This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json) Hash identifier: +xUnmsS8b4zwd7deuYebNEtEvNP4pB+chSMEwbPqjaM= Subject key identifier: 2D:4C:EE:18:37:1B:05:37:A1:A9:62:86:DB:C1:F8:A1:52:80:27:B8 Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87 Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687 Certificate serial: 019B4B4CDA374FE30251E2D7B7207B91B2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft Manifest number: 05C0 Signing time: Tue 23 Dec 2025 13:01:26 +0000 Manifest this update: Tue 23 Dec 2025 13:01:26 +0000 Manifest next update: Wed 24 Dec 2025 13:01:26 +0000 Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: 77gjPl6O3ZJS0uG3+yAdDw3Yp4YZICtlKPk6FpuWBUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:da:37:4f:e3:02:51:e2:d7:b7:20:7b:91:b2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687 Validity Not Before: Dec 23 13:01:26 2025 GMT Not After : Dec 24 13:01:26 2025 GMT Subject: CN=2d4cee18371b0537a1a96286dbc1f8a1528027b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:6a:64:b1:ac:b6:50:03:13:e4:53:f3:6e: d7:ee:ed:70:2f:1a:8e:97:6e:9e:47:54:3d:23:5a: 9b:eb:c9:18:f9:38:bf:49:3f:25:1a:d2:e7:2d:60: ff:6c:23:92:13:3f:44:dc:a4:a7:56:be:e5:aa:e0: bf:de:67:28:fc:b8:c9:de:ce:de:87:e3:ec:96:e9: e0:da:81:5e:86:6b:87:eb:53:48:1e:d2:f5:63:a6: 69:99:df:c4:e3:3f:6c:6e:4e:cb:44:66:d2:23:41: 40:1a:21:e1:34:af:2b:31:99:5e:d6:aa:36:8b:2c: 7e:d8:f9:5d:ba:2f:cd:e1:79:08:29:96:91:f7:05: e1:b7:5e:2c:33:4d:a5:14:d8:99:05:86:40:84:0b: 41:57:27:11:1c:1d:36:0f:95:a0:c0:7c:87:7d:e1: 09:05:a0:35:62:66:20:e7:80:59:16:58:c3:0a:56: 89:c6:34:9c:72:32:ec:7a:12:22:2b:fd:f0:b2:d4: 4c:27:3f:06:4e:30:0c:2a:4e:3c:c7:6a:e5:57:49: fe:02:93:f9:88:12:be:9a:7a:38:c8:1e:18:2c:9a: 40:17:85:b9:a1:f3:4c:a3:98:56:05:67:c3:44:16: 30:ad:2d:86:3b:95:4b:db:0b:39:18:5d:0b:19:28: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:EE:18:37:1B:05:37:A1:A9:62:86:DB:C1:F8:A1:52:80:27:B8 X509v3 Authority Key Identifier: keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a5:5e:09:ee:02:70:2b:c0:c6:05:cd:93:7b:82:e6:0c:67: 99:fa:95:af:7c:07:e2:99:fd:0a:dd:fd:ef:a1:07:68:db:1b: 22:c5:bd:44:83:81:cd:88:ee:c5:61:19:95:62:31:eb:89:e4: 05:8e:06:73:65:cf:2e:ab:4f:5b:18:4d:d9:4c:9f:05:17:c3: 61:3b:30:1d:bc:82:2e:64:24:1e:1c:ea:95:02:18:1c:5b:7e: ca:31:f8:58:ae:d5:86:ca:1f:35:02:05:b5:f0:70:4f:6c:1d: f0:d0:87:aa:01:9b:06:1e:f9:50:2f:b3:f0:bd:60:ea:11:5f: 98:3e:84:82:6a:60:39:d0:bc:78:5f:fd:62:fc:e5:24:d4:2b: 7a:0d:69:79:cd:02:60:13:ef:1f:f7:82:30:93:1e:9b:1a:4c: 80:86:7b:27:a7:2b:1e:cb:41:07:6e:4c:4c:cd:48:f0:a7:12: 82:53:e2:1d:b0:68:30:ba:d2:cf:7e:06:7f:a0:93:c3:00:2c: 5f:7a:03:be:dc:c8:db:7f:68:5b:b2:08:67:64:67:e9:70:5c: 39:90:ff:0f:dc:10:a0:99:4a:71:d1:95:be:04:64:61:c5:59: 11:97:f0:06:36:d7:19:55:fe:4e:c5:4f:5c:fc:4e:b9:13:56: 9e:56:5c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTNo3T+MCUeLXtyB7kbLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGQ0NmM1ODIyY2FkOTI1M2VhNTNhMTAwZjNkOTM2MjI0 YWU2ODcwHhcNMjUxMjIzMTMwMTI2WhcNMjUxMjI0MTMwMTI2WjAzMTEwLwYDVQQD EygyZDRjZWUxODM3MWIwNTM3YTFhOTYyODZkYmMxZjhhMTUyODAyN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyFqZLGstlADE+RT827X7u1wLxqO l26eR1Q9I1qb68kY+Ti/ST8lGtLnLWD/bCOSEz9E3KSnVr7lquC/3mco/LjJ3s7e h+Pslung2oFehmuH61NIHtL1Y6Zpmd/E4z9sbk7LRGbSI0FAGiHhNK8rMZle1qo2 iyx+2Pldui/N4XkIKZaR9wXht14sM02lFNiZBYZAhAtBVycRHB02D5WgwHyHfeEJ BaA1YmYg54BZFljDClaJxjSccjLsehIiK/3wstRMJz8GTjAMKk48x2rlV0n+ApP5 iBK+mno4yB4YLJpAF4W5ofNMo5hWBWfDRBYwrS2GO5VL2ws5GF0LGShRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1M7hg3GwU3oalihtvB+KFSgCe4MB8GA1UdIwQY MBaAFHsNRsWCLK2SU+pToQDz2TYiSuaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAt YmFhNTllY2UyYjYzLzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAtYmFhNTllY2UyYjYz LzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqVeCe4C cCvAxgXNk3uC5gxnmfqVr3wH4pn9Ct3976EHaNsbIsW9RIOBzYjuxWEZlWIx64nk BY4Gc2XPLqtPWxhN2UyfBRfDYTswHbyCLmQkHhzqlQIYHFt+yjH4WK7VhsofNQIF tfBwT2wd8NCHqgGbBh75UC+z8L1g6hFfmD6EgmpgOdC8eF/9YvzlJNQreg1pec0C YBPvH/eCMJMemxpMgIZ7J6crHstBB25MTM1I8KcSglPiHbBoMLrSz34Gf6CTwwAs X3oDvtzI239oW7IIZ2Rn6XBcOZD/D9wQoJlKcdGVvgRkYcVZEZfwBjbXGVX+TsVP XPxOuRNWnlZc3w== -----END CERTIFICATE-----Generated at Tue Dec 23 18:07:41 2025 by rpki-client