This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft File: 1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json) Hash identifier: WU0cJFwGstE1ZW5NMMRJw2Kk7ZYBXISX3BrzwsRJfpA= Subject key identifier: 51:22:AD:8D:7B:A9:05:A4:1C:01:41:D5:06:6E:D6:09:CB:7B:04:7C Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Certificate serial: 019B35A08700A1E81D7D209912F35E540A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft Manifest number: 0EE4 Signing time: Fri 19 Dec 2025 08:01:11 +0000 Manifest this update: Fri 19 Dec 2025 08:01:11 +0000 Manifest next update: Sat 20 Dec 2025 08:01:11 +0000 Files and hashes: 1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: tbAJ3PBEKsmj+ZxBr4itTWdtvcAinylCnZGDCO6aSRQ=) 2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=) 3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=) 4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:87:00:a1:e8:1d:7d:20:99:12:f3:5e:54:0a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Validity Not Before: Dec 19 08:01:11 2025 GMT Not After : Dec 20 08:01:11 2025 GMT Subject: CN=5122ad8d7ba905a41c0141d5066ed609cb7b047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:10:d7:0e:31:70:2c:9c:56:8d:f2:f7:4c: 3b:9d:0f:d9:64:c4:df:d9:49:4d:54:e3:c4:a6:e1: eb:a4:cc:a0:de:c7:d6:85:49:8b:1d:14:26:3f:8c: ee:20:34:83:5b:4c:8a:2e:72:2e:c0:0b:b6:1a:88: f8:d4:6c:a6:ca:ec:5a:97:ef:37:76:d9:34:21:54: 66:2b:10:22:78:91:0b:aa:2e:ad:4a:b4:2b:42:3d: 05:b6:cd:b9:b0:ea:c9:63:4a:67:2f:a2:ab:a5:58: 2a:bc:47:47:0a:02:99:f2:f1:56:7d:92:5e:2a:1e: fd:63:37:ab:e9:ba:6d:5c:59:26:66:83:8d:07:3a: 5a:a9:4e:0e:b5:2e:d9:8a:ae:0c:b4:2a:a9:0a:4a: f0:6b:66:65:77:01:d5:9b:cc:90:48:86:87:a7:b5: bd:8d:19:75:92:29:bb:82:32:0c:71:3b:29:21:70: 26:35:a9:48:61:28:1b:14:b9:53:b7:96:01:9a:54: 02:e4:6d:f2:f5:95:c7:ae:ba:ca:37:c2:5b:9f:51: e8:42:c9:9a:28:dd:ea:d9:85:34:1c:63:76:17:5e: 31:61:25:44:d7:9a:d8:aa:ee:15:56:be:bf:9c:94: 5c:98:42:1b:22:37:40:9e:99:5d:85:9f:e7:8a:71: 97:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:22:AD:8D:7B:A9:05:A4:1C:01:41:D5:06:6E:D6:09:CB:7B:04:7C X509v3 Authority Key Identifier: keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e8:88:2d:96:6e:d9:d2:93:55:96:d0:a3:a6:3d:34:9b:0d: 26:f4:65:2e:e4:ce:d0:c1:39:dc:72:ea:38:03:a0:f1:70:27: 06:6c:5c:be:df:f7:44:8d:c6:a4:de:e5:56:1b:86:13:84:a3: 4f:25:25:9b:a7:f8:b2:f8:57:61:63:04:4b:af:d5:c4:23:8d: 65:d4:60:23:1e:12:ce:f7:ff:d8:06:61:bb:da:fc:d9:4e:54: 67:ff:e4:7e:50:8f:06:65:bc:e7:40:0e:35:12:78:4b:57:e3: 19:e4:97:32:7b:ac:d5:76:5b:f6:fa:5b:4a:d4:59:0e:18:7c: 39:64:70:5a:cf:8f:78:70:54:a9:90:de:a3:cc:50:19:2b:d1: 56:8d:2c:46:cd:a6:2f:e4:10:8b:5e:09:c0:8a:f5:e6:c9:47: d4:71:de:bd:a2:f8:12:2f:1e:f2:a4:42:2c:e5:f9:fc:ea:fb: 3d:49:30:7f:16:42:c5:5e:e9:fa:9e:92:b6:d1:af:8a:47:a4: 16:5b:db:8e:33:8e:42:0e:5d:1a:7f:bf:36:ea:2e:8f:fc:30: 2e:38:c0:93:e5:e0:60:fb:b7:99:7a:87:4a:3d:87:b5:c3:2f: f4:05:3e:27:5f:4f:24:6e:2c:d2:2c:19:f8:73:99:77:ff:c3: b7:c3:89:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oIcAoegdfSCZEvNeVAplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1 M2VlMmIwHhcNMjUxMjE5MDgwMTExWhcNMjUxMjIwMDgwMTExWjAzMTEwLwYDVQQD Eyg1MTIyYWQ4ZDdiYTkwNWE0MWMwMTQxZDUwNjZlZDYwOWNiN2IwNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRQQ1w4xcCycVo3y90w7nQ/ZZMTf 2UlNVOPEpuHrpMyg3sfWhUmLHRQmP4zuIDSDW0yKLnIuwAu2Goj41Gymyuxal+83 dtk0IVRmKxAieJELqi6tSrQrQj0Fts25sOrJY0pnL6KrpVgqvEdHCgKZ8vFWfZJe Kh79Yzer6bptXFkmZoONBzpaqU4OtS7Ziq4MtCqpCkrwa2ZldwHVm8yQSIaHp7W9 jRl1kim7gjIMcTspIXAmNalIYSgbFLlTt5YBmlQC5G3y9ZXHrrrKN8Jbn1HoQsma KN3q2YU0HGN2F14xYSVE15rYqu4VVr6/nJRcmEIbIjdAnpldhZ/ninGXIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEirY17qQWkHAFB1QZu1gnLewR8MB8GA1UdIwQY MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0 LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuiILZZu 2dKTVZbQo6Y9NJsNJvRlLuTO0ME53HLqOAOg8XAnBmxcvt/3RI3GpN7lVhuGE4Sj TyUlm6f4svhXYWMES6/VxCONZdRgIx4Szvf/2AZhu9r82U5UZ//kflCPBmW850AO NRJ4S1fjGeSXMnus1XZb9vpbStRZDhh8OWRwWs+PeHBUqZDeo8xQGSvRVo0sRs2m L+QQi14JwIr15slH1HHevaL4Ei8e8qRCLOX5/Or7PUkwfxZCxV7p+p6SttGvikek FlvbjjOOQg5dGn+/Nuouj/wwLjjAk+XgYPu3mXqHSj2HtcMv9AU+J19PJG4s0iwZ +HOZd//Dt8OJKg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:20 2025 by rpki-client