This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json) Hash identifier: FrD4M5x1kPBq9SaiTrJRC/h3WzzYQ3nVvtIeFnGakQo= Subject key identifier: BB:66:4C:F1:90:57:DD:C6:33:E5:B9:35:EC:0B:C7:00:C4:42:50:31 Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Certificate serial: 019B47702A8B4049832526E5E4499169DA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft Manifest number: 14F3 Signing time: Mon 22 Dec 2025 19:01:31 +0000 Manifest this update: Mon 22 Dec 2025 19:01:31 +0000 Manifest next update: Tue 23 Dec 2025 19:01:31 +0000 Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: uGvFOAmPd9jo4BnID9g1areBslEIu1N4MrPKq15B7g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:2a:8b:40:49:83:25:26:e5:e4:49:91:69:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31 Validity Not Before: Dec 22 19:01:31 2025 GMT Not After : Dec 23 19:01:31 2025 GMT Subject: CN=bb664cf19057ddc633e5b935ec0bc700c4425031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:e1:a4:2c:8b:52:c8:53:55:13:ad:36:fc: bd:4f:95:f3:03:8e:8b:60:7d:61:59:41:78:5e:e6: f1:aa:23:26:1e:bf:14:2c:c0:6b:d2:bb:af:23:47: 76:c5:cf:7e:c1:93:2c:19:e9:e3:db:6c:97:95:9c: d3:6c:a0:0f:13:d5:08:f5:32:1b:72:87:17:b2:9b: 65:38:1d:c8:60:dc:c4:aa:52:7b:78:5b:eb:cf:46: c0:aa:2a:f3:1a:3a:d7:bd:6d:ae:ca:b9:85:b8:41: e4:1d:7a:c2:c9:2b:64:8f:2c:17:75:d7:52:6d:b3: dc:30:27:76:77:d1:ae:5d:10:96:64:ef:f6:e7:9d: 13:40:c1:5e:fd:29:f8:50:5e:f4:f3:ed:f1:7b:3c: 80:d0:05:25:0d:70:16:ee:73:0c:eb:30:9f:29:f4: bb:5c:fc:73:9a:86:09:11:a7:ea:30:31:27:d2:b2: e2:9b:d0:8f:e6:1e:17:55:1e:2c:72:cf:fe:ae:77: 1f:6a:7f:0b:cd:ae:3e:98:a4:1b:f7:cd:25:71:85: 3f:6c:63:99:b7:fc:7d:af:7e:10:e1:c2:40:d1:ca: c0:8d:3e:93:73:f4:78:d2:68:43:a2:81:e5:43:c3: f4:c3:4d:3e:bc:56:a4:55:92:f6:62:0a:bf:42:51: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:66:4C:F1:90:57:DD:C6:33:E5:B9:35:EC:0B:C7:00:C4:42:50:31 X509v3 Authority Key Identifier: keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b8:e6:b8:07:51:85:a8:a7:b5:3d:cf:f2:1e:36:d7:cc:4c: 3d:35:79:a7:c8:12:6c:83:e0:67:77:84:60:16:52:8a:6c:f9: 1d:92:92:29:27:da:70:43:46:2d:3b:28:7d:ab:83:ff:5a:ec: fe:1e:b2:bf:03:d1:51:32:de:37:97:50:a1:b7:46:78:97:11: e6:9e:ea:2c:ae:61:a4:14:9b:6d:36:16:6a:77:05:0e:19:b9: b7:a2:92:14:be:83:0e:55:db:a1:66:28:ae:c9:96:f8:ce:29: 34:92:69:44:a4:04:7a:1a:19:e8:12:35:8b:0e:e7:80:e6:24: 72:d7:07:d6:2e:06:5c:4e:64:9c:91:39:55:ca:22:52:6d:48: e4:90:5f:94:59:84:25:01:63:f3:c9:81:de:ef:61:42:53:69: 37:0f:45:d5:6a:82:a7:09:4a:ae:bc:85:35:83:0c:b2:da:77: 7a:66:5b:0b:65:b7:ef:63:da:c0:23:31:e5:b2:47:93:4a:93: 81:70:87:9d:a4:d1:c1:6c:fd:8a:62:21:e7:9d:94:27:d0:60: 1d:61:ee:f3:55:ba:35:45:58:a7:35:fd:4b:27:cd:68:fe:f9: bb:81:c4:aa:fc:40:d3:07:a6:53:f5:9d:7d:14:08:ae:a5:11: a2:74:52:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcCqLQEmDJSbl5EmRadogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk OGRmMzEwHhcNMjUxMjIyMTkwMTMxWhcNMjUxMjIzMTkwMTMxWjAzMTEwLwYDVQQD EyhiYjY2NGNmMTkwNTdkZGM2MzNlNWI5MzVlYzBiYzcwMGM0NDI1MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGPhpCyLUshTVROtNvy9T5XzA46L YH1hWUF4XubxqiMmHr8ULMBr0ruvI0d2xc9+wZMsGenj22yXlZzTbKAPE9UI9TIb cocXsptlOB3IYNzEqlJ7eFvrz0bAqirzGjrXvW2uyrmFuEHkHXrCyStkjywXdddS bbPcMCd2d9GuXRCWZO/2550TQMFe/Sn4UF708+3xezyA0AUlDXAW7nMM6zCfKfS7 XPxzmoYJEafqMDEn0rLim9CP5h4XVR4scs/+rncfan8Lza4+mKQb980lcYU/bGOZ t/x9r34Q4cJA0crAjT6Tc/R40mhDooHlQ8P0w00+vFakVZL2Ygq/QlF+UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtmTPGQV93GM+W5NewLxwDEQlAxMB8GA1UdIwQY MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7jmuAdR haintT3P8h4218xMPTV5p8gSbIPgZ3eEYBZSimz5HZKSKSfacENGLTsofauD/1rs /h6yvwPRUTLeN5dQobdGeJcR5p7qLK5hpBSbbTYWancFDhm5t6KSFL6DDlXboWYo rsmW+M4pNJJpRKQEehoZ6BI1iw7ngOYkctcH1i4GXE5knJE5VcoiUm1I5JBflFmE JQFj88mB3u9hQlNpNw9F1WqCpwlKrryFNYMMstp3emZbC2W372PawCMx5bJHk0qT gXCHnaTRwWz9imIh552UJ9BgHWHu81W6NUVYpzX9SyfNaP75u4HEqvxA0wemU/Wd fRQIrqURonRSug== -----END CERTIFICATE-----Generated at Mon Dec 22 20:47:46 2025 by rpki-client