This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json) Hash identifier: UgqKrvgvwdSk/iCKkxPuyHHVauG1FEDre95WcRB25qY= Subject key identifier: 9E:E6:A1:5E:9F:34:6B:4B:B7:0D:19:46:AC:EF:A2:64:B2:C9:D9:82 Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82 Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482 Certificate serial: 019B3343C710C665919BB030CE09460D1327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft Manifest number: 0868 Signing time: Thu 18 Dec 2025 21:00:38 +0000 Manifest this update: Thu 18 Dec 2025 21:00:38 +0000 Manifest next update: Fri 19 Dec 2025 21:00:38 +0000 Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: avTf45PXOiqu1mCWPpW2gUJpn0ahL+a+Bh9giRxI1Dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:c7:10:c6:65:91:9b:b0:30:ce:09:46:0d:13:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482 Validity Not Before: Dec 18 21:00:38 2025 GMT Not After : Dec 19 21:00:38 2025 GMT Subject: CN=9ee6a15e9f346b4bb70d1946acefa264b2c9d982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:17:65:54:75:17:0d:dd:70:57:cd:ee:26: e6:c9:9b:eb:9d:29:31:e5:11:a9:67:0d:a4:a2:68: 7a:15:6d:77:42:92:39:93:fd:60:33:fc:08:19:44: df:49:aa:a4:36:5b:fc:d6:e7:90:85:37:74:86:08: 56:33:22:b0:e5:3a:cc:50:67:5e:f1:51:7d:0f:23: ac:4f:39:91:e3:8f:b9:e7:9a:51:20:a9:1a:df:05: 06:47:a1:a1:da:2c:87:ec:90:71:bd:70:f7:94:d6: 90:3d:fc:9a:cf:17:c3:32:68:97:21:9f:48:bc:db: 26:a5:1b:b5:8a:15:67:4b:3b:05:48:90:7c:31:35: 9a:39:bc:76:ee:0a:65:09:eb:be:03:82:aa:8d:c7: ed:18:06:bf:d7:28:fc:51:df:b1:81:7a:21:2c:e7: 7a:d8:51:95:0f:82:b2:ae:52:0c:bc:fc:2b:f8:db: 11:e9:ad:5c:af:46:fa:00:25:d0:c8:37:4e:87:22: c6:6e:0d:0f:90:ab:0a:a6:e7:23:de:ff:40:76:34: a1:e6:5c:e4:30:e7:ab:73:19:81:d3:15:6e:f6:c1: 3d:e0:01:69:4a:89:d0:20:c1:5c:af:f5:b0:67:c5: 82:55:e4:74:d9:d3:4d:91:bd:0e:1a:11:df:0a:d7: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E6:A1:5E:9F:34:6B:4B:B7:0D:19:46:AC:EF:A2:64:B2:C9:D9:82 X509v3 Authority Key Identifier: keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:41:3d:ab:5f:c5:74:2d:26:09:e0:ce:11:6f:48:4a:2d:c0: 88:53:af:26:08:43:4e:69:f1:34:4d:ad:88:cb:38:c0:97:31: 65:15:3c:95:a2:ff:2f:31:a3:f4:7b:81:d5:8b:7e:2b:a9:32: 7c:c5:aa:78:9d:83:32:af:09:7d:18:38:79:37:d6:a4:c5:77: 03:38:47:0e:93:d1:d7:26:f9:f9:ff:49:0d:99:77:bf:af:93: 43:9c:1a:61:94:ab:84:c2:10:b4:23:6c:1b:58:b4:64:d0:69: c4:4a:0d:dc:02:68:2a:53:bd:19:e4:33:1c:11:b5:7e:f5:71: c7:b3:f0:06:90:7c:7a:e0:fb:6b:6f:19:d3:3d:c0:3d:58:d7: 1f:e6:9c:e6:fe:01:be:02:73:02:11:5b:a8:be:6c:f1:71:b4: b5:5a:cd:f3:b7:e8:f8:ac:65:17:28:cf:42:d4:d6:86:33:7e: f6:78:0e:00:5a:6b:e2:c1:72:ab:36:2d:5e:6e:ed:3f:4b:75: 28:49:bd:b0:21:38:2a:47:5d:58:c8:29:67:cd:d5:b1:67:91: 4a:0d:3f:55:05:b2:fb:e1:e1:7a:95:d4:fe:c2:e6:71:81:c6: 6f:4a:af:c3:43:0a:0f:8c:97:65:7b:41:33:0c:17:81:27:06: d7:0f:72:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ8cQxmWRm7AwzglGDRMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGIzYjM5NDg2NWU0Yjg1YjY4NmEzOWY1NWVkNGJlNjUz NmE0ODIwHhcNMjUxMjE4MjEwMDM4WhcNMjUxMjE5MjEwMDM4WjAzMTEwLwYDVQQD Eyg5ZWU2YTE1ZTlmMzQ2YjRiYjcwZDE5NDZhY2VmYTI2NGIyYzlkOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEXZVR1Fw3dcFfN7ibmyZvrnSkx 5RGpZw2komh6FW13QpI5k/1gM/wIGUTfSaqkNlv81ueQhTd0hghWMyKw5TrMUGde 8VF9DyOsTzmR44+555pRIKka3wUGR6Gh2iyH7JBxvXD3lNaQPfyazxfDMmiXIZ9I vNsmpRu1ihVnSzsFSJB8MTWaObx27gplCeu+A4KqjcftGAa/1yj8Ud+xgXohLOd6 2FGVD4KyrlIMvPwr+NsR6a1cr0b6ACXQyDdOhyLGbg0PkKsKpucj3v9AdjSh5lzk MOercxmB0xVu9sE94AFpSonQIMFcr/WwZ8WCVeR02dNNkb0OGhHfCteswwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7moV6fNGtLtw0ZRqzvomSyydmCMB8GA1UdIwQY MBaAFHsLOzlIZeS4W2hqOfVe1L5lNqSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYt MmM4ZDAwMTFlODhhLzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYtMmM4ZDAwMTFlODhh LzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEE9q1/F dC0mCeDOEW9ISi3AiFOvJghDTmnxNE2tiMs4wJcxZRU8laL/LzGj9HuB1Yt+K6ky fMWqeJ2DMq8JfRg4eTfWpMV3AzhHDpPR1yb5+f9JDZl3v6+TQ5waYZSrhMIQtCNs G1i0ZNBpxEoN3AJoKlO9GeQzHBG1fvVxx7PwBpB8euD7a28Z0z3APVjXH+ac5v4B vgJzAhFbqL5s8XG0tVrN87fo+KxlFyjPQtTWhjN+9ngOAFpr4sFyqzYtXm7tP0t1 KEm9sCE4KkddWMgpZ83VsWeRSg0/VQWy++HhepXU/sLmcYHGb0qvw0MKD4yXZXtB MwwXgScG1w9ykg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:31 2025 by rpki-client