This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json) Hash identifier: mYjkDbSbABGNTnzvrAZoA6D7zb6Ri/BCM/tCFZlgIh8= Subject key identifier: 99:6C:EC:03:3F:4B:00:C4:BB:00:FC:86:DE:AF:F3:06:C4:FF:08:03 Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Certificate serial: 019B32D740583B3612B3B8319F29DD08F46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft Manifest number: 14D3 Signing time: Thu 18 Dec 2025 19:02:06 +0000 Manifest this update: Thu 18 Dec 2025 19:02:06 +0000 Manifest next update: Fri 19 Dec 2025 19:02:06 +0000 Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: 0qKvoojzwV2Oct4KQwaO+xokP3hp4VUae/SJiWJ17qY=) 2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:40:58:3b:36:12:b3:b8:31:9f:29:dd:08:f4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Validity Not Before: Dec 18 19:02:06 2025 GMT Not After : Dec 19 19:02:06 2025 GMT Subject: CN=996cec033f4b00c4bb00fc86deaff306c4ff0803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:eb:c6:5d:ea:04:86:6f:9e:14:85:5c:3a: 80:a0:39:d4:92:43:28:c0:e2:74:8e:97:3e:56:e0: 6d:42:ee:36:3a:08:1e:e5:9f:e2:bb:38:d7:a3:fb: 3f:69:a9:0e:57:30:49:67:1c:2d:d3:44:ca:32:4f: 6e:8c:1e:72:2a:f2:96:58:cf:1a:89:ac:b1:9c:41: 53:03:19:fb:71:52:24:54:a1:3e:35:e5:c3:6d:ba: 61:9b:0c:76:ac:53:c2:95:26:f1:dd:f9:2e:bd:cc: da:6e:84:4e:f9:b2:df:d4:7f:f7:ca:85:f1:27:0d: 7b:58:a3:a5:47:62:4d:2e:88:c9:cd:62:86:41:18: e1:38:48:b8:91:e7:4d:5b:da:47:18:d1:81:bc:09: 90:dd:85:32:a3:fd:68:b1:71:af:10:c2:40:b9:eb: 9b:66:0f:26:39:76:6a:9c:a5:d4:7d:f7:84:78:69: 9b:f2:5a:a7:fe:12:a0:4f:78:18:57:ab:90:6d:71: 16:f3:22:bf:62:eb:0c:ed:18:c8:e7:a5:2e:68:6b: e7:7e:e8:da:8c:22:73:dd:7d:2f:9c:9c:91:42:9e: 0a:6d:c3:75:31:5c:8b:23:18:34:1c:d9:e9:1f:79: 45:ae:ca:92:0d:9d:7d:91:de:f4:95:4f:d5:c7:03: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6C:EC:03:3F:4B:00:C4:BB:00:FC:86:DE:AF:F3:06:C4:FF:08:03 X509v3 Authority Key Identifier: keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:de:fa:64:6b:da:4c:c5:68:0e:88:02:38:4b:75:08:bd:de: 70:76:4c:5a:b0:d1:22:1f:2f:1d:7e:9d:43:28:11:1c:32:fd: 8d:ff:55:f3:27:1d:67:03:98:07:1e:20:25:81:7c:5a:1f:f6: f9:85:af:39:7f:47:97:e6:23:be:20:6b:de:d3:21:d7:01:35: 87:6b:50:01:66:62:fc:5e:95:b6:03:5c:56:36:8b:49:9a:96: d6:1f:db:e4:c6:d1:cd:9e:be:79:f1:a6:2f:fd:10:61:b6:12: bd:2e:ee:41:72:48:b5:11:30:b9:ed:98:73:06:7a:3a:c3:fe: 2e:b4:dd:e5:2e:b5:c5:05:4d:ea:c8:1d:62:49:94:fa:93:2a: cc:79:7f:8b:55:41:06:24:fc:fc:91:b6:0b:57:68:52:c9:0d: 0b:0e:ba:13:0a:dd:b5:18:94:98:71:b6:c3:05:5c:33:87:0d: 4d:f0:dd:99:62:69:fc:60:a9:a6:9e:f8:2c:de:37:d0:ea:6c: a9:cd:ec:fd:ff:85:e6:d2:79:58:a7:58:9a:7e:b5:39:3f:b3: cd:54:d4:cd:14:fe:70:fe:d6:39:73:fa:24:0e:7b:d9:59:48: 08:f9:cb:4d:7b:cb:8e:17:ef:41:4e:cd:2d:94:7a:ef:27:97: 04:0f:fb:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10BYOzYSs7gxnyndCPRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm YzAzYmUwHhcNMjUxMjE4MTkwMjA2WhcNMjUxMjE5MTkwMjA2WjAzMTEwLwYDVQQD Eyg5OTZjZWMwMzNmNGIwMGM0YmIwMGZjODZkZWFmZjMwNmM0ZmYwODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxDrxl3qBIZvnhSFXDqAoDnUkkMo wOJ0jpc+VuBtQu42Ogge5Z/iuzjXo/s/aakOVzBJZxwt00TKMk9ujB5yKvKWWM8a iayxnEFTAxn7cVIkVKE+NeXDbbphmwx2rFPClSbx3fkuvczaboRO+bLf1H/3yoXx Jw17WKOlR2JNLojJzWKGQRjhOEi4kedNW9pHGNGBvAmQ3YUyo/1osXGvEMJAueub Zg8mOXZqnKXUffeEeGmb8lqn/hKgT3gYV6uQbXEW8yK/YusM7RjI56UuaGvnfuja jCJz3X0vnJyRQp4KbcN1MVyLIxg0HNnpH3lFrsqSDZ19kd70lU/VxwM4qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJls7AM/SwDEuwD8ht6v8wbE/wgDMB8GA1UdIwQY MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt76ZGva TMVoDogCOEt1CL3ecHZMWrDRIh8vHX6dQygRHDL9jf9V8ycdZwOYBx4gJYF8Wh/2 +YWvOX9Hl+YjviBr3tMh1wE1h2tQAWZi/F6VtgNcVjaLSZqW1h/b5MbRzZ6+efGm L/0QYbYSvS7uQXJItREwue2YcwZ6OsP+LrTd5S61xQVN6sgdYkmU+pMqzHl/i1VB BiT8/JG2C1doUskNCw66EwrdtRiUmHG2wwVcM4cNTfDdmWJp/GCppp74LN430Ops qc3s/f+F5tJ5WKdYmn61OT+zzVTUzRT+cP7WOXP6JA572VlICPnLTXvLjhfvQU7N LZR67yeXBA/7Lw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:50:19 2025 by rpki-client