This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft File: EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json) Hash identifier: mHus9HmHHOkOffuxD2LEaGDblQiLRZE12dMeJsrA8t8= Subject key identifier: 36:F5:7F:0B:FF:22:AF:36:3E:CF:31:EC:24:E9:32:D5:E4:A3:A9:D4 Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Certificate serial: 019AF3F7900D27A2F8618A89C4CABA23EB90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft Manifest number: 11BF Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: tdeywu3intHDYnlpQFMiVuSbyFO0b9gqYR6+5bX2Cao=) 2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:90:0d:27:a2:f8:61:8a:89:c4:ca:ba:23:eb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=36f57f0bff22af363ecf31ec24e932d5e4a3a9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:a2:b2:3e:c6:d5:39:df:8e:7a:4d:25:e9: 4d:da:a6:47:38:e8:09:c3:c1:d6:6b:45:01:f1:19: 0f:9e:ee:a9:0e:a6:af:fe:92:77:fc:ee:8b:5d:d9: eb:f9:c6:ac:76:9b:7e:d5:c8:3b:1c:49:2b:2b:d0: 6a:d3:df:f7:29:cb:62:95:4e:cf:68:75:fd:fd:c8: e1:df:34:17:f9:9a:f7:b1:91:74:0a:a7:16:7b:48: 46:ad:cc:b7:68:53:68:0b:4e:e1:a1:f3:bf:96:16: bf:bc:4f:db:08:4e:27:97:60:71:70:4c:7c:7c:05: 3a:5e:30:e4:37:ce:12:77:d8:6e:10:a8:f6:94:ca: 35:06:b2:d1:04:41:00:c2:71:e0:22:56:22:93:6c: d4:e8:87:c2:4e:3b:06:12:ae:50:43:d3:32:ea:aa: e9:e0:35:9e:e9:16:ba:96:7a:79:f1:cc:ed:1f:a9: cb:aa:17:77:7d:05:d9:e8:42:57:3a:a2:1f:a5:f8: 7c:7d:a5:8a:bf:fd:66:24:99:fb:02:21:ab:7f:af: ba:53:bc:9d:c8:87:16:51:c7:b0:a5:51:40:09:60: 17:62:39:08:f6:eb:a5:c5:1c:3e:44:c8:a4:70:a0: 45:34:e2:a2:ef:58:44:d3:3a:8c:c2:ec:cf:65:e0: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:7F:0B:FF:22:AF:36:3E:CF:31:EC:24:E9:32:D5:E4:A3:A9:D4 X509v3 Authority Key Identifier: keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fc:bf:04:5d:32:06:7b:57:24:6b:48:87:b0:b5:bd:8a:b3: a8:7a:da:3e:be:e9:35:47:69:25:0d:7f:d1:3c:3c:09:28:60: 33:76:77:54:bc:46:5f:c4:62:42:5f:4f:8c:e7:88:69:f6:d1: 51:f7:4f:ea:ef:40:ce:32:73:63:0f:7d:56:d4:97:77:df:6c: 5c:fc:20:e5:da:df:3f:6b:30:cf:69:20:1e:ba:af:da:e8:25: 04:fc:83:13:bc:02:13:21:56:ae:a4:72:40:70:c8:b9:30:53: 57:74:05:0e:35:71:30:44:8e:8b:ad:cb:a0:54:b8:9c:c3:c7: 4b:dc:64:57:2f:3e:78:ee:fd:3d:ae:4f:08:9e:7f:6a:d7:e2: ce:51:99:28:81:8b:98:88:be:3f:fe:70:71:1d:24:2f:bf:8d: 94:18:78:65:7e:c0:01:51:79:b1:d8:a8:25:49:39:97:b0:1e: 70:2c:12:27:34:d1:d3:5d:dd:b1:dd:be:8f:28:1e:c2:d4:dd: a1:43:9b:f9:76:27:a5:68:ca:9e:0c:2d:e4:83:14:4a:91:16: 90:af:d2:df:2f:b2:df:be:44:94:53:6f:50:8c:2b:af:35:74: da:af:27:d6:2d:81:be:72:a0:28:cb:ce:8d:40:8e:eb:9c:16: 97:b0:87:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95ANJ6L4YYqJxMq6I+uQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi NGVjYjQwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD EygzNmY1N2YwYmZmMjJhZjM2M2VjZjMxZWMyNGU5MzJkNWU0YTNhOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Gisj7G1TnfjnpNJelN2qZHOOgJ w8HWa0UB8RkPnu6pDqav/pJ3/O6LXdnr+casdpt+1cg7HEkrK9Bq09/3KctilU7P aHX9/cjh3zQX+Zr3sZF0CqcWe0hGrcy3aFNoC07hofO/lha/vE/bCE4nl2BxcEx8 fAU6XjDkN84Sd9huEKj2lMo1BrLRBEEAwnHgIlYik2zU6IfCTjsGEq5QQ9My6qrp 4DWe6Ra6lnp58cztH6nLqhd3fQXZ6EJXOqIfpfh8faWKv/1mJJn7AiGrf6+6U7yd yIcWUcewpVFACWAXYjkI9uulxRw+RMikcKBFNOKi71hE0zqMwuzPZeCtNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb1fwv/Iq82Ps8x7CTpMtXko6nUMB8GA1UdIwQY MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt ODMwMmVkODUwYzg3LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3 LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfy/BF0y BntXJGtIh7C1vYqzqHraPr7pNUdpJQ1/0Tw8CShgM3Z3VLxGX8RiQl9PjOeIafbR UfdP6u9AzjJzYw99VtSXd99sXPwg5drfP2swz2kgHrqv2uglBPyDE7wCEyFWrqRy QHDIuTBTV3QFDjVxMESOi63LoFS4nMPHS9xkVy8+eO79Pa5PCJ5/atfizlGZKIGL mIi+P/5wcR0kL7+NlBh4ZX7AAVF5sdioJUk5l7AecCwSJzTR013dsd2+jygewtTd oUOb+XYnpWjKngwt5IMUSpEWkK/S3y+y375ElFNvUIwrrzV02q8n1i2BvnKgKMvO jUCO65wWl7CHxw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:19:02 2025 by rpki-client