This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft File: 1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json) Hash identifier: FkyKo5jxnq5O0NZqacpNq/oCt9es+6mETmJGUnSVqCY= Subject key identifier: 4A:B6:03:4B:8B:FA:D8:97:E5:3F:13:A6:70:F9:E5:C6:58:ED:FF:15 Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Certificate serial: 019B3D59DC7CF7B92C3E984F4A37375CC42A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft Manifest number: 0EE8 Signing time: Sat 20 Dec 2025 20:00:57 +0000 Manifest this update: Sat 20 Dec 2025 20:00:57 +0000 Manifest next update: Sun 21 Dec 2025 20:00:57 +0000 Files and hashes: 1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: G4SkysaNZwFtXhGht+au8gLFOQflS217yGk5GaAUCWE=) 2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=) 3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=) 4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:dc:7c:f7:b9:2c:3e:98:4f:4a:37:37:5c:c4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b Validity Not Before: Dec 20 20:00:57 2025 GMT Not After : Dec 21 20:00:57 2025 GMT Subject: CN=4ab6034b8bfad897e53f13a670f9e5c658edff15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8b:44:fa:99:72:c8:69:4a:22:98:d5:10:76: ee:42:ce:77:23:6a:e8:ca:27:dc:e5:a0:b6:95:6b: 69:bd:56:9c:bf:2d:87:22:f1:2d:47:01:44:a1:b4: a7:74:c5:4b:54:12:ca:3a:a2:8c:ef:a9:71:4a:8a: e0:3e:c1:65:a7:dd:eb:8b:1b:24:e0:e9:0f:29:8f: 23:68:e1:18:5f:47:bd:56:ac:78:05:6b:50:08:57: 5f:63:f6:2e:56:0c:b4:9b:1e:66:51:a2:b6:70:87: 71:0d:6a:71:ef:cd:58:c0:3b:fb:90:3a:e3:74:db: 1f:6b:8e:24:30:53:78:22:5f:e5:fc:ec:5a:56:cb: ba:39:96:c1:41:90:a5:0b:a8:fb:07:6b:66:67:21: b7:a5:69:18:29:bc:5e:7d:d8:97:fb:09:47:33:51: 2d:3b:cc:fd:59:15:02:76:bc:62:48:85:2a:64:98: 35:52:fa:67:63:c2:ca:7f:3c:6d:c8:c8:07:eb:22: 5a:61:61:d0:5d:f7:43:61:15:da:83:ef:13:ef:c3: cc:5d:97:db:cc:04:2c:00:f4:42:44:50:98:e4:e5: 53:0c:4d:3e:3f:9a:49:95:0a:f3:13:0b:c5:f8:a1: d0:da:fa:96:1a:0f:e4:4c:ca:85:8e:f1:46:a9:93: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B6:03:4B:8B:FA:D8:97:E5:3F:13:A6:70:F9:E5:C6:58:ED:FF:15 X509v3 Authority Key Identifier: keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6a:5e:c1:b3:8f:b0:b6:f0:1d:40:1e:e0:2f:51:73:d6:4f: f5:55:bc:c6:3b:78:d5:39:97:a5:29:fb:1a:7f:5b:b9:b0:fe: b2:96:c2:a0:3f:e5:27:4c:39:27:1b:e7:93:66:e2:10:7c:10: 7c:a1:80:93:2b:b3:2e:13:e4:ad:6c:fd:13:05:9f:1f:09:bb: 99:fa:d9:3c:21:eb:57:b2:53:ef:5c:a2:c3:30:18:9f:75:91: 85:91:32:c0:2e:e8:72:4a:96:f7:0e:1a:ae:22:40:24:8e:ef: a9:ed:0b:d3:b9:76:8b:68:e8:23:79:84:29:ac:6c:e2:01:58: 22:c2:0f:28:ad:ed:90:0b:b1:6d:de:03:21:3a:40:8c:0d:e6: 22:27:ff:85:73:e7:0e:2d:59:69:df:66:d7:61:18:a9:8b:b5: 90:f6:b2:9f:92:33:73:da:5b:62:48:82:1f:5c:4a:e5:83:de: 82:35:e4:f1:fb:cd:47:c7:b5:9c:9c:0c:9d:6a:ae:82:91:a1: c3:95:4b:fd:be:32:c8:ce:8f:d7:5d:f4:60:17:d7:52:dd:05: 76:8a:d7:ca:d3:15:84:b5:57:4e:7e:85:9f:0a:9c:da:aa:ce: 0d:fa:75:a5:34:56:58:08:d1:38:92:62:3a:71:5d:17:54:ed: de:00:05:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wdx897ksPphPSjc3XMQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1 M2VlMmIwHhcNMjUxMjIwMjAwMDU3WhcNMjUxMjIxMjAwMDU3WjAzMTEwLwYDVQQD Eyg0YWI2MDM0YjhiZmFkODk3ZTUzZjEzYTY3MGY5ZTVjNjU4ZWRmZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5otE+plyyGlKIpjVEHbuQs53I2ro yifc5aC2lWtpvVacvy2HIvEtRwFEobSndMVLVBLKOqKM76lxSorgPsFlp93rixsk 4OkPKY8jaOEYX0e9Vqx4BWtQCFdfY/YuVgy0mx5mUaK2cIdxDWpx781YwDv7kDrj dNsfa44kMFN4Il/l/OxaVsu6OZbBQZClC6j7B2tmZyG3pWkYKbxefdiX+wlHM1Et O8z9WRUCdrxiSIUqZJg1UvpnY8LKfzxtyMgH6yJaYWHQXfdDYRXag+8T78PMXZfb zAQsAPRCRFCY5OVTDE0+P5pJlQrzEwvF+KHQ2vqWGg/kTMqFjvFGqZPebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq2A0uL+tiX5T8TpnD55cZY7f8VMB8GA1UdIwQY MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0 LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWpewbOP sLbwHUAe4C9Rc9ZP9VW8xjt41TmXpSn7Gn9bubD+spbCoD/lJ0w5Jxvnk2biEHwQ fKGAkyuzLhPkrWz9EwWfHwm7mfrZPCHrV7JT71yiwzAYn3WRhZEywC7ockqW9w4a riJAJI7vqe0L07l2i2joI3mEKaxs4gFYIsIPKK3tkAuxbd4DITpAjA3mIif/hXPn Di1Zad9m12EYqYu1kPayn5Izc9pbYkiCH1xK5YPegjXk8fvNR8e1nJwMnWqugpGh w5VL/b4yyM6P1130YBfXUt0FdorXytMVhLVXTn6Fnwqc2qrODfp1pTRWWAjROJJi OnFdF1Tt3gAFTw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:24 2025 by rpki-client