b8:c0:db:7b:50:2c:24:c8:d6:ea:1a:d8:0b:fe:1a:73:51:57: 1a:2e:83:b6:a2:ad:47:3d:53:15:47:a7:39:64:0c:ba:22:ac: e1:bf:00:23:ac:b6:60:43:eb:31:6d:6d:9c:42:ba:c2:7b:4b: f0:5d:cc:8c:7f:a4:99:67:e1:78:d2:61:95:f7:f1:7f:50:49: 04:39:cf:59:29:e6:00:e0:b1:f7:fb:f4:da:aa:0e:60:c9:26: 80:3e:eb:29:ad:74:f0:be:0b:85:81:0b:24:8b:5c:7f:4c:d2: 63:c0:ed:da:02:91:5f:60:8f:03:cc:80:59:c8:1b:52:6b:3a: 83:1e:1f:70:28:a3:58:e6:e1:7d:16:9e:12:ee:81:4f:1d:eb: 24:c6:36:b9:5a:a8:e1:90:db:e5:69:b3:bb:6e:24:0c:28:13: 1e:11:4a:ce:e8:11:be:e7:bd:ff:e4:ed:33:f0:f7:9c:e9:d2: c8:4a:a4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WX3Hu2FH9uDIkdKh5MdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2Y0NTZkMmI4MmNjNmQ4MGI3YjFhYzU3MWI0Nzg3ZjE1 NjliNjAwHhcNMjUxMjIwMjAwMDMzWhcNMjUxMjIxMjAwMDMzWjAzMTEwLwYDVQQD EygyOWUzZGNkYTY1NTQ0YjYxMDAxZjJjZDRkMWI0NGY3OWJlM2NiODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0S8xKeVoZQepkf8YWJ3NJDXGc+A AyikvG7e413APK+6KVOTsVptdjEYM1g7Gz2fi+Q3Mc/baAPIDvDd0WGBldJVoDBC FYb5hOd9d31LIzV2jo01pLmRE3v0C9qhxapMonqdwQb1Xat3K5HbXEgRAiQnKOCM Qd03e3VktPaSZduITWBJw+yNJqWODNZyL0/wpUCHesRbu1WZSt+Rin5ltT41cfB9 DBX9mIPhtw4+ehXU9HGkGGXmUFAkWHOdlXg3sVAv8VYmst7nh4NSmVuglY7+74zv e80JfN/BRvKw6+6aBBy8K3Jc0WJ22dF4B0VEacT3nUjsloP10Qwx6ohXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnj3NplVEthAB8s1NG0T3m+PLgzMB8GA1UdIwQY MBaAFBM/RW0rgsxtgLexrFcbR4fxVptgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMDAyMTAtZDY4NS00OGIyLThlNTMt YmIyZmRjYTc4MjQ1LzEvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMDAyMTAtZDY4NS00OGIyLThlNTMtYmIyZmRjYTc4MjQ1 LzEvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFZe6eKD c7jgkBdiu1TEgh60Qm3eciMMsM0B1pwitCK7tayXtL3FuMd+D2ddlpjOtiOaBgYg xg9TwVp6UceRYs7seVdqWu1iuMDbe1AsJMjW6hrYC/4ac1FXGi6DtqKtRz1TFUen OWQMuiKs4b8AI6y2YEPrMW1tnEK6wntL8F3MjH+kmWfheNJhlffxf1BJBDnPWSnm AOCx9/v02qoOYMkmgD7rKa108L4LhYELJItcf0zSY8Dt2gKRX2CPA8yAWcgbUms6 gx4fcCijWObhfRaeEu6BTx3rJMY2uVqo4ZDb5Wmzu24kDCgTHhFKzugRvue9/+Tt M/D3nOnSyEqkCw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:30 2025 by rpki-client