This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft File: EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json) Hash identifier: TIEByK5S/vJo1HejOBFyxi5TpoePeuKwwDrkKTU7tiM= Subject key identifier: 8A:D8:4E:A7:85:32:E9:A4:E3:18:BC:34:A0:7F:C3:AF:39:4C:87:9E Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Certificate serial: 019B4ADEF69CC8F21EEDD064393B8E473569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft Manifest number: 11EC Signing time: Tue 23 Dec 2025 11:01:24 +0000 Manifest this update: Tue 23 Dec 2025 11:01:24 +0000 Manifest next update: Wed 24 Dec 2025 11:01:24 +0000 Files and hashes: 1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: 5G6Cxz2q1Vmsd3aeSrKMJAzOD41JZapxvUGIkumNv30=) 2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:f6:9c:c8:f2:1e:ed:d0:64:39:3b:8e:47:35:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Validity Not Before: Dec 23 11:01:24 2025 GMT Not After : Dec 24 11:01:24 2025 GMT Subject: CN=8ad84ea78532e9a4e318bc34a07fc3af394c879e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:f0:41:81:18:49:ae:82:a1:bb:f1:06:e7: cf:d5:1a:b3:5b:56:9b:56:19:90:57:e4:63:12:9f: 4f:01:bd:6f:ce:22:26:c5:59:e9:3f:ac:49:66:a5: 9b:85:5e:eb:e5:1a:06:c6:3b:92:c9:6c:ca:a8:95: 33:7d:77:2c:19:46:dc:5a:81:e8:51:cd:85:62:0a: b9:14:8b:0e:a5:66:c3:7c:42:b9:74:3f:56:cb:03: eb:15:e5:95:09:66:ee:20:2e:22:43:4d:c9:f6:e6: 65:9c:d0:64:ac:53:ba:bb:c7:79:05:3a:16:f3:eb: 4b:1c:b7:c1:d0:e5:d4:bc:b6:24:c5:a3:af:53:f9: 9d:49:83:dd:8c:69:2d:ed:b3:f4:79:99:98:c1:6c: 91:be:83:ad:08:03:8e:b5:55:bb:c7:8e:f0:00:b8: 88:c4:3e:f9:4c:23:90:d6:5a:ed:e7:c8:99:03:fd: aa:64:3d:88:5a:34:1d:6e:c5:9b:bf:7c:f2:e4:e7: d5:0a:e4:a4:13:cc:56:26:4c:1d:43:13:9a:e3:65: 8b:af:59:d2:62:07:28:0b:1a:cc:d9:c6:a1:01:d2: a7:ce:cd:ea:3d:04:af:bd:e2:29:ad:43:03:85:a8: 47:78:11:a3:76:80:00:20:6b:6b:2e:77:bd:b6:c4: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D8:4E:A7:85:32:E9:A4:E3:18:BC:34:A0:7F:C3:AF:39:4C:87:9E X509v3 Authority Key Identifier: keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:04:2c:fa:67:33:07:08:33:6b:01:c9:3b:89:ed:c7:0c:9b: 43:d4:09:fd:cd:e7:54:e1:70:de:89:e7:79:c1:19:d8:f1:a0: 24:90:ae:3b:f2:e4:2e:b1:22:d1:94:79:ec:2d:f5:a4:a0:e4: 6a:80:67:e9:a5:8b:d8:6b:d4:c4:3e:56:6f:c0:c9:54:e2:6a: d8:2d:16:48:9d:b9:6f:fc:20:50:fd:22:1d:a9:01:4b:8a:20: 63:80:4c:67:94:fd:f5:b7:1b:57:c7:a0:a1:a0:8c:5e:cf:ae: 52:f2:3a:c6:4f:44:1f:51:21:80:58:d2:4f:a6:86:e3:e9:9b: 53:95:8c:f5:11:b7:3d:35:60:2d:3c:18:74:03:58:f5:73:e2: 7a:42:e4:b2:ed:f4:34:10:22:2b:fc:ff:7c:75:cd:61:ba:a1: 57:4b:79:17:86:22:b0:bb:a9:21:48:6c:7f:4e:94:0f:98:81: 4f:1d:7e:8f:e7:94:35:0d:5e:f1:b0:b2:0d:48:7b:05:67:94: be:f4:bb:23:92:a0:24:6d:ef:c6:b2:f3:cb:a3:ac:2b:63:72: 96:a5:fa:33:15:dd:69:86:a9:f2:12:24:a0:5e:0a:ad:23:12: 63:e2:d1:01:f5:10:40:da:5c:d0:2f:33:31:b7:02:b7:93:fb: 32:d9:6a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3vacyPIe7dBkOTuORzVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi NGVjYjQwHhcNMjUxMjIzMTEwMTI0WhcNMjUxMjI0MTEwMTI0WjAzMTEwLwYDVQQD Eyg4YWQ4NGVhNzg1MzJlOWE0ZTMxOGJjMzRhMDdmYzNhZjM5NGM4NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f7wQYEYSa6CobvxBufP1RqzW1ab VhmQV+RjEp9PAb1vziImxVnpP6xJZqWbhV7r5RoGxjuSyWzKqJUzfXcsGUbcWoHo Uc2FYgq5FIsOpWbDfEK5dD9WywPrFeWVCWbuIC4iQ03J9uZlnNBkrFO6u8d5BToW 8+tLHLfB0OXUvLYkxaOvU/mdSYPdjGkt7bP0eZmYwWyRvoOtCAOOtVW7x47wALiI xD75TCOQ1lrt58iZA/2qZD2IWjQdbsWbv3zy5OfVCuSkE8xWJkwdQxOa42WLr1nS YgcoCxrM2cahAdKnzs3qPQSvveIprUMDhahHeBGjdoAAIGtrLne9tsQDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrYTqeFMumk4xi8NKB/w685TIeeMB8GA1UdIwQY MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt ODMwMmVkODUwYzg3LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3 LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAQs+mcz BwgzawHJO4ntxwybQ9QJ/c3nVOFw3onnecEZ2PGgJJCuO/LkLrEi0ZR57C31pKDk aoBn6aWL2GvUxD5Wb8DJVOJq2C0WSJ25b/wgUP0iHakBS4ogY4BMZ5T99bcbV8eg oaCMXs+uUvI6xk9EH1EhgFjST6aG4+mbU5WM9RG3PTVgLTwYdANY9XPiekLksu30 NBAiK/z/fHXNYbqhV0t5F4YisLupIUhsf06UD5iBTx1+j+eUNQ1e8bCyDUh7BWeU vvS7I5KgJG3vxrLzy6OsK2NylqX6MxXdaYap8hIkoF4KrSMSY+LRAfUQQNpc0C8z MbcCt5P7MtlqFg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:03 2025 by rpki-client