This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json) Hash identifier: SAjkFFjp/Vz6GWUkZD12+10OsEAJcHlQ5INyZbsp39E= Subject key identifier: D8:44:52:21:3B:E1:00:B3:21:B7:48:36:61:00:8D:97:98:4D:24:DF Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Certificate serial: 019B23640D8C3442EC545E86AAEC30B424D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 19:01:58 +0000 Manifest this update: Mon 15 Dec 2025 19:01:58 +0000 Manifest next update: Tue 16 Dec 2025 19:01:58 +0000 Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=) 2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: qLF0PnbrbZY7DRiOfEIvU5/gFdMlOzpgdcNQC2YAE8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:0d:8c:34:42:ec:54:5e:86:aa:ec:30:b4:24:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Validity Not Before: Dec 15 19:01:58 2025 GMT Not After : Dec 16 19:01:58 2025 GMT Subject: CN=d84452213be100b321b7483661008d97984d24df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:b1:41:58:d3:92:ec:d1:d4:5b:50:dc:47: 51:e8:f8:6d:db:64:12:0c:81:d2:98:e7:3c:fa:13: 9a:7c:93:d1:70:84:85:a7:d6:65:2c:bb:1b:ad:b7: 52:f1:34:a1:17:62:fc:31:26:d5:47:e6:25:26:2a: 2a:02:6b:16:e8:d3:13:38:27:48:ef:e5:c9:96:20: 63:f4:86:44:19:08:19:4c:ad:e6:2f:ee:b5:62:3b: 06:f7:f3:cf:7d:0d:2b:89:fd:11:11:c3:13:4a:e3: b4:33:bd:e3:70:34:d1:38:6b:70:bf:a7:f2:65:2d: 2d:61:5a:89:50:41:11:19:e8:4c:c9:1b:d1:75:db: f4:cd:37:ac:80:68:1b:5e:88:96:b7:22:51:88:33: 6a:35:7a:91:a0:a2:1e:1a:f9:a2:71:08:0d:14:41: f2:ec:ec:19:4e:0e:cb:11:8e:12:11:4c:e1:8a:1d: 24:4d:e9:a8:26:97:0d:8f:ae:d5:33:3e:5e:de:7b: e1:d4:2c:5e:e2:e4:1f:7b:da:62:da:70:6f:1b:f2: 36:4b:99:52:7f:92:58:38:a5:aa:4c:60:34:d8:92: 2f:c4:7a:40:5a:c7:bf:0f:35:bc:6f:f8:a5:ea:aa: bb:18:3c:0f:96:55:50:d8:2c:ac:88:a1:64:2b:b3: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:52:21:3B:E1:00:B3:21:B7:48:36:61:00:8D:97:98:4D:24:DF X509v3 Authority Key Identifier: keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:32:51:91:20:71:48:0c:80:e7:00:ce:f0:0d:89:c7:49:fb: e3:7f:4a:c1:e7:7f:1d:2b:4b:94:96:0b:a9:bc:bf:ea:2b:bc: 87:f2:eb:6f:d7:6c:33:8b:7a:5c:c4:0d:db:12:87:db:d1:f1: 49:6b:b6:59:47:19:d6:a5:bc:8d:00:90:54:ca:c1:f3:c5:b2: df:50:5c:52:36:a6:30:ce:a4:57:97:07:13:cc:6f:cb:a3:00: 3c:48:10:0e:d0:1e:f3:18:b7:f8:a9:7f:b1:c3:0c:2c:a7:e4: a7:7b:cc:ef:bc:27:d4:d5:52:4e:71:8f:78:72:86:dc:4f:a5: 69:26:4b:f7:5c:6b:a1:46:8d:b0:84:8c:6d:ce:4f:49:a0:4b: 5b:20:31:f3:7b:b3:48:38:31:96:da:34:87:8c:ad:ea:b2:c4: 01:3d:c7:bb:8a:de:3c:5b:5c:56:93:ea:60:6a:de:81:5c:d2: 7d:d8:ed:e1:58:95:9a:06:be:a7:ec:40:bf:b5:73:3f:b6:2e: 3b:d0:e5:b9:ed:38:b1:39:28:ee:cf:bf:83:27:e6:93:e0:01: a6:a3:1a:ce:1d:68:cd:48:ca:9e:da:85:2a:ca:08:10:8e:e0: 12:b7:00:c9:0d:4d:61:8c:33:2f:b0:e7:e4:12:e3:19:c4:e2: 8d:d6:26:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZA2MNELsVF6GquwwtCTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl MmE5MWYwHhcNMjUxMjE1MTkwMTU4WhcNMjUxMjE2MTkwMTU4WjAzMTEwLwYDVQQD EyhkODQ0NTIyMTNiZTEwMGIzMjFiNzQ4MzY2MTAwOGQ5Nzk4NGQyNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+yxQVjTkuzR1FtQ3EdR6Pht22QS DIHSmOc8+hOafJPRcISFp9ZlLLsbrbdS8TShF2L8MSbVR+YlJioqAmsW6NMTOCdI 7+XJliBj9IZEGQgZTK3mL+61YjsG9/PPfQ0rif0REcMTSuO0M73jcDTROGtwv6fy ZS0tYVqJUEERGehMyRvRddv0zTesgGgbXoiWtyJRiDNqNXqRoKIeGvmicQgNFEHy 7OwZTg7LEY4SEUzhih0kTemoJpcNj67VMz5e3nvh1Cxe4uQfe9pi2nBvG/I2S5lS f5JYOKWqTGA02JIvxHpAWse/DzW8b/il6qq7GDwPllVQ2CysiKFkK7MqnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhEUiE74QCzIbdINmEAjZeYTSTfMB8GA1UdIwQY MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDJRkSBx SAyA5wDO8A2Jx0n7439Kwed/HStLlJYLqby/6iu8h/Lrb9dsM4t6XMQN2xKH29Hx SWu2WUcZ1qW8jQCQVMrB88Wy31BcUjamMM6kV5cHE8xvy6MAPEgQDtAe8xi3+Kl/ scMMLKfkp3vM77wn1NVSTnGPeHKG3E+laSZL91xroUaNsISMbc5PSaBLWyAx83uz SDgxlto0h4yt6rLEAT3Hu4rePFtcVpPqYGregVzSfdjt4ViVmga+p+xAv7VzP7Yu O9Dlue04sTko7s+/gyfmk+ABpqMazh1ozUjKntqFKsoIEI7gErcAyQ1NYYwzL7Dn 5BLjGcTijdYmnw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:44 2025 by rpki-client