This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json) Hash identifier: 8RKW2Y57Nu+RCaCt8ZSyaxm0xgrzDDhRE9oWLFMvD3o= Subject key identifier: 53:EF:79:43:51:6C:E4:A7:7D:A7:9A:04:3D:F5:49:33:89:4E:11:5D Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Certificate serial: 019B59770EE56B513D8202455E70D8420866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:02:13 +0000 Manifest this update: Fri 26 Dec 2025 07:02:13 +0000 Manifest next update: Sat 27 Dec 2025 07:02:13 +0000 Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=) 2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: xZvHDx6WzOGg5NikJgeI02s68ZL0SWtQ0oWX8nenUcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:0e:e5:6b:51:3d:82:02:45:5e:70:d8:42:08:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Validity Not Before: Dec 26 07:02:13 2025 GMT Not After : Dec 27 07:02:13 2025 GMT Subject: CN=53ef7943516ce4a77da79a043df54933894e115d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:0b:49:94:89:95:ee:1b:b9:9a:e7:63:5a: 9b:05:43:7e:82:42:11:08:52:2b:77:79:01:4a:e8: bc:a4:eb:7b:57:6e:be:66:da:94:81:73:49:5a:70: c4:22:02:c2:7c:3d:8a:03:80:d9:ec:62:98:c5:5f: 6e:d2:14:17:2b:8f:cb:f1:21:f6:04:ba:01:fc:54: d2:10:dc:c1:f6:da:cb:b3:09:5d:a2:c0:4e:2a:2a: 17:56:71:bf:c3:ef:ed:1c:25:1c:b0:bc:d4:17:1a: 6a:93:fc:ad:80:81:16:5e:b7:a9:be:cb:8a:84:98: b7:61:e3:84:1c:1a:47:b7:f5:82:09:54:8a:21:08: f8:50:57:06:bc:83:9e:db:0f:d9:fd:4e:fb:59:30: fc:98:f9:a0:25:a5:12:82:ec:2b:1d:96:a2:de:73: 1b:91:43:22:36:5e:cb:69:a4:68:d2:3b:63:85:76: cd:3e:a1:0b:e7:7b:92:84:0e:aa:51:e2:97:9d:54: ed:5c:0f:0e:7d:a5:19:cd:91:47:b5:8f:52:8c:8d: 26:a5:bd:50:e9:af:46:01:73:39:e1:ea:19:29:e3: 95:c0:6d:07:00:ab:dd:4a:36:5c:4e:2f:90:d2:2b: 91:78:eb:36:20:7d:94:ed:cf:62:85:13:db:16:ff: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:79:43:51:6C:E4:A7:7D:A7:9A:04:3D:F5:49:33:89:4E:11:5D X509v3 Authority Key Identifier: keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1b:83:7f:3c:68:9e:89:86:02:43:19:ff:83:b0:46:2c:f4: 93:6c:41:75:b5:44:c8:93:f3:6d:6b:bc:f4:49:32:5b:6a:6d: 52:5e:1b:17:f2:4e:01:ea:2e:4e:30:1a:ea:4e:85:f5:e4:2b: 3d:ae:71:ee:7c:b0:9e:d8:2b:d8:e8:7b:e2:4e:05:a9:69:12: bd:79:ed:8a:e4:cc:ca:fa:04:f3:33:76:92:9a:ce:90:28:4b: 56:48:bf:fd:f4:95:6c:d2:7b:db:7b:cd:f7:5d:b0:a7:1b:be: bf:88:1d:a7:5a:4d:07:6d:66:5c:47:65:c2:fa:d2:59:88:07: 47:10:87:71:f6:9f:90:9e:33:b1:23:74:e0:90:32:81:3c:ee: 78:42:86:d3:dc:03:6e:08:50:2b:58:78:2d:44:76:2a:bd:62: fa:74:0e:3d:5b:28:73:cd:89:39:e0:1d:3f:5b:91:31:2b:22: 22:7a:78:c6:8b:b7:e1:52:fd:b6:a4:c3:7a:27:76:b1:ea:59: 9f:8a:dd:e3:bb:2d:f7:87:1a:45:0f:63:1f:70:db:81:36:df: 4b:d2:db:3f:8d:4e:dc:f0:03:5e:15:a7:a4:89:ab:20:49:48: 0f:a5:db:4d:d7:c0:8a:48:ec:8d:26:7a:ef:49:14:47:3d:f7: ec:e9:62:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdw7la1E9ggJFXnDYQghmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGRjODE0NTc1NTEwMWFjYzA4ODhhYTAwYmIyOGI5OTVi OWM0ZjEwHhcNMjUxMjI2MDcwMjEzWhcNMjUxMjI3MDcwMjEzWjAzMTEwLwYDVQQD Eyg1M2VmNzk0MzUxNmNlNGE3N2RhNzlhMDQzZGY1NDkzMzg5NGUxMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP4LSZSJle4buZrnY1qbBUN+gkIR CFIrd3kBSui8pOt7V26+ZtqUgXNJWnDEIgLCfD2KA4DZ7GKYxV9u0hQXK4/L8SH2 BLoB/FTSENzB9trLswldosBOKioXVnG/w+/tHCUcsLzUFxpqk/ytgIEWXrepvsuK hJi3YeOEHBpHt/WCCVSKIQj4UFcGvIOe2w/Z/U77WTD8mPmgJaUSguwrHZai3nMb kUMiNl7LaaRo0jtjhXbNPqEL53uShA6qUeKXnVTtXA8OfaUZzZFHtY9SjI0mpb1Q 6a9GAXM54eoZKeOVwG0HAKvdSjZcTi+Q0iuReOs2IH2U7c9ihRPbFv8zwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPveUNRbOSnfaeaBD31STOJThFdMB8GA1UdIwQY MBaAFHkNyBRXVRAazAiIqgC7KLmVucTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUt OTVjYWUwOWZmNTYzLzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUtOTVjYWUwOWZmNTYz LzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRuDfzxo nomGAkMZ/4OwRiz0k2xBdbVEyJPzbWu89EkyW2ptUl4bF/JOAeouTjAa6k6F9eQr Pa5x7nywntgr2Oh74k4FqWkSvXntiuTMyvoE8zN2kprOkChLVki//fSVbNJ723vN 912wpxu+v4gdp1pNB21mXEdlwvrSWYgHRxCHcfafkJ4zsSN04JAygTzueEKG09wD bghQK1h4LUR2Kr1i+nQOPVsoc82JOeAdP1uRMSsiInp4xou34VL9tqTDeid2sepZ n4rd47st94caRQ9jH3DbgTbfS9LbP41O3PADXhWnpImrIElID6XbTdfAikjsjSZ6 70kURz337OlivA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:26 2025 by rpki-client