This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json) Hash identifier: VaYQaKn6agMssufnKSPqvOmcSLFAojzG60W7lYcH7Rk= Subject key identifier: D7:8E:81:D0:92:67:DD:0C:7A:B4:EF:86:9F:26:F5:B1:A2:D8:55:9A Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Certificate serial: 019B225080F35BA79B9448F8D75BF4D3650A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft Manifest number: 1400 Signing time: Mon 15 Dec 2025 14:00:59 +0000 Manifest this update: Mon 15 Dec 2025 14:00:59 +0000 Manifest next update: Tue 16 Dec 2025 14:00:59 +0000 Files and hashes: 1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: pyVNI06xYXNXT/MEBY6kKjuv13QgD8KYAPrsTqhhKbU=) 2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:80:f3:5b:a7:9b:94:48:f8:d7:5b:f4:d3:65:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Validity Not Before: Dec 15 14:00:59 2025 GMT Not After : Dec 16 14:00:59 2025 GMT Subject: CN=d78e81d09267dd0c7ab4ef869f26f5b1a2d8559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:f0:99:ce:cf:58:dc:b9:5d:98:18:70:9d: 3d:30:c5:f6:f9:92:d4:fb:e6:0e:2e:f9:4e:8e:a3: 03:13:87:00:99:67:07:31:ae:87:63:d2:9b:6b:bc: bb:56:8a:3f:da:d9:81:39:38:1b:70:0f:8b:aa:34: 66:2f:8c:88:f8:a4:ac:be:99:33:d5:82:d5:fa:6e: 6d:94:62:0f:c2:84:dc:bc:f7:45:fa:cc:77:7a:67: d9:ca:f7:a9:03:ce:8a:6e:46:50:17:ed:72:a3:4a: 94:65:e6:e4:c5:cd:12:ae:44:fe:4c:ea:51:da:78: 91:cc:a3:9d:f4:5e:bd:23:51:84:5a:8e:a6:89:28: 4d:0e:89:99:85:e9:fd:9b:52:a7:34:85:f4:e1:39: af:1f:2f:37:56:df:e1:69:75:c1:06:a2:6c:0c:30: b0:f8:49:f6:c8:6a:73:54:aa:05:24:0f:56:d9:ca: d2:ab:7f:03:2a:a2:72:1b:2f:fa:16:87:e3:4c:e3: 6d:73:40:de:9d:6b:3b:37:65:31:1a:83:ed:8b:cd: b6:81:d9:38:b7:3b:c2:f1:a2:46:92:7b:37:f3:62: d9:68:68:eb:5d:00:33:b6:a2:94:76:96:06:58:86: e5:c8:71:86:d8:7e:1c:e1:e1:98:ee:3c:d3:82:ff: 65:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8E:81:D0:92:67:DD:0C:7A:B4:EF:86:9F:26:F5:B1:A2:D8:55:9A X509v3 Authority Key Identifier: keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:f2:cf:32:5c:ba:84:0b:cd:dd:76:6f:59:ee:45:91:5d: d5:49:b0:ec:44:a2:67:f1:34:ea:79:31:2d:c5:55:49:67:37: 6d:3a:8f:0e:f6:d4:e8:2b:34:ca:be:8e:fc:7b:e6:e1:48:0a: 89:ba:fd:ed:f2:a1:1c:a3:9e:d3:e2:34:69:87:b8:76:61:b0: 75:cd:31:63:f8:79:10:9c:8f:a9:f3:1e:20:63:38:7e:2c:ab: be:1d:60:03:3d:19:5d:4b:3c:e5:fe:c9:b7:91:9b:60:71:c8: 9d:f0:2c:83:43:a5:72:fa:a5:6e:0c:c6:62:4c:09:8b:8f:41: f5:a3:1f:47:c8:d0:36:8d:52:5d:36:e0:4e:e9:c8:c8:c9:35: 84:f2:3a:a8:25:3b:80:f9:03:77:7f:a0:5a:dc:f7:f6:92:45: 44:e9:b1:a9:e6:65:13:2d:2c:68:40:d5:81:72:66:c0:36:53: 0e:59:ac:8a:57:4a:da:ec:75:c0:cc:50:79:84:9e:0a:0e:09: 54:26:05:1c:27:ed:31:9a:4b:1f:21:53:99:d4:b9:b3:37:31: 2f:86:7c:b2:07:c9:fa:59:ad:32:47:9e:34:56:8e:f8:ca:b5: a4:e1:72:75:d9:7c:7e:1f:60:67:a1:91:8e:a7:c8:f5:8a:dc: 86:ff:98:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUIDzW6eblEj411v002UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm YTk4OTMwHhcNMjUxMjE1MTQwMDU5WhcNMjUxMjE2MTQwMDU5WjAzMTEwLwYDVQQD EyhkNzhlODFkMDkyNjdkZDBjN2FiNGVmODY5ZjI2ZjViMWEyZDg1NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q/wmc7PWNy5XZgYcJ09MMX2+ZLU ++YOLvlOjqMDE4cAmWcHMa6HY9Kba7y7Voo/2tmBOTgbcA+LqjRmL4yI+KSsvpkz 1YLV+m5tlGIPwoTcvPdF+sx3emfZyvepA86KbkZQF+1yo0qUZebkxc0SrkT+TOpR 2niRzKOd9F69I1GEWo6miShNDomZhen9m1KnNIX04TmvHy83Vt/haXXBBqJsDDCw +En2yGpzVKoFJA9W2crSq38DKqJyGy/6FofjTONtc0DenWs7N2UxGoPti822gdk4 tzvC8aJGkns382LZaGjrXQAztqKUdpYGWIblyHGG2H4c4eGY7jzTgv9lYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeOgdCSZ90MerTvhp8m9bGi2FWaMB8GA1UdIwQY MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOryzzJc uoQLzd12b1nuRZFd1Umw7ESiZ/E06nkxLcVVSWc3bTqPDvbU6Cs0yr6O/Hvm4UgK ibr97fKhHKOe0+I0aYe4dmGwdc0xY/h5EJyPqfMeIGM4fiyrvh1gAz0ZXUs85f7J t5GbYHHInfAsg0OlcvqlbgzGYkwJi49B9aMfR8jQNo1SXTbgTunIyMk1hPI6qCU7 gPkDd3+gWtz39pJFROmxqeZlEy0saEDVgXJmwDZTDlmsildK2ux1wMxQeYSeCg4J VCYFHCftMZpLHyFTmdS5szcxL4Z8sgfJ+lmtMkeeNFaO+Mq1pOFyddl8fh9gZ6GR jqfI9Yrchv+YaQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:03:00 2025 by rpki-client