This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft File: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json) Hash identifier: Ff6Ip1D63CPTSo2WTpmSlgJYOsZqFAG5HM6YK9nCHuM= Subject key identifier: 43:16:1D:A2:AE:35:F4:52:94:5F:E4:84:45:51:CF:ED:B5:AD:24:AB Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7 Certificate issuer: /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7 Certificate serial: 019AF19BAA42B85D4A287F149E8466A7FF57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: Py3gTf0jnwth23NWKtlSfpAvxuOGOnpNUbvKD0f2Wrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:aa:42:b8:5d:4a:28:7f:14:9e:84:66:a7:ff:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=43161da2ae35f452945fe4844551cfedb5ad24ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:b8:6f:ca:e7:82:45:b0:1a:e5:ba:84:7b: bd:3b:9b:a9:9b:37:88:fd:ee:c0:3d:91:b9:a9:96: 61:bb:c2:0f:fe:9a:14:58:ed:ec:2e:eb:6c:2f:fb: 0c:4d:3d:78:d6:7f:9b:ad:09:e0:10:ec:ad:a5:d0: 3f:96:ff:ef:1c:8a:96:1b:3b:f7:ef:8f:27:ce:e6: fe:3f:d0:e9:9e:e4:3c:42:e6:c6:58:fb:e7:33:17: d2:e9:76:98:95:12:fa:f9:92:0c:bf:09:23:ac:0c: 72:3d:b8:50:1b:69:c2:e0:21:63:39:ca:ad:91:28: ce:72:a4:f1:05:41:e4:91:0c:d6:49:54:97:b7:34: 7a:9f:5d:c1:f6:e3:f1:d0:a1:69:3a:08:74:2c:0a: 0e:35:f4:63:18:af:7e:de:f1:d1:87:94:84:a2:20: ab:66:f1:32:95:39:64:2b:46:0f:47:fd:c7:9f:53: a8:04:c9:d3:3e:e8:57:f9:d8:be:fc:5d:0d:54:97: f1:af:8b:b5:c0:c1:68:da:86:70:86:d3:79:36:a5: 34:71:69:44:86:e9:80:a9:59:a2:69:7b:d5:e8:a2: a1:a1:02:e3:44:89:a6:66:a8:30:64:a0:60:9f:da: 12:ad:38:6d:98:ca:1b:af:8e:90:ab:f3:bb:e8:5c: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:1D:A2:AE:35:F4:52:94:5F:E4:84:45:51:CF:ED:B5:AD:24:AB X509v3 Authority Key Identifier: keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:48:65:74:2f:d9:d3:e3:09:f4:89:ee:7a:9a:f3:d8:47:49: 9a:53:fc:33:06:7c:d9:ec:31:f8:21:de:2e:d3:7c:74:72:63: e7:1f:f8:63:b6:14:73:1e:6d:9b:f4:f7:53:96:44:74:15:23: d9:fd:b9:68:12:2c:be:c4:cf:d4:f3:d0:dd:f7:7f:2f:de:c1: 09:50:87:ac:52:6d:a2:a3:f4:e5:eb:0e:37:e1:ca:fc:21:c9: 5c:8b:5a:c7:9d:d7:24:8f:20:dd:a1:ba:90:c3:9b:1a:35:e2: b9:19:53:1b:32:2e:31:dd:a7:6c:36:9f:9a:ed:10:04:82:b1: 19:56:56:8c:bd:f0:a6:7e:98:e1:36:68:7c:5e:9d:8d:5e:e3: 99:0a:1b:83:86:0a:43:33:e0:c4:59:72:c6:0d:30:e6:31:96: 7a:43:0c:d6:87:74:ea:94:d8:e8:79:10:1e:60:8e:e5:50:1e: 2a:96:38:aa:1d:9c:c8:96:75:c4:49:db:71:73:43:66:76:52: 7d:45:21:c2:a9:ad:2b:a0:05:59:08:20:8a:9c:01:b3:29:a8: 36:62:10:00:12:4e:46:11:bc:af:f2:a1:b1:76:87:3b:92:da: 7c:8c:d3:fb:75:fc:2a:20:cc:6d:98:09:91:54:21:6d:dd:5f: 02:3c:8e:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6pCuF1KKH8UnoRmp/9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNGY5OTFkNTVkNmE1MTcxNDMxYzc0YzFhYTVjYmViMjk5 NTQ3ZTcwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg0MzE2MWRhMmFlMzVmNDUyOTQ1ZmU0ODQ0NTUxY2ZlZGI1YWQyNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6+4b8rngkWwGuW6hHu9O5upmzeI /e7APZG5qZZhu8IP/poUWO3sLutsL/sMTT141n+brQngEOytpdA/lv/vHIqWGzv3 748nzub+P9DpnuQ8QubGWPvnMxfS6XaYlRL6+ZIMvwkjrAxyPbhQG2nC4CFjOcqt kSjOcqTxBUHkkQzWSVSXtzR6n13B9uPx0KFpOgh0LAoONfRjGK9+3vHRh5SEoiCr ZvEylTlkK0YPR/3Hn1OoBMnTPuhX+di+/F0NVJfxr4u1wMFo2oZwhtN5NqU0cWlE humAqVmiaXvV6KKhoQLjRImmZqgwZKBgn9oSrThtmMobr46Qq/O76FyOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMWHaKuNfRSlF/khEVRz+21rSSrMB8GA1UdIwQY MBaAFBBPmR1V1qUXFDHHTBqly+splUfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEt MjVhOGMwZDlmMDAyLzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEtMjVhOGMwZDlmMDAy LzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkhldC/Z 0+MJ9Inueprz2EdJmlP8MwZ82ewx+CHeLtN8dHJj5x/4Y7YUcx5tm/T3U5ZEdBUj 2f25aBIsvsTP1PPQ3fd/L97BCVCHrFJtoqP05esON+HK/CHJXItax53XJI8g3aG6 kMObGjXiuRlTGzIuMd2nbDafmu0QBIKxGVZWjL3wpn6Y4TZofF6djV7jmQobg4YK QzPgxFlyxg0w5jGWekMM1od06pTY6HkQHmCO5VAeKpY4qh2cyJZ1xEnbcXNDZnZS fUUhwqmtK6AFWQggipwBsymoNmIQABJORhG8r/KhsXaHO5LafIzT+3X8KiDMbZgJ kVQhbd1fAjyOlw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:50 2025 by rpki-client