This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json) Hash identifier: T7AZj7dy7GxjoCO/Ef17scEyAtRIUdNODbQgUKbjJwA= Subject key identifier: 69:69:8E:00:BA:86:06:55:49:1B:99:3F:D7:A8:F5:8C:15:BC:03:DE Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf Certificate serial: 019B337B21367D12F3BF0C24D915FBF7C3C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 22:01:05 +0000 Manifest this update: Thu 18 Dec 2025 22:01:05 +0000 Manifest next update: Fri 19 Dec 2025 22:01:05 +0000 Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: j+uYrsb+d+89BWxw0aKy/ssrNn0VXUjCFYcK9AwSrqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:21:36:7d:12:f3:bf:0c:24:d9:15:fb:f7:c3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf Validity Not Before: Dec 18 22:01:05 2025 GMT Not After : Dec 19 22:01:05 2025 GMT Subject: CN=69698e00ba860655491b993fd7a8f58c15bc03de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:7d:68:62:52:0c:52:f3:28:60:32:65:e4: 93:5c:74:69:2f:b9:34:d3:8b:b7:90:a8:d0:15:95: 17:7d:73:f9:9b:d5:3b:8e:3b:d6:e9:dd:1d:ff:c0: b4:cd:98:b1:a7:48:6c:ae:13:78:ee:4a:a3:e1:11: 50:7a:92:99:96:ed:2c:6a:3b:47:87:aa:d1:cc:c4: cb:d9:19:82:30:8b:0a:f7:83:70:4f:ff:4f:3f:ee: 83:31:cf:f7:36:e1:21:da:83:b9:ce:76:1c:38:91: 91:e3:6f:26:3b:e1:b6:fe:e7:e0:40:29:db:36:e7: e2:44:de:f0:f7:50:3b:c3:a7:21:19:5a:29:7f:43: 3f:2c:7b:0c:7b:35:1e:9d:ca:37:28:20:e6:48:86: 19:fa:f6:29:0d:21:74:16:ab:0f:e8:56:08:25:fa: 6f:27:06:b8:3d:73:5d:6b:32:ac:18:92:c4:02:37: 2a:b2:7c:d0:1d:6e:ff:8d:f8:35:2c:56:8f:84:58: 30:70:7d:fb:5c:ff:44:ab:9e:c0:0b:aa:27:3f:4d: f4:b0:8c:85:a5:3b:d3:21:79:76:89:b2:ea:6f:69: a8:ec:01:76:af:5f:8a:b2:81:03:a8:95:57:19:e7: fd:20:91:91:8b:77:47:00:f4:82:94:af:bf:1b:96: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:8E:00:BA:86:06:55:49:1B:99:3F:D7:A8:F5:8C:15:BC:03:DE X509v3 Authority Key Identifier: keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ac:2d:50:a8:12:db:d6:3a:34:3b:79:c7:27:2d:35:09:47: be:16:93:44:a7:94:68:2a:48:3e:23:77:a3:a8:25:bb:03:50: c2:62:0c:67:b3:c9:56:18:26:1e:32:6d:22:89:67:53:dd:a7: 42:c2:44:ce:0c:67:b7:9a:96:36:1d:b2:be:9c:20:78:61:1d: 26:b5:23:34:aa:de:72:78:79:e7:14:d0:ff:9b:ca:76:1a:d4: 2a:7c:8b:eb:21:3b:33:51:7b:14:fd:d9:7e:ec:14:f9:ce:a5: f2:6c:2a:3b:bc:15:75:bb:df:e9:3a:f5:04:64:28:15:b3:06: cb:6c:63:96:ca:0d:6c:85:c3:2c:22:57:40:60:15:37:16:dd: cb:c7:09:27:4c:4c:18:cc:58:60:a2:83:53:a2:5b:a5:31:65: 3a:b7:2b:51:eb:32:f8:00:6b:b6:39:a7:6a:e8:33:a1:61:b7: 24:20:9d:b5:18:27:9c:2d:8c:51:19:e7:80:e8:15:82:ab:78: 22:76:01:e3:68:89:12:16:1d:6d:cf:12:0e:72:69:a8:5c:b1: b4:40:be:a1:78:aa:ef:7b:da:b7:a7:89:58:0f:f4:d8:73:9e: e4:a1:bf:87:d2:36:52:28:f3:7f:aa:6f:6f:fa:cb:ba:b0:0d: b7:ce:b6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeyE2fRLzvwwk2RX798PIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy YWZhZGYwHhcNMjUxMjE4MjIwMTA1WhcNMjUxMjE5MjIwMTA1WjAzMTEwLwYDVQQD Eyg2OTY5OGUwMGJhODYwNjU1NDkxYjk5M2ZkN2E4ZjU4YzE1YmMwM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlx9aGJSDFLzKGAyZeSTXHRpL7k0 04u3kKjQFZUXfXP5m9U7jjvW6d0d/8C0zZixp0hsrhN47kqj4RFQepKZlu0sajtH h6rRzMTL2RmCMIsK94NwT/9PP+6DMc/3NuEh2oO5znYcOJGR428mO+G2/ufgQCnb NufiRN7w91A7w6chGVopf0M/LHsMezUenco3KCDmSIYZ+vYpDSF0FqsP6FYIJfpv Jwa4PXNdazKsGJLEAjcqsnzQHW7/jfg1LFaPhFgwcH37XP9Eq57AC6onP030sIyF pTvTIXl2ibLqb2mo7AF2r1+KsoEDqJVXGef9IJGRi3dHAPSClK+/G5b4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlpjgC6hgZVSRuZP9eo9YwVvAPeMB8GA1UdIwQY MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKwtUKgS 29Y6NDt5xyctNQlHvhaTRKeUaCpIPiN3o6gluwNQwmIMZ7PJVhgmHjJtIolnU92n QsJEzgxnt5qWNh2yvpwgeGEdJrUjNKrecnh55xTQ/5vKdhrUKnyL6yE7M1F7FP3Z fuwU+c6l8mwqO7wVdbvf6Tr1BGQoFbMGy2xjlsoNbIXDLCJXQGAVNxbdy8cJJ0xM GMxYYKKDU6JbpTFlOrcrUesy+ABrtjmnaugzoWG3JCCdtRgnnC2MURnngOgVgqt4 InYB42iJEhYdbc8SDnJpqFyxtEC+oXiq73vat6eJWA/02HOe5KG/h9I2Uijzf6pv b/rLurANt862xA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:12 2025 by rpki-client