This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json) Hash identifier: z38bAZdT3LmhCja7Umm8Dc2TK6sm8GQ/V7m1mj6C0wg= Subject key identifier: 3E:91:9B:B7:91:78:02:78:D0:AC:E4:73:53:A5:16:D8:2B:E9:7B:1B Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Certificate serial: 019B19BC018979612E93AD236429A47BE06D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft Manifest number: 0E54 Signing time: Sat 13 Dec 2025 22:01:49 +0000 Manifest this update: Sat 13 Dec 2025 22:01:49 +0000 Manifest next update: Sun 14 Dec 2025 22:01:49 +0000 Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: lOwEBsn1O5nX3MCgEV2BMoWl89Gn78cYNerl8enBYp4=) 2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:01:89:79:61:2e:93:ad:23:64:29:a4:7b:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Validity Not Before: Dec 13 22:01:49 2025 GMT Not After : Dec 14 22:01:49 2025 GMT Subject: CN=3e919bb791780278d0ace47353a516d82be97b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:c3:a6:66:47:26:00:fa:d0:12:52:44:7a: 93:a9:ad:25:c4:02:cd:a2:db:0b:2d:bd:d7:37:8e: fd:c4:95:6a:f0:d4:c1:de:0a:ce:a3:97:eb:91:70: 03:d9:cf:48:e6:1f:8c:1d:9a:d8:2e:09:a3:56:9f: 4c:6c:53:59:d3:1a:88:90:f6:d4:21:00:dd:97:86: cd:82:7e:75:9c:70:a2:8c:a8:f1:70:9c:ad:46:e2: c0:dc:23:b4:33:fb:b0:36:06:f7:d7:36:66:4b:4b: 2d:9d:ed:bf:20:43:9b:74:36:90:7c:84:d7:71:9d: ae:2f:07:ee:d2:56:78:4d:79:07:e7:f0:7a:eb:38: eb:a6:de:1e:36:d6:51:0c:e4:c4:98:94:5a:08:d0: d6:9e:e1:aa:0e:eb:c7:63:24:bb:39:db:92:a9:92: 48:03:d7:78:c1:34:98:53:e6:1c:7f:35:28:a2:5c: 0a:bf:86:8e:eb:e6:96:e4:74:01:19:56:23:1a:b2: 87:5e:a4:0d:66:b5:86:bb:57:5d:97:96:40:41:cb: 45:99:38:48:a4:44:57:2e:28:e7:b6:27:b3:78:d6: b6:a4:54:1e:9a:16:2b:b6:20:2c:5b:a2:d9:bc:1b: 5b:ac:c2:ff:9e:54:ca:50:88:6b:9f:bb:84:89:3b: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:9B:B7:91:78:02:78:D0:AC:E4:73:53:A5:16:D8:2B:E9:7B:1B X509v3 Authority Key Identifier: keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d6:f3:13:bb:2e:a2:8c:ac:5c:e4:0c:b3:5d:38:1e:69:e0: 60:a6:8f:ae:28:49:3a:7a:27:1d:4d:68:f2:1b:55:cc:ae:5a: 69:96:3f:07:c9:d6:58:7f:f0:83:24:a1:7b:ef:a5:88:54:f3: 17:d2:0e:09:08:78:b4:cb:41:e6:bb:8d:e1:04:d0:f7:90:06: e9:3a:b2:b1:2b:c8:c4:e8:09:9f:e1:a6:c6:1e:34:ed:40:e0: 20:2c:9b:74:b6:b7:2f:cb:1f:71:cb:33:56:f9:73:99:8b:df: 25:f4:15:82:13:76:0b:30:8d:07:0c:e2:34:aa:57:59:ce:fa: 1c:fa:a6:2c:e3:84:5e:4e:31:ec:c7:53:38:9d:1f:56:a4:18: ba:94:d6:07:93:b7:e4:51:18:fb:3c:39:28:e1:f3:54:5b:b4: 2b:f2:f3:bc:4f:d1:03:39:6b:86:03:63:3d:92:84:22:89:0b: e3:a6:fb:39:85:7f:7c:76:4c:18:82:09:38:18:c2:eb:55:b1: 42:ae:e8:26:f7:40:66:5e:67:9d:96:31:e4:30:d5:62:a3:28: 40:34:7a:f7:1d:a9:8c:6d:b6:41:8b:1b:fb:15:3f:41:3b:6f: 80:ef:d8:f2:17:6c:97:1d:39:2a:5d:9e:df:6e:c6:67:76:78: 36:5c:cd:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvAGJeWEuk60jZCmke+BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0 NWFkMDAwHhcNMjUxMjEzMjIwMTQ5WhcNMjUxMjE0MjIwMTQ5WjAzMTEwLwYDVQQD EygzZTkxOWJiNzkxNzgwMjc4ZDBhY2U0NzM1M2E1MTZkODJiZTk3YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dzDpmZHJgD60BJSRHqTqa0lxALN otsLLb3XN479xJVq8NTB3grOo5frkXAD2c9I5h+MHZrYLgmjVp9MbFNZ0xqIkPbU IQDdl4bNgn51nHCijKjxcJytRuLA3CO0M/uwNgb31zZmS0stne2/IEObdDaQfITX cZ2uLwfu0lZ4TXkH5/B66zjrpt4eNtZRDOTEmJRaCNDWnuGqDuvHYyS7OduSqZJI A9d4wTSYU+YcfzUoolwKv4aO6+aW5HQBGVYjGrKHXqQNZrWGu1ddl5ZAQctFmThI pERXLijntiezeNa2pFQemhYrtiAsW6LZvBtbrML/nlTKUIhrn7uEiTt90wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6Rm7eReAJ40Kzkc1OlFtgr6XsbMB8GA1UdIwQY MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1 LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdbzE7su ooysXOQMs104HmngYKaPrihJOnonHU1o8htVzK5aaZY/B8nWWH/wgyShe++liFTz F9IOCQh4tMtB5ruN4QTQ95AG6TqysSvIxOgJn+Gmxh407UDgICybdLa3L8sfccsz VvlzmYvfJfQVghN2CzCNBwziNKpXWc76HPqmLOOEXk4x7MdTOJ0fVqQYupTWB5O3 5FEY+zw5KOHzVFu0K/LzvE/RAzlrhgNjPZKEIokL46b7OYV/fHZMGIIJOBjC61Wx Qq7oJvdAZl5nnZYx5DDVYqMoQDR69x2pjG22QYsb+xU/QTtvgO/Y8hdslx05Kl2e 327GZ3Z4NlzNBA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:23 2025 by rpki-client