This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json) Hash identifier: dfq1P3s2CbEDQ06DerUmzF8VE9v32EgKF9Fu1VKFPqc= Subject key identifier: 15:21:CC:4C:37:AB:AA:78:D1:7A:36:DE:8C:B0:AA:80:B7:15:9A:B2 Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Certificate serial: 019B1FBCF8D07EF2FCB2887895363849BA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft Manifest number: 0448 Signing time: Mon 15 Dec 2025 02:00:36 +0000 Manifest this update: Mon 15 Dec 2025 02:00:36 +0000 Manifest next update: Tue 16 Dec 2025 02:00:36 +0000 Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: 7AK6lHwSum+Gj7cioOoLDJHI1TVL5ojGQfQFaQ3ZjZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bc:f8:d0:7e:f2:fc:b2:88:78:95:36:38:49:ba:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Validity Not Before: Dec 15 02:00:36 2025 GMT Not After : Dec 16 02:00:36 2025 GMT Subject: CN=1521cc4c37abaa78d17a36de8cb0aa80b7159ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:ae:b2:fe:e9:3a:ce:90:58:49:bc:52:84: 43:2c:07:d0:29:14:e0:c7:ea:69:f4:a3:e9:1d:96: 6f:83:dd:56:69:d0:a0:9c:b6:e8:d3:ad:b0:34:50: 13:f9:10:e7:4e:17:ea:d4:17:ab:27:4b:46:35:24: 14:0f:4d:fc:21:31:b4:d8:10:d3:63:a8:24:b7:87: 6d:06:ce:54:92:0a:0b:03:12:b6:b0:ef:39:0a:c5: ef:46:2f:62:4b:4d:86:23:17:57:b8:1e:88:28:a6: 4c:4a:f6:26:9e:9c:18:fd:28:d7:3f:12:bd:62:cf: 84:50:fc:c9:1c:5e:49:22:71:ab:80:16:7f:5a:7a: 46:38:a9:21:63:cb:16:67:2c:f3:03:4d:a8:bb:39: c6:09:c5:5a:33:61:76:78:7e:e1:b3:20:14:b8:13: 21:f6:9e:42:8c:c0:72:67:ff:40:da:57:7b:47:84: 7a:d5:c0:18:4e:f8:8d:54:59:1d:a4:4a:fb:fe:26: b0:9b:c9:5a:05:02:0e:ad:7f:5d:52:af:25:68:b4: a5:ef:10:2a:da:01:cb:9f:9a:52:0d:37:a1:78:51: fb:e8:a2:82:64:d3:6c:1b:bc:2f:ec:7c:63:3a:de: be:87:82:88:03:0d:ba:59:3a:85:f2:5b:3c:44:f9: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:21:CC:4C:37:AB:AA:78:D1:7A:36:DE:8C:B0:AA:80:B7:15:9A:B2 X509v3 Authority Key Identifier: keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5f:fa:56:e6:7b:0e:b8:f7:49:4a:fe:c9:57:b0:00:4c:51: 66:0c:d0:63:8b:ff:ef:a4:2b:e1:9c:a1:f3:55:65:2e:86:90: 5f:b4:80:f0:eb:7e:bf:82:41:42:0c:4a:25:1a:96:28:e3:52: 31:a4:11:2f:d5:21:bf:e6:3f:24:1f:28:f1:19:38:b8:15:8a: 41:77:54:29:53:df:a5:f8:3d:91:64:eb:2d:a0:4a:db:10:f3: 1a:80:78:64:3a:32:9a:bb:05:dd:de:a6:d5:06:34:65:40:86: f7:55:0e:32:a4:e9:7c:e1:5a:ab:0b:b7:14:01:e6:97:c9:59: d4:9d:a8:2e:15:2d:eb:9d:33:90:1a:d0:5f:e4:02:62:1d:12: cd:0d:e6:a1:42:76:68:f6:2a:be:85:d3:ad:c0:5f:86:4d:81: 26:66:82:b0:79:14:37:96:ea:66:c8:1e:29:c5:35:b2:00:52: 23:12:c1:f7:e3:2c:5c:c2:c5:ed:32:7c:84:b1:52:cc:42:e8: a3:db:a2:25:8d:79:e2:aa:ec:fb:da:be:84:7a:a1:24:a9:a9: 33:01:7b:3d:89:fe:1e:62:31:e7:99:9d:52:ad:33:b2:4d:fc: ca:75:98:e2:8a:26:b4:4a:5f:0b:9b:40:6b:ad:a6:62:37:46: 82:22:ef:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvPjQfvL8soh4lTY4SbpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh N2M0ZTUwHhcNMjUxMjE1MDIwMDM2WhcNMjUxMjE2MDIwMDM2WjAzMTEwLwYDVQQD EygxNTIxY2M0YzM3YWJhYTc4ZDE3YTM2ZGU4Y2IwYWE4MGI3MTU5YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Kusv7pOs6QWEm8UoRDLAfQKRTg x+pp9KPpHZZvg91WadCgnLbo062wNFAT+RDnThfq1BerJ0tGNSQUD038ITG02BDT Y6gkt4dtBs5UkgoLAxK2sO85CsXvRi9iS02GIxdXuB6IKKZMSvYmnpwY/SjXPxK9 Ys+EUPzJHF5JInGrgBZ/WnpGOKkhY8sWZyzzA02ouznGCcVaM2F2eH7hsyAUuBMh 9p5CjMByZ/9A2ld7R4R61cAYTviNVFkdpEr7/iawm8laBQIOrX9dUq8laLSl7xAq 2gHLn5pSDTeheFH76KKCZNNsG7wv7HxjOt6+h4KIAw26WTqF8ls8RPmu4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUhzEw3q6p40Xo23oywqoC3FZqyMB8GA1UdIwQY MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1 LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV/6VuZ7 Drj3SUr+yVewAExRZgzQY4v/76Qr4Zyh81VlLoaQX7SA8Ot+v4JBQgxKJRqWKONS MaQRL9Uhv+Y/JB8o8Rk4uBWKQXdUKVPfpfg9kWTrLaBK2xDzGoB4ZDoymrsF3d6m 1QY0ZUCG91UOMqTpfOFaqwu3FAHml8lZ1J2oLhUt650zkBrQX+QCYh0SzQ3moUJ2 aPYqvoXTrcBfhk2BJmaCsHkUN5bqZsgeKcU1sgBSIxLB9+MsXMLF7TJ8hLFSzELo o9uiJY154qrs+9q+hHqhJKmpMwF7PYn+HmIx55mdUq0zsk38ynWY4oomtEpfC5tA a62mYjdGgiLveg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:08 2025 by rpki-client