This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json) Hash identifier: HIH3E/mPzoHxHJKcmvsobqj+RaPH/tvRsfhbFhsRRNw= Subject key identifier: F3:97:56:1C:B3:56:61:53:53:6D:BD:F2:AB:23:99:5D:1F:7F:EB:D3 Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b Certificate serial: 019B08FE1CCE5DCFC2E0162C495708F4814E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft Manifest number: 1212 Signing time: Wed 10 Dec 2025 16:00:29 +0000 Manifest this update: Wed 10 Dec 2025 16:00:29 +0000 Manifest next update: Thu 11 Dec 2025 16:00:29 +0000 Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: si5p2DH0vSu3J/rboK2YKON5wQyPkw5BxJHyMX038pc=) 2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:1c:ce:5d:cf:c2:e0:16:2c:49:57:08:f4:81:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b Validity Not Before: Dec 10 16:00:29 2025 GMT Not After : Dec 11 16:00:29 2025 GMT Subject: CN=f397561cb3566153536dbdf2ab23995d1f7febd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:06:69:bf:65:a4:32:95:2c:17:b5:ef:bf: ce:cd:50:b8:48:dc:30:d4:c9:37:be:06:7c:a0:fd: b0:c5:a0:91:22:57:47:05:04:96:53:b7:70:28:3f: bb:ed:42:65:5d:f1:c9:e4:d9:52:88:dc:89:c3:71: 95:47:1f:81:56:5a:62:70:29:64:c3:85:65:78:d0: 4a:68:38:6c:72:e4:cb:68:a3:7d:18:91:3a:87:10: 12:f0:a4:51:05:52:4a:7a:a5:36:09:b8:fb:31:d7: b8:17:4e:5b:b5:d5:dc:66:94:17:20:21:79:5b:ac: c0:95:e3:41:fa:84:e8:3f:79:d7:0c:ed:ef:30:65: 12:f5:ee:49:55:c7:95:18:ff:7c:c3:ce:00:b4:a2: 90:e1:d5:2f:2a:4c:2a:59:37:ca:de:22:53:8b:a6: c0:cd:2e:8b:1b:68:e5:e1:28:49:0f:fc:46:0c:65: 3e:56:6b:19:9a:36:a4:f8:61:cf:6b:aa:a4:ed:0c: 2e:8f:88:73:72:e5:2e:f5:22:0e:43:e8:67:15:2e: 2b:15:67:f8:44:ce:42:9f:ce:14:77:ca:b4:29:80: ce:c9:fa:47:71:8c:e2:52:cf:bc:89:a1:ce:6f:5a: 08:78:70:81:01:d7:c8:37:5f:2b:d8:4a:f1:4e:f4: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:97:56:1C:B3:56:61:53:53:6D:BD:F2:AB:23:99:5D:1F:7F:EB:D3 X509v3 Authority Key Identifier: keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:95:f4:44:1c:07:a1:82:dd:4d:bc:75:81:5f:5a:3d:31:68: 93:14:4a:08:a9:13:7b:ca:85:6c:39:c4:1e:3d:96:8e:9b:b4: 20:ed:68:bb:d1:e9:9d:a1:ad:0c:08:fc:ab:94:e1:8d:da:af: 27:2d:07:88:ba:b9:e7:69:a9:3a:c1:72:58:de:5f:83:48:e5: 5d:b5:f9:39:b0:7b:b4:01:4d:34:bf:09:45:16:c0:30:ef:45: c0:ce:15:c4:40:40:98:51:c8:82:26:b8:85:9e:3d:69:85:d4: 61:2b:05:07:27:c1:66:b5:d6:0e:4d:09:2b:c1:51:c6:57:17: 14:bb:7e:7d:c1:44:16:a2:33:43:71:cf:15:da:15:f2:a6:b7: e7:25:bb:53:4c:64:ec:c0:12:98:ac:d0:9f:36:47:3d:b4:af: 46:29:43:c7:4d:8b:40:fe:6b:3b:e8:ba:bc:aa:dc:6a:35:65: 77:b1:e1:fd:de:8d:90:dc:96:5e:34:7a:27:f7:82:49:60:2a: 4b:3c:e1:ac:30:4c:e4:52:0c:27:0e:ab:cc:82:e3:c0:04:17: 86:6b:ba:5e:87:96:23:46:cc:f0:ca:2c:25:1d:a9:bf:28:36: 01:e8:0a:4e:25:5f:53:2a:f8:ec:15:7e:43:6a:b6:e0:19:37: 8f:7d:c0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/hzOXc/C4BYsSVcI9IFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNjYwZjBhMDVmYzRjZjczMzIyMzA4NTJkOWQ3OGJkN2Fj MmYyNGIwHhcNMjUxMjEwMTYwMDI5WhcNMjUxMjExMTYwMDI5WjAzMTEwLwYDVQQD EyhmMzk3NTYxY2IzNTY2MTUzNTM2ZGJkZjJhYjIzOTk1ZDFmN2ZlYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p8Gab9lpDKVLBe177/OzVC4SNww 1Mk3vgZ8oP2wxaCRIldHBQSWU7dwKD+77UJlXfHJ5NlSiNyJw3GVRx+BVlpicClk w4VleNBKaDhscuTLaKN9GJE6hxAS8KRRBVJKeqU2Cbj7Mde4F05btdXcZpQXICF5 W6zAleNB+oToP3nXDO3vMGUS9e5JVceVGP98w84AtKKQ4dUvKkwqWTfK3iJTi6bA zS6LG2jl4ShJD/xGDGU+VmsZmjak+GHPa6qk7Qwuj4hzcuUu9SIOQ+hnFS4rFWf4 RM5Cn84Ud8q0KYDOyfpHcYziUs+8iaHOb1oIeHCBAdfIN18r2ErxTvQLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOXVhyzVmFTU2298qsjmV0ff+vTMB8GA1UdIwQY MBaAFBFmDwoF/Ez3MyIwhS2deL16wvJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEt N2EwNmZmMDAyNTE3LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEtN2EwNmZmMDAyNTE3 LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJX0RBwH oYLdTbx1gV9aPTFokxRKCKkTe8qFbDnEHj2Wjpu0IO1ou9HpnaGtDAj8q5Thjdqv Jy0HiLq552mpOsFyWN5fg0jlXbX5ObB7tAFNNL8JRRbAMO9FwM4VxEBAmFHIgia4 hZ49aYXUYSsFByfBZrXWDk0JK8FRxlcXFLt+fcFEFqIzQ3HPFdoV8qa35yW7U0xk 7MASmKzQnzZHPbSvRilDx02LQP5rO+i6vKrcajVld7Hh/d6NkNyWXjR6J/eCSWAq SzzhrDBM5FIMJw6rzILjwAQXhmu6XoeWI0bM8MosJR2pvyg2AegKTiVfUyr47BV+ Q2q24Bk3j33AVg== -----END CERTIFICATE-----Generated at Wed Dec 10 21:44:28 2025 by rpki-client