This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json) Hash identifier: wip/Jgvv/03mDZRmZYthQfSeLqMKrSCaLGyJbgJMJ/8= Subject key identifier: C4:E1:EE:64:81:63:1A:2F:45:BE:DC:0F:F2:D6:25:A1:CA:90:E1:EA Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd Certificate serial: 019B405C22817E0A6B42722F2CC25FD6415C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft Manifest number: 1265 Signing time: Sun 21 Dec 2025 10:02:18 +0000 Manifest this update: Sun 21 Dec 2025 10:02:18 +0000 Manifest next update: Mon 22 Dec 2025 10:02:18 +0000 Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=) 2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: +oOyG3YAnW5gQwP/rGTWP4VZxZL1EErJEfuW/w9b/Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:22:81:7e:0a:6b:42:72:2f:2c:c2:5f:d6:41:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd Validity Not Before: Dec 21 10:02:18 2025 GMT Not After : Dec 22 10:02:18 2025 GMT Subject: CN=c4e1ee6481631a2f45bedc0ff2d625a1ca90e1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:ac:e8:01:bf:05:08:0a:82:38:dc:b3:7c: 7e:67:90:f1:56:7f:9f:44:10:12:4f:56:64:ee:01: 5a:f4:76:1a:ce:8c:78:1b:4a:3a:7c:4e:58:81:ca: 9a:7b:af:f2:5e:8c:36:82:43:b0:3f:c4:6b:a0:6f: 4f:ed:b9:d6:a3:1f:43:f7:78:53:8b:69:5d:cf:b2: 73:15:9d:f6:5f:3e:60:5a:af:41:5f:57:38:21:53: f1:c1:d4:66:78:28:fe:9a:6b:de:d4:d7:64:2c:d9: 64:c2:23:ff:17:c6:b8:4d:7e:59:78:46:ea:68:1e: 16:8c:85:17:5b:bd:bc:1c:66:58:06:b9:dd:94:24: 3e:98:d9:b6:74:9c:bc:fb:36:43:e8:95:98:0b:ff: 18:9d:9a:00:f4:ad:05:14:86:aa:5c:9e:e4:79:0b: 34:0a:b0:c2:b3:0b:2e:e4:98:07:84:82:f4:dd:81: 5a:cc:f4:78:56:97:be:e7:42:89:e3:25:69:e0:b4: 4c:2e:f1:6b:98:6c:30:cd:7e:ca:c6:37:b9:90:66: 5b:a0:0e:b4:78:fa:08:78:e1:4b:96:a7:43:ce:f1: 1c:88:c9:8f:09:16:d8:ce:25:14:69:42:d7:7b:0a: 0c:e0:00:19:54:3c:4e:b0:cd:f1:31:d4:21:40:89: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:EE:64:81:63:1A:2F:45:BE:DC:0F:F2:D6:25:A1:CA:90:E1:EA X509v3 Authority Key Identifier: keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:82:29:be:f9:c1:3b:a4:e0:8e:26:9a:21:ea:f2:0d:b7: 57:e1:82:c1:a2:0d:3f:ab:f5:b0:a7:93:cb:04:b3:5f:2f:ed: e0:0a:52:d7:5e:8e:48:c8:da:87:34:ec:cd:35:db:36:ee:48: 8f:20:b6:13:83:a8:4e:79:62:b6:3e:db:9c:c5:1e:36:7e:e3: b3:88:53:a1:cf:34:55:c3:d3:10:ce:54:94:05:a9:65:70:98: 8a:4f:c1:87:83:dd:79:33:06:86:b6:fd:76:50:b4:ec:d5:e9: 87:c3:78:3b:ab:4c:29:7f:42:15:9f:75:ca:65:ac:2e:84:63: 9d:6d:38:51:56:48:15:b7:f2:5c:4f:d7:98:94:4c:8c:f1:9f: 43:1a:33:6a:4b:05:2e:30:be:6b:6c:76:c4:3f:73:ae:c1:86: ed:75:36:e1:c9:00:58:bd:fc:56:64:a8:e5:30:26:1d:6b:47: d5:50:d0:df:a2:ca:06:55:99:81:40:9e:18:9e:e4:20:09:26: ae:9e:b1:61:bf:c5:6e:81:7f:f8:75:ba:7a:2f:47:8f:b5:de: a0:b3:3f:9a:8b:ff:1f:e5:10:26:c4:14:34:17:79:cf:da:c2: 8f:fd:f8:c4:c9:a4:98:d6:03:d0:ad:c2:de:14:d0:fc:3e:dd: 44:f6:a1:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXCKBfgprQnIvLMJf1kFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjljNGJkODc2Nzc4MGJlYzE2MWEyYWQ2MTJhMjczNWRi Y2FiZmQwHhcNMjUxMjIxMTAwMjE4WhcNMjUxMjIyMTAwMjE4WjAzMTEwLwYDVQQD EyhjNGUxZWU2NDgxNjMxYTJmNDViZWRjMGZmMmQ2MjVhMWNhOTBlMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6s6AG/BQgKgjjcs3x+Z5DxVn+f RBAST1Zk7gFa9HYazox4G0o6fE5Ygcqae6/yXow2gkOwP8RroG9P7bnWox9D93hT i2ldz7JzFZ32Xz5gWq9BX1c4IVPxwdRmeCj+mmve1NdkLNlkwiP/F8a4TX5ZeEbq aB4WjIUXW728HGZYBrndlCQ+mNm2dJy8+zZD6JWYC/8YnZoA9K0FFIaqXJ7keQs0 CrDCswsu5JgHhIL03YFazPR4Vpe+50KJ4yVp4LRMLvFrmGwwzX7Kxje5kGZboA60 ePoIeOFLlqdDzvEciMmPCRbYziUUaULXewoM4AAZVDxOsM3xMdQhQImbowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTh7mSBYxovRb7cD/LWJaHKkOHqMB8GA1UdIwQY MBaAFHlpxL2HZ3gL7BYaKtYSonNdvKv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYt MGU4ZGRkNjkxZjYzLzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYtMGU4ZGRkNjkxZjYz LzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCKCKb75 wTuk4I4mmiHq8g23V+GCwaINP6v1sKeTywSzXy/t4ApS116OSMjahzTszTXbNu5I jyC2E4OoTnlitj7bnMUeNn7js4hToc80VcPTEM5UlAWpZXCYik/Bh4PdeTMGhrb9 dlC07NXph8N4O6tMKX9CFZ91ymWsLoRjnW04UVZIFbfyXE/XmJRMjPGfQxozaksF LjC+a2x2xD9zrsGG7XU24ckAWL38VmSo5TAmHWtH1VDQ36LKBlWZgUCeGJ7kIAkm rp6xYb/FboF/+HW6ei9Hj7XeoLM/mov/H+UQJsQUNBd5z9rCj/34xMmkmNYD0K3C 3hTQ/D7dRPahiA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:44 2025 by rpki-client