This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft File: eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json) Hash identifier: YEF7jBH5PIF1hZjo/4+YcnXFzT9JdAx2U6rgfXYTYdo= Subject key identifier: 0C:9C:D9:8E:2C:AC:D4:CD:50:30:DE:E1:79:2D:BB:A3:0C:76:52:4E Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36 Certificate issuer: /CN=78950ba19b4f17a3473127fd077a9a2002ebea36 Certificate serial: 019B3946A6D6E8A7010DD5140319EE2DA9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 01:01:30 +0000 Manifest this update: Sat 20 Dec 2025 01:01:30 +0000 Manifest next update: Sun 21 Dec 2025 01:01:30 +0000 Files and hashes: 1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: d7xxzhTrPT6TEVCBrwXH/K8xWAcGYebdFHKITs6zltE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:a6:d6:e8:a7:01:0d:d5:14:03:19:ee:2d:a9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36 Validity Not Before: Dec 20 01:01:30 2025 GMT Not After : Dec 21 01:01:30 2025 GMT Subject: CN=0c9cd98e2cacd4cd5030dee1792dbba30c76524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:dd:22:0e:0d:36:4a:2c:a5:8b:aa:d6:82: 7a:79:84:29:07:1a:09:f0:5d:8a:30:0c:01:c0:97: 66:9f:2b:a3:13:18:f2:41:4c:0f:76:f7:9c:8d:30: c8:b1:a5:28:41:75:b4:a0:0f:02:09:e7:24:da:9d: af:ec:e4:06:25:1b:c4:4f:13:ad:e3:3a:b5:8f:92: e5:92:83:65:e0:1f:69:35:36:a9:aa:95:bf:08:4a: ab:cf:96:0b:d7:c3:34:04:3f:fc:73:d2:3c:bb:d1: 53:02:9c:f6:97:98:6e:22:02:f0:23:90:94:0f:6a: ed:a1:c4:88:ec:f0:56:5c:e4:23:1a:ae:85:37:1a: ce:be:33:aa:03:53:ce:23:3e:61:e3:25:9c:97:de: cf:66:91:e6:e2:7c:42:7b:bd:e9:ab:a0:8d:90:39: d0:06:01:25:8e:e7:a5:c7:bd:23:4f:b8:60:6c:a3: 29:e5:7b:a6:ca:ac:3d:43:9e:4a:f2:0b:e6:1a:86: 53:f9:f1:c6:e1:4c:16:c2:30:51:f9:d2:08:e2:b7: 4e:99:28:bc:16:72:6b:1e:9b:25:51:ac:de:09:85: f1:6b:e8:1d:a6:27:45:f9:80:19:68:e9:dd:4d:60: 4f:89:96:ba:f5:d3:09:98:18:9b:be:94:fd:5c:34: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:D9:8E:2C:AC:D4:CD:50:30:DE:E1:79:2D:BB:A3:0C:76:52:4E X509v3 Authority Key Identifier: keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:18:cc:1d:87:7f:a5:b3:5a:e9:6f:eb:33:85:df:66:89: 73:54:68:bf:83:40:27:40:c2:46:d6:a3:e0:08:60:5d:f9:bb: 28:46:2a:dd:92:c3:c7:70:08:3f:45:1e:1e:32:f9:82:ac:ec: a5:63:00:89:7d:20:65:14:cd:6a:ee:db:37:44:cd:4e:0b:03: 7c:bb:f2:13:1f:03:9e:81:28:39:58:c3:73:3d:32:89:ae:79: 5d:d3:3a:94:01:33:9a:3a:1e:7a:0b:a9:c9:32:09:7c:06:5b: 5c:31:78:09:88:8f:11:f3:69:56:ef:ce:5d:b7:d2:72:bd:43: e4:10:8f:41:97:70:fd:38:b5:b8:b9:53:58:32:85:21:5f:65: 2c:69:e7:54:5a:38:90:26:e4:00:31:9e:1c:93:7f:e2:08:93: 07:ba:f4:1e:d8:09:8a:25:37:08:f6:6c:22:9a:fb:1a:f4:7d: 1c:a0:88:a8:f4:ee:f1:06:30:0b:7b:1e:3a:f9:1c:20:a2:08: a3:46:ea:b2:90:af:19:08:e3:53:a2:49:e4:c8:04:f7:06:5d: e1:eb:46:fc:02:1a:e3:5e:33:c1:82:a3:03:cb:13:82:6d:14: 4f:b6:c7:73:64:a2:12:87:19:7b:52:46:be:4c:44:dd:29:f8: 4d:ca:a8:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RqbW6KcBDdUUAxnuLanDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTUwYmExOWI0ZjE3YTM0NzMxMjdmZDA3N2E5YTIwMDJl YmVhMzYwHhcNMjUxMjIwMDEwMTMwWhcNMjUxMjIxMDEwMTMwWjAzMTEwLwYDVQQD EygwYzljZDk4ZTJjYWNkNGNkNTAzMGRlZTE3OTJkYmJhMzBjNzY1MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1/dIg4NNkospYuq1oJ6eYQpBxoJ 8F2KMAwBwJdmnyujExjyQUwPdvecjTDIsaUoQXW0oA8CCeck2p2v7OQGJRvETxOt 4zq1j5LlkoNl4B9pNTapqpW/CEqrz5YL18M0BD/8c9I8u9FTApz2l5huIgLwI5CU D2rtocSI7PBWXOQjGq6FNxrOvjOqA1POIz5h4yWcl97PZpHm4nxCe73pq6CNkDnQ BgEljuelx70jT7hgbKMp5Xumyqw9Q55K8gvmGoZT+fHG4UwWwjBR+dII4rdOmSi8 FnJrHpslUazeCYXxa+gdpidF+YAZaOndTWBPiZa69dMJmBibvpT9XDTKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyc2Y4srNTNUDDe4Xktu6MMdlJOMB8GA1UdIwQY MBaAFHiVC6GbTxejRzEn/Qd6miAC6+o2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAt ZmQ1ZTQ0NjVkMTQ0LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAtZmQ1ZTQ0NjVkMTQ0 LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrYYzB2H f6WzWulv6zOF32aJc1Rov4NAJ0DCRtaj4AhgXfm7KEYq3ZLDx3AIP0UeHjL5gqzs pWMAiX0gZRTNau7bN0TNTgsDfLvyEx8DnoEoOVjDcz0yia55XdM6lAEzmjoeegup yTIJfAZbXDF4CYiPEfNpVu/OXbfScr1D5BCPQZdw/Ti1uLlTWDKFIV9lLGnnVFo4 kCbkADGeHJN/4giTB7r0HtgJiiU3CPZsIpr7GvR9HKCIqPTu8QYwC3seOvkcIKII o0bqspCvGQjjU6JJ5MgE9wZd4etG/AIa414zwYKjA8sTgm0UT7bHc2SiEocZe1JG vkxE3Sn4Tcqozw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:06 2025 by rpki-client