This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json) Hash identifier: bavEI7u2JuoURx0sy1bAvbrUctAwEB4NDOPrqQ0WqCU= Subject key identifier: 4A:A8:8B:82:64:EB:22:DD:49:19:B3:0C:DC:25:75:4E:67:ED:DC:05 Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881 Certificate serial: 019AF19AD309DAC5A6870EC72CABA7C24EB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft Manifest number: 1057 Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=) 2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: TuR/XmMoKW4gVeml0WbDX50orrN649CIzVKXhbWsRx0=) 3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=) 4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:09:da:c5:a6:87:0e:c7:2c:ab:a7:c2:4e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=4aa88b8264eb22dd4919b30cdc25754e67eddc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:2a:e3:f2:98:36:6d:41:09:41:6f:f4:24: 48:cb:60:9b:02:50:a8:b0:0e:9b:5a:3f:42:8f:a3: 0d:cb:37:c6:ab:83:16:14:e3:6f:0a:60:1b:eb:6c: 9d:f4:35:0e:14:cb:9a:ff:44:a4:41:72:61:3f:db: a8:c4:5a:8f:cc:f5:0a:4c:b6:0d:a7:09:2b:d1:66: c9:c8:de:1c:ef:4a:d1:e6:35:64:87:64:8d:db:e1: 85:ca:f1:81:46:06:bb:d6:f7:bd:e7:ba:3f:c1:3c: 93:0e:99:35:69:49:96:97:18:39:e0:29:12:c6:0a: fc:4d:98:3e:7f:9c:c4:ea:d9:11:57:65:6c:a7:6e: 14:58:70:eb:4e:21:1f:b6:88:88:42:43:da:f7:56: c2:b7:cc:34:90:8c:bd:5d:63:11:3d:57:2e:d0:c2: bc:8c:9b:4b:7d:d6:56:66:6c:ce:94:98:09:a7:61: e7:67:6a:2c:f2:88:5e:67:04:0a:d4:07:db:f2:73: b0:e6:30:69:c4:06:f7:0c:f0:ed:ff:58:1b:31:19: 2f:26:4d:c4:15:92:1b:39:20:f9:8a:c4:ce:df:1d: 45:ba:d3:b2:31:9a:b5:c3:f4:66:9a:b8:60:d8:bf: 58:99:d2:ae:73:7e:d5:59:b0:76:a3:a4:7d:25:d9: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A8:8B:82:64:EB:22:DD:49:19:B3:0C:DC:25:75:4E:67:ED:DC:05 X509v3 Authority Key Identifier: keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:37:8d:29:9b:37:5c:3a:3f:15:56:2a:f7:4f:e7:66:37:77: 8e:21:ef:b7:4b:7c:ea:a4:88:ac:0e:88:64:df:9a:65:44:3e: cf:e9:b7:3c:49:28:4d:f9:ee:e9:de:d3:05:1e:bd:71:92:7e: 7a:fe:23:80:10:8c:1f:78:62:65:5a:b0:e2:fe:cc:ef:ae:77: 3c:af:11:b4:8c:73:be:f4:6f:a7:ca:d5:47:6d:6c:a8:a7:05: bf:60:e7:65:b1:e5:1f:b3:54:b0:4f:cd:e2:ad:1c:3b:22:bb: 9d:6d:b5:9d:d6:cc:db:1e:2d:23:8f:40:0c:af:9d:85:7b:15: 41:7d:77:a3:00:cf:03:48:99:aa:6c:de:3e:8b:13:92:19:0b: 39:f4:d2:d8:bd:d1:89:f8:f1:d3:00:46:0d:a5:31:3b:a7:e4: 7f:3b:1a:dc:bf:2f:65:0f:d1:5d:04:6b:ed:95:fe:4f:1e:b9: c6:a7:39:2e:cc:f7:a5:4d:71:2f:ac:b6:63:6d:07:8d:d9:75: e3:86:eb:8e:fa:46:3e:ce:2c:d5:a4:7d:0a:3b:c4:b0:94:2e: fd:88:89:15:3f:8b:9e:f5:40:21:ac:17:20:69:90:85:18:52: a5:e5:11:db:a3:fa:39:d3:f0:1a:1e:a0:9b:76:ad:09:db:68: c9:57:69:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtMJ2sWmhw7HLKunwk64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh OWM4ODEwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD Eyg0YWE4OGI4MjY0ZWIyMmRkNDkxOWIzMGNkYzI1NzU0ZTY3ZWRkYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbkq4/KYNm1BCUFv9CRIy2CbAlCo sA6bWj9Cj6MNyzfGq4MWFONvCmAb62yd9DUOFMua/0SkQXJhP9uoxFqPzPUKTLYN pwkr0WbJyN4c70rR5jVkh2SN2+GFyvGBRga71ve957o/wTyTDpk1aUmWlxg54CkS xgr8TZg+f5zE6tkRV2Vsp24UWHDrTiEftoiIQkPa91bCt8w0kIy9XWMRPVcu0MK8 jJtLfdZWZmzOlJgJp2HnZ2os8oheZwQK1Afb8nOw5jBpxAb3DPDt/1gbMRkvJk3E FZIbOSD5isTO3x1FutOyMZq1w/Rmmrhg2L9YmdKuc37VWbB2o6R9Jdn0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqoi4Jk6yLdSRmzDNwldU5n7dwFMB8GA1UdIwQY MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0 LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTeNKZs3 XDo/FVYq90/nZjd3jiHvt0t86qSIrA6IZN+aZUQ+z+m3PEkoTfnu6d7TBR69cZJ+ ev4jgBCMH3hiZVqw4v7M7653PK8RtIxzvvRvp8rVR21sqKcFv2DnZbHlH7NUsE/N 4q0cOyK7nW21ndbM2x4tI49ADK+dhXsVQX13owDPA0iZqmzePosTkhkLOfTS2L3R ifjx0wBGDaUxO6fkfzsa3L8vZQ/RXQRr7ZX+Tx65xqc5Lsz3pU1xL6y2Y20Hjdl1 44brjvpGPs4s1aR9CjvEsJQu/YiJFT+LnvVAIawXIGmQhRhSpeUR26P6OdPwGh6g m3atCdtoyVdpOw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:21 2025 by rpki-client