This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft File: eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json) Hash identifier: /b/EJMqJgQGD5ZERngUC71JkZHd6tqPjWFxpZHh2nq0= Subject key identifier: 79:08:53:FD:44:6D:8D:C8:59:28:5D:4A:12:70:5C:85:B1:B5:F6:20 Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3 Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3 Certificate serial: 019B1B04F9B6668964B7262D5FF8A5C337A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft Manifest number: 1707 Signing time: Sun 14 Dec 2025 04:01:09 +0000 Manifest this update: Sun 14 Dec 2025 04:01:09 +0000 Manifest next update: Mon 15 Dec 2025 04:01:09 +0000 Files and hashes: 1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: mIPOBT/Ojvo5DD22BTHnQtZZ/flrBgW8mFnbxQNSrQI=) 2: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (hash: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:f9:b6:66:89:64:b7:26:2d:5f:f8:a5:c3:37:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3 Validity Not Before: Dec 14 04:01:09 2025 GMT Not After : Dec 15 04:01:09 2025 GMT Subject: CN=790853fd446d8dc859285d4a12705c85b1b5f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:b1:9f:d0:58:df:15:25:2b:e5:a5:f9:be: b8:37:0f:0d:3c:7b:fa:36:b2:ea:b4:57:6f:c9:e2: 3b:d0:63:86:ad:da:2e:a4:75:b2:00:61:71:82:2e: b2:71:41:0e:96:d2:e6:a4:58:78:8e:3d:8e:27:19: ac:99:0c:aa:6c:4a:c2:cb:ab:00:e6:e5:5f:49:ed: 97:f2:c1:1e:54:70:84:4c:2e:55:11:ec:c2:6f:74: 45:a0:f0:9b:a4:78:fa:75:ba:f8:f8:90:6f:2f:47: 86:59:3a:3a:c2:a0:f6:0c:c1:29:d8:25:93:b6:90: 6a:2e:0a:1d:dd:72:5f:e7:9d:3a:4a:90:8b:65:c1: ed:12:37:92:13:4e:70:ab:8c:d2:23:9f:88:70:48: 53:42:c3:94:12:a1:b1:bb:67:8d:c6:5c:f6:dc:9c: a4:ce:bb:6a:e2:d7:43:0d:5c:bd:44:e3:27:31:d0: 8e:a8:29:79:d5:7a:e5:4b:77:2f:e3:5a:82:ef:90: b2:c2:07:b3:24:92:9e:6b:bf:55:7a:db:55:3f:9c: 2f:af:c4:42:24:07:f1:70:33:d3:7f:30:0f:96:97: 30:ea:35:ac:51:55:e8:2c:3b:17:fe:d5:32:a1:4a: 9b:0a:d3:5a:25:ac:f6:93:ad:12:c7:e5:4e:0d:83: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:08:53:FD:44:6D:8D:C8:59:28:5D:4A:12:70:5C:85:B1:B5:F6:20 X509v3 Authority Key Identifier: keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:ff:cb:f1:47:86:55:d4:75:66:87:a6:5f:81:1f:01:59: 0b:5f:7a:57:c2:02:b6:c8:da:29:3e:d7:84:5c:aa:c4:1d:d8: e7:ec:09:8f:8f:3c:eb:43:78:62:47:56:5f:23:76:d5:dd:f5: 75:8e:84:ae:ce:af:13:ff:eb:23:4a:ce:e9:99:a8:ab:f9:42: 64:d9:ce:78:f3:8c:53:96:6b:7f:8f:2b:71:82:4b:5e:93:58: cc:b0:0d:45:a7:9d:d7:a1:62:c8:52:9f:43:f9:92:a0:a3:ea: fd:17:27:3e:f8:d1:7b:72:24:9e:ff:20:49:68:f8:bb:ab:b5: a1:95:64:1c:c6:f2:87:c0:bd:fd:5c:27:5b:a1:f9:a7:7d:f3: 84:a6:6e:f9:ba:d7:0c:53:d1:d0:4d:f9:5e:13:1a:64:9e:9b: 49:45:7c:83:0f:9c:46:5d:da:d7:7f:60:1e:6e:ed:ad:a8:e6: e7:cf:e1:76:88:c2:11:21:b6:eb:24:38:db:37:f0:09:a8:d2: a2:c4:9c:3b:fb:9c:5b:78:30:c1:08:1d:7c:a5:f8:f8:b9:fe: d0:7c:08:0b:69:23:fc:76:20:e9:45:3c:f5:b7:c8:a7:a9:1e: 9d:41:5f:96:58:40:bd:f5:63:64:19:54:ea:f1:66:29:d3:53: 08:a7:63:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBPm2ZolktyYtX/ilwzeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODc4ZWRkYTZhZTRhMDE0N2RiNzBiNjYxMDVjZmQxN2Yy MDY2YTMwHhcNMjUxMjE0MDQwMTA5WhcNMjUxMjE1MDQwMTA5WjAzMTEwLwYDVQQD Eyg3OTA4NTNmZDQ0NmQ4ZGM4NTkyODVkNGExMjcwNWM4NWIxYjVmNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXOxn9BY3xUlK+Wl+b64Nw8NPHv6 NrLqtFdvyeI70GOGrdoupHWyAGFxgi6ycUEOltLmpFh4jj2OJxmsmQyqbErCy6sA 5uVfSe2X8sEeVHCETC5VEezCb3RFoPCbpHj6dbr4+JBvL0eGWTo6wqD2DMEp2CWT tpBqLgod3XJf5506SpCLZcHtEjeSE05wq4zSI5+IcEhTQsOUEqGxu2eNxlz23Jyk zrtq4tdDDVy9ROMnMdCOqCl51XrlS3cv41qC75CywgezJJKea79VettVP5wvr8RC JAfxcDPTfzAPlpcw6jWsUVXoLDsX/tUyoUqbCtNaJaz2k60Sx+VODYNLawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkIU/1EbY3IWShdShJwXIWxtfYgMB8GA1UdIwQY MBaAFHiHjt2mrkoBR9twtmEFz9F/IGajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgt MmUzZWQ1YTE3MDk4LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgtMmUzZWQ1YTE3MDk4 LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfL/y/FH hlXUdWaHpl+BHwFZC196V8ICtsjaKT7XhFyqxB3Y5+wJj48860N4YkdWXyN21d31 dY6Ers6vE//rI0rO6Zmoq/lCZNnOePOMU5Zrf48rcYJLXpNYzLANRaed16FiyFKf Q/mSoKPq/RcnPvjRe3Iknv8gSWj4u6u1oZVkHMbyh8C9/VwnW6H5p33zhKZu+brX DFPR0E35XhMaZJ6bSUV8gw+cRl3a139gHm7trajm58/hdojCESG26yQ42zfwCajS osScO/ucW3gwwQgdfKX4+Ln+0HwIC2kj/HYg6UU89bfIp6kenUFfllhAvfVjZBlU 6vFmKdNTCKdj5g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:47 2025 by rpki-client