This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft File: EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json) Hash identifier: 7YJ898CTv+JpLX68XdqXU8JfXwww8VlOK06w+jKp9zE= Subject key identifier: 41:AF:DA:3A:C1:47:8A:54:FF:B6:57:2A:90:A6:03:DD:75:B2:29:C7 Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Certificate serial: 019AAC4BC27194D692AC1C25FA17421F5446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft Manifest number: 1487 Signing time: Sat 22 Nov 2025 16:00:37 +0000 Manifest this update: Sat 22 Nov 2025 16:00:37 +0000 Manifest next update: Sun 23 Nov 2025 16:00:37 +0000 Files and hashes: 1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: PWRXpC6l26Vea5mnBAB/63iyyABueJ0Jiwho41KHijQ=) 2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=) 3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=) 4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=) 5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:c2:71:94:d6:92:ac:1c:25:fa:17:42:1f:54:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Validity Not Before: Nov 22 16:00:37 2025 GMT Not After : Nov 23 16:00:37 2025 GMT Subject: CN=41afda3ac1478a54ffb6572a90a603dd75b229c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:23:2d:26:4c:a8:d2:00:8d:e9:b2:0f:59: c4:ab:a6:96:50:52:f5:f8:76:40:a3:3f:0c:54:e8: a9:2f:4a:81:51:fd:24:ef:8f:33:77:f5:03:0a:37: 82:26:22:86:19:fc:2a:a7:4f:b9:40:48:10:57:46: 2a:ae:4c:3d:62:78:36:1f:c7:54:fa:92:3a:dc:00: 2d:b0:e1:79:ff:16:2f:9e:65:4e:bf:b7:c6:86:a2: bf:6d:92:e3:e1:64:ce:21:2c:4d:38:db:31:a3:b0: 81:cc:d7:fb:aa:14:ad:0c:57:9c:63:c3:81:af:c4: f1:84:74:59:ab:db:80:f4:9f:35:06:6c:b4:8c:c8: 37:4a:91:19:aa:b2:e7:1a:49:7f:a3:62:81:f9:c1: 46:ca:e6:f2:70:f4:12:00:29:88:be:b0:07:04:6a: f9:1e:72:e7:1f:86:1c:db:62:4c:b0:ee:ad:52:eb: 92:20:c2:c4:f3:77:f8:51:32:f7:40:ef:75:29:52: 1e:8c:d7:f2:9e:fe:88:a1:2a:c7:9e:b2:7a:1b:e4: e5:49:e3:56:10:21:17:55:88:88:8b:3f:e1:c9:84: 4d:5b:ef:fd:a8:39:dd:3c:2c:df:b3:5a:1f:e6:af: 88:db:53:83:29:7e:51:2c:e5:2d:e6:e8:1a:ea:41: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:DA:3A:C1:47:8A:54:FF:B6:57:2A:90:A6:03:DD:75:B2:29:C7 X509v3 Authority Key Identifier: keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f7:0b:fc:68:fd:1f:8b:8a:86:7a:d9:48:d2:fa:c6:e4:d4: 68:ca:01:df:db:46:bd:d8:89:d9:37:ed:11:f1:42:1a:70:52: 0f:5e:78:03:2d:df:e7:4e:82:69:8c:fe:aa:81:98:db:6e:f4: 7d:21:9f:81:55:45:5c:bb:27:0c:b7:8a:66:ac:56:16:8d:9a: ae:8b:11:03:1c:a7:9e:d3:40:21:b2:e0:fe:e1:90:63:11:6d: b4:02:96:b0:17:fc:1c:da:27:7d:76:60:78:22:cf:a3:34:01: 1a:30:d0:ce:47:19:c0:5c:57:e5:29:b5:ad:0d:b2:54:09:e6: f2:c8:fe:ba:c6:ef:8e:56:e5:22:68:39:ce:07:86:f4:24:29: 28:14:3d:f2:14:0d:07:c6:c2:c2:4e:79:31:97:ad:db:9d:86: b7:74:b9:39:59:56:68:4e:79:9d:f6:87:1c:7b:07:0e:38:36: 29:a2:12:01:1b:2f:24:49:ff:c9:05:a3:6d:3d:c1:22:9f:f1: 81:d6:43:ed:c1:d0:52:f9:5b:8c:90:e8:b0:0c:a2:fb:e5:cc: 94:9c:eb:e0:2c:ed:f5:32:63:c1:5e:f6:fa:70:7a:e0:cc:92: a3:dd:ae:bb:32:e3:e2:11:fe:91:70:98:a5:16:7c:11:15:d5: d8:cf:66:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS8JxlNaSrBwl+hdCH1RGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTUzZTYwNzY3MGZmNzM4ZWVlNmE2YjU3N2Q4YzhiMjgw NGUxZTEwHhcNMjUxMTIyMTYwMDM3WhcNMjUxMTIzMTYwMDM3WjAzMTEwLwYDVQQD Eyg0MWFmZGEzYWMxNDc4YTU0ZmZiNjU3MmE5MGE2MDNkZDc1YjIyOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CojLSZMqNIAjemyD1nEq6aWUFL1 +HZAoz8MVOipL0qBUf0k748zd/UDCjeCJiKGGfwqp0+5QEgQV0Yqrkw9Yng2H8dU +pI63AAtsOF5/xYvnmVOv7fGhqK/bZLj4WTOISxNONsxo7CBzNf7qhStDFecY8OB r8TxhHRZq9uA9J81Bmy0jMg3SpEZqrLnGkl/o2KB+cFGyubycPQSACmIvrAHBGr5 HnLnH4Yc22JMsO6tUuuSIMLE83f4UTL3QO91KVIejNfynv6IoSrHnrJ6G+TlSeNW ECEXVYiIiz/hyYRNW+/9qDndPCzfs1of5q+I21ODKX5RLOUt5uga6kEmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGv2jrBR4pU/7ZXKpCmA911sinHMB8GA1UdIwQY MBaAFBCVPmB2cP9zju5qa1d9jIsoBOHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMt MWJjNTUyYzAwZGQ3LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMtMWJjNTUyYzAwZGQ3 LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfcL/Gj9 H4uKhnrZSNL6xuTUaMoB39tGvdiJ2TftEfFCGnBSD154Ay3f506CaYz+qoGY2270 fSGfgVVFXLsnDLeKZqxWFo2arosRAxynntNAIbLg/uGQYxFttAKWsBf8HNonfXZg eCLPozQBGjDQzkcZwFxX5Sm1rQ2yVAnm8sj+usbvjlblImg5zgeG9CQpKBQ98hQN B8bCwk55MZet252Gt3S5OVlWaE55nfaHHHsHDjg2KaISARsvJEn/yQWjbT3BIp/x gdZD7cHQUvlbjJDosAyi++XMlJzr4Czt9TJjwV72+nB64MySo92uuzLj4hH+kXCY pRZ8ERXV2M9mcw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:45 2025 by rpki-client