This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json) Hash identifier: +adTK4sXR3/BdMp0/NTaSCPvOP3QKMy4L3AiuVlLxIc= Subject key identifier: B5:EA:9D:9F:0E:98:9F:39:C6:49:F9:7E:93:D6:E9:B7:89:8A:05:69 Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Certificate serial: 019AF12DEF897AD86F15768F4C3322DC35F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft Manifest number: 14B1 Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: 602Ro1b1R+kak6n1GQq2Q1QRKWHiNwcN2+h6vc4xQKg=) 2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ef:89:7a:d8:6f:15:76:8f:4c:33:22:dc:35:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=b5ea9d9f0e989f39c649f97e93d6e9b7898a0569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:6e:2b:7d:45:b7:09:fc:c0:04:f0:9e:c4: 0a:3b:d3:e7:ae:5b:0a:47:31:70:c4:9f:5e:49:ca: 31:d0:8a:6f:13:0e:bf:aa:c6:7d:03:d3:44:f6:03: 9a:a8:6b:75:70:d4:6c:b0:60:19:70:f7:84:d5:20: 37:74:4f:d6:37:a2:21:c5:78:60:58:f1:c0:f9:8b: d0:60:9a:47:a7:09:cb:ee:ab:ce:0b:93:3a:64:84: 96:76:31:1a:74:98:dc:c7:b4:c1:eb:61:d4:bc:4b: 23:54:7c:19:b1:18:e8:05:3e:90:8f:ce:30:84:c6: 5a:ca:c5:e6:7d:ce:e2:be:b3:c6:e2:06:d0:78:82: 04:8a:29:13:1e:c7:4a:3f:97:6a:ad:76:08:65:e5: 3f:d4:68:63:09:37:31:73:26:78:28:3c:fd:48:e1: 8b:c0:8e:9d:f4:39:f7:eb:b1:4d:a7:3f:0e:6c:8c: dc:17:45:f6:76:60:38:14:bb:b4:74:3b:2b:8d:1e: b5:b8:e7:24:4f:f8:d7:32:cd:ed:7e:df:ab:61:71: b7:bf:42:f0:ce:d6:68:16:75:6a:e8:15:35:a1:50: b4:42:40:07:23:24:b4:7d:8a:75:b0:30:d2:ce:6e: 4f:f8:90:4f:c1:7d:56:07:50:d1:de:f3:b5:d2:6b: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EA:9D:9F:0E:98:9F:39:C6:49:F9:7E:93:D6:E9:B7:89:8A:05:69 X509v3 Authority Key Identifier: keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b0:c0:df:8d:13:d6:35:df:1c:0c:b1:cc:63:6f:14:5c:5d: 2c:52:c9:80:d1:a6:c2:24:6c:04:68:61:f9:9a:1a:ba:4f:5b: af:b3:1a:a2:dc:ae:d8:fb:08:a1:1d:a0:8d:48:b9:03:d1:a9: 13:7c:0e:37:c0:63:db:fa:3b:59:66:e5:d6:49:5a:8b:dc:dc: 7f:14:80:55:b8:cb:19:6d:b7:b8:bf:e0:da:ff:e2:3d:6b:2b: 3a:6b:e8:1d:8c:ab:24:a5:9a:94:30:d1:01:37:44:e4:75:f8: a5:66:d6:bd:d0:30:fa:ef:0b:5e:7e:6f:84:9c:c8:f9:73:27: 73:02:1e:e0:cd:60:79:00:bb:cb:9b:93:c4:c4:d2:31:0f:b0: c6:b0:41:97:a9:4f:ed:7b:fe:47:33:2c:38:45:51:04:05:5a: de:ba:c7:ef:27:8a:f9:d3:76:92:7c:a8:d3:60:b4:24:dc:55: 5c:91:c6:5d:ab:01:47:ce:ee:a4:1c:9c:34:4c:4f:ba:9e:c9: 38:a1:fb:61:37:de:74:01:94:5a:2c:8c:79:17:56:04:5e:9b: e6:f5:f0:2b:8d:8d:ef:3f:2a:56:32:69:1c:1e:26:4d:a6:ea: 7c:af:49:3a:0b:01:79:4f:64:0f:ee:17:fc:65:56:57:d1:57: a8:10:c6:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe+JethvFXaPTDMi3DX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm YzAzYmUwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EyhiNWVhOWQ5ZjBlOTg5ZjM5YzY0OWY5N2U5M2Q2ZTliNzg5OGEwNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs95uK31Ftwn8wATwnsQKO9PnrlsK RzFwxJ9eScox0IpvEw6/qsZ9A9NE9gOaqGt1cNRssGAZcPeE1SA3dE/WN6IhxXhg WPHA+YvQYJpHpwnL7qvOC5M6ZISWdjEadJjcx7TB62HUvEsjVHwZsRjoBT6Qj84w hMZaysXmfc7ivrPG4gbQeIIEiikTHsdKP5dqrXYIZeU/1GhjCTcxcyZ4KDz9SOGL wI6d9Dn367FNpz8ObIzcF0X2dmA4FLu0dDsrjR61uOckT/jXMs3tft+rYXG3v0Lw ztZoFnVq6BU1oVC0QkAHIyS0fYp1sDDSzm5P+JBPwX1WB1DR3vO10mteBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXqnZ8OmJ85xkn5fpPW6beJigVpMB8GA1UdIwQY MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLDA340T 1jXfHAyxzGNvFFxdLFLJgNGmwiRsBGhh+Zoauk9br7Maotyu2PsIoR2gjUi5A9Gp E3wON8Bj2/o7WWbl1klai9zcfxSAVbjLGW23uL/g2v/iPWsrOmvoHYyrJKWalDDR ATdE5HX4pWbWvdAw+u8LXn5vhJzI+XMncwIe4M1geQC7y5uTxMTSMQ+wxrBBl6lP 7Xv+RzMsOEVRBAVa3rrH7yeK+dN2knyo02C0JNxVXJHGXasBR87upBycNExPup7J OKH7YTfedAGUWiyMeRdWBF6b5vXwK42N7z8qVjJpHB4mTabqfK9JOgsBeU9kD+4X /GVWV9FXqBDGVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:42 2025 by rpki-client