This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json) Hash identifier: moD00HcJ5i/VEgMOlry0+hFgCusHktsJlEVdxKMmqBs= Subject key identifier: B8:5F:24:1E:92:1B:1D:5B:72:93:B3:61:A0:A7:C7:F0:DD:F7:40:8C Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Certificate serial: 019B1FBD7A0C56CEB561F0A6A66279D4DD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft Manifest number: 0E3A Signing time: Mon 15 Dec 2025 02:01:09 +0000 Manifest this update: Mon 15 Dec 2025 02:01:09 +0000 Manifest next update: Tue 16 Dec 2025 02:01:09 +0000 Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: oEPqTDDCW2cKtoeNXUAyxwR+3KXCFPKyaXjoH/6i5fY=) 2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:7a:0c:56:ce:b5:61:f0:a6:a6:62:79:d4:dd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Validity Not Before: Dec 15 02:01:09 2025 GMT Not After : Dec 16 02:01:09 2025 GMT Subject: CN=b85f241e921b1d5b7293b361a0a7c7f0ddf7408c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:4b:e2:23:ed:0e:16:19:ef:b9:07:50:ef: 7e:ef:8f:a5:d9:21:27:92:0e:62:a7:1b:74:c5:86: 07:2a:47:28:f0:63:c9:29:39:12:a7:df:4d:25:88: 5d:1e:ec:ac:c8:86:42:cb:bb:c0:ca:1f:af:65:2b: b5:e3:b3:32:d3:df:33:3a:01:9d:da:8b:2b:8b:9b: d0:17:b9:d9:c7:41:c8:00:d7:47:16:72:91:18:c1: b7:d8:68:ce:98:61:d4:eb:d3:2e:6c:d3:f5:64:44: 11:94:4a:c0:74:85:e6:a2:82:00:ea:c2:01:bf:d1: ad:89:0c:da:b8:94:dc:9d:5a:8d:63:d5:cb:d9:22: 39:e6:45:3f:fe:bf:25:f7:d7:fe:3a:d3:08:99:59: 22:c9:67:80:59:77:b1:d9:36:0f:0d:dd:df:8f:87: 7d:cf:1b:2d:4c:84:d1:e9:df:64:95:14:a5:27:85: 05:91:43:22:bd:d3:94:71:b5:9b:d4:57:6b:3b:ee: c4:32:6f:b6:9d:2c:10:a1:88:aa:ac:ed:9a:9e:d4: 0b:7e:48:b3:94:d3:aa:ae:81:5b:8f:3a:69:53:79: 0e:54:4b:d4:81:9c:75:19:b5:b9:24:c8:88:b4:60: aa:34:cf:6f:78:54:ed:e0:80:27:6e:09:7d:0f:c9: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:24:1E:92:1B:1D:5B:72:93:B3:61:A0:A7:C7:F0:DD:F7:40:8C X509v3 Authority Key Identifier: keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:dc:37:2f:0b:e8:67:0e:06:fe:83:f3:61:26:ae:cf:ec:e6: b8:e3:c0:45:ff:93:d4:a6:62:24:f8:b4:37:2f:0a:c0:54:5a: e0:2f:91:c3:f2:bf:35:85:13:a4:ae:49:b9:fc:7b:72:be:b5: 1f:a5:ec:53:67:86:96:74:45:cf:0e:72:7f:16:62:2b:0e:5a: 09:25:48:24:8a:a4:79:70:b1:7d:3f:2b:36:2b:f8:7d:b7:66: 23:d0:8a:8b:df:fd:61:7e:eb:52:7d:9a:97:5f:8a:33:08:1c: 1c:0d:43:0a:8a:c3:23:00:9f:db:2e:41:96:f6:7a:4d:6c:54: 31:c0:2b:ae:7b:df:71:b9:d3:89:d0:55:a6:b1:27:66:ec:f8: f3:a5:68:53:9a:5c:8b:80:31:ce:ad:8f:74:86:92:9e:70:65: b6:ca:5b:30:97:a3:1a:41:a9:54:0e:a9:65:f4:cc:25:16:08: 4a:52:d2:a6:dd:c3:78:bd:7a:61:66:8e:70:a2:05:2e:d5:9d: c7:82:05:8e:99:05:57:a3:a3:02:7e:ad:8c:58:01:0d:fd:13: af:83:0a:5e:97:d3:18:d7:d2:6b:a1:83:2f:d5:e3:e1:b4:2c: 5b:05:12:29:d1:92:58:5d:d1:3f:19:8c:36:2f:09:f9:eb:5f: 14:31:66:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvXoMVs61YfCmpmJ51N0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5 ZjBjNjgwHhcNMjUxMjE1MDIwMTA5WhcNMjUxMjE2MDIwMTA5WjAzMTEwLwYDVQQD EyhiODVmMjQxZTkyMWIxZDViNzI5M2IzNjFhMGE3YzdmMGRkZjc0MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s1L4iPtDhYZ77kHUO9+74+l2SEn kg5ipxt0xYYHKkco8GPJKTkSp99NJYhdHuysyIZCy7vAyh+vZSu147My098zOgGd 2osri5vQF7nZx0HIANdHFnKRGMG32GjOmGHU69MubNP1ZEQRlErAdIXmooIA6sIB v9GtiQzauJTcnVqNY9XL2SI55kU//r8l99f+OtMImVkiyWeAWXex2TYPDd3fj4d9 zxstTITR6d9klRSlJ4UFkUMivdOUcbWb1FdrO+7EMm+2nSwQoYiqrO2antQLfkiz lNOqroFbjzppU3kOVEvUgZx1GbW5JMiItGCqNM9veFTt4IAnbgl9D8lPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhfJB6SGx1bcpOzYaCnx/Dd90CMMB8GA1UdIwQY MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtw3Lwvo Zw4G/oPzYSauz+zmuOPARf+T1KZiJPi0Ny8KwFRa4C+Rw/K/NYUTpK5Jufx7cr61 H6XsU2eGlnRFzw5yfxZiKw5aCSVIJIqkeXCxfT8rNiv4fbdmI9CKi9/9YX7rUn2a l1+KMwgcHA1DCorDIwCf2y5BlvZ6TWxUMcArrnvfcbnTidBVprEnZuz486VoU5pc i4Axzq2PdIaSnnBltspbMJejGkGpVA6pZfTMJRYISlLSpt3DeL16YWaOcKIFLtWd x4IFjpkFV6OjAn6tjFgBDf0Tr4MKXpfTGNfSa6GDL9Xj4bQsWwUSKdGSWF3RPxmM Ni8J+etfFDFmpg== -----END CERTIFICATE-----Generated at Mon Dec 15 09:00:46 2025 by rpki-client