This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json) Hash identifier: p8pMngjyBkPGaOl46cissaEtqo+QSwsz0Ya9Nhg/NOw= Subject key identifier: 9D:E0:75:AE:79:BD:F4:7F:98:07:05:D4:83:2A:C6:89:6F:78:67:F4 Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Certificate serial: 019B59079FF53F37506D1ECEBF73705C0AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft Manifest number: FB Signing time: Fri 26 Dec 2025 05:00:30 +0000 Manifest this update: Fri 26 Dec 2025 05:00:30 +0000 Manifest next update: Sat 27 Dec 2025 05:00:30 +0000 Files and hashes: 1: 9rnL1t5Ldor0JB3KN3KrYlnILFc.roa (hash: 00esWyqmIW6yBsmGpeX9QfYrAUi9bLeAI/5cffpcKB8=) 2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: C/A+vJpivaEq/ExCy4LDRMiRMa05RkufcXvq3MifORE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:9f:f5:3f:37:50:6d:1e:ce:bf:73:70:5c:0a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Validity Not Before: Dec 26 05:00:30 2025 GMT Not After : Dec 27 05:00:30 2025 GMT Subject: CN=9de075ae79bdf47f980705d4832ac6896f7867f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:d5:4d:0a:90:55:bb:4d:4b:cb:9a:7c:ce: b7:aa:d1:0d:f3:bc:d2:9d:fd:68:8b:ca:63:1c:02: 0a:ed:e1:fa:2e:a6:d8:9a:5e:c0:db:e9:b9:ba:1b: c6:74:23:a6:a2:d2:2b:bb:80:cf:4f:68:77:48:1d: 40:b3:88:e9:d2:8e:e7:4f:1c:0c:ab:da:7f:37:6d: e4:48:0b:2c:26:5d:3e:ca:69:a0:7f:70:b7:0f:12: 84:77:d3:62:ae:38:26:83:06:8c:f3:77:18:a7:15: a3:48:b6:b6:b7:26:2a:b3:79:ee:b0:72:78:00:cd: 1b:25:af:fb:3c:98:97:55:6c:78:a1:a9:60:ae:11: f8:1a:d7:6d:93:ee:7f:99:39:cb:32:47:97:a3:67: 5f:d8:23:4f:6c:a3:5f:28:e1:ef:0f:e3:8c:75:92: 1f:0a:fe:cb:c5:6b:79:16:e9:4a:40:e1:e5:18:11: 80:21:2c:1d:a8:64:58:d1:64:89:a8:4b:f5:c7:d2: 6c:84:50:c7:66:13:73:48:08:c3:af:f7:ac:67:a5: 1b:23:e3:40:a7:4a:81:28:dc:6c:ae:fc:3c:7a:4d: f5:2d:93:c1:4d:6c:c4:33:e6:f1:dd:74:00:8b:b3: 98:97:31:d4:86:68:45:65:4d:2d:b4:b7:e9:9b:dc: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:75:AE:79:BD:F4:7F:98:07:05:D4:83:2A:C6:89:6F:78:67:F4 X509v3 Authority Key Identifier: keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:96:bc:ca:f9:bc:e9:7c:2a:69:1d:80:01:8f:db:88:7b: 10:ac:a5:54:a8:d6:02:10:cc:ac:ec:aa:06:36:c7:10:f0:cd: f7:ce:bc:b5:b5:ca:64:8e:ed:cc:64:41:a4:4c:cb:ed:eb:9a: e9:67:01:ab:0b:df:df:3f:92:28:cf:1e:41:a4:d2:7f:8d:02: eb:a3:f0:95:b8:db:ec:ed:70:be:31:24:f9:52:4e:e4:27:0e: 1a:c5:bc:ff:0e:53:f2:45:31:aa:c4:34:66:4b:3d:20:df:1b: bc:6b:8d:79:5a:f1:85:b9:f0:66:21:be:5e:20:c2:69:30:df: 61:28:3d:06:17:d4:6d:29:6e:6e:b0:47:1c:7a:77:5f:44:ce: 51:9e:5b:b1:83:f9:e0:39:0c:aa:4e:ab:90:fd:c0:c9:6a:35: af:6f:39:c6:55:44:e6:fd:cc:20:2c:01:09:03:78:bb:c2:1b: eb:8c:91:99:f5:e2:f0:42:40:a8:76:8a:3c:06:6b:25:f1:d3: 5a:a2:20:7d:51:10:41:ef:64:02:e9:ca:0e:1c:88:0c:24:10: b6:21:a5:b9:cf:ad:55:e7:60:51:01:02:d9:fb:90:51:68:20: 14:62:d6:a5:ad:49:26:ee:07:a7:c4:55:8c:55:27:57:dd:e3: 4f:a3:aa:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB5/1PzdQbR7Ov3NwXAqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTA1ZGFiYmNmMTRkNTMwMTVhYjhmZjFlNGJkNzI5N2Fj YjBlNzcwHhcNMjUxMjI2MDUwMDMwWhcNMjUxMjI3MDUwMDMwWjAzMTEwLwYDVQQD Eyg5ZGUwNzVhZTc5YmRmNDdmOTgwNzA1ZDQ4MzJhYzY4OTZmNzg2N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttDVTQqQVbtNS8uafM63qtEN87zS nf1oi8pjHAIK7eH6LqbYml7A2+m5uhvGdCOmotIru4DPT2h3SB1As4jp0o7nTxwM q9p/N23kSAssJl0+ymmgf3C3DxKEd9NirjgmgwaM83cYpxWjSLa2tyYqs3nusHJ4 AM0bJa/7PJiXVWx4oalgrhH4Gtdtk+5/mTnLMkeXo2df2CNPbKNfKOHvD+OMdZIf Cv7LxWt5FulKQOHlGBGAISwdqGRY0WSJqEv1x9JshFDHZhNzSAjDr/esZ6UbI+NA p0qBKNxsrvw8ek31LZPBTWzEM+bx3XQAi7OYlzHUhmhFZU0ttLfpm9xx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3gda55vfR/mAcF1IMqxolveGf0MB8GA1UdIwQY MBaAFBDgXau88U1TAVq4/x5L1yl6yw53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEt ZTYyM2Q1M2Y4YmIxLzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEtZTYyM2Q1M2Y4YmIx LzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBGWvMr5 vOl8KmkdgAGP24h7EKylVKjWAhDMrOyqBjbHEPDN9868tbXKZI7tzGRBpEzL7eua 6WcBqwvf3z+SKM8eQaTSf40C66Pwlbjb7O1wvjEk+VJO5CcOGsW8/w5T8kUxqsQ0 Zks9IN8bvGuNeVrxhbnwZiG+XiDCaTDfYSg9BhfUbSlubrBHHHp3X0TOUZ5bsYP5 4DkMqk6rkP3AyWo1r285xlVE5v3MICwBCQN4u8Ib64yRmfXi8EJAqHaKPAZrJfHT WqIgfVEQQe9kAunKDhyIDCQQtiGluc+tVedgUQEC2fuQUWggFGLWpa1JJu4Hp8RV jFUnV93jT6OqJA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:42 2025 by rpki-client