This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft File: ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json) Hash identifier: HGE6h5SRMdgRzbVKf0mu+q83J4wNQKS5v3MuN7t/uxg= Subject key identifier: C1:DE:8F:DE:73:9B:DB:4A:CA:8E:B1:49:D0:9A:06:BD:97:18:54:74 Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85 Certificate issuer: /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285 Certificate serial: 019B38D8735BB401943EF1716CFD5834F891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft Manifest number: 0697 Signing time: Fri 19 Dec 2025 23:01:07 +0000 Manifest this update: Fri 19 Dec 2025 23:01:07 +0000 Manifest next update: Sat 20 Dec 2025 23:01:07 +0000 Files and hashes: 1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: vP+NHRzeDBZJVyR3HVG7h3oUY/IeagyjGTBS9vXJW4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:73:5b:b4:01:94:3e:f1:71:6c:fd:58:34:f8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285 Validity Not Before: Dec 19 23:01:07 2025 GMT Not After : Dec 20 23:01:07 2025 GMT Subject: CN=c1de8fde739bdb4aca8eb149d09a06bd97185474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:d7:ae:d8:8d:6e:7c:ae:26:cd:ec:d6:aa: f4:35:20:ae:e5:9c:df:ae:12:94:87:5b:40:3e:b4: 26:5e:85:3b:01:2c:8c:fd:22:78:2a:82:80:d4:77: ef:a6:11:25:4a:d0:f9:02:b8:06:81:51:17:78:5f: a9:34:ec:26:e2:2e:07:68:ac:54:15:02:8c:00:af: 35:cd:01:13:e0:6d:cc:ce:e9:9f:55:31:50:37:a1: 4c:b7:b0:13:8c:36:ba:40:df:7b:51:4c:ac:3b:2c: 47:22:f6:8c:4d:62:d0:10:22:57:96:02:9a:ed:2d: c2:ed:ba:e5:bc:88:65:10:ff:28:f5:a4:87:be:01: f0:c4:d2:e1:79:12:3f:82:d9:6b:53:2f:b6:29:9c: 39:5f:d2:5e:9d:9d:ab:3a:d0:ca:e3:ca:99:e4:cd: e1:6f:49:94:99:83:fc:58:9b:97:c2:0f:b5:95:29: cf:c2:21:e9:2f:8b:1d:86:e0:4d:d4:13:23:ea:48: 83:34:dd:82:45:41:6d:43:31:8b:1f:ae:51:9f:7f: 58:3b:e9:21:7c:de:5c:5e:d4:8d:ee:72:84:62:bd: 06:5e:3d:25:27:9c:46:38:e5:30:8f:34:8c:b4:f4: ce:5f:2d:26:26:86:37:87:3a:0c:30:94:a6:e8:23: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:8F:DE:73:9B:DB:4A:CA:8E:B1:49:D0:9A:06:BD:97:18:54:74 X509v3 Authority Key Identifier: keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b2:6e:97:ee:01:1a:3d:25:f1:ef:b8:0b:5e:71:d4:a4:12: 1a:d7:ad:b4:21:d5:c3:03:3f:68:b2:db:1f:13:23:f5:09:79: b3:e2:bc:b5:ad:20:de:92:21:a5:0b:a9:fe:56:77:0a:0f:2e: ba:90:04:62:2e:70:ca:90:a7:5c:06:74:d7:70:13:03:a2:d3: 36:80:be:12:17:b5:b5:c9:13:3a:aa:27:a7:ba:8e:6c:ff:8d: 92:31:8c:72:64:d6:4d:20:fe:18:76:b6:34:31:7f:5f:67:f3: 52:39:33:92:f8:3a:9e:8c:49:87:23:8b:15:20:06:08:04:46: 49:8d:2e:1c:f0:2c:ca:a8:3c:10:e4:7d:ad:cb:10:ae:c5:cf: 8b:67:85:2d:f5:ee:08:61:2b:c3:f4:0a:15:9a:c2:ad:7a:e3: 51:44:93:1b:ef:11:0b:a5:4d:79:3c:60:20:35:2f:6a:b7:b2: 34:58:d3:a7:5d:2b:65:70:57:28:0f:ce:32:2f:d2:e8:d2:e3: ae:19:98:df:e2:aa:82:e7:ca:d2:8a:3e:1d:53:4a:b2:50:fe: 76:0a:9f:11:d4:e5:6e:e5:04:91:6e:42:4d:ec:87:49:79:f1: d2:c4:3f:36:6d:d2:fa:96:54:3d:11:3f:8e:69:39:75:23:31: b0:57:cb:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42HNbtAGUPvFxbP1YNPiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZWY4MDc1NzVmNTVhYzVmZTlkZjRhNGE4NGM0Yzg3NjA4 ZjAyODUwHhcNMjUxMjE5MjMwMTA3WhcNMjUxMjIwMjMwMTA3WjAzMTEwLwYDVQQD EyhjMWRlOGZkZTczOWJkYjRhY2E4ZWIxNDlkMDlhMDZiZDk3MTg1NDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf7XrtiNbnyuJs3s1qr0NSCu5Zzf rhKUh1tAPrQmXoU7ASyM/SJ4KoKA1HfvphElStD5ArgGgVEXeF+pNOwm4i4HaKxU FQKMAK81zQET4G3MzumfVTFQN6FMt7ATjDa6QN97UUysOyxHIvaMTWLQECJXlgKa 7S3C7brlvIhlEP8o9aSHvgHwxNLheRI/gtlrUy+2KZw5X9JenZ2rOtDK48qZ5M3h b0mUmYP8WJuXwg+1lSnPwiHpL4sdhuBN1BMj6kiDNN2CRUFtQzGLH65Rn39YO+kh fN5cXtSN7nKEYr0GXj0lJ5xGOOUwjzSMtPTOXy0mJoY3hzoMMJSm6CO6aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHej95zm9tKyo6xSdCaBr2XGFR0MB8GA1UdIwQY MBaAFHnvgHV19VrF/p30pKhMTIdgjwKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTkt OWE0YThiOTMzYmRkLzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTktOWE0YThiOTMzYmRk LzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLJul+4B Gj0l8e+4C15x1KQSGtettCHVwwM/aLLbHxMj9Ql5s+K8ta0g3pIhpQup/lZ3Cg8u upAEYi5wypCnXAZ013ATA6LTNoC+Ehe1tckTOqonp7qObP+NkjGMcmTWTSD+GHa2 NDF/X2fzUjkzkvg6noxJhyOLFSAGCARGSY0uHPAsyqg8EOR9rcsQrsXPi2eFLfXu CGErw/QKFZrCrXrjUUSTG+8RC6VNeTxgIDUvareyNFjTp10rZXBXKA/OMi/S6NLj rhmY3+KqgufK0oo+HVNKslD+dgqfEdTlbuUEkW5CTeyHSXnx0sQ/Nm3S+pZUPRE/ jmk5dSMxsFfLpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:39 2025 by rpki-client