This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json) Hash identifier: C0XffnKxnKpIrkfOeyQphXVbjwz2bDoPRbq6HvRDJ0Y= Subject key identifier: 1B:A5:0E:14:B5:E0:9B:F7:9B:2F:3F:9A:F5:BE:47:F1:19:F7:4D:2D Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82 Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482 Certificate serial: 019AF19AA7719A1E6AFBEAEBD5D9C564057D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: Sqtg7qBLlJL7opP+J0u8aGr3ctf8/wmCJOq0rxO26DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a7:71:9a:1e:6a:fb:ea:eb:d5:d9:c5:64:05:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=1ba50e14b5e09bf79b2f3f9af5be47f119f74d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:a9:4e:b1:97:d3:98:8f:03:6c:13:dc:ca: 46:51:78:ee:00:b0:20:e3:b5:2e:0f:16:be:63:6d: 95:5d:ad:51:ad:86:8e:6b:47:43:01:45:81:e9:6f: 72:ed:f5:79:3b:a8:77:17:3c:71:09:f5:fe:61:03: 18:58:4f:5c:15:db:9d:b2:2e:c3:04:d2:4c:0b:06: d0:36:eb:c8:0e:16:6f:c0:ac:c4:79:65:58:23:0a: bf:a0:c8:3e:5e:14:2d:66:db:e0:bb:59:ab:cf:72: 0d:15:d3:2b:dc:de:dd:83:c6:7c:93:7f:d0:fd:fa: 9a:26:05:f5:79:b2:a0:99:c6:0d:84:b6:22:50:03: c9:d3:5c:8e:aa:6f:ad:d6:1e:7d:fe:e9:bb:66:92: 40:38:c7:bf:e8:04:e8:72:82:96:b7:5c:4e:cd:ad: 50:64:c3:84:46:1b:4f:55:76:6f:8f:3f:5f:37:14: 74:28:0f:92:b4:9c:e7:7c:87:d1:e6:97:ba:a9:82: cc:fa:3a:f5:7b:6d:03:48:6f:15:ca:e3:93:3f:73: b7:44:36:00:dc:76:12:d3:4d:50:7f:2e:cd:f3:f4: 37:8b:16:93:0b:32:2b:89:85:fb:7a:cb:21:48:28: 2a:2e:5a:55:7c:0f:15:ae:dc:2b:84:e2:68:06:3a: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:0E:14:B5:E0:9B:F7:9B:2F:3F:9A:F5:BE:47:F1:19:F7:4D:2D X509v3 Authority Key Identifier: keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6b:32:5d:dc:87:56:db:04:8b:fb:ca:07:4f:08:54:f1:ec: 30:39:c7:08:1a:05:a2:35:62:d6:44:6a:eb:de:9b:c4:ab:44: 8d:f2:a7:b9:e0:7e:cd:a3:5d:2c:80:48:77:bb:72:10:ce:61: 12:99:67:70:a5:9a:bd:ca:74:dd:77:0d:e7:90:da:a4:37:75: 62:11:f1:d6:d0:ec:f2:55:ba:3f:f0:89:ae:8e:de:51:40:94: 22:d1:ab:5e:a0:aa:a9:3c:6c:e0:df:44:e4:b1:01:42:1f:bc: d8:e2:66:20:af:73:3e:d2:81:39:7f:59:be:6b:c1:2b:7e:45: c4:07:24:21:6d:78:57:df:79:79:98:84:00:bc:50:b5:2f:48: 2e:dd:4d:7e:4b:10:01:46:87:d4:fa:c1:a4:38:56:f5:54:be: e3:43:4b:d3:c7:0e:2d:77:9f:71:c1:91:20:a4:82:74:37:ce: d3:59:87:29:7b:51:01:04:ff:69:11:15:f6:10:d4:4a:f9:1a: 62:1e:3f:23:fe:da:ef:ac:a9:60:65:e0:ef:82:05:6d:03:61: 04:39:d0:98:7c:5a:f1:60:e3:63:ab:f9:b0:fb:8d:fc:f6:a1: 0f:5f:25:88:2e:c7:c9:34:dd:5c:c6:1e:86:22:f3:94:a0:fd: 2d:ed:5c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqdxmh5q++rr1dnFZAV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGIzYjM5NDg2NWU0Yjg1YjY4NmEzOWY1NWVkNGJlNjUz NmE0ODIwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EygxYmE1MGUxNGI1ZTA5YmY3OWIyZjNmOWFmNWJlNDdmMTE5Zjc0ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20WpTrGX05iPA2wT3MpGUXjuALAg 47UuDxa+Y22VXa1RrYaOa0dDAUWB6W9y7fV5O6h3FzxxCfX+YQMYWE9cFdudsi7D BNJMCwbQNuvIDhZvwKzEeWVYIwq/oMg+XhQtZtvgu1mrz3INFdMr3N7dg8Z8k3/Q /fqaJgX1ebKgmcYNhLYiUAPJ01yOqm+t1h59/um7ZpJAOMe/6ATocoKWt1xOza1Q ZMOERhtPVXZvjz9fNxR0KA+StJznfIfR5pe6qYLM+jr1e20DSG8VyuOTP3O3RDYA 3HYS001Qfy7N8/Q3ixaTCzIriYX7esshSCgqLlpVfA8VrtwrhOJoBjqaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBulDhS14Jv3my8/mvW+R/EZ900tMB8GA1UdIwQY MBaAFHsLOzlIZeS4W2hqOfVe1L5lNqSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYt MmM4ZDAwMTFlODhhLzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYtMmM4ZDAwMTFlODhh LzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2syXdyH VtsEi/vKB08IVPHsMDnHCBoFojVi1kRq696bxKtEjfKnueB+zaNdLIBId7tyEM5h EplncKWavcp03XcN55DapDd1YhHx1tDs8lW6P/CJro7eUUCUItGrXqCqqTxs4N9E 5LEBQh+82OJmIK9zPtKBOX9ZvmvBK35FxAckIW14V995eZiEALxQtS9ILt1NfksQ AUaH1PrBpDhW9VS+40NL08cOLXefccGRIKSCdDfO01mHKXtRAQT/aREV9hDUSvka Yh4/I/7a76ypYGXg74IFbQNhBDnQmHxa8WDjY6v5sPuN/PahD18liC7HyTTdXMYe hiLzlKD9Le1cPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:42:58 2025 by rpki-client