This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json) Hash identifier: Y9pskGdLv03e2tE2jJHNUAWsOYdhnNU3gPbOLuiZ3F0= Subject key identifier: A9:08:36:99:0E:7D:1E:B7:58:F4:D3:B7:77:30:98:0B:76:54:AD:D2 Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671 Certificate serial: 019B4A3A14D1B72932594EC5C8B06115A45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft Manifest number: 1299 Signing time: Tue 23 Dec 2025 08:01:18 +0000 Manifest this update: Tue 23 Dec 2025 08:01:18 +0000 Manifest next update: Wed 24 Dec 2025 08:01:18 +0000 Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: nz3horV7u8pvUrFz44ndT4L/nWz5b1iunEjbq9oYkNM=) 2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:14:d1:b7:29:32:59:4e:c5:c8:b0:61:15:a4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e07556c191867add90101580ecf5d5b7429671 Validity Not Before: Dec 23 08:01:18 2025 GMT Not After : Dec 24 08:01:18 2025 GMT Subject: CN=a90836990e7d1eb758f4d3b77730980b7654add2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:84:2d:6e:88:c1:11:b5:07:72:82:ca:a5: 1b:4d:59:2a:ac:b2:7d:bb:75:87:72:89:7e:6e:7e: ba:51:1a:5d:bd:fb:11:5c:d7:3d:6a:1b:07:5d:e5: 76:4d:20:9c:2d:bd:59:96:06:63:48:8d:d9:f6:b2: ef:bf:76:c8:3f:a8:ec:13:ae:4d:f2:db:de:5d:6f: 8a:1c:89:36:f7:21:44:05:a6:6d:67:f5:67:37:b3: 0e:07:91:c2:c2:61:e0:5f:7c:da:26:c5:c4:68:fa: 53:dd:88:3d:61:10:29:96:f0:7d:11:1a:48:2c:1f: 2a:48:a3:1d:0c:87:22:94:31:00:35:ca:41:5b:61: 91:bd:8d:00:39:eb:68:fd:fc:d4:69:04:68:81:82: 9b:2c:29:42:99:8c:12:14:ee:6e:ac:17:51:6f:a7: 08:8f:2f:10:5c:e9:3c:8c:6e:40:6b:75:18:da:69: 54:8e:ae:cd:d4:74:3b:67:2a:dd:de:43:c9:99:9d: 2d:c4:69:6f:9e:82:6e:3f:bc:de:f8:f5:02:43:24: 5b:d7:61:bd:f1:76:a0:71:a5:30:2c:e2:01:8e:6f: b5:f7:e6:93:ad:a2:5c:3b:c9:b0:b1:23:db:40:31: f1:ca:9c:1e:d1:5b:68:f0:02:2c:91:e4:f7:85:59: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:08:36:99:0E:7D:1E:B7:58:F4:D3:B7:77:30:98:0B:76:54:AD:D2 X509v3 Authority Key Identifier: keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:23:ed:f3:1c:ea:a6:3d:c5:dc:57:dc:89:6a:87:b3:7d:9d: 1b:e5:f8:b1:3c:71:a2:08:ce:bd:f7:9f:c7:01:54:db:7e:f4: 76:02:79:0f:58:7e:5a:cd:30:a6:ac:e2:8a:7e:f1:4b:d6:b3: 49:77:5c:3b:f9:d2:08:c8:8b:c1:68:66:89:15:88:bf:42:b5: 80:fb:d7:8e:77:d1:4f:da:12:cb:b0:88:50:00:a9:93:1a:99: 54:6e:8a:2f:97:75:62:ba:51:92:7f:1e:07:7b:3b:88:7e:0b: 9d:62:1f:9e:fe:98:57:05:5d:d8:bc:90:60:73:36:fb:6b:64: 21:be:fb:53:44:42:fe:6e:79:e6:ab:4f:33:94:59:de:e7:5f: f5:2c:1c:98:1b:8b:66:1a:36:cb:7f:26:44:15:6f:5a:4b:e0: 0d:41:a0:d6:3b:80:52:39:bc:7a:78:29:80:86:1d:43:91:9c: 4a:f9:59:10:10:d3:6f:88:0d:01:c2:97:68:64:60:42:28:d3: 0c:09:1b:0f:70:d6:88:22:4c:2b:49:27:8c:c6:a7:8f:04:db: 30:5c:b1:7a:0e:a6:6a:96:74:b6:1d:de:fe:86:87:d8:3d:c1: 19:67:45:13:d5:ee:1a:2c:85:f1:6f:57:bb:d5:1d:c4:1d:79: 4f:f8:e4:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOhTRtykyWU7FyLBhFaRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0 Mjk2NzEwHhcNMjUxMjIzMDgwMTE4WhcNMjUxMjI0MDgwMTE4WjAzMTEwLwYDVQQD EyhhOTA4MzY5OTBlN2QxZWI3NThmNGQzYjc3NzMwOTgwYjc2NTRhZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7WELW6IwRG1B3KCyqUbTVkqrLJ9 u3WHcol+bn66URpdvfsRXNc9ahsHXeV2TSCcLb1ZlgZjSI3Z9rLvv3bIP6jsE65N 8tveXW+KHIk29yFEBaZtZ/VnN7MOB5HCwmHgX3zaJsXEaPpT3Yg9YRAplvB9ERpI LB8qSKMdDIcilDEANcpBW2GRvY0AOeto/fzUaQRogYKbLClCmYwSFO5urBdRb6cI jy8QXOk8jG5Aa3UY2mlUjq7N1HQ7Zyrd3kPJmZ0txGlvnoJuP7ze+PUCQyRb12G9 8XagcaUwLOIBjm+19+aTraJcO8mwsSPbQDHxypwe0Vto8AIskeT3hVnXrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkINpkOfR63WPTTt3cwmAt2VK3SMB8GA1UdIwQY MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCPt8xzq pj3F3FfciWqHs32dG+X4sTxxogjOvfefxwFU2370dgJ5D1h+Ws0wpqziin7xS9az SXdcO/nSCMiLwWhmiRWIv0K1gPvXjnfRT9oSy7CIUACpkxqZVG6KL5d1YrpRkn8e B3s7iH4LnWIfnv6YVwVd2LyQYHM2+2tkIb77U0RC/m555qtPM5RZ3udf9SwcmBuL Zho2y38mRBVvWkvgDUGg1juAUjm8engpgIYdQ5GcSvlZEBDTb4gNAcKXaGRgQijT DAkbD3DWiCJMK0knjManjwTbMFyxeg6mapZ0th3e/oaH2D3BGWdFE9XuGiyF8W9X u9UdxB15T/jkJQ== -----END CERTIFICATE-----Generated at Tue Dec 23 14:53:08 2025 by rpki-client