This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json) Hash identifier: hGEI9Y5jl+JJk2sLt69Yd2Vf+zFtQy1UaeMx4MVqwD4= Subject key identifier: E1:8B:D7:57:0E:BC:15:0E:5C:52:CA:40:7F:E0:31:DC:F8:A8:B3:DB Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671 Certificate serial: 019AF91DC15BA4EF150309F9FB09BE414E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft Manifest number: 126F Signing time: Sun 07 Dec 2025 14:01:08 +0000 Manifest this update: Sun 07 Dec 2025 14:01:08 +0000 Manifest next update: Mon 08 Dec 2025 14:01:08 +0000 Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: +hXRRz5Wtz/i1zcuOqW4r4egHoKe1KehTv99a2tY6Sg=) 2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:c1:5b:a4:ef:15:03:09:f9:fb:09:be:41:4e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e07556c191867add90101580ecf5d5b7429671 Validity Not Before: Dec 7 14:01:08 2025 GMT Not After : Dec 8 14:01:08 2025 GMT Subject: CN=e18bd7570ebc150e5c52ca407fe031dcf8a8b3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:45:91:ec:54:e3:c6:69:d9:c0:da:8b:82: 80:00:ef:ce:dc:19:64:3b:57:ee:32:29:a1:b7:3a: 67:21:41:42:f2:79:8b:9f:8a:fd:6b:3e:e5:1d:00: ba:9f:22:bc:44:05:17:d9:6c:c9:16:d7:dd:10:f5: 7a:eb:e4:d6:e4:15:0c:c8:cd:5f:56:4e:f6:4c:60: 45:15:65:c2:67:a7:ce:a0:fd:01:ac:77:d6:52:13: 3f:0e:76:94:46:67:b9:0a:13:a3:6f:8a:15:af:58: 53:21:7c:e6:e2:db:50:b0:8e:8f:21:9c:4f:17:76: 72:fb:45:14:dc:7b:7c:da:b5:eb:c7:1c:14:6f:2e: e2:b2:82:52:8f:ce:98:fb:d2:57:c9:2b:b0:11:af: 3f:3e:58:c3:1f:df:39:4f:16:04:1e:8c:32:54:05: 11:a8:65:fa:4d:ba:dc:7b:9c:6a:7a:96:19:d9:2a: 18:2f:8c:d7:37:d0:85:a8:68:0c:d0:f2:ae:a4:b4: c1:ff:aa:5e:f8:f4:d9:d1:78:49:ed:fc:5f:57:e7: ca:90:a7:76:32:10:ea:94:52:cb:15:de:5d:c8:67: 91:a5:93:b4:7a:18:1a:1b:2a:19:e7:a7:03:09:99: cf:1e:2c:96:b6:35:a1:61:6c:67:2c:f1:2e:5a:b6: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8B:D7:57:0E:BC:15:0E:5C:52:CA:40:7F:E0:31:DC:F8:A8:B3:DB X509v3 Authority Key Identifier: keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:80:87:d6:a6:2d:df:04:75:7e:14:f2:62:c6:2f:38:86:72: 72:9e:32:b8:67:94:f8:3a:4e:14:45:39:51:ab:82:de:7e:1b: a4:c5:f8:04:3f:e7:99:3d:40:38:db:7b:7d:33:23:e0:47:e3: 46:9b:af:bc:08:b9:b9:4d:80:6e:e7:7d:dc:58:3c:33:8f:82: e3:52:28:7f:55:7d:96:be:09:02:2b:aa:bf:cf:5a:24:04:2e: f5:b8:73:9d:5e:d8:6e:57:99:b1:69:a1:83:4b:d1:53:f5:1f: fe:c5:6b:b8:ec:74:73:df:8b:cc:fc:74:6d:fd:e5:61:e7:14: 70:97:b7:74:b7:14:2e:c5:be:00:9f:92:db:37:29:12:15:0e: 9c:50:2a:25:ab:7f:d4:ec:af:3f:66:17:6c:58:06:7b:e6:2f: 98:a7:dd:0a:50:c3:13:17:38:a4:1f:cd:58:12:88:fb:98:17: 47:2a:2d:c3:f0:f5:28:f2:45:b7:22:73:53:fc:bb:a9:66:f2: 76:41:a9:c5:5b:20:20:31:d1:a0:d1:f1:68:9d:ee:b8:6b:ee: c1:4c:94:8f:57:0f:a9:6b:35:17:59:03:9d:66:0d:42:9b:03: ff:c9:37:fb:17:2d:44:86:0a:16:14:5d:61:dd:85:cd:65:f7: 76:5f:f4:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HcFbpO8VAwn5+wm+QU5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0 Mjk2NzEwHhcNMjUxMjA3MTQwMTA4WhcNMjUxMjA4MTQwMTA4WjAzMTEwLwYDVQQD EyhlMThiZDc1NzBlYmMxNTBlNWM1MmNhNDA3ZmUwMzFkY2Y4YThiM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VFkexU48Zp2cDai4KAAO/O3Blk O1fuMimhtzpnIUFC8nmLn4r9az7lHQC6nyK8RAUX2WzJFtfdEPV66+TW5BUMyM1f Vk72TGBFFWXCZ6fOoP0BrHfWUhM/DnaURme5ChOjb4oVr1hTIXzm4ttQsI6PIZxP F3Zy+0UU3Ht82rXrxxwUby7isoJSj86Y+9JXySuwEa8/PljDH985TxYEHowyVAUR qGX6Tbrce5xqepYZ2SoYL4zXN9CFqGgM0PKupLTB/6pe+PTZ0XhJ7fxfV+fKkKd2 MhDqlFLLFd5dyGeRpZO0ehgaGyoZ56cDCZnPHiyWtjWhYWxnLPEuWraM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGL11cOvBUOXFLKQH/gMdz4qLPbMB8GA1UdIwQY MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoCH1qYt 3wR1fhTyYsYvOIZycp4yuGeU+DpOFEU5UauC3n4bpMX4BD/nmT1AONt7fTMj4Efj RpuvvAi5uU2Abud93Fg8M4+C41Iof1V9lr4JAiuqv89aJAQu9bhznV7YbleZsWmh g0vRU/Uf/sVruOx0c9+LzPx0bf3lYecUcJe3dLcULsW+AJ+S2zcpEhUOnFAqJat/ 1OyvP2YXbFgGe+YvmKfdClDDExc4pB/NWBKI+5gXRyotw/D1KPJFtyJzU/y7qWby dkGpxVsgIDHRoNHxaJ3uuGvuwUyUj1cPqWs1F1kDnWYNQpsD/8k3+xctRIYKFhRd Yd2FzWX3dl/01g== -----END CERTIFICATE-----Generated at Sun Dec 7 15:31:01 2025 by rpki-client