This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json) Hash identifier: zrLslKk8oeUVE1W5chD1P6JR84EvHX7hVyTTu2rNU5w= Subject key identifier: 2E:37:9A:5A:86:D4:6F:E1:4F:89:DD:09:37:B5:90:CF:99:84:A8:6C Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Certificate serial: 019B0D806E453805403B63999770D751012A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft Manifest number: 1631 Signing time: Thu 11 Dec 2025 13:01:19 +0000 Manifest this update: Thu 11 Dec 2025 13:01:19 +0000 Manifest next update: Fri 12 Dec 2025 13:01:19 +0000 Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: HctBkLZeaf/7cLr1AemWCdcaUN2XIcBknfg7JelphHk=) 2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:6e:45:38:05:40:3b:63:99:97:70:d7:51:01:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Validity Not Before: Dec 11 13:01:19 2025 GMT Not After : Dec 12 13:01:19 2025 GMT Subject: CN=2e379a5a86d46fe14f89dd0937b590cf9984a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:ba:8e:2e:bd:7e:17:75:ce:48:f8:c3:21: 02:ca:0f:5d:1a:a8:d7:56:ba:bb:1f:f1:66:29:23: 86:45:f2:5b:ce:5d:9a:6e:53:f1:b1:cc:b6:08:40: 52:24:be:b3:28:9a:bb:fe:f3:11:13:f1:aa:32:2c: 23:d1:60:11:65:80:98:29:a9:f7:dd:ae:18:b2:9d: c8:1a:15:2a:b0:32:e6:33:d6:be:f0:7a:6a:ad:8d: 7d:12:e0:ec:2e:5c:df:9c:eb:6c:83:9d:b5:7b:fb: d2:7b:5c:a3:aa:10:af:1a:b2:bb:21:e0:ee:00:4e: 7a:ca:25:6f:ca:5f:b9:a4:fe:72:c3:12:3a:7a:4d: 0a:5c:9a:1f:49:2a:84:0a:ce:26:0a:fe:47:c3:56: 52:a0:3a:35:25:8c:a6:7c:17:ac:00:73:c5:5b:0b: 1a:c8:3a:8b:8a:97:33:25:fe:33:af:0d:d9:de:19: de:6a:34:65:25:81:e0:53:40:c4:56:ca:89:65:90: 3f:ec:fd:14:94:e6:10:be:2b:c3:6b:8d:28:5e:49: 95:ed:df:13:c0:2f:72:c6:77:57:9e:6f:cc:6c:40: 70:45:a6:2c:60:91:19:28:81:38:f4:c0:11:0d:c2: 64:d5:74:da:e6:08:5b:93:43:9c:a4:03:b9:15:3a: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:37:9A:5A:86:D4:6F:E1:4F:89:DD:09:37:B5:90:CF:99:84:A8:6C X509v3 Authority Key Identifier: keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4a:6f:fb:33:c2:63:a1:b0:99:67:0c:d8:24:8c:47:80:e1: bc:b3:c4:aa:e9:ee:1b:3f:d6:88:ff:05:67:c4:b5:8f:39:fa: a1:3d:17:53:fb:ef:fe:70:0b:f4:d9:8c:be:d9:c3:e1:e5:b7: 13:0d:83:46:dd:0e:f7:24:bb:3b:6f:fa:86:8d:87:f9:aa:7c: 0d:a0:8c:3c:1d:34:ca:bc:34:05:d2:d0:04:a9:22:97:cd:5a: 30:76:5b:2d:79:18:70:d3:3f:14:72:f1:1f:49:33:1d:2d:32: 70:9e:9e:cb:44:2a:fa:eb:85:fa:ad:a3:3e:9a:ed:25:f8:40: 92:4d:81:9f:4b:4e:6f:9a:b9:f6:7f:bd:63:7e:e1:cd:30:75: 95:89:fd:30:0a:26:1a:84:35:6e:5e:c9:cc:15:d5:6d:c8:41: 72:2d:3f:b1:10:22:e5:ab:a1:47:1b:2d:be:45:51:cc:53:95: 18:2b:2b:72:67:d7:bc:88:5f:d2:7c:8d:49:e3:14:3b:14:d7: b2:95:30:45:31:8f:67:73:bd:8f:f3:47:e7:5f:d5:0b:b9:e8: d2:e9:d3:19:29:65:17:94:38:97:91:ab:5d:3c:d9:ff:5d:b8: 27:91:19:bd:14:48:a5:2b:1c:49:21:68:87:ad:98:ee:64:f2: 71:5c:09:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgG5FOAVAO2OZl3DXUQEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4 OGEwZmMwHhcNMjUxMjExMTMwMTE5WhcNMjUxMjEyMTMwMTE5WjAzMTEwLwYDVQQD EygyZTM3OWE1YTg2ZDQ2ZmUxNGY4OWRkMDkzN2I1OTBjZjk5ODRhODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxG6ji69fhd1zkj4wyECyg9dGqjX Vrq7H/FmKSOGRfJbzl2ablPxscy2CEBSJL6zKJq7/vMRE/GqMiwj0WARZYCYKan3 3a4Ysp3IGhUqsDLmM9a+8HpqrY19EuDsLlzfnOtsg521e/vSe1yjqhCvGrK7IeDu AE56yiVvyl+5pP5ywxI6ek0KXJofSSqECs4mCv5Hw1ZSoDo1JYymfBesAHPFWwsa yDqLipczJf4zrw3Z3hneajRlJYHgU0DEVsqJZZA/7P0UlOYQvivDa40oXkmV7d8T wC9yxndXnm/MbEBwRaYsYJEZKIE49MARDcJk1XTa5ghbk0OcpAO5FTpPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC43mlqG1G/hT4ndCTe1kM+ZhKhsMB8GA1UdIwQY MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3 LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0pv+zPC Y6GwmWcM2CSMR4DhvLPEqunuGz/WiP8FZ8S1jzn6oT0XU/vv/nAL9NmMvtnD4eW3 Ew2DRt0O9yS7O2/6ho2H+ap8DaCMPB00yrw0BdLQBKkil81aMHZbLXkYcNM/FHLx H0kzHS0ycJ6ey0Qq+uuF+q2jPprtJfhAkk2Bn0tOb5q59n+9Y37hzTB1lYn9MAom GoQ1bl7JzBXVbchBci0/sRAi5auhRxstvkVRzFOVGCsrcmfXvIhf0nyNSeMUOxTX spUwRTGPZ3O9j/NH51/VC7no0unTGSllF5Q4l5GrXTzZ/124J5EZvRRIpSscSSFo h62Y7mTycVwJhw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:08 2025 by rpki-client