This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: BlF+SeRFQj8dNJnI/o5jHuH197Hh0T2u7BE94eD2O1w= Subject key identifier: 28:84:C6:C8:1B:1F:3E:D8:AE:28:72:A0:E7:6C:83:11:91:68:7D:F1 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 07345A72DB6F51DE0BE8922FFFC3882412725F4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 036E Signing time: Sat 06 Dec 2025 04:10:38 +0000 Manifest this update: Sat 06 Dec 2025 04:05:38 +0000 Manifest next update: Sun 07 Dec 2025 06:35:38 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: BwYQ8IKabAvi9DwzfeLhzv9sfrMcv04ioSiB+rZnxtA=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:34:5a:72:db:6f:51:de:0b:e8:92:2f:ff:c3:88:24:12:72:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Dec 6 04:05:38 2025 GMT Not After : Dec 7 06:35:38 2025 GMT Subject: CN=2884C6C81B1F3ED8AE2872A0E76C831191687DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:ab:5c:0e:c4:3b:f9:19:28:70:ad:83:d1: 66:01:70:e7:1f:ce:ca:4e:d4:24:87:44:de:a4:ff: 3b:30:1d:c7:c4:bc:b8:c3:21:46:01:56:6b:bf:bd: 98:50:dd:8c:ca:06:46:7b:87:c2:03:19:5b:0b:31: d4:52:51:be:8a:73:48:f5:c6:ef:33:df:ab:64:0d: 95:f1:7e:91:a9:df:e3:47:67:d1:7a:2a:c3:63:d9: 65:c1:3f:a1:fe:80:e0:7d:1b:29:8a:be:f9:62:94: 7f:b7:00:1a:28:f4:ee:ee:c6:dc:ce:72:07:dc:ad: be:11:ed:30:af:7e:9b:2d:73:cb:a1:93:c6:2b:5d: 72:64:b1:c1:a6:db:4d:c7:92:ea:02:b9:e8:39:1d: 4e:3c:ca:a9:3b:e7:22:f3:96:16:40:b7:e4:8d:18: ee:6e:4a:34:25:8a:e9:20:8e:de:88:32:71:bb:83: b2:fe:08:79:9f:b3:9a:59:4c:f8:3d:95:23:19:20: 55:24:5b:7f:1a:a6:92:fe:4e:62:21:ab:9c:3e:c4: 9e:e7:a6:9b:92:10:3d:84:7d:be:d5:18:49:79:2a: 51:fc:e1:b6:77:8d:c5:e0:63:4a:52:a3:f3:16:41: d3:04:84:53:57:0f:cb:53:a2:cd:17:3c:24:b3:38: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:C6:C8:1B:1F:3E:D8:AE:28:72:A0:E7:6C:83:11:91:68:7D:F1 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:4b:a6:68:a3:4d:4d:a2:11:9a:d9:04:01:dc:07:9a:9f:11: 69:d8:a2:d2:bc:8d:10:55:b4:7a:21:67:28:fd:12:e7:4e:c6: e3:1c:71:f0:3e:e6:65:50:58:c8:26:b0:79:5e:fb:eb:81:d4: c1:c6:b8:a9:b5:40:bf:82:e2:c7:ca:d6:c5:fe:78:ab:65:d3: d4:62:89:77:37:3f:19:80:e1:20:1d:ef:1d:17:be:4e:bb:33: 88:19:ad:5a:84:73:fd:4e:ec:92:e4:0f:66:b3:23:06:57:51: 90:f8:0b:88:56:87:3e:10:1c:44:9d:65:43:bd:af:83:e5:79: b7:7f:aa:22:35:db:55:25:f4:a1:53:78:33:72:77:d6:a4:74: be:4d:2e:c8:3a:42:a2:3a:f9:57:01:fe:d5:24:bd:80:79:bf: b0:aa:f3:53:06:5f:39:2a:31:07:ee:df:50:80:53:3b:84:09: 87:68:26:47:b1:51:04:05:1e:cb:2f:4a:f4:02:ef:32:9a:81: 33:da:bd:f4:28:be:56:b1:c3:fb:9a:89:ab:2c:f0:19:44:f3: d4:3a:c9:68:9d:2b:d0:e3:ba:fe:2d:f9:52:36:ed:77:9a:f3: 2e:e3:cd:57:63:cc:42:22:70:e3:01:42:ca:81:fb:1f:8f:02: 77:cb:3d:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBzRacttvUd4L6JIv/8OIJBJyX0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTEyMDYwNDA1MzhaFw0yNTEyMDcwNjM1MzhaMDMxMTAvBgNV BAMTKDI4ODRDNkM4MUIxRjNFRDhBRTI4NzJBMEU3NkM4MzExOTE2ODdERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYqtcDsQ7+RkocK2D0WYBcOcf zspO1CSHRN6k/zswHcfEvLjDIUYBVmu/vZhQ3YzKBkZ7h8IDGVsLMdRSUb6Kc0j1 xu8z36tkDZXxfpGp3+NHZ9F6KsNj2WXBP6H+gOB9GymKvvlilH+3ABoo9O7uxtzO cgfcrb4R7TCvfpstc8uhk8YrXXJkscGm203HkuoCueg5HU48yqk75yLzlhZAt+SN GO5uSjQliukgjt6IMnG7g7L+CHmfs5pZTPg9lSMZIFUkW38appL+TmIhq5w+xJ7n ppuSED2Efb7VGEl5KlH84bZ3jcXgY0pSo/MWQdMEhFNXD8tTos0XPCSzOGePAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKITGyBsfPtiuKHKg52yDEZFoffEwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDoS6Zo o01NohGa2QQB3AeanxFp2KLSvI0QVbR6IWco/RLnTsbjHHHwPuZlUFjIJrB5Xvvr gdTBxriptUC/guLHytbF/nirZdPUYol3Nz8ZgOEgHe8dF75OuzOIGa1ahHP9TuyS 5A9msyMGV1GQ+AuIVoc+EBxEnWVDva+D5Xm3f6oiNdtVJfShU3gzcnfWpHS+TS7I OkKiOvlXAf7VJL2Aeb+wqvNTBl85KjEH7t9QgFM7hAmHaCZHsVEEBR7LL0r0Au8y moEz2r30KL5WscP7momrLPAZRPPUOslonSvQ47r+LflSNu13mvMu481XY8xCInDj AULKgfsfjwJ3yz0E -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:03 2025 by rpki-client