This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json) Hash identifier: IX1wi9juxGMT7Nr4TWlsyAVhDpVovOLo9gNUYNJcl2g= Subject key identifier: 45:71:04:07:6B:41:A8:24:F4:D7:EA:73:50:AA:09:9E:06:F1:DF:4E Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Certificate serial: 019B590834C6D7EBCA4319FAF50A1F24B6D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft Manifest number: B0 Signing time: Fri 26 Dec 2025 05:01:08 +0000 Manifest this update: Fri 26 Dec 2025 05:01:08 +0000 Manifest next update: Sat 27 Dec 2025 05:01:08 +0000 Files and hashes: 1: aenbutlsHdIddYbTr8SaSbe80BI.roa (hash: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=) 2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: /vP1cy3IOZIR8y0r5rBzvlI0vpsmnTTPwq1XaIVbG5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:34:c6:d7:eb:ca:43:19:fa:f5:0a:1f:24:b6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Validity Not Before: Dec 26 05:01:08 2025 GMT Not After : Dec 27 05:01:08 2025 GMT Subject: CN=457104076b41a824f4d7ea7350aa099e06f1df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:26:b9:70:08:e5:b9:9c:a3:98:03:06:aa: b9:28:1b:18:2d:d7:53:60:e5:a7:ef:20:f9:cb:68: 6d:ef:57:6d:1a:b4:16:95:da:a8:21:f6:13:dd:1e: 0c:42:cc:71:cd:31:d2:0f:4f:d0:82:3d:22:4a:3e: 69:0a:1a:fa:a9:be:6d:c8:c6:f6:ac:92:2b:4b:ad: ed:23:47:c0:b9:c0:5f:4d:d3:a4:03:08:08:ed:ae: 57:1b:d5:87:40:4c:b7:c1:b2:d2:6a:86:15:e2:df: e2:e6:5a:23:12:8a:11:dc:87:f2:96:7d:f5:d0:07: e7:47:97:e9:b8:c2:40:7a:08:3d:7a:c8:7e:06:4b: ae:9d:52:13:1a:25:2d:05:68:d0:e0:d2:16:f3:67: ef:a9:4b:bd:72:dd:22:ec:1e:02:b2:8e:7a:b3:5a: b3:df:ef:03:20:1b:17:e8:06:07:57:2b:8a:43:4e: 70:3e:43:bb:cb:3a:b0:5b:0a:41:a4:de:25:c4:d9: 4b:9a:ca:be:f0:a3:97:6a:69:be:ba:d1:3b:c2:0c: ed:25:b0:7d:b5:f8:cd:49:f2:28:98:fd:75:87:4c: f4:f4:0b:55:a1:d1:92:48:a9:8a:af:86:f3:de:47: ad:cd:4d:56:34:b3:ff:71:82:05:e4:f7:3c:a2:57: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:71:04:07:6B:41:A8:24:F4:D7:EA:73:50:AA:09:9E:06:F1:DF:4E X509v3 Authority Key Identifier: keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ac:79:ce:8e:10:3e:11:34:eb:51:ee:1d:e0:de:c9:cc:f8: 5a:af:c3:dd:7c:08:a7:9c:f5:27:70:11:c6:31:bf:60:18:b1: db:ac:08:d1:c2:68:88:9a:5d:8c:0d:2c:c5:6f:06:4b:8e:fc: 44:e4:8b:ed:a6:27:d2:25:e8:85:a7:32:07:49:0a:8b:5b:77: 52:67:1d:05:9e:00:c9:44:6c:02:7a:1b:b7:01:6b:39:16:47: d3:a0:0b:45:1e:54:f3:ca:4a:48:aa:9e:5a:76:34:15:d5:29: c4:e0:61:41:ff:d7:fc:d0:3e:e4:8a:f4:b8:7c:ec:15:21:39: b2:ae:43:c9:4c:55:e2:15:fe:99:24:47:32:b6:09:f7:b7:48: 75:eb:a9:3d:ff:53:4a:14:22:91:a1:de:ab:d3:55:5c:ff:02: a8:19:ac:f2:f5:e2:d8:3e:58:39:2b:21:0d:5a:86:9a:01:9e: 73:48:1a:46:e6:64:85:d8:bd:9d:dd:74:45:aa:3a:ab:dc:82: 23:1b:d8:a1:af:bc:74:da:c3:f3:7e:6e:68:25:64:e8:94:67: 46:01:9e:7b:ac:65:40:7c:1f:8d:75:20:aa:82:0c:bd:68:55: 22:cf:43:30:14:13:71:a1:0e:5d:c9:40:4d:25:d8:dc:3b:a0: 11:83:58:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCDTG1+vKQxn69QofJLbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm N2U4NjEwHhcNMjUxMjI2MDUwMTA4WhcNMjUxMjI3MDUwMTA4WjAzMTEwLwYDVQQD Eyg0NTcxMDQwNzZiNDFhODI0ZjRkN2VhNzM1MGFhMDk5ZTA2ZjFkZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSgmuXAI5bmco5gDBqq5KBsYLddT YOWn7yD5y2ht71dtGrQWldqoIfYT3R4MQsxxzTHSD0/Qgj0iSj5pChr6qb5tyMb2 rJIrS63tI0fAucBfTdOkAwgI7a5XG9WHQEy3wbLSaoYV4t/i5lojEooR3Ifyln31 0AfnR5fpuMJAegg9esh+BkuunVITGiUtBWjQ4NIW82fvqUu9ct0i7B4Cso56s1qz 3+8DIBsX6AYHVyuKQ05wPkO7yzqwWwpBpN4lxNlLmsq+8KOXamm+utE7wgztJbB9 tfjNSfIomP11h0z09AtVodGSSKmKr4bz3ketzU1WNLP/cYIF5Pc8oldZjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVxBAdrQagk9Nfqc1CqCZ4G8d9OMB8GA1UdIwQY MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt ZjE2YjA3ZjQzMDZmLzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqx5zo4Q PhE061HuHeDeycz4Wq/D3XwIp5z1J3ARxjG/YBix26wI0cJoiJpdjA0sxW8GS478 ROSL7aYn0iXohacyB0kKi1t3UmcdBZ4AyURsAnobtwFrORZH06ALRR5U88pKSKqe WnY0FdUpxOBhQf/X/NA+5Ir0uHzsFSE5sq5DyUxV4hX+mSRHMrYJ97dIdeupPf9T ShQikaHeq9NVXP8CqBms8vXi2D5YOSshDVqGmgGec0gaRuZkhdi9nd10Rao6q9yC IxvYoa+8dNrD835uaCVk6JRnRgGee6xlQHwfjXUgqoIMvWhVIs9DMBQTcaEOXclA TSXY3DugEYNY1A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client