This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json) Hash identifier: hG7FjZaGddt5WmKSW10DFHo6x4Ec1G7nqgNDTg/7+70= Subject key identifier: 8E:50:D9:38:A2:C5:0A:66:75:AC:06:99:BA:C7:06:CE:5C:E1:D0:59 Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457 Certificate serial: 019B3E6C5869E4B96FF8C3ECC6C5A0163219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft Manifest number: 039A Signing time: Sun 21 Dec 2025 01:00:46 +0000 Manifest this update: Sun 21 Dec 2025 01:00:46 +0000 Manifest next update: Mon 22 Dec 2025 01:00:46 +0000 Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: 3Vv+CupNAQ1dbZlMVIifIHGWl17XOqlo0VBs2p4kTUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:58:69:e4:b9:6f:f8:c3:ec:c6:c5:a0:16:32:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457 Validity Not Before: Dec 21 01:00:46 2025 GMT Not After : Dec 22 01:00:46 2025 GMT Subject: CN=8e50d938a2c50a6675ac0699bac706ce5ce1d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:70:85:81:7c:84:f6:42:a8:7c:3d:55:c7: fc:32:ff:20:9e:fa:ae:ec:15:69:c4:b8:c6:f5:a9: 0b:c8:d2:b7:cc:81:a3:be:d5:13:bc:6e:ec:f3:84: 1f:42:10:16:25:04:01:b7:13:b7:55:b3:de:3e:e0: b1:bf:dc:65:aa:fa:ae:ca:d3:8d:7a:3b:60:d2:42: a5:f1:76:ce:c9:ce:eb:fe:f3:47:2c:dd:db:70:f2: e8:4f:be:07:fe:59:f3:fd:44:22:24:65:67:06:e9: 26:77:c6:96:b6:cf:29:1b:cf:30:a7:b1:1e:60:54: 50:97:a2:f8:e7:63:e7:55:e7:05:f7:fa:1e:af:a1: 46:87:c2:82:eb:45:e6:6a:28:49:04:60:26:9d:ed: 01:89:52:83:54:45:05:88:59:42:96:e4:2e:65:e5: 31:49:49:04:6e:c3:bb:11:ca:bf:60:d3:90:1b:f6: 78:3b:59:86:17:3d:34:da:d2:b7:9b:4b:37:da:cd: c4:35:61:35:ff:b7:e4:90:86:47:ec:99:aa:63:fc: 9d:6f:9b:fb:f5:8f:20:6c:54:8a:ab:ca:ad:86:d0: 80:cf:0d:9c:9e:52:ad:e3:da:cc:a3:2c:85:82:a6: 9c:ab:c3:51:68:7e:e9:60:3d:93:8c:40:b5:06:38: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:50:D9:38:A2:C5:0A:66:75:AC:06:99:BA:C7:06:CE:5C:E1:D0:59 X509v3 Authority Key Identifier: keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c2:ff:3d:f7:d6:4c:ac:09:9b:31:d6:6b:54:f2:d3:68:f1: d8:ae:c0:56:bb:d3:09:6e:2f:a6:d4:4e:66:54:54:56:b0:5b: 15:87:40:e3:68:7e:30:f7:91:28:05:08:a5:6d:fb:8f:bd:9c: a6:31:cb:44:ae:d5:0c:2f:01:a0:5d:45:d0:ea:c6:e1:dd:58: 8f:35:c8:64:6c:60:78:f2:3b:41:64:fa:84:c2:87:be:ee:48: 17:25:e1:1e:a9:7f:33:84:19:76:67:d3:3d:2f:84:6b:7d:fb: 38:df:77:3d:6a:ce:ac:4b:90:09:79:15:5a:9f:33:d9:bd:21: b1:68:3e:92:e9:8b:72:0d:5c:97:5b:9b:51:f4:f4:79:91:61: f2:23:17:ba:01:ff:f1:ad:93:fd:11:c5:69:32:6b:ea:91:a1: 53:f2:5d:9f:4c:e3:f6:7b:f3:e4:cf:b3:a9:84:d9:0c:8b:4c: 73:36:58:79:ab:06:24:40:38:2e:7a:95:1d:f8:f3:08:4c:2f: 1e:a3:3d:da:cd:45:a4:4a:52:e7:96:c5:91:a2:6a:3e:13:42: 02:64:73:77:7b:33:d5:74:03:1d:36:d1:85:10:01:c2:6f:32: 04:b1:ff:f7:5c:4d:e2:42:02:b8:43:94:46:9a:c8:bd:2b:fd: 9d:14:c4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bFhp5Llv+MPsxsWgFjIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjhjNGQzZmZjYThlNzM3ODY4YTQ1Njk2YTE5OGZkZTA5 ZmQ0NTcwHhcNMjUxMjIxMDEwMDQ2WhcNMjUxMjIyMDEwMDQ2WjAzMTEwLwYDVQQD Eyg4ZTUwZDkzOGEyYzUwYTY2NzVhYzA2OTliYWM3MDZjZTVjZTFkMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9whYF8hPZCqHw9Vcf8Mv8gnvqu 7BVpxLjG9akLyNK3zIGjvtUTvG7s84QfQhAWJQQBtxO3VbPePuCxv9xlqvquytON ejtg0kKl8XbOyc7r/vNHLN3bcPLoT74H/lnz/UQiJGVnBukmd8aWts8pG88wp7Ee YFRQl6L452PnVecF9/oer6FGh8KC60XmaihJBGAmne0BiVKDVEUFiFlCluQuZeUx SUkEbsO7Ecq/YNOQG/Z4O1mGFz002tK3m0s32s3ENWE1/7fkkIZH7JmqY/ydb5v7 9Y8gbFSKq8qthtCAzw2cnlKt49rMoyyFgqacq8NRaH7pYD2TjEC1BjiJ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5Q2TiixQpmdawGmbrHBs5c4dBZMB8GA1UdIwQY MBaAFHloxNP/yo5zeGikVpahmP3gn9RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTkt MDc3M2VkNmY0ZmZkLzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85OTA1NjAtZTM5My00ZjU0LTk3ZTktMDc3M2VkNmY0ZmZk LzEvZVdqRTBfX0tqbk40YUtSV2xxR1lfZUNmMUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsL/PffW TKwJmzHWa1Ty02jx2K7AVrvTCW4vptROZlRUVrBbFYdA42h+MPeRKAUIpW37j72c pjHLRK7VDC8BoF1F0OrG4d1YjzXIZGxgePI7QWT6hMKHvu5IFyXhHql/M4QZdmfT PS+Ea337ON93PWrOrEuQCXkVWp8z2b0hsWg+kumLcg1cl1ubUfT0eZFh8iMXugH/ 8a2T/RHFaTJr6pGhU/Jdn0zj9nvz5M+zqYTZDItMczZYeasGJEA4LnqVHfjzCEwv HqM92s1FpEpS55bFkaJqPhNCAmRzd3sz1XQDHTbRhRABwm8yBLH/91xN4kICuEOU RprIvSv9nRTEZw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:32 2025 by rpki-client