This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft File: eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json) Hash identifier: scpABcJiW4OGV/XMOX8RNRTq8+hMgsSPC9mKG3VYQQo= Subject key identifier: 5F:EF:2A:D9:AC:51:57:13:C6:75:AC:B3:BB:F4:4C:7A:71:3E:3E:26 Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Certificate serial: 019B1C1774F962F8F2E871164CCAED5072D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft Manifest number: 0B16 Signing time: Sun 14 Dec 2025 09:00:57 +0000 Manifest this update: Sun 14 Dec 2025 09:00:57 +0000 Manifest next update: Mon 15 Dec 2025 09:00:57 +0000 Files and hashes: 1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=) 2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: bbIdc/1O23PrJWjdXxcKouTqJu/rW2Ga/NtAiKwIFLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:74:f9:62:f8:f2:e8:71:16:4c:ca:ed:50:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Validity Not Before: Dec 14 09:00:57 2025 GMT Not After : Dec 15 09:00:57 2025 GMT Subject: CN=5fef2ad9ac515713c675acb3bbf44c7a713e3e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:a6:48:20:91:83:5e:49:3b:78:e2:79:04: e4:a2:a1:9f:49:26:a8:ad:c0:8d:45:cf:2e:5a:11: cb:01:3d:03:bd:17:82:2f:d8:c3:a6:25:dc:4e:18: 68:b9:19:27:b2:38:9a:ff:af:e3:7e:68:93:7f:46: 87:04:cc:53:6c:b9:08:8f:e2:21:51:90:7c:11:3c: bb:b6:b6:18:10:70:32:69:50:93:8b:1c:f4:12:d6: f3:9e:47:d3:4f:a8:f5:a0:4c:a9:8a:d8:7d:2c:26: 1f:46:b7:5c:98:6c:26:d1:fd:9c:6f:de:b2:64:dc: c2:56:d4:5b:e8:9b:4f:57:5e:f2:fc:bc:db:b1:d0: 87:d0:30:b7:aa:89:e0:35:43:2e:a4:9a:6b:c9:dc: dd:cd:75:78:1e:9a:0b:99:af:c3:58:83:6b:27:03: 18:4a:af:75:b1:9c:74:99:a2:be:71:cc:26:c7:1e: fe:ce:b0:44:96:cd:21:80:99:d8:3b:b3:ff:50:20: ce:42:4b:93:86:fc:f1:73:f1:d6:08:62:db:d5:89: 8a:94:24:91:58:c4:8b:4b:5f:5f:0c:22:a5:f4:b3: 73:80:62:7b:4e:d9:ea:39:40:73:bd:16:02:82:79: 88:b6:c6:5e:fc:0d:16:8e:4a:bb:ab:ed:23:91:15: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EF:2A:D9:AC:51:57:13:C6:75:AC:B3:BB:F4:4C:7A:71:3E:3E:26 X509v3 Authority Key Identifier: keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:d2:cc:63:f9:69:6d:53:10:b7:b2:18:41:33:54:23:f9: 4f:0e:a5:6c:8c:72:6d:14:ed:d5:6a:e2:49:bf:5b:d6:de:2b: ca:8d:76:43:c5:ae:c6:f4:39:fd:ee:f0:5a:36:df:f0:57:c0: 3a:cc:75:b3:c2:5d:57:a3:d6:0c:30:9a:2b:af:16:52:65:f9: 17:07:8b:57:5e:58:37:36:46:a6:91:e9:6c:63:29:18:f0:eb: 64:a3:16:f5:f5:ab:1d:bd:3c:c4:51:4d:1a:d8:5e:38:dd:99: 29:88:d4:d1:10:6c:1a:20:7f:6f:94:de:f2:cd:52:4b:f8:7e: 5a:8a:0e:39:e8:78:24:e1:f8:a5:1c:95:ce:ab:5a:7a:ec:67: c7:86:aa:46:dd:00:8b:81:9a:86:33:28:4b:4c:fa:40:01:29: 45:67:67:1f:f5:f8:f6:7a:bc:04:0a:85:79:15:9a:ab:46:c0: 81:4a:17:88:9b:93:cb:76:3a:c6:f2:bd:68:97:0e:3e:82:65: b0:9a:7f:9b:de:15:0b:1f:30:cb:a6:aa:d8:e7:d3:1d:6e:24: 06:a5:e8:cb:62:ce:0d:e8:d6:39:bc:4b:5a:a9:89:00:d1:c6: 88:1b:a4:f9:ed:48:8f:fd:7e:d7:24:14:bb:24:29:67:bd:ca: c6:e8:81:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF3T5Yvjy6HEWTMrtUHLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl OGM5OGYwHhcNMjUxMjE0MDkwMDU3WhcNMjUxMjE1MDkwMDU3WjAzMTEwLwYDVQQD Eyg1ZmVmMmFkOWFjNTE1NzEzYzY3NWFjYjNiYmY0NGM3YTcxM2UzZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12KmSCCRg15JO3jieQTkoqGfSSao rcCNRc8uWhHLAT0DvReCL9jDpiXcThhouRknsjia/6/jfmiTf0aHBMxTbLkIj+Ih UZB8ETy7trYYEHAyaVCTixz0EtbznkfTT6j1oEypith9LCYfRrdcmGwm0f2cb96y ZNzCVtRb6JtPV17y/LzbsdCH0DC3qongNUMupJprydzdzXV4HpoLma/DWINrJwMY Sq91sZx0maK+ccwmxx7+zrBEls0hgJnYO7P/UCDOQkuThvzxc/HWCGLb1YmKlCSR WMSLS19fDCKl9LNzgGJ7TtnqOUBzvRYCgnmItsZe/A0Wjkq7q+0jkRWiNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/vKtmsUVcTxnWss7v0THpxPj4mMB8GA1UdIwQY MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt OGFhY2MxZjQ4MTA4LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4 LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqPSzGP5 aW1TELeyGEEzVCP5Tw6lbIxybRTt1WriSb9b1t4ryo12Q8WuxvQ5/e7wWjbf8FfA Osx1s8JdV6PWDDCaK68WUmX5FweLV15YNzZGppHpbGMpGPDrZKMW9fWrHb08xFFN GtheON2ZKYjU0RBsGiB/b5Te8s1SS/h+WooOOeh4JOH4pRyVzqtaeuxnx4aqRt0A i4GahjMoS0z6QAEpRWdnH/X49nq8BAqFeRWaq0bAgUoXiJuTy3Y6xvK9aJcOPoJl sJp/m94VCx8wy6aq2OfTHW4kBqXoy2LODejWObxLWqmJANHGiBuk+e1Ij/1+1yQU uyQpZ73KxuiBmw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:01:25 2025 by rpki-client