This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json) Hash identifier: vaVpImKTrUM5+acvEdxPFJMeecY3Xs836gqmdz8ht7g= Subject key identifier: 13:D2:A5:29:0C:C8:6A:BC:22:4D:FE:72:18:D1:00:CE:A9:76:AE:8F Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Certificate serial: 019B35697CCD885BA42D75B31FA73515983B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 07:01:04 +0000 Manifest this update: Fri 19 Dec 2025 07:01:04 +0000 Manifest next update: Sat 20 Dec 2025 07:01:04 +0000 Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: dsOHvrpsjHmcaRRHNQjLtlOTiEd81kk1s5tkBdk4IcE=) 2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:7c:cd:88:5b:a4:2d:75:b3:1f:a7:35:15:98:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Validity Not Before: Dec 19 07:01:04 2025 GMT Not After : Dec 20 07:01:04 2025 GMT Subject: CN=13d2a5290cc86abc224dfe7218d100cea976ae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:f9:3e:17:fc:a9:ab:02:23:5a:fb:b5:c0: 50:b8:6d:2a:d6:77:40:83:07:82:5b:b8:a9:2b:c5: 41:4c:8f:87:ae:6e:07:65:1e:0c:69:15:5f:dd:f1: 76:3d:8b:e5:5e:0d:4d:e5:88:1d:46:66:af:f8:8d: 80:f7:a3:f0:85:9f:5b:b6:7e:bc:6f:2d:a6:2a:e9: cb:ec:10:10:44:de:7b:be:f5:d5:04:ac:ac:bb:ac: 7d:b1:d5:9c:8d:87:d8:93:70:cd:63:eb:03:0f:bb: 18:bd:b9:ec:7f:38:db:e9:7a:38:0d:03:c2:f6:f5: ec:b8:6a:c9:77:76:ca:5a:e6:32:9d:ad:0d:40:e9: fc:86:b6:05:75:a2:69:e9:38:c6:a5:9a:b8:df:cf: 0f:87:0f:59:5c:ac:e0:ad:5b:2e:77:f4:bf:be:29: bb:3c:bf:1b:69:c6:90:df:71:02:7b:2c:f1:4b:61: f8:a3:a5:2f:bc:32:65:f3:d2:a3:30:8c:c8:2c:74: 07:95:3c:93:8f:99:e9:14:bf:6e:fe:f9:01:99:08: 60:c8:9a:50:54:69:13:cf:21:a1:3a:4b:24:c4:62: 60:7a:b9:8d:88:7c:dc:dc:43:a7:86:17:40:71:51: 90:1c:01:bc:bc:97:3e:2a:83:58:cd:a0:a7:b1:e7: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:A5:29:0C:C8:6A:BC:22:4D:FE:72:18:D1:00:CE:A9:76:AE:8F X509v3 Authority Key Identifier: keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0c:8f:35:8f:b4:8c:1a:be:da:d9:61:07:65:48:70:45:ae: 6d:b1:69:4d:bc:86:2e:ec:29:88:3b:98:2f:53:84:a6:4a:57: 69:23:3b:9e:79:02:5f:73:4f:e8:1b:23:05:7c:7d:74:07:9b: aa:11:b4:b1:34:ff:90:9f:36:d1:be:79:67:fb:53:a1:15:d1: 8f:be:f6:a0:0f:83:2b:bf:c7:e3:82:a1:4c:40:6f:15:83:3a: 19:34:41:ed:a0:fa:80:3f:22:8c:64:59:21:4f:71:87:b7:e8: 24:a8:34:b8:68:1c:db:39:fc:c9:af:4d:d3:18:29:b2:d5:be: 56:b6:02:ac:61:de:1a:1b:82:ab:ae:ca:f1:75:d9:d9:b6:bc: 65:10:99:f0:1b:4d:d7:0e:92:1c:84:1b:20:45:a9:7d:57:fc: eb:6c:35:6f:c1:69:54:2a:e1:c0:c0:8c:10:f7:86:e2:6f:ed: 80:cb:51:c0:bc:c8:bd:10:00:05:d6:59:0f:51:56:e1:e3:18: b3:87:dc:ad:88:13:7a:2f:d7:13:5c:31:47:d4:92:c8:1e:27: 24:1e:89:b4:ca:e1:99:1b:2a:f2:35:58:99:7b:5a:63:c7:2b: 92:47:fb:7a:1d:b8:48:5e:91:ce:05:b2:90:bd:6a:f9:52:48: c0:a9:5d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aXzNiFukLXWzH6c1FZg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy ZTkwODYwHhcNMjUxMjE5MDcwMTA0WhcNMjUxMjIwMDcwMTA0WjAzMTEwLwYDVQQD EygxM2QyYTUyOTBjYzg2YWJjMjI0ZGZlNzIxOGQxMDBjZWE5NzZhZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qn5Phf8qasCI1r7tcBQuG0q1ndA gweCW7ipK8VBTI+Hrm4HZR4MaRVf3fF2PYvlXg1N5YgdRmav+I2A96PwhZ9btn68 by2mKunL7BAQRN57vvXVBKysu6x9sdWcjYfYk3DNY+sDD7sYvbnsfzjb6Xo4DQPC 9vXsuGrJd3bKWuYyna0NQOn8hrYFdaJp6TjGpZq4388Phw9ZXKzgrVsud/S/vim7 PL8bacaQ33ECeyzxS2H4o6UvvDJl89KjMIzILHQHlTyTj5npFL9u/vkBmQhgyJpQ VGkTzyGhOkskxGJgermNiHzc3EOnhhdAcVGQHAG8vJc+KoNYzaCnseeztQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPSpSkMyGq8Ik3+chjRAM6pdq6PMB8GA1UdIwQY MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0 LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAyPNY+0 jBq+2tlhB2VIcEWubbFpTbyGLuwpiDuYL1OEpkpXaSM7nnkCX3NP6BsjBXx9dAeb qhG0sTT/kJ820b55Z/tToRXRj772oA+DK7/H44KhTEBvFYM6GTRB7aD6gD8ijGRZ IU9xh7foJKg0uGgc2zn8ya9N0xgpstW+VrYCrGHeGhuCq67K8XXZ2ba8ZRCZ8BtN 1w6SHIQbIEWpfVf862w1b8FpVCrhwMCMEPeG4m/tgMtRwLzIvRAABdZZD1FW4eMY s4fcrYgTei/XE1wxR9SSyB4nJB6JtMrhmRsq8jVYmXtaY8crkkf7eh24SF6RzgWy kL1q+VJIwKldUA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:20 2025 by rpki-client