This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json) Hash identifier: 31XfBTYxTeZZXjAdtoSAiaB+z0S8Qm8JOYKuE8WdeoE= Subject key identifier: 34:6C:3C:F6:1C:55:72:A1:2D:45:0C:F1:81:73:7B:E5:9F:95:D2:73 Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Certificate serial: 019B34FB2F3F23E9475451661B3E9AE68034 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft Manifest number: 0296 Signing time: Fri 19 Dec 2025 05:00:35 +0000 Manifest this update: Fri 19 Dec 2025 05:00:35 +0000 Manifest next update: Sat 20 Dec 2025 05:00:35 +0000 Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: 9JCZ7lkuBZIEC8zg1DMRLzONXLdK9RFHZ/A8eopX454=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2f:3f:23:e9:47:54:51:66:1b:3e:9a:e6:80:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Validity Not Before: Dec 19 05:00:35 2025 GMT Not After : Dec 20 05:00:35 2025 GMT Subject: CN=346c3cf61c5572a12d450cf181737be59f95d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:37:81:85:54:bc:6c:8b:74:75:c2:4c:76: 7d:c2:a8:5f:4f:5c:4e:1b:f8:ac:12:a9:dc:78:2e: ee:c0:0f:f9:82:26:7d:23:74:bb:e3:f4:c1:55:7c: f7:cc:4d:0c:03:f0:01:80:96:3d:1f:a0:8b:60:b7: 01:f9:91:c7:23:1c:69:e2:1b:4d:56:57:da:46:74: ec:fc:cf:f7:73:fb:58:ba:54:85:0d:65:3e:c7:17: 6f:83:b1:19:30:da:65:e4:75:c0:36:55:4a:89:fe: 03:85:7e:9e:4f:9f:90:36:53:b5:e7:2a:ce:28:6d: 16:21:1e:a8:18:b6:1c:27:4b:53:12:a3:0a:0e:4d: a4:c8:f1:67:ab:24:c2:d4:75:22:82:42:4a:38:a6: b3:87:e6:a4:cf:30:53:78:9a:62:c5:c2:37:74:05: ab:81:42:67:c0:e9:b8:58:6d:b3:e5:28:81:99:27: 50:a8:06:0f:5f:8f:54:11:33:13:39:5e:0d:b1:d0: 8a:c0:2f:94:5f:0c:0d:44:d6:0d:b1:4b:33:ed:75: 9c:8c:87:eb:c6:88:38:19:b3:a2:ee:d0:84:4f:20: f6:34:e5:da:bd:33:6a:ef:fa:9b:91:47:17:a7:d4: e3:1b:1a:d9:87:fe:2f:85:1b:40:b9:81:06:eb:fe: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:3C:F6:1C:55:72:A1:2D:45:0C:F1:81:73:7B:E5:9F:95:D2:73 X509v3 Authority Key Identifier: keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:38:69:25:32:42:e7:61:82:85:0b:b4:ff:e1:cf:96:56: ac:ea:b9:52:ab:33:7a:04:ca:e8:62:fa:c5:c4:ce:38:dd:93: 66:5a:dc:dd:03:bd:5a:55:f4:69:c8:7b:5c:58:c5:1f:22:0f: 5b:66:35:7a:23:6f:5b:d1:75:ef:f5:56:3a:a6:f2:17:47:29: af:e3:7c:23:82:20:8e:50:e9:6b:32:90:be:c6:a7:e7:68:e6: 15:6e:f4:57:ba:78:ae:90:ae:79:7d:5f:ed:cb:b8:b7:7d:11: 87:e0:ef:38:02:76:7e:89:76:0d:4f:60:a1:14:a8:e1:ef:35: c4:07:7e:5b:03:0f:5e:05:c9:9f:3f:59:8f:79:02:58:9b:b8: 86:2c:5f:3b:7f:3b:3e:67:b6:3e:f7:78:19:b9:7d:a5:64:c4: 7a:ad:ed:34:75:fc:2f:79:4e:e2:71:b9:cc:4a:c1:65:d0:19: 8c:a4:de:89:38:b5:d4:ac:4f:26:d4:d5:50:f5:f4:4a:58:10: b1:ee:23:cb:2c:6a:2a:7a:a3:99:2e:2c:40:c5:7b:0f:9f:0f: 46:92:f4:66:a7:65:ce:16:bb:cf:f2:8f:47:2c:ce:d8:c0:61: 78:e5:42:c5:4b:f4:3f:72:00:be:4d:43:98:23:0b:da:f5:e1: 42:8a:27:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+y8/I+lHVFFmGz6a5oA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk N2YzYWQwHhcNMjUxMjE5MDUwMDM1WhcNMjUxMjIwMDUwMDM1WjAzMTEwLwYDVQQD EygzNDZjM2NmNjFjNTU3MmExMmQ0NTBjZjE4MTczN2JlNTlmOTVkMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcI3gYVUvGyLdHXCTHZ9wqhfT1xO G/isEqnceC7uwA/5giZ9I3S74/TBVXz3zE0MA/ABgJY9H6CLYLcB+ZHHIxxp4htN VlfaRnTs/M/3c/tYulSFDWU+xxdvg7EZMNpl5HXANlVKif4DhX6eT5+QNlO15yrO KG0WIR6oGLYcJ0tTEqMKDk2kyPFnqyTC1HUigkJKOKazh+akzzBTeJpixcI3dAWr gUJnwOm4WG2z5SiBmSdQqAYPX49UETMTOV4NsdCKwC+UXwwNRNYNsUsz7XWcjIfr xog4GbOi7tCETyD2NOXavTNq7/qbkUcXp9TjGxrZh/4vhRtAuYEG6/6dFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRsPPYcVXKhLUUM8YFze+WfldJzMB8GA1UdIwQY MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBI4aSUy QudhgoULtP/hz5ZWrOq5UqszegTK6GL6xcTOON2TZlrc3QO9WlX0ach7XFjFHyIP W2Y1eiNvW9F17/VWOqbyF0cpr+N8I4IgjlDpazKQvsan52jmFW70V7p4rpCueX1f 7cu4t30Rh+DvOAJ2fol2DU9goRSo4e81xAd+WwMPXgXJnz9Zj3kCWJu4hixfO387 Pme2Pvd4Gbl9pWTEeq3tNHX8L3lO4nG5zErBZdAZjKTeiTi11KxPJtTVUPX0SlgQ se4jyyxqKnqjmS4sQMV7D58PRpL0Zqdlzha7z/KPRyzO2MBheOVCxUv0P3IAvk1D mCML2vXhQooneQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:30 2025 by rpki-client