This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json) Hash identifier: BKsOFMGpnKZR/pDQp0JeAMZ78tDB56l3GodtnWFI+Gg= Subject key identifier: 9E:7F:C5:CC:AD:04:D8:B6:06:BB:3B:39:19:51:FB:83:B3:21:70:D9 Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Certificate serial: 019B397D5981663CAA0BACECDA40B421075F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft Manifest number: 114E Signing time: Sat 20 Dec 2025 02:01:14 +0000 Manifest this update: Sat 20 Dec 2025 02:01:14 +0000 Manifest next update: Sun 21 Dec 2025 02:01:14 +0000 Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=) 2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: /uhRpvorNKmrcdpXAJYuAyUNI0/G6XXgDmccyzC0MmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:59:81:66:3c:aa:0b:ac:ec:da:40:b4:21:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Validity Not Before: Dec 20 02:01:14 2025 GMT Not After : Dec 21 02:01:14 2025 GMT Subject: CN=9e7fc5ccad04d8b606bb3b391951fb83b32170d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:82:28:ed:38:93:a7:ae:44:aa:27:50:ee: 39:ba:2b:62:c1:20:c1:2f:f3:54:8e:28:2f:be:02: 11:b7:e3:d3:2b:ee:0e:d8:46:19:31:6d:c9:76:31: 8f:1e:61:07:ab:7f:d4:15:8c:7c:67:61:1c:54:84: b9:07:a1:e3:09:b4:7c:2a:7c:f7:47:4f:e6:26:e2: 67:1c:92:51:1b:fc:97:54:dd:f1:11:f3:4f:f3:9d: 6b:60:68:cd:24:c6:5f:57:eb:ea:8e:ac:09:3d:57: 6b:e1:1c:8f:c4:97:f0:34:77:09:fa:76:76:e3:d5: 27:52:9b:63:93:88:b1:de:52:71:d4:94:79:5f:d6: 70:0f:d4:c9:29:d1:38:87:32:cf:13:46:1a:e0:53: 5c:25:9a:38:4f:f5:53:fb:e2:34:46:32:f8:98:b7: f1:03:f2:02:0c:8b:ce:51:91:de:2c:f6:67:58:09: 5f:3c:85:46:e7:93:db:5c:1b:e7:84:91:c7:9a:8b: 1e:97:6f:f1:bf:f3:d4:69:da:4e:63:d7:6b:00:7f: 21:db:77:e5:2b:95:05:b7:17:66:fe:f5:54:f5:38: 9a:18:ad:87:6a:13:65:f9:59:56:d5:0c:6f:2b:30: d0:56:48:26:cb:7f:3f:e6:22:38:9b:87:bc:9c:d1: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:C5:CC:AD:04:D8:B6:06:BB:3B:39:19:51:FB:83:B3:21:70:D9 X509v3 Authority Key Identifier: keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:99:8e:7f:6e:88:bb:ec:42:7e:29:66:a3:25:b8:8f:9b:bf: a8:b8:2b:9c:53:5f:ec:45:9d:f4:1d:36:7d:ce:4e:46:a3:db: 92:20:8a:63:08:4f:ff:82:20:0e:07:15:39:4e:e2:81:63:cf: e8:6e:a5:da:46:af:c0:e5:de:8c:2b:a5:d7:9b:1b:f8:47:24: d9:34:db:df:a1:59:b5:5c:63:96:27:fa:88:b7:38:a5:2d:40: f1:de:46:0b:7a:d6:22:21:88:70:7b:57:a2:66:34:fc:7f:4d: 43:22:9f:b4:f9:f1:16:44:06:3f:c8:93:79:5a:69:bd:e1:64: 2f:3e:85:c9:de:a9:c3:20:da:a6:1a:92:62:9e:92:ee:df:d2: d4:6c:35:ad:d9:96:4f:be:71:6c:18:77:b1:a3:d3:42:2e:b3: 79:f1:41:40:81:ea:a6:85:1a:d4:1c:19:ca:18:3c:ce:a2:e9: af:f2:bf:bb:d6:3f:33:86:eb:cc:14:9d:b1:6c:7f:dc:91:00: ee:81:30:f1:98:3a:a5:e3:6e:51:1f:a0:e4:c5:76:d5:f0:37: 4c:fb:b6:9a:30:d5:ed:13:ef:26:fc:01:60:dc:13:87:df:9d: af:f2:b9:bc:4d:3d:93:bf:88:3a:35:b0:6d:59:a6:e4:12:9c: ca:00:ff:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVmBZjyqC6zs2kC0IQdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh MThiY2EwHhcNMjUxMjIwMDIwMTE0WhcNMjUxMjIxMDIwMTE0WjAzMTEwLwYDVQQD Eyg5ZTdmYzVjY2FkMDRkOGI2MDZiYjNiMzkxOTUxZmI4M2IzMjE3MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18CCKO04k6euRKonUO45uitiwSDB L/NUjigvvgIRt+PTK+4O2EYZMW3JdjGPHmEHq3/UFYx8Z2EcVIS5B6HjCbR8Knz3 R0/mJuJnHJJRG/yXVN3xEfNP851rYGjNJMZfV+vqjqwJPVdr4RyPxJfwNHcJ+nZ2 49UnUptjk4ix3lJx1JR5X9ZwD9TJKdE4hzLPE0Ya4FNcJZo4T/VT++I0RjL4mLfx A/ICDIvOUZHeLPZnWAlfPIVG55PbXBvnhJHHmosel2/xv/PUadpOY9drAH8h23fl K5UFtxdm/vVU9TiaGK2HahNl+VlW1QxvKzDQVkgmy38/5iI4m4e8nNHlzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5/xcytBNi2Brs7ORlR+4OzIXDZMB8GA1UdIwQY MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5 LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpmOf26I u+xCfilmoyW4j5u/qLgrnFNf7EWd9B02fc5ORqPbkiCKYwhP/4IgDgcVOU7igWPP 6G6l2kavwOXejCul15sb+Eck2TTb36FZtVxjlif6iLc4pS1A8d5GC3rWIiGIcHtX omY0/H9NQyKftPnxFkQGP8iTeVppveFkLz6Fyd6pwyDaphqSYp6S7t/S1Gw1rdmW T75xbBh3saPTQi6zefFBQIHqpoUa1BwZyhg8zqLpr/K/u9Y/M4brzBSdsWx/3JEA 7oEw8Zg6peNuUR+g5MV21fA3TPu2mjDV7RPvJvwBYNwTh9+dr/K5vE09k7+IOjWw bVmm5BKcygD/mg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:16:32 2025 by rpki-client