This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft File: eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json) Hash identifier: D2rNAQPPul/MdYmIbJOtBJMCvOjJrNOfzU0tUrF2VLs= Subject key identifier: 5B:0B:19:7D:3A:09:AF:81:B7:CB:B9:3C:AC:E5:AE:A8:40:25:07:8D Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA Certificate issuer: /CN=7950522148d268376c84530c5d2da53e39bf1aca Certificate serial: 019B32D724EAE1A0F69F536B9150832E18E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft Manifest number: 0654 Signing time: Thu 18 Dec 2025 19:01:58 +0000 Manifest this update: Thu 18 Dec 2025 19:01:58 +0000 Manifest next update: Fri 19 Dec 2025 19:01:58 +0000 Files and hashes: 1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: eKP3Ek1TBrjXDRAL9onDUxXPd/z2Hox4i9sBmHKBfw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:24:ea:e1:a0:f6:9f:53:6b:91:50:83:2e:18:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca Validity Not Before: Dec 18 19:01:58 2025 GMT Not After : Dec 19 19:01:58 2025 GMT Subject: CN=5b0b197d3a09af81b7cbb93cace5aea84025078d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:13:05:d8:f7:c6:56:38:c1:84:d9:16:cf: b8:56:d7:19:1e:e5:c5:26:51:69:df:16:94:14:86: 37:6e:a2:2c:e7:5d:ec:b6:97:1b:a6:03:86:90:9d: 2e:52:70:08:34:b3:a6:2b:bb:3d:d8:90:f0:7f:0e: 91:0d:38:b1:b4:0d:a3:25:28:ba:27:0b:80:49:be: af:01:61:83:5e:5e:23:d4:26:a9:ee:63:7e:da:21: fb:e4:6a:16:9a:b5:b0:48:f4:97:15:71:d1:4d:0a: 7e:27:f3:f0:89:9e:7e:d5:73:72:f1:82:98:0d:05: f6:d9:c7:3d:50:00:07:a6:79:cd:49:89:9c:4c:c0: a2:a6:96:33:aa:88:a8:fa:b5:2e:ef:91:e5:f0:bd: ae:4d:f5:96:6b:48:b6:b1:76:c4:38:ee:d5:75:6c: a5:b0:4e:70:a9:bd:55:9e:5d:74:a3:e4:a7:d6:42: 25:6a:fb:7e:fa:62:7e:d4:86:21:39:16:c0:ac:d9: d1:40:d9:3b:17:83:e8:e3:22:0f:6f:a1:69:f9:de: 0a:3e:a7:cd:6c:8d:d4:d7:af:d0:2f:d0:71:ff:cf: 54:d0:cd:03:5e:91:7a:2f:1b:4a:ec:da:46:83:2c: fc:15:6e:f9:c4:06:5a:94:06:07:66:ea:f4:de:70: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:19:7D:3A:09:AF:81:B7:CB:B9:3C:AC:E5:AE:A8:40:25:07:8D X509v3 Authority Key Identifier: keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3a:5b:f6:78:08:fa:31:c9:76:0a:02:d7:82:52:34:db:a2: 0e:26:99:01:e9:d1:ac:55:b1:a4:70:e8:2a:d4:d5:1f:cf:ac: 43:6e:a8:ab:74:89:58:c3:c0:b1:66:bd:96:96:f1:bc:67:1e: a4:b4:bd:c5:52:62:6e:d5:08:1a:13:69:e6:ed:e7:5b:fa:92: 17:31:a9:d9:06:7f:24:c2:d6:c4:55:1a:0b:b6:a3:1f:f0:45: e0:5e:1b:1e:dd:3d:ea:37:c8:99:ac:5e:b5:c6:94:a6:6e:03: fb:f4:e2:7b:53:f3:3f:3a:a2:14:a0:08:2e:cc:f0:f6:07:fa: 2b:2e:03:29:56:77:07:82:a6:33:04:91:76:8c:8a:1c:7b:81: 37:dc:e8:47:28:21:ef:1d:41:a8:b8:99:08:1a:be:7a:50:91: 8d:a9:e0:a8:b1:04:28:e5:0e:7b:c5:cf:28:9c:fb:60:b4:de: 4d:0a:18:ef:28:66:f4:a1:99:5a:d6:ba:29:24:c5:f3:2c:b0: f1:0a:3b:73:2e:15:20:23:88:50:96:18:e5:8d:ab:c1:1e:de: 78:4b:3b:c0:93:d2:7b:89:53:97:6d:e2:1b:a3:2e:44:2e:71: 25:cc:ca:5c:41:1c:a3:dd:f5:cc:d7:04:71:11:5e:0f:53:bc: 60:9b:58:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yTq4aD2n1NrkVCDLhjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NTA1MjIxNDhkMjY4Mzc2Yzg0NTMwYzVkMmRhNTNlMzli ZjFhY2EwHhcNMjUxMjE4MTkwMTU4WhcNMjUxMjE5MTkwMTU4WjAzMTEwLwYDVQQD Eyg1YjBiMTk3ZDNhMDlhZjgxYjdjYmI5M2NhY2U1YWVhODQwMjUwNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrgTBdj3xlY4wYTZFs+4VtcZHuXF JlFp3xaUFIY3bqIs513stpcbpgOGkJ0uUnAINLOmK7s92JDwfw6RDTixtA2jJSi6 JwuASb6vAWGDXl4j1Cap7mN+2iH75GoWmrWwSPSXFXHRTQp+J/PwiZ5+1XNy8YKY DQX22cc9UAAHpnnNSYmcTMCippYzqoio+rUu75Hl8L2uTfWWa0i2sXbEOO7VdWyl sE5wqb1Vnl10o+Sn1kIlavt++mJ+1IYhORbArNnRQNk7F4Po4yIPb6Fp+d4KPqfN bI3U16/QL9Bx/89U0M0DXpF6LxtK7NpGgyz8FW75xAZalAYHZur03nCZDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsLGX06Ca+Bt8u5PKzlrqhAJQeNMB8GA1UdIwQY MBaAFHlQUiFI0mg3bIRTDF0tpT45vxrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jZDE1ZmItYWEzMi00Yzg4LWI2MDMt Y2MzNDdlY2IwNDIxLzEvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9jZDE1ZmItYWEzMi00Yzg4LWI2MDMtY2MzNDdlY2IwNDIx LzEvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzpb9ngI +jHJdgoC14JSNNuiDiaZAenRrFWxpHDoKtTVH8+sQ26oq3SJWMPAsWa9lpbxvGce pLS9xVJibtUIGhNp5u3nW/qSFzGp2QZ/JMLWxFUaC7ajH/BF4F4bHt096jfImaxe tcaUpm4D+/Tie1PzPzqiFKAILszw9gf6Ky4DKVZ3B4KmMwSRdoyKHHuBN9zoRygh 7x1BqLiZCBq+elCRjangqLEEKOUOe8XPKJz7YLTeTQoY7yhm9KGZWta6KSTF8yyw 8Qo7cy4VICOIUJYY5Y2rwR7eeEs7wJPSe4lTl23iG6MuRC5xJczKXEEco931zNcE cRFeD1O8YJtYdA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:58 2025 by rpki-client