This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft File: EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json) Hash identifier: hOuvOKT/JMLc18Y1kxBYdXQfFx8ivUtB2/SApfUx0Tc= Subject key identifier: B4:21:28:53:DC:87:87:B6:1D:B2:31:5A:FC:E8:45:5C:A7:76:F3:CB Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb Certificate serial: 019B5A51E8EEA282BFBD52B3FD118AFC01EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft Manifest number: 0AB8 Signing time: Fri 26 Dec 2025 11:01:15 +0000 Manifest this update: Fri 26 Dec 2025 11:01:15 +0000 Manifest next update: Sat 27 Dec 2025 11:01:15 +0000 Files and hashes: 1: 1eXto-EsRD2_BRDc9smA9RA0iPI.roa (hash: g1hRvTrzsnVFScKTJJdFlUgNjwgiZOniAlwWxxAKEuA=) 2: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: gRMsT20Xms7LhWkmzr+sLysY4rEzxKVM3ikNEkJYgdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e8:ee:a2:82:bf:bd:52:b3:fd:11:8a:fc:01:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb Validity Not Before: Dec 26 11:01:15 2025 GMT Not After : Dec 27 11:01:15 2025 GMT Subject: CN=b4212853dc8787b61db2315afce8455ca776f3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:c9:3b:f4:ca:40:7a:41:fc:92:d6:db:72: 5a:7b:07:eb:ef:be:a1:d7:c7:de:8d:ac:02:0b:bd: 3e:ef:ba:3c:3b:24:31:ca:72:db:28:44:59:45:ce: 47:da:9f:32:f4:11:e9:95:22:fc:a4:ce:45:e4:40: cf:40:9e:41:bc:d7:8a:63:21:2e:03:4f:99:0d:7f: 3c:f8:03:63:3b:d5:5f:b7:86:c4:70:85:e3:0e:0f: f7:38:92:7b:23:a0:49:c1:f5:89:29:b4:98:de:45: 39:d6:37:33:9b:1c:e5:3f:a5:f9:c3:06:2e:47:dd: 97:c0:36:4d:6e:c1:f2:80:06:9e:da:71:63:fb:47: 97:fd:a7:ca:e0:5f:0a:31:32:f4:da:ee:51:34:66: db:fe:18:f3:6f:1a:7e:97:4f:91:1a:ee:1c:ca:06: 05:ac:74:e8:c6:6f:12:00:43:6e:1d:0c:e2:d4:88: 06:dd:b6:39:11:27:a7:9c:8b:b0:7b:19:ab:9c:95: 9d:30:53:4b:61:19:9b:40:e5:50:7c:30:72:d7:f3: a6:cf:dd:c7:e0:2d:e4:bf:58:36:94:62:4f:06:38: 65:2b:e0:2a:de:db:74:f4:9f:ff:5e:22:8a:92:4b: 72:d6:3b:c7:c2:8a:9b:1b:4d:a1:6b:fc:21:05:8d: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:21:28:53:DC:87:87:B6:1D:B2:31:5A:FC:E8:45:5C:A7:76:F3:CB X509v3 Authority Key Identifier: keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:3a:f1:7e:3c:23:52:d9:1a:14:34:ec:17:47:12:91:3a: ce:3c:b2:d6:25:9f:a3:05:65:58:ea:56:79:9c:ca:27:05:cf: a2:f4:59:a8:19:76:63:47:47:95:a2:2c:75:64:6a:6a:b6:89: e2:b1:cd:9d:52:14:c8:66:5a:3d:83:12:38:f2:1b:e5:f9:05: 6e:f0:19:3c:b4:07:21:0a:f7:bc:63:2c:a1:90:f9:30:00:88: cb:fc:cc:2d:b0:9e:38:16:aa:b6:93:5f:b1:8c:f7:89:6a:26: f1:e2:1e:e1:f7:63:04:4d:88:2d:0c:70:8f:76:c5:06:5b:db: 8c:5d:3d:90:bf:a5:4d:b2:f1:46:57:9c:c4:49:9e:4e:9c:14: 7e:af:ed:a7:ee:41:c5:8c:2e:03:ec:39:cb:70:db:5a:6b:17: 0a:95:73:91:26:25:b4:50:8e:42:66:35:6b:72:94:63:de:fe: 59:b2:10:6f:3b:a8:bd:8a:87:aa:af:cd:a5:64:14:e9:d3:74: 61:8a:ab:13:fc:b1:43:68:5c:03:b9:73:fa:55:63:2f:59:7f: cc:c3:e0:97:9b:5b:e1:48:3d:47:1a:3b:44:2f:2e:fa:94:69: bf:9f:9b:12:2b:a8:08:9b:79:6c:fb:e6:ff:64:86:62:9a:ee: 53:d9:f5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUejuooK/vVKz/RGK/AHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODNhNjQxMTc5NmJmNzI2Mzg3ZjdhNTVjZjg0YjU3Y2E4 OTliZWIwHhcNMjUxMjI2MTEwMTE1WhcNMjUxMjI3MTEwMTE1WjAzMTEwLwYDVQQD EyhiNDIxMjg1M2RjODc4N2I2MWRiMjMxNWFmY2U4NDU1Y2E3NzZmM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK/JO/TKQHpB/JLW23Jaewfr776h 18fejawCC70+77o8OyQxynLbKERZRc5H2p8y9BHplSL8pM5F5EDPQJ5BvNeKYyEu A0+ZDX88+ANjO9Vft4bEcIXjDg/3OJJ7I6BJwfWJKbSY3kU51jczmxzlP6X5wwYu R92XwDZNbsHygAae2nFj+0eX/afK4F8KMTL02u5RNGbb/hjzbxp+l0+RGu4cygYF rHToxm8SAENuHQzi1IgG3bY5ESennIuwexmrnJWdMFNLYRmbQOVQfDBy1/Omz93H 4C3kv1g2lGJPBjhlK+Aq3tt09J//XiKKkkty1jvHwoqbG02ha/whBY1R5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQhKFPch4e2HbIxWvzoRVyndvPLMB8GA1UdIwQY MBaAFBCDpkEXlr9yY4f3pVz4S1fKiZvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDkt OTFjZjRmYzcwM2ViLzEvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDktOTFjZjRmYzcwM2Vi LzEvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVc68X48 I1LZGhQ07BdHEpE6zjyy1iWfowVlWOpWeZzKJwXPovRZqBl2Y0dHlaIsdWRqaraJ 4rHNnVIUyGZaPYMSOPIb5fkFbvAZPLQHIQr3vGMsoZD5MACIy/zMLbCeOBaqtpNf sYz3iWom8eIe4fdjBE2ILQxwj3bFBlvbjF09kL+lTbLxRlecxEmeTpwUfq/tp+5B xYwuA+w5y3DbWmsXCpVzkSYltFCOQmY1a3KUY97+WbIQbzuovYqHqq/NpWQU6dN0 YYqrE/yxQ2hcA7lz+lVjL1l/zMPgl5tb4Ug9Rxo7RC8u+pRpv5+bEiuoCJt5bPvm /2SGYpruU9n1MA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:34 2025 by rpki-client