This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json) Hash identifier: a7FeLxSUDu1NyV6cNLgGr7Jcmua/weWSZ8YKfuTPsdc= Subject key identifier: 95:34:85:08:44:1E:78:11:D2:F7:AD:C4:19:11:05:C0:20:E1:F4:83 Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Certificate serial: 019B40FFF90552960E938CA07E786D9644C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft Manifest number: 171B Signing time: Sun 21 Dec 2025 13:01:15 +0000 Manifest this update: Sun 21 Dec 2025 13:01:15 +0000 Manifest next update: Mon 22 Dec 2025 13:01:15 +0000 Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: Tre2k7ta3sQKcuJhXmaX0wp4xSzQKZXj8VhQLrMgKH4=) 2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f9:05:52:96:0e:93:8c:a0:7e:78:6d:96:44:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Validity Not Before: Dec 21 13:01:15 2025 GMT Not After : Dec 22 13:01:15 2025 GMT Subject: CN=95348508441e7811d2f7adc4191105c020e1f483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:39:08:dd:ed:75:40:f2:d1:d1:c7:c0:a5: 65:7c:05:ff:6a:f9:62:5f:f6:ad:80:aa:16:b1:d8: e4:b1:91:75:34:ae:f4:8e:cb:f1:16:05:ce:27:43: 77:d5:05:f2:4b:a7:4f:38:b8:dd:2e:10:99:dd:28: 12:39:f4:97:db:58:0c:ad:7c:84:35:2e:60:69:b9: 37:92:08:b6:96:40:09:02:e7:b1:4e:06:81:37:7e: b8:a8:e3:d2:2a:f8:6b:cb:a2:47:8b:90:6d:e2:c5: 5c:d8:d9:4f:f5:a7:96:33:5c:b5:26:cb:90:87:06: ad:31:04:43:ea:d3:79:fd:9f:00:bc:be:77:74:52: b0:74:13:e4:a5:41:44:82:b7:f3:35:24:96:16:2e: 5c:18:5f:e3:86:1b:91:41:1d:70:9a:59:32:07:70: 95:bc:e3:b2:e4:2b:78:5c:e0:9f:25:fc:59:4a:1d: f6:42:59:8a:eb:33:f9:dd:b1:4f:9f:1a:ff:03:02: 1f:86:08:10:e4:fb:fc:dc:26:b9:aa:fb:be:fc:24: ac:3f:b5:1b:3a:8b:bf:c5:6e:82:e9:33:7b:60:81: e7:53:8a:e0:6c:2e:3c:b1:44:08:7a:57:2f:22:65: 9a:2c:cc:5d:5b:d8:50:96:4c:d2:8a:b7:86:33:40: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:85:08:44:1E:78:11:D2:F7:AD:C4:19:11:05:C0:20:E1:F4:83 X509v3 Authority Key Identifier: keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:fc:21:ea:66:67:d9:ac:e8:ea:56:ca:ed:04:7a:4b:d9:da: 74:6f:dd:2c:71:43:b6:92:5b:e7:c5:34:83:33:f4:eb:bb:e1: 54:da:46:52:17:ba:34:4f:ce:20:55:a7:f5:4c:c1:78:a3:bd: 9a:87:57:df:5f:7b:78:f0:8d:98:89:f9:0d:3d:b7:c2:62:72: 01:93:83:2e:ac:1b:ae:32:57:c2:85:df:86:b3:ed:c7:ec:da: b5:1f:00:fc:84:aa:10:00:fd:b6:96:96:ce:ed:71:6f:d2:c3: 66:21:1a:9a:ce:39:96:dc:5a:eb:09:85:79:e1:75:3f:13:fb: 22:34:5f:b5:d7:35:39:6a:09:23:23:45:99:1f:fd:92:d4:69: 62:3d:51:59:31:9a:cf:63:a5:71:90:b4:6f:bd:05:09:6d:4d: a9:1c:99:51:34:ab:93:17:01:66:98:f5:f3:5d:8d:9f:ce:45: f3:6d:3d:a6:2d:7d:63:d1:ec:79:33:bb:f0:a3:90:82:dd:eb: 23:34:43:a1:f9:46:bb:07:db:43:c9:a9:ff:5a:7f:ce:28:7d: 42:c0:bc:17:09:d0:39:b4:6c:05:ad:a3:2b:dc:c7:c1:3f:8b: 89:69:7a:21:ff:65:d6:61:cd:74:fc:0d:f0:be:65:00:f1:d7: dc:25:69:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//kFUpYOk4ygfnhtlkTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDZjNzg3OGY3YjNmNWRhMDkwMWRlYzc0NzNhYTIyOTE1 NTZlNzIwHhcNMjUxMjIxMTMwMTE1WhcNMjUxMjIyMTMwMTE1WjAzMTEwLwYDVQQD Eyg5NTM0ODUwODQ0MWU3ODExZDJmN2FkYzQxOTExMDVjMDIwZTFmNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+45CN3tdUDy0dHHwKVlfAX/avli X/atgKoWsdjksZF1NK70jsvxFgXOJ0N31QXyS6dPOLjdLhCZ3SgSOfSX21gMrXyE NS5gabk3kgi2lkAJAuexTgaBN364qOPSKvhry6JHi5Bt4sVc2NlP9aeWM1y1JsuQ hwatMQRD6tN5/Z8AvL53dFKwdBPkpUFEgrfzNSSWFi5cGF/jhhuRQR1wmlkyB3CV vOOy5Ct4XOCfJfxZSh32QlmK6zP53bFPnxr/AwIfhggQ5Pv83Ca5qvu+/CSsP7Ub Oou/xW6C6TN7YIHnU4rgbC48sUQIelcvImWaLMxdW9hQlkzSireGM0CnIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU0hQhEHngR0vetxBkRBcAg4fSDMB8GA1UdIwQY MBaAFBMGx4ePez9doJAd7HRzqiKRVW5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTIt ZGEzNGZjYjdiOTQyLzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTItZGEzNGZjYjdiOTQy LzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzfwh6mZn 2azo6lbK7QR6S9nadG/dLHFDtpJb58U0gzP067vhVNpGUhe6NE/OIFWn9UzBeKO9 modX3197ePCNmIn5DT23wmJyAZODLqwbrjJXwoXfhrPtx+zatR8A/ISqEAD9tpaW zu1xb9LDZiEams45ltxa6wmFeeF1PxP7IjRftdc1OWoJIyNFmR/9ktRpYj1RWTGa z2OlcZC0b70FCW1NqRyZUTSrkxcBZpj1812Nn85F8209pi19Y9HseTO78KOQgt3r IzRDoflGuwfbQ8mp/1p/zih9QsC8FwnQObRsBa2jK9zHwT+LiWl6If9l1mHNdPwN 8L5lAPHX3CVpcw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:11 2025 by rpki-client