This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json) Hash identifier: Y21il1o+PmylxDqZ+rd/P47qqiMiq2L9rYWVSwkjzgo= Subject key identifier: C2:21:BC:09:90:FF:28:72:F7:93:9B:CC:03:E7:05:C9:D3:DA:66:05 Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea Certificate serial: 019B5907DA8E5562606DD65A3AEAB330C200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 05:00:45 +0000 Manifest this update: Fri 26 Dec 2025 05:00:45 +0000 Manifest next update: Sat 27 Dec 2025 05:00:45 +0000 Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=) 2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: aJDNt0ZdmIbiwvtBmukUJo7l5CKJrvPrF+79cYGYhfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:da:8e:55:62:60:6d:d6:5a:3a:ea:b3:30:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea Validity Not Before: Dec 26 05:00:45 2025 GMT Not After : Dec 27 05:00:45 2025 GMT Subject: CN=c221bc0990ff2872f7939bcc03e705c9d3da6605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:dc:ba:09:a0:a7:5a:33:d5:c1:0f:b9:46: 0e:ff:fe:76:54:8a:a1:bc:0b:c0:52:48:0f:d3:50: b0:2d:5a:d4:0a:9c:bb:19:79:d7:58:e1:50:bc:15: d2:aa:76:69:d9:d3:0d:bf:3b:a5:65:d6:82:bd:60: b3:d9:39:98:7f:bc:7e:a7:ac:fc:39:cc:8d:fb:81: 2b:39:94:a2:97:56:68:5e:72:b2:e4:6a:c2:c6:f6: d3:b0:03:10:44:c5:19:0e:e2:ac:37:55:c8:0c:ea: 57:d5:a6:66:f9:0d:78:5e:ed:0f:ba:8f:85:c1:0e: e9:0b:f3:b3:bc:67:31:17:08:57:9f:3a:1e:4f:a3: f7:d3:db:7e:b8:9b:82:9f:8a:3c:c0:c0:64:f2:c3: 36:a1:67:5d:05:e4:69:89:c5:2c:ad:7d:79:a2:46: 1c:fd:b9:b9:7a:e3:8f:ae:41:6d:54:c9:79:ad:17: 0d:38:42:3d:8d:23:39:15:18:61:a6:a1:8a:3e:56: f1:20:47:e8:cb:4c:fc:fa:5d:9a:98:82:77:dc:8f: ab:ce:cf:02:c4:bc:93:87:16:59:90:db:cb:71:b5: aa:a6:70:8f:9b:81:df:a5:33:08:1e:11:7e:c6:a4: 68:1e:42:c3:a8:0b:76:07:32:3a:78:05:c3:93:d3: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:BC:09:90:FF:28:72:F7:93:9B:CC:03:E7:05:C9:D3:DA:66:05 X509v3 Authority Key Identifier: keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:c5:38:c9:4e:86:85:59:ba:de:cb:c1:77:2f:fe:5f:ef: 35:a0:72:f2:7a:1c:81:d0:eb:47:37:db:b0:19:c8:f6:d7:07: 00:cf:a5:c2:90:d8:44:01:bc:91:e9:84:81:d3:71:cc:59:45: c5:c9:73:56:54:86:3e:38:20:cb:3b:b5:52:9c:30:74:de:5e: 98:fe:b8:57:44:3f:66:09:95:51:39:0b:d4:ed:dd:91:90:d9: 14:4b:1d:ce:f8:96:6d:bd:c6:6d:57:85:61:c3:a9:a1:09:55: 7d:f1:50:97:09:94:af:7c:ae:ee:33:01:4f:a3:2f:99:c3:1e: 75:4b:bc:83:a8:df:3c:0d:29:0f:f0:cb:c7:6f:0c:6e:b0:ec: da:15:ec:0a:12:75:54:cb:9e:bf:3c:b2:44:22:c0:70:ad:d1: cc:57:4a:40:f4:c2:9a:25:89:54:c4:6d:e9:e8:62:cf:dc:de: c8:d7:90:74:46:eb:69:13:3a:f6:7d:2e:62:61:10:0d:9b:c6: 13:a1:19:a2:c2:4c:86:93:70:7e:47:3e:31:2f:dc:1f:b1:72: 01:e2:b3:49:a3:fb:55:87:18:63:2a:0e:81:6a:5b:52:7f:a3: 7b:76:35:2c:39:6d:b6:4b:3f:18:d5:ec:c4:ef:e1:62:ea:ce: 90:79:ca:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB9qOVWJgbdZaOuqzMMIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MGY4NmQwNDRhNGEyYTIzMzMxOTQxOGFhOGRhOWFkODM3 Yzc2ZWEwHhcNMjUxMjI2MDUwMDQ1WhcNMjUxMjI3MDUwMDQ1WjAzMTEwLwYDVQQD EyhjMjIxYmMwOTkwZmYyODcyZjc5MzliY2MwM2U3MDVjOWQzZGE2NjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU3cugmgp1oz1cEPuUYO//52VIqh vAvAUkgP01CwLVrUCpy7GXnXWOFQvBXSqnZp2dMNvzulZdaCvWCz2TmYf7x+p6z8 OcyN+4ErOZSil1ZoXnKy5GrCxvbTsAMQRMUZDuKsN1XIDOpX1aZm+Q14Xu0Puo+F wQ7pC/OzvGcxFwhXnzoeT6P309t+uJuCn4o8wMBk8sM2oWddBeRpicUsrX15okYc /bm5euOPrkFtVMl5rRcNOEI9jSM5FRhhpqGKPlbxIEfoy0z8+l2amIJ33I+rzs8C xLyThxZZkNvLcbWqpnCPm4HfpTMIHhF+xqRoHkLDqAt2BzI6eAXDk9NW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIhvAmQ/yhy95ObzAPnBcnT2mYFMB8GA1UdIwQY MBaAFHgPhtBEpKKiMzGUGKqNqa2DfHbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDkt NTI0ODAzZWUyOTQ5LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDktNTI0ODAzZWUyOTQ5 LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR3FOMlO hoVZut7LwXcv/l/vNaBy8nocgdDrRzfbsBnI9tcHAM+lwpDYRAG8kemEgdNxzFlF xclzVlSGPjggyzu1UpwwdN5emP64V0Q/ZgmVUTkL1O3dkZDZFEsdzviWbb3GbVeF YcOpoQlVffFQlwmUr3yu7jMBT6MvmcMedUu8g6jfPA0pD/DLx28MbrDs2hXsChJ1 VMuevzyyRCLAcK3RzFdKQPTCmiWJVMRt6ehiz9zeyNeQdEbraRM69n0uYmEQDZvG E6EZosJMhpNwfkc+MS/cH7FyAeKzSaP7VYcYYyoOgWpbUn+je3Y1LDlttks/GNXs xO/hYurOkHnK3Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client