This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json) Hash identifier: diJ+fy2ohfZxEN7CzfRc2H805Ma6b0Zz0ODJsMWrFFc= Subject key identifier: A8:07:8A:40:03:D4:AC:61:38:04:30:49:2A:C6:89:FB:40:4C:1E:84 Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Certificate serial: 019B5B6423E352873A9A2B1CA933912A9F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft Manifest number: 07FE Signing time: Fri 26 Dec 2025 16:00:47 +0000 Manifest this update: Fri 26 Dec 2025 16:00:47 +0000 Manifest next update: Sat 27 Dec 2025 16:00:47 +0000 Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: LH4IzPus6cnCgRTYyZvBH0Cm5sZoIVdHc7nyN93bgMQ=) 2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:23:e3:52:87:3a:9a:2b:1c:a9:33:91:2a:9f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d Validity Not Before: Dec 26 16:00:47 2025 GMT Not After : Dec 27 16:00:47 2025 GMT Subject: CN=a8078a4003d4ac61380430492ac689fb404c1e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:f6:8b:11:5f:28:ef:bd:a2:86:0e:5f:ec: 64:7c:05:40:3f:e1:bc:01:4b:e3:f5:fd:98:dc:22: f8:67:84:5d:8b:d6:f0:91:9a:2f:cb:3c:d5:a7:f1: 34:c7:b9:03:80:0b:42:d0:d7:31:43:8d:64:83:4e: f5:73:a8:cf:5e:16:5b:0b:40:5c:28:33:cb:4f:40: 1e:f5:ea:03:07:11:60:8d:3d:a3:7c:ba:3f:69:96: 02:59:c1:b0:32:9a:72:34:7f:92:2f:27:80:cf:4a: 1c:63:48:00:cc:f7:4b:d9:06:74:40:c4:64:2a:a5: e1:bc:99:bd:50:dd:df:0b:dc:48:1c:04:1c:5d:45: dc:b2:d6:6d:ac:e9:e3:7d:0d:f3:7e:4d:ce:bc:c1: 0d:03:ff:50:9a:52:61:6e:cb:fb:71:e2:26:54:7e: 32:a1:f0:3f:d8:7a:ef:59:71:a1:38:74:ab:8e:22: 98:28:6f:01:f2:98:4c:fa:d7:3c:7d:e1:7a:27:02: 27:35:84:89:f9:9b:4b:79:3b:a4:cd:fa:ba:0e:a9: c2:f7:a9:95:ac:d1:b9:28:ed:47:94:47:0f:33:3a: e2:06:7f:47:4b:c1:6b:9e:12:40:fe:0c:23:74:93: d0:44:24:ba:8a:67:57:49:09:90:04:2f:11:2b:e3: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:8A:40:03:D4:AC:61:38:04:30:49:2A:C6:89:FB:40:4C:1E:84 X509v3 Authority Key Identifier: keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9e:81:cc:e3:4f:41:76:24:a2:54:b7:c7:e0:2f:b9:b6:2f: 04:12:5a:75:75:b6:24:ff:19:47:a7:15:73:ce:7c:bf:02:22: fb:fb:5c:0d:51:40:b6:35:08:6a:b1:ee:02:69:83:a3:ef:02: 3c:78:aa:73:ac:3d:d8:9d:94:19:fa:48:02:74:60:16:2c:77: 49:25:fc:13:20:02:04:73:f6:5e:7c:bb:ea:1d:9f:c8:62:5a: 91:f3:e6:56:09:55:91:01:f9:42:01:59:92:ec:cc:6b:97:9c: c0:94:9b:1e:ad:bb:88:73:eb:ed:c0:ff:a7:b9:4f:ce:01:f1: 1c:0d:af:7f:d4:7d:54:0c:e8:6b:4d:83:d8:a6:10:49:c1:83: d3:e1:7c:2c:75:9c:5e:1a:8e:6a:f6:59:cb:c0:cd:99:4a:9d: b3:51:0e:36:34:3b:6e:46:a5:2a:13:b5:c1:9e:49:55:e4:77: f8:ff:29:95:9c:6e:a9:61:77:35:4f:2d:e8:f4:f5:36:f6:83: 54:14:b2:9c:ad:97:4f:a0:96:99:93:ba:2a:bf:61:81:b4:cf: af:42:a4:d5:bf:3f:6d:36:3a:b2:f8:01:ed:03:de:89:29:b1: 11:8d:b6:6c:34:fa:b9:f4:10:1b:e9:0d:47:c5:9a:d5:67:b2: c6:3c:ee:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZCPjUoc6miscqTORKp8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1 Y2FlNGQwHhcNMjUxMjI2MTYwMDQ3WhcNMjUxMjI3MTYwMDQ3WjAzMTEwLwYDVQQD EyhhODA3OGE0MDAzZDRhYzYxMzgwNDMwNDkyYWM2ODlmYjQwNGMxZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzT2ixFfKO+9ooYOX+xkfAVAP+G8 AUvj9f2Y3CL4Z4Rdi9bwkZovyzzVp/E0x7kDgAtC0NcxQ41kg071c6jPXhZbC0Bc KDPLT0Ae9eoDBxFgjT2jfLo/aZYCWcGwMppyNH+SLyeAz0ocY0gAzPdL2QZ0QMRk KqXhvJm9UN3fC9xIHAQcXUXcstZtrOnjfQ3zfk3OvMENA/9QmlJhbsv7ceImVH4y ofA/2HrvWXGhOHSrjiKYKG8B8phM+tc8feF6JwInNYSJ+ZtLeTukzfq6DqnC96mV rNG5KO1HlEcPMzriBn9HS8FrnhJA/gwjdJPQRCS6imdXSQmQBC8RK+PTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgHikAD1KxhOAQwSSrGiftATB6EMB8GA1UdIwQY MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4 LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ6BzONP QXYkolS3x+AvubYvBBJadXW2JP8ZR6cVc858vwIi+/tcDVFAtjUIarHuAmmDo+8C PHiqc6w92J2UGfpIAnRgFix3SSX8EyACBHP2Xny76h2fyGJakfPmVglVkQH5QgFZ kuzMa5ecwJSbHq27iHPr7cD/p7lPzgHxHA2vf9R9VAzoa02D2KYQScGD0+F8LHWc XhqOavZZy8DNmUqds1EONjQ7bkalKhO1wZ5JVeR3+P8plZxuqWF3NU8t6PT1NvaD VBSynK2XT6CWmZO6Kr9hgbTPr0Kk1b8/bTY6svgB7QPeiSmxEY22bDT6ufQQG+kN R8Wa1Weyxjzu2w== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:56 2025 by rpki-client