This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json) Hash identifier: XesPs+bW4gKmd8KiBt9d8EFtURUCn8eCwkvs6XSkNMM= Subject key identifier: FB:91:53:4D:60:DF:EC:38:A8:98:75:C6:B5:48:50:1F:68:53:B4:D1 Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392 Certificate serial: 019B26D1FB7FFF1374CE376F916E4374E5DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 11:00:54 +0000 Manifest this update: Tue 16 Dec 2025 11:00:54 +0000 Manifest next update: Wed 17 Dec 2025 11:00:54 +0000 Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: 8krBucmnqlwn54m9i/4kc7RCBUOBcqLagxkKt9A6Ilg=) 2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d1:fb:7f:ff:13:74:ce:37:6f:91:6e:43:74:e5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392 Validity Not Before: Dec 16 11:00:54 2025 GMT Not After : Dec 17 11:00:54 2025 GMT Subject: CN=fb91534d60dfec38a89875c6b548501f6853b4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:40:d7:7a:2d:34:92:e8:8c:65:f8:97:36: fd:53:60:0f:6b:51:0e:a2:97:12:fd:11:b9:f8:e8: 64:2d:53:c6:8b:99:50:e5:48:d4:4c:80:bb:7e:4a: ee:28:5c:f2:f4:8a:86:da:75:c2:7d:05:f7:a5:5c: 18:01:5a:bb:c9:78:9b:b5:ea:28:3b:cb:8d:e6:5b: 22:30:86:3e:27:e1:12:79:42:9a:e1:85:43:81:15: 88:0f:2f:5e:2a:9d:82:5b:4e:b3:30:e8:e1:c8:30: 2b:09:cb:fc:ed:52:16:95:d0:7c:89:e5:ee:45:38: 12:77:2b:e9:04:c4:32:6f:31:2b:95:1c:18:0f:8b: a8:fe:7c:f2:f5:d9:30:3f:e1:7e:43:75:fa:ef:aa: 9e:d6:44:54:39:8d:b6:b6:35:c4:a0:8f:93:9e:2f: 2e:d7:1a:a0:7d:06:36:cb:ee:4d:a8:64:ed:87:b5: 0d:f4:80:78:52:96:fb:9c:01:c9:ff:37:02:00:89: 96:24:ea:71:68:ef:61:2c:0b:13:ce:a4:23:d6:11: b9:40:e8:41:1e:08:30:ba:5f:67:3d:63:e0:b5:fa: b1:dc:e2:bb:c9:9c:35:23:12:29:66:ae:ae:0d:11: 4e:da:f5:dc:dc:73:74:77:61:47:94:41:03:98:24: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:91:53:4D:60:DF:EC:38:A8:98:75:C6:B5:48:50:1F:68:53:B4:D1 X509v3 Authority Key Identifier: keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:21:fa:77:23:60:5f:e6:53:8c:a4:81:56:eb:35:60:59:05: 4c:40:2f:49:5b:6f:46:72:2d:6f:42:99:23:dc:22:23:3a:75: 58:8f:37:ec:89:ee:50:76:d8:f0:22:f8:a9:cb:ad:8e:b0:d3: 21:f4:90:b8:cf:ea:20:d1:d7:8a:89:78:0e:a4:a3:4b:04:8a: d0:89:b1:19:67:a4:99:ad:b6:4d:fc:ed:7b:56:c3:62:19:9a: 12:5b:2d:a2:13:0f:76:70:4b:19:07:f6:b9:ae:36:0c:3b:3e: b0:b6:e4:9a:f6:88:0d:5c:a6:45:49:d9:4e:5a:1a:87:ef:86: 28:cf:82:6a:5b:80:fa:50:63:28:6e:75:82:60:07:de:44:c5: 75:34:58:d6:b2:d4:fd:9a:ec:5b:4e:17:24:ab:f5:fa:6d:8d: 4a:4b:9c:15:cc:19:fd:46:29:75:4f:b9:9b:1c:c7:47:d4:fa: 4e:3e:33:44:d1:fd:af:64:73:56:19:29:c9:60:c1:dd:ff:8f: 10:f5:86:27:8a:b3:18:fb:f1:62:7d:95:14:93:01:1f:a9:e7: 17:91:16:27:e4:01:ee:84:16:54:3e:9c:2c:61:c7:20:ad:f5: aa:63:f2:cd:cd:69:fb:ac:83:02:8e:ee:4e:1b:18:6f:79:69: 2e:c6:04:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0ft//xN0zjdvkW5DdOXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz YTEzOTIwHhcNMjUxMjE2MTEwMDU0WhcNMjUxMjE3MTEwMDU0WjAzMTEwLwYDVQQD EyhmYjkxNTM0ZDYwZGZlYzM4YTg5ODc1YzZiNTQ4NTAxZjY4NTNiNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8lA13otNJLojGX4lzb9U2APa1EO opcS/RG5+OhkLVPGi5lQ5UjUTIC7fkruKFzy9IqG2nXCfQX3pVwYAVq7yXibteoo O8uN5lsiMIY+J+ESeUKa4YVDgRWIDy9eKp2CW06zMOjhyDArCcv87VIWldB8ieXu RTgSdyvpBMQybzErlRwYD4uo/nzy9dkwP+F+Q3X676qe1kRUOY22tjXEoI+Tni8u 1xqgfQY2y+5NqGTth7UN9IB4Upb7nAHJ/zcCAImWJOpxaO9hLAsTzqQj1hG5QOhB Hggwul9nPWPgtfqx3OK7yZw1IxIpZq6uDRFO2vXc3HN0d2FHlEEDmCSuXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuRU01g3+w4qJh1xrVIUB9oU7TRMB8GA1UdIwQY MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt OGJkZjk4YzBjOGYwLzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiH6dyNg X+ZTjKSBVus1YFkFTEAvSVtvRnItb0KZI9wiIzp1WI837InuUHbY8CL4qcutjrDT IfSQuM/qINHXiol4DqSjSwSK0ImxGWekma22Tfzte1bDYhmaElstohMPdnBLGQf2 ua42DDs+sLbkmvaIDVymRUnZTloah++GKM+CaluA+lBjKG51gmAH3kTFdTRY1rLU /ZrsW04XJKv1+m2NSkucFcwZ/UYpdU+5mxzHR9T6Tj4zRNH9r2RzVhkpyWDB3f+P EPWGJ4qzGPvxYn2VFJMBH6nnF5EWJ+QB7oQWVD6cLGHHIK31qmPyzc1p+6yDAo7u ThsYb3lpLsYEyg== -----END CERTIFICATE-----Generated at Tue Dec 16 18:45:20 2025 by rpki-client