This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json) Hash identifier: NmYueu+qy90R4tZUoXkQyznfXuCZLf1GMV+KPSi2np8= Subject key identifier: 34:AD:80:7A:B6:EC:2F:8C:18:26:5C:C6:7E:40:21:44:D0:43:B7:A7 Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19 Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019 Certificate serial: 019B202B005319787CA633A4A509DF069196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft Manifest number: 148A Signing time: Mon 15 Dec 2025 04:00:47 +0000 Manifest this update: Mon 15 Dec 2025 04:00:47 +0000 Manifest next update: Tue 16 Dec 2025 04:00:47 +0000 Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=) 2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: bFLVorBZ7XLri6ITzHN6V1LF1GwuX70uOqn1050y9YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:00:53:19:78:7c:a6:33:a4:a5:09:df:06:91:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019 Validity Not Before: Dec 15 04:00:47 2025 GMT Not After : Dec 16 04:00:47 2025 GMT Subject: CN=34ad807ab6ec2f8c18265cc67e402144d043b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:20:fd:89:83:9e:e6:2b:c3:a2:e9:af:d1: 8a:5e:e9:b7:48:2e:90:ec:60:3d:54:63:02:18:95: 4e:2b:c1:62:56:56:5c:61:03:3f:58:bf:c1:8c:bb: e3:c0:d7:a4:e8:62:f0:0a:97:4b:32:b2:3f:b9:07: 7c:68:92:64:39:37:6e:d1:0d:3e:bc:bc:21:5c:3c: db:41:76:5e:77:f9:15:c0:ec:57:05:c0:d8:06:0b: eb:a1:d6:b1:85:37:de:8d:62:6e:e5:07:59:fb:84: 2a:63:3c:25:67:d3:32:57:da:8f:28:63:01:d8:24: 7d:ea:67:89:fa:19:63:b8:a2:e6:cf:45:31:16:ae: 06:fc:38:c4:8b:53:d6:9c:c1:3a:c4:f1:85:2b:8a: 2a:13:64:25:5e:12:0f:9a:40:91:42:f3:5e:ae:5b: dc:c2:20:9d:18:a7:50:c9:d4:98:1a:97:02:a5:aa: b8:00:13:7f:c1:01:38:13:a6:6e:fe:62:07:d6:45: 4c:55:71:1f:b5:5d:fd:82:61:1c:bf:8c:5a:d1:96: c0:0d:14:11:4f:96:a9:46:37:53:29:74:0a:06:d2: 10:c7:69:61:ba:48:4f:5d:6d:d0:3a:9b:25:e0:ef: 59:07:1c:6d:67:e1:7b:c2:cc:88:03:36:d0:6e:04: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:80:7A:B6:EC:2F:8C:18:26:5C:C6:7E:40:21:44:D0:43:B7:A7 X509v3 Authority Key Identifier: keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:7a:68:72:57:24:27:b6:fc:de:c2:07:b6:95:8c:fc:53: 23:7b:d9:6c:75:0d:0a:a2:9f:1f:1b:57:97:c7:a9:e2:52:0b: aa:70:cb:15:52:a4:90:fa:67:a9:78:af:f7:c9:24:05:8b:5f: 80:1e:21:b8:44:06:03:e8:a5:49:8b:72:79:05:5e:db:4c:6d: ce:7c:7e:7e:6e:c7:ed:0c:f1:d8:49:3f:7d:45:2e:1c:37:fe: a5:fb:29:5c:ff:a7:d2:88:69:94:6d:4f:2d:cf:d9:3f:7c:ab: 8a:47:c3:c6:e1:ea:97:41:c9:6d:85:6b:a3:61:e2:66:ae:91: a1:f1:a2:a8:61:c6:76:4f:c9:41:be:67:9d:39:66:ee:39:5a: 79:80:63:69:ff:83:f7:fe:97:71:d2:02:91:20:ab:09:66:05: fd:d2:dc:9b:cb:a2:b0:4e:90:55:8e:c1:fa:33:72:69:17:a9: d1:33:e8:92:47:f9:51:a8:69:25:fd:bb:d1:9e:85:4a:0f:6d: 7a:8e:b2:85:6e:e1:cf:21:de:1b:5e:68:2d:fd:63:53:c8:b5: 85:cf:10:57:61:20:6a:2f:6c:9f:e4:32:88:6d:5e:53:92:84: 35:ee:f2:ea:92:b6:c3:de:d3:d3:7e:06:f6:ad:fb:85:b7:ed: 62:f4:a5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKwBTGXh8pjOkpQnfBpGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MDhkZTIwMmUxNzRjYjIzNzQ2ZGNiZGVlYThhOWQ0NDk1 ODAwMTkwHhcNMjUxMjE1MDQwMDQ3WhcNMjUxMjE2MDQwMDQ3WjAzMTEwLwYDVQQD EygzNGFkODA3YWI2ZWMyZjhjMTgyNjVjYzY3ZTQwMjE0NGQwNDNiN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fgg/YmDnuYrw6Lpr9GKXum3SC6Q 7GA9VGMCGJVOK8FiVlZcYQM/WL/BjLvjwNek6GLwCpdLMrI/uQd8aJJkOTdu0Q0+ vLwhXDzbQXZed/kVwOxXBcDYBgvrodaxhTfejWJu5QdZ+4QqYzwlZ9MyV9qPKGMB 2CR96meJ+hljuKLmz0UxFq4G/DjEi1PWnME6xPGFK4oqE2QlXhIPmkCRQvNerlvc wiCdGKdQydSYGpcCpaq4ABN/wQE4E6Zu/mIH1kVMVXEftV39gmEcv4xa0ZbADRQR T5apRjdTKXQKBtIQx2lhukhPXW3QOpsl4O9ZBxxtZ+F7wsyIAzbQbgSMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDStgHq27C+MGCZcxn5AIUTQQ7enMB8GA1UdIwQY MBaAFHkI3iAuF0yyN0bcve6oqdRJWAAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMt NTYxZDVmZjhkYzBlLzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMtNTYxZDVmZjhkYzBl LzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8J6aHJX JCe2/N7CB7aVjPxTI3vZbHUNCqKfHxtXl8ep4lILqnDLFVKkkPpnqXiv98kkBYtf gB4huEQGA+ilSYtyeQVe20xtznx+fm7H7Qzx2Ek/fUUuHDf+pfspXP+n0ohplG1P Lc/ZP3yrikfDxuHql0HJbYVro2HiZq6RofGiqGHGdk/JQb5nnTlm7jlaeYBjaf+D 9/6XcdICkSCrCWYF/dLcm8uisE6QVY7B+jNyaRep0TPokkf5UahpJf270Z6FSg9t eo6yhW7hzyHeG15oLf1jU8i1hc8QV2Egai9sn+QyiG1eU5KENe7y6pK2w97T034G 9q37hbftYvSlhw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:13:45 2025 by rpki-client