This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft File: eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json) Hash identifier: eUzrxbXpf/Y9ygkHqWabF09K+M5l1G8pYcRkMeKYrZs= Subject key identifier: 10:65:23:86:83:D3:84:DF:CB:ED:B2:41:28:CC:CA:F1:53:28:41:B5 Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Certificate serial: 019AF3891D6307A72B69865A4F5F90FE2790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft Manifest number: 0B01 Signing time: Sat 06 Dec 2025 12:00:40 +0000 Manifest this update: Sat 06 Dec 2025 12:00:40 +0000 Manifest next update: Sun 07 Dec 2025 12:00:40 +0000 Files and hashes: 1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=) 2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: loepQYD4rF78DEokYZkjUMN8AXbHpyYh5Plnuwui2To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1d:63:07:a7:2b:69:86:5a:4f:5f:90:fe:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Validity Not Before: Dec 6 12:00:40 2025 GMT Not After : Dec 7 12:00:40 2025 GMT Subject: CN=1065238683d384dfcbedb24128cccaf1532841b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:e8:ad:a9:8f:f8:fc:e7:f0:ca:91:a3:75: 02:27:7f:86:02:b3:6d:82:8e:12:ec:d6:d3:fc:f2: fe:35:26:09:56:b7:c4:60:eb:40:f4:42:b8:9d:ac: 42:21:25:84:26:e5:e2:82:f7:21:eb:46:30:15:4c: 3b:35:69:d7:cc:f4:bf:96:d6:0c:7e:b6:51:8d:35: 17:18:79:9b:ab:2f:25:bd:6d:2c:2f:20:84:9b:9d: b0:9c:6a:1c:d6:69:5d:3c:c5:b9:cf:1f:ed:98:98: 4d:99:f6:d8:ae:af:94:c0:2e:09:6c:76:6e:81:5d: 8c:64:44:84:e4:c1:96:fb:16:a1:a9:12:3f:aa:a8: 4b:4b:33:bb:db:0f:56:10:cf:b7:59:2a:41:c6:53: 5e:f3:a2:1b:06:a8:66:2e:4f:33:9b:ff:52:d6:49: 8d:49:24:eb:92:38:6a:1e:22:e2:88:87:4e:a8:94: 96:66:88:b7:31:4a:b4:30:6c:6a:ad:ce:60:2b:86: 9f:08:05:2c:23:f4:83:47:e4:6b:7f:93:d6:5c:9a: 0e:c5:df:e9:dd:88:5c:01:5c:09:d9:aa:7b:f4:28: ef:4e:26:55:ad:b7:d7:ac:30:3d:67:91:60:5b:98: 20:19:76:43:8c:70:14:c1:8d:11:a1:d9:99:f6:2c: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:65:23:86:83:D3:84:DF:CB:ED:B2:41:28:CC:CA:F1:53:28:41:B5 X509v3 Authority Key Identifier: keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:42:81:50:2a:ab:5e:8e:5a:98:4f:8d:c0:1c:56:37:d8:b4: f7:d0:c8:d2:43:10:a9:e6:59:66:3e:1d:e2:42:51:28:6c:27: 13:8e:a1:77:4b:d7:94:6c:65:15:50:d6:14:9f:f0:61:9e:82: 15:0f:9c:66:c3:c0:b5:df:3c:32:b7:81:8f:ee:e4:c1:bb:11: 71:89:72:41:91:8f:74:c1:86:d5:db:bc:ec:d4:d3:bd:41:7b: c8:d7:da:c2:7c:3b:71:d3:8d:7d:f6:85:5e:06:73:fa:87:98: 9e:5a:bb:f2:2a:8b:de:1b:3a:52:55:11:f3:91:d2:e8:e7:81: 3e:66:86:aa:c2:99:d1:ee:96:6b:b9:99:c7:a9:14:ba:c1:b2: 01:2a:8c:ad:10:01:54:de:3e:0c:fd:2d:be:b5:d2:f2:36:f9: 4d:5e:28:38:2d:fe:08:71:1f:08:48:90:9d:98:48:25:c6:a0: e3:31:13:5e:76:3a:94:b3:cb:51:b2:fd:bd:e0:48:ad:14:16: 3d:97:dc:b6:41:67:16:72:2e:ab:3d:c2:f1:c4:68:97:36:df: f6:93:e9:b5:78:44:c1:08:17:72:63:f3:7c:86:73:76:87:4b: fe:98:6c:a5:e0:25:aa:89:c5:e5:bc:28:3e:ac:0e:a9:2f:9a: 47:26:63:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR1jB6craYZaT1+Q/ieQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl OGM5OGYwHhcNMjUxMjA2MTIwMDQwWhcNMjUxMjA3MTIwMDQwWjAzMTEwLwYDVQQD EygxMDY1MjM4NjgzZDM4NGRmY2JlZGIyNDEyOGNjY2FmMTUzMjg0MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTzoramP+Pzn8MqRo3UCJ3+GArNt go4S7NbT/PL+NSYJVrfEYOtA9EK4naxCISWEJuXigvch60YwFUw7NWnXzPS/ltYM frZRjTUXGHmbqy8lvW0sLyCEm52wnGoc1mldPMW5zx/tmJhNmfbYrq+UwC4JbHZu gV2MZESE5MGW+xahqRI/qqhLSzO72w9WEM+3WSpBxlNe86IbBqhmLk8zm/9S1kmN SSTrkjhqHiLiiIdOqJSWZoi3MUq0MGxqrc5gK4afCAUsI/SDR+Rrf5PWXJoOxd/p 3YhcAVwJ2ap79CjvTiZVrbfXrDA9Z5FgW5ggGXZDjHAUwY0RodmZ9ixjIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBlI4aD04Tfy+2yQSjMyvFTKEG1MB8GA1UdIwQY MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt OGFhY2MxZjQ4MTA4LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4 LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEKBUCqr Xo5amE+NwBxWN9i099DI0kMQqeZZZj4d4kJRKGwnE46hd0vXlGxlFVDWFJ/wYZ6C FQ+cZsPAtd88MreBj+7kwbsRcYlyQZGPdMGG1du87NTTvUF7yNfawnw7cdONffaF XgZz+oeYnlq78iqL3hs6UlUR85HS6OeBPmaGqsKZ0e6Wa7mZx6kUusGyASqMrRAB VN4+DP0tvrXS8jb5TV4oOC3+CHEfCEiQnZhIJcag4zETXnY6lLPLUbL9veBIrRQW PZfctkFnFnIuqz3C8cRolzbf9pPptXhEwQgXcmPzfIZzdodL/phspeAlqonF5bwo PqwOqS+aRyZj8A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:43 2025 by rpki-client