This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json) Hash identifier: fniWolUHGcVMS4CXvUG+p6O/kbGIbZXKY3olhwwnG/0= Subject key identifier: 94:CC:24:EB:06:36:2C:0F:38:B7:19:F7:7F:88:47:4A:F8:0A:45:10 Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Certificate serial: 019B33E8AF398B3C78D47555EC8185D9A40E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft Manifest number: 0817 Signing time: Fri 19 Dec 2025 00:00:45 +0000 Manifest this update: Fri 19 Dec 2025 00:00:45 +0000 Manifest next update: Sat 20 Dec 2025 00:00:45 +0000 Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: Qsy2d51gyvli9geCZO+dH0aqK95C+kEqUTjKMspu8jc=) 2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:af:39:8b:3c:78:d4:75:55:ec:81:85:d9:a4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Validity Not Before: Dec 19 00:00:45 2025 GMT Not After : Dec 20 00:00:45 2025 GMT Subject: CN=94cc24eb06362c0f38b719f77f88474af80a4510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:40:37:bb:88:e4:d9:98:09:70:01:bb:16: eb:0e:61:20:47:5e:77:3a:e3:3c:25:b9:22:19:d9: 14:d9:69:34:73:c8:f8:b2:27:46:a6:93:8e:3d:5e: f7:0d:1b:c2:8b:61:60:c4:9b:ca:76:fb:bb:c0:d7: 69:13:0d:40:4b:71:3d:d9:0c:53:3c:a0:dc:a0:be: 73:8c:e3:cf:3d:17:d5:a9:74:77:37:07:7c:ed:3e: d6:4b:25:0e:e4:6c:8e:f4:23:38:98:5b:00:fb:fa: 32:52:9a:13:14:fd:e0:f3:d5:5c:59:4b:56:f9:56: 63:90:bb:e5:6d:88:2b:7c:ba:1a:f4:b1:e4:fd:d8: 70:74:1b:60:0b:a8:43:2d:82:ef:43:5a:7a:80:10: f6:5a:a8:00:c4:ab:17:14:d0:79:d3:ac:23:aa:70: cc:e3:52:4a:44:de:19:c8:87:bb:56:67:3a:7c:2f: 59:b5:7a:75:3f:34:17:0f:f0:9c:fb:a1:31:96:c3: 95:dd:17:ff:b1:3f:f8:52:c6:e2:d0:f7:80:a6:2d: c8:b4:5e:ba:ad:60:83:3f:4b:a3:22:bc:d2:4f:7d: 38:3a:dc:5c:23:1c:22:3e:1b:4c:00:e7:ee:51:5b: 68:34:c3:5a:d1:d3:f3:74:37:ad:40:d0:9a:f3:81: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CC:24:EB:06:36:2C:0F:38:B7:19:F7:7F:88:47:4A:F8:0A:45:10 X509v3 Authority Key Identifier: keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:d1:dc:b4:e9:3e:0e:0b:ab:ab:a5:e3:65:3f:eb:83:6f: ec:e8:6f:95:86:ef:a3:43:ce:8f:ec:ef:d9:33:27:24:ff:c1: d1:5c:9c:96:42:f3:e4:bb:c1:69:37:7e:dc:dd:62:39:05:79: d2:e1:2d:7b:77:af:10:e3:20:43:76:89:e5:5d:93:ad:59:50: 16:0a:20:cf:c8:52:eb:fa:71:08:cf:6b:79:83:36:05:03:9d: 0f:3d:59:5d:93:81:9c:86:83:4a:ff:e5:c4:a9:8b:0a:e6:d2: 7f:c8:ec:61:bc:9c:72:87:de:c6:2e:99:45:09:f8:7c:4b:50: 21:35:78:ed:33:8f:75:4f:eb:57:35:4f:37:5b:e9:cb:e1:8a: 68:0a:d0:57:97:7e:8b:0a:94:65:2b:81:2e:c3:59:73:9b:69: 18:0c:41:00:76:60:b2:11:47:57:72:d6:ae:eb:27:c2:9e:29: ae:6e:d7:f4:bb:83:fb:30:ea:b6:51:e8:53:c4:6c:52:e6:20: 20:31:f2:d2:bf:e0:a3:b8:8e:9a:07:77:2b:58:0d:53:e4:79: 6f:93:b2:4c:5b:c3:36:f0:92:05:4e:e0:f4:42:0f:45:04:2d: e8:a1:e1:3f:ed:fc:c0:44:63:23:bb:4a:4b:0e:ba:d5:cf:ec: 1e:59:64:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6K85izx41HVV7IGF2aQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDNhOWIyMGQyYWZkMDFkOWExYzYyOGQzMDFiOTljODdj YzVhY2QwHhcNMjUxMjE5MDAwMDQ1WhcNMjUxMjIwMDAwMDQ1WjAzMTEwLwYDVQQD Eyg5NGNjMjRlYjA2MzYyYzBmMzhiNzE5Zjc3Zjg4NDc0YWY4MGE0NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxAN7uI5NmYCXABuxbrDmEgR153 OuM8JbkiGdkU2Wk0c8j4sidGppOOPV73DRvCi2FgxJvKdvu7wNdpEw1AS3E92QxT PKDcoL5zjOPPPRfVqXR3Nwd87T7WSyUO5GyO9CM4mFsA+/oyUpoTFP3g89VcWUtW +VZjkLvlbYgrfLoa9LHk/dhwdBtgC6hDLYLvQ1p6gBD2WqgAxKsXFNB506wjqnDM 41JKRN4ZyIe7Vmc6fC9ZtXp1PzQXD/Cc+6ExlsOV3Rf/sT/4Usbi0PeApi3ItF66 rWCDP0ujIrzST304OtxcIxwiPhtMAOfuUVtoNMNa0dPzdDetQNCa84FT0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTMJOsGNiwPOLcZ93+IR0r4CkUQMB8GA1UdIwQY MBaAFHsDqbINKv0B2aHGKNMBuZyHzFrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMt YTdkMTllYzA3ZjEzLzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81NjQ3NzUtMzYxYS00NzI5LWI5NTMtYTdkMTllYzA3ZjEz LzEvZXdPcHNnMHFfUUhab2NZbzB3RzVuSWZNV3MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvvR3LTp Pg4Lq6ul42U/64Nv7OhvlYbvo0POj+zv2TMnJP/B0VyclkLz5LvBaTd+3N1iOQV5 0uEte3evEOMgQ3aJ5V2TrVlQFgogz8hS6/pxCM9reYM2BQOdDz1ZXZOBnIaDSv/l xKmLCubSf8jsYbyccofexi6ZRQn4fEtQITV47TOPdU/rVzVPN1vpy+GKaArQV5d+ iwqUZSuBLsNZc5tpGAxBAHZgshFHV3LWrusnwp4prm7X9LuD+zDqtlHoU8RsUuYg IDHy0r/go7iOmgd3K1gNU+R5b5OyTFvDNvCSBU7g9EIPRQQt6KHhP+38wERjI7tK Sw661c/sHllk8A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:07 2025 by rpki-client