This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json) Hash identifier: Q8gC3ctM+TDbUr67ZF4nusZULxRM0J1XYpEdWPL+9wI= Subject key identifier: 15:4A:52:43:D4:D8:B9:51:63:F4:13:F8:7D:CB:A5:C4:18:3B:44:53 Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055 Certificate serial: 019B3AC68E8A5CCDC2734C043D9EC67D65F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft Manifest number: 1424 Signing time: Sat 20 Dec 2025 08:00:49 +0000 Manifest this update: Sat 20 Dec 2025 08:00:49 +0000 Manifest next update: Sun 21 Dec 2025 08:00:49 +0000 Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=) 2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: /AaYA6EDlcNG2v5B+uvGLC4QQVhhqWoR7qLmlYIahHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:8e:8a:5c:cd:c2:73:4c:04:3d:9e:c6:7d:65:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055 Validity Not Before: Dec 20 08:00:49 2025 GMT Not After : Dec 21 08:00:49 2025 GMT Subject: CN=154a5243d4d8b95163f413f87dcba5c4183b4453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:82:fc:de:12:f6:16:d2:17:77:27:0c:f8: 26:a2:ae:a6:3c:23:21:fc:44:27:62:e4:6f:dd:d0: bd:86:b6:3e:9e:96:07:e1:4e:69:52:4b:ef:34:56: 17:69:65:88:df:c1:61:5c:cd:50:0b:86:f8:04:1e: 57:9c:32:4e:72:36:96:87:de:5e:9e:b6:2e:80:41: 63:91:f7:33:26:7c:d4:e8:7f:12:0d:36:10:05:fc: 6f:16:5d:79:9b:ed:2a:68:a1:78:03:a9:4a:ed:aa: b9:a4:2a:56:4e:73:0c:54:6f:8b:07:b3:31:5f:a4: c8:53:ab:50:e7:f1:22:79:18:f1:89:f0:7e:74:e3: fd:c0:7b:c9:fd:c7:f1:f9:06:72:c5:de:32:fd:f6: 58:86:ed:00:eb:1f:2a:52:7d:90:bd:c4:67:46:c0: ce:32:9d:80:34:23:03:28:d0:46:47:7b:61:f4:5c: 84:5d:a2:e7:46:77:15:d9:5b:38:0c:a3:02:b8:b0: 26:f7:5a:3b:20:a0:ea:50:53:4e:75:36:d2:b8:0a: 7b:ed:ed:39:88:5e:c2:c2:bc:e1:0d:db:b7:5f:e5: db:34:49:5b:ed:4d:10:e0:41:f4:66:d3:60:77:11: 5d:e5:75:b6:9c:dd:eb:9b:d8:d8:33:45:aa:da:32: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:52:43:D4:D8:B9:51:63:F4:13:F8:7D:CB:A5:C4:18:3B:44:53 X509v3 Authority Key Identifier: keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:ef:5b:be:97:89:ee:61:02:a8:c9:d9:c0:3e:c6:c8:6a: fc:ad:28:f0:1d:d7:04:28:e4:2b:5c:2f:bb:42:d7:b8:ff:ee: a5:10:f4:6b:bc:b9:96:09:3c:2c:d0:1a:8e:a2:31:87:95:6f: cd:77:2c:c1:c6:e8:b4:1c:a2:11:b3:dd:cd:fd:26:bc:7f:2e: 26:80:01:fd:75:5f:07:ee:91:ee:e0:ef:ad:da:6b:d5:ca:1f: d1:72:50:74:88:d7:44:76:d5:21:51:66:6f:39:43:4c:0b:44: e0:87:56:e1:74:e3:72:2f:8c:c5:33:3b:dd:f6:cd:cb:c2:8a: 08:dd:ff:50:03:14:ee:89:da:a4:f7:28:e9:fa:d7:bb:71:8f: 72:39:c4:54:ea:4f:8f:6f:66:66:ed:a1:21:22:7a:35:ad:3c: 4e:b4:ed:d8:43:59:5a:e4:73:dc:45:66:41:02:1b:c7:5d:82: 35:01:e6:5d:4d:f1:17:58:42:5d:b6:a5:de:34:ea:c2:2a:24: 97:f2:f8:f7:81:c9:4b:ae:48:c0:84:3b:4f:98:10:53:5f:89: d7:d6:0d:bc:c0:72:d6:84:f6:fa:86:7e:c0:3a:f2:9e:ed:86: cf:d5:fb:8b:ce:3c:7d:f5:6b:f4:80:ca:b1:c9:78:f4:33:5a: e0:e8:bd:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xo6KXM3Cc0wEPZ7GfWX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZTdiYThjMDg4NTNiZTU1NGM1OTRkZWQxNTZhNjk4M2Vi YTEwNTUwHhcNMjUxMjIwMDgwMDQ5WhcNMjUxMjIxMDgwMDQ5WjAzMTEwLwYDVQQD EygxNTRhNTI0M2Q0ZDhiOTUxNjNmNDEzZjg3ZGNiYTVjNDE4M2I0NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaaC/N4S9hbSF3cnDPgmoq6mPCMh /EQnYuRv3dC9hrY+npYH4U5pUkvvNFYXaWWI38FhXM1QC4b4BB5XnDJOcjaWh95e nrYugEFjkfczJnzU6H8SDTYQBfxvFl15m+0qaKF4A6lK7aq5pCpWTnMMVG+LB7Mx X6TIU6tQ5/EieRjxifB+dOP9wHvJ/cfx+QZyxd4y/fZYhu0A6x8qUn2QvcRnRsDO Mp2ANCMDKNBGR3th9FyEXaLnRncV2Vs4DKMCuLAm91o7IKDqUFNOdTbSuAp77e05 iF7CwrzhDdu3X+XbNElb7U0Q4EH0ZtNgdxFd5XW2nN3rm9jYM0Wq2jJxKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVKUkPU2LlRY/QT+H3LpcQYO0RTMB8GA1UdIwQY MBaAFHjnuowIhTvlVMWU3tFWppg+uhBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTIt NWVhZjllMTBkODVjLzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTItNWVhZjllMTBkODVj LzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/PvW76X ie5hAqjJ2cA+xshq/K0o8B3XBCjkK1wvu0LXuP/upRD0a7y5lgk8LNAajqIxh5Vv zXcswcbotByiEbPdzf0mvH8uJoAB/XVfB+6R7uDvrdpr1cof0XJQdIjXRHbVIVFm bzlDTAtE4IdW4XTjci+MxTM73fbNy8KKCN3/UAMU7onapPco6frXu3GPcjnEVOpP j29mZu2hISJ6Na08TrTt2ENZWuRz3EVmQQIbx12CNQHmXU3xF1hCXbal3jTqwiok l/L494HJS65IwIQ7T5gQU1+J19YNvMBy1oT2+oZ+wDrynu2Gz9X7i848ffVr9IDK scl49DNa4Oi9TA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:34 2025 by rpki-client