This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft File: Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json) Hash identifier: 3LOTz8hlTGAqIfxPpEzrp4eM2RRziUX17dNsdd/4oJI= Subject key identifier: 0C:96:CA:3A:28:F8:23:B4:48:FA:65:06:EF:51:24:D5:42:25:A4:7B Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Certificate serial: 019AF3F709FF6A5E7E6CD4F80118783D2A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft Manifest number: 0C2D Signing time: Sat 06 Dec 2025 14:00:44 +0000 Manifest this update: Sat 06 Dec 2025 14:00:44 +0000 Manifest next update: Sun 07 Dec 2025 14:00:44 +0000 Files and hashes: 1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=) 2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: ZXWdzOSgPSxMB3j/H7bVj8HHGhzWXCdNh7LP4TP5SlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:09:ff:6a:5e:7e:6c:d4:f8:01:18:78:3d:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Validity Not Before: Dec 6 14:00:44 2025 GMT Not After : Dec 7 14:00:44 2025 GMT Subject: CN=0c96ca3a28f823b448fa6506ef5124d54225a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:9c:ed:87:9e:bc:f8:a2:a8:e6:1c:53:f0: 28:36:26:74:de:86:8e:d6:4e:39:f9:a3:e2:d9:42: eb:b3:18:e8:bd:60:b4:8d:9b:35:a4:db:88:7a:b3: 1e:31:cb:bc:82:30:04:e1:ee:0d:cd:2d:2a:90:0c: 15:49:63:9a:3d:82:d0:5f:76:f7:a4:e1:11:fc:31: 89:49:2d:7a:d5:e6:33:8e:f1:1e:2a:5c:1b:71:fb: 03:bc:f1:15:4e:ea:9f:b5:1a:36:79:39:59:4b:d8: 2f:7c:28:83:2e:67:f5:7c:a9:70:8d:6d:bd:db:8f: f9:88:bb:a1:9f:05:e5:4c:99:e7:83:ae:2d:ed:e0: ab:44:09:40:6f:47:bb:da:33:13:3d:a0:36:cf:23: 36:04:a3:67:de:d7:40:65:f3:f5:87:66:40:5a:9d: 01:5a:3e:f6:4f:b8:9c:be:91:9a:51:8a:1d:3f:4e: 4b:d3:1b:53:f6:7a:2e:9c:b6:1f:36:85:a7:dd:8c: c5:af:73:95:e1:1e:57:2f:45:99:2c:9a:e1:8a:57: f0:31:c1:83:9b:f3:76:be:68:56:53:ef:29:07:52: 67:52:c8:71:f3:b5:da:0c:d1:40:1f:57:20:42:ef: 90:93:da:61:b2:f5:dc:dc:d2:85:47:c8:cb:df:a8: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:CA:3A:28:F8:23:B4:48:FA:65:06:EF:51:24:D5:42:25:A4:7B X509v3 Authority Key Identifier: keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:74:65:30:2b:d8:e1:e0:53:43:8f:9a:ed:8f:cf:db:d2:70: 00:4a:41:a8:38:ca:c4:bf:51:19:21:69:b6:8b:68:ca:cd:6a: bf:73:5a:1a:01:0d:c3:a7:66:71:dd:59:d7:c2:ee:17:7b:9e: 5d:b7:6e:d1:cb:a1:78:69:37:11:5d:c8:90:2f:aa:0e:04:d7: 11:e0:df:cc:3d:84:f9:4f:f1:bf:fa:e2:d6:d8:1e:a7:c8:e8: 8a:e7:75:c7:9e:3e:48:57:00:ca:c4:31:1e:20:d0:f2:00:3a: 64:8c:2c:3e:c3:75:0c:f3:b3:62:49:f5:22:a7:1a:26:e0:dd: 79:39:13:ac:5b:d6:a9:bc:af:64:e7:fc:04:67:7d:c9:b7:28: 73:02:74:e3:4a:b4:f4:ec:a1:8b:e1:dd:06:75:d3:64:1d:ca: 36:9f:d5:de:3b:7a:53:af:85:cf:8f:08:bd:99:15:1a:1e:39: 88:fa:4f:18:01:bd:58:fc:1d:48:78:47:69:36:4d:40:64:cc: 02:89:27:cc:ab:fc:81:22:98:29:eb:a2:91:08:de:c9:26:b4: 2c:ef:96:46:e5:46:cf:ed:fb:ae:95:cb:4b:c5:b2:a9:9c:d9: c7:d9:fd:43:84:b0:97:4d:a3:bc:3a:f6:3b:3b:71:7e:29:61: b9:2f:ca:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wn/al5+bNT4ARh4PSosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2Y0NTZkMmI4MmNjNmQ4MGI3YjFhYzU3MWI0Nzg3ZjE1 NjliNjAwHhcNMjUxMjA2MTQwMDQ0WhcNMjUxMjA3MTQwMDQ0WjAzMTEwLwYDVQQD EygwYzk2Y2EzYTI4ZjgyM2I0NDhmYTY1MDZlZjUxMjRkNTQyMjVhNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6c7YeevPiiqOYcU/AoNiZ03oaO 1k45+aPi2ULrsxjovWC0jZs1pNuIerMeMcu8gjAE4e4NzS0qkAwVSWOaPYLQX3b3 pOER/DGJSS161eYzjvEeKlwbcfsDvPEVTuqftRo2eTlZS9gvfCiDLmf1fKlwjW29 24/5iLuhnwXlTJnng64t7eCrRAlAb0e72jMTPaA2zyM2BKNn3tdAZfP1h2ZAWp0B Wj72T7icvpGaUYodP05L0xtT9nounLYfNoWn3YzFr3OV4R5XL0WZLJrhilfwMcGD m/N2vmhWU+8pB1JnUshx87XaDNFAH1cgQu+Qk9phsvXc3NKFR8jL36hCKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyWyjoo+CO0SPplBu9RJNVCJaR7MB8GA1UdIwQY MBaAFBM/RW0rgsxtgLexrFcbR4fxVptgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMDAyMTAtZDY4NS00OGIyLThlNTMt YmIyZmRjYTc4MjQ1LzEvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMDAyMTAtZDY4NS00OGIyLThlNTMtYmIyZmRjYTc4MjQ1 LzEvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHRlMCvY 4eBTQ4+a7Y/P29JwAEpBqDjKxL9RGSFptotoys1qv3NaGgENw6dmcd1Z18LuF3ue Xbdu0cuheGk3EV3IkC+qDgTXEeDfzD2E+U/xv/ri1tgep8joiud1x54+SFcAysQx HiDQ8gA6ZIwsPsN1DPOzYkn1IqcaJuDdeTkTrFvWqbyvZOf8BGd9ybcocwJ040q0 9Oyhi+HdBnXTZB3KNp/V3jt6U6+Fz48IvZkVGh45iPpPGAG9WPwdSHhHaTZNQGTM AoknzKv8gSKYKeuikQjeySa0LO+WRuVGz+37rpXLS8WyqZzZx9n9Q4Swl02jvDr2 OztxfilhuS/KRw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:10 2025 by rpki-client