This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json) Hash identifier: 7++R7NVjRM4hSR2vOn6ZG2I5b+OaxTyiAfbm8PvU7t4= Subject key identifier: 99:60:C9:BC:5A:64:56:4E:10:03:BC:10:A2:D2:0E:42:DE:3C:F9:7C Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Certificate serial: 019B4D04156D63146E47F321BA8E33CBFA6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft Manifest number: 0FA6 Signing time: Tue 23 Dec 2025 21:01:11 +0000 Manifest this update: Tue 23 Dec 2025 21:01:11 +0000 Manifest next update: Wed 24 Dec 2025 21:01:11 +0000 Files and hashes: 1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=) 2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: o1QPo0YGFQcMpxvvsXxR4PSeVz+tnasoCL3EBulHSR8=) 3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=) 4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=) 5: zTiXpcUsv3gFyjvxSmUfRg3eYMY.roa (hash: LFrdRDkxowdBOalYcCAaHR2T2Xir64ySpsYLGTuVlxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:15:6d:63:14:6e:47:f3:21:ba:8e:33:cb:fa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Validity Not Before: Dec 23 21:01:11 2025 GMT Not After : Dec 24 21:01:11 2025 GMT Subject: CN=9960c9bc5a64564e1003bc10a2d20e42de3cf97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:78:50:63:55:6c:1a:bc:5a:10:ad:d5:ee: 12:da:a6:72:88:53:12:0c:88:1b:77:f6:0e:41:ab: 70:9c:d2:b5:60:81:97:06:c2:26:72:09:1e:1c:8f: 59:b0:3d:eb:ab:49:1c:83:9a:ac:44:de:25:51:25: 27:db:48:ba:49:2a:ec:ba:36:b1:45:b3:40:1a:13: 7a:26:17:ac:cb:8c:64:ce:11:c8:d3:61:69:6a:01: 42:64:52:9a:c4:94:36:86:31:db:75:5b:65:d6:f8: 6a:7c:ff:f0:fd:7e:41:34:56:56:32:96:90:1a:69: 34:99:16:9b:c1:34:f5:50:10:47:7a:39:37:2c:2b: 94:5c:62:ce:99:51:7c:13:c3:35:0b:59:93:6c:82: c4:ef:14:da:21:b0:f7:77:ed:e7:7d:d7:e9:80:c4: 59:a1:8d:75:77:d6:33:3c:10:a7:22:a8:16:b6:51: ef:23:67:d6:f2:e3:9b:34:31:48:c2:80:7b:85:3f: e4:4d:43:a3:10:3a:f9:cc:ed:e6:9c:6a:b7:00:56: d9:4a:aa:63:0d:d5:1b:40:33:b0:4f:08:7c:1f:2f: 49:53:bc:75:bd:a0:a3:04:a2:54:35:8c:44:3e:d3: ce:e9:39:ee:42:d1:be:d3:f5:7c:84:1a:b9:6e:d2: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:60:C9:BC:5A:64:56:4E:10:03:BC:10:A2:D2:0E:42:DE:3C:F9:7C X509v3 Authority Key Identifier: keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d4:d0:f4:69:49:10:7c:dd:ee:e8:eb:3b:0b:e0:dd:6f:36: b1:c2:d6:33:b8:50:f9:cf:d6:4a:6e:d1:ca:5b:92:5a:20:2f: 06:92:16:96:45:15:d8:95:20:cf:e7:61:86:5b:6b:ff:ba:fa: d9:20:98:e6:1f:ce:b8:f0:37:af:8f:92:d5:47:00:62:b8:c5: a5:9f:25:27:e9:0e:4f:89:d4:49:1c:c0:07:03:7d:37:6b:c8: 70:36:ab:cf:ec:f7:a0:26:2b:cc:d7:ec:7b:ee:77:b4:35:f6: 77:1b:77:4e:58:4a:1a:d3:ab:2e:b3:51:90:0f:f8:b3:c2:f3: 85:70:0b:78:a0:5f:75:a5:4a:1c:eb:27:24:0f:fd:28:29:99: b8:14:c1:e9:f5:d3:ea:3c:c8:67:43:14:19:fe:73:2f:93:e3: f7:14:4f:e5:b2:95:6c:8b:f0:44:67:75:06:43:4f:2e:bc:81: 5d:e0:c7:8d:68:d7:a4:b1:de:c3:33:1d:72:ce:b0:f4:9f:e6: 1b:5a:79:24:c1:f8:62:a1:1a:f2:70:81:aa:50:9b:95:b5:9f: 17:e6:7e:53:1e:98:3a:30:98:ba:32:f3:d8:22:94:ef:bc:ad: ae:8a:9d:b7:57:d8:01:7d:5d:c1:90:2d:d2:25:cb:ca:e5:31: 15:70:e6:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBBVtYxRuR/Mhuo4zy/pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk OGYxNWQwHhcNMjUxMjIzMjEwMTExWhcNMjUxMjI0MjEwMTExWjAzMTEwLwYDVQQD Eyg5OTYwYzliYzVhNjQ1NjRlMTAwM2JjMTBhMmQyMGU0MmRlM2NmOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pl4UGNVbBq8WhCt1e4S2qZyiFMS DIgbd/YOQatwnNK1YIGXBsImcgkeHI9ZsD3rq0kcg5qsRN4lUSUn20i6SSrsujax RbNAGhN6Jhesy4xkzhHI02FpagFCZFKaxJQ2hjHbdVtl1vhqfP/w/X5BNFZWMpaQ Gmk0mRabwTT1UBBHejk3LCuUXGLOmVF8E8M1C1mTbILE7xTaIbD3d+3nfdfpgMRZ oY11d9YzPBCnIqgWtlHvI2fW8uObNDFIwoB7hT/kTUOjEDr5zO3mnGq3AFbZSqpj DdUbQDOwTwh8Hy9JU7x1vaCjBKJUNYxEPtPO6TnuQtG+0/V8hBq5btIOQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlgybxaZFZOEAO8EKLSDkLePPl8MB8GA1UdIwQY MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9TQ9GlJ EHzd7ujrOwvg3W82scLWM7hQ+c/WSm7RyluSWiAvBpIWlkUV2JUgz+dhhltr/7r6 2SCY5h/OuPA3r4+S1UcAYrjFpZ8lJ+kOT4nUSRzABwN9N2vIcDarz+z3oCYrzNfs e+53tDX2dxt3TlhKGtOrLrNRkA/4s8LzhXALeKBfdaVKHOsnJA/9KCmZuBTB6fXT 6jzIZ0MUGf5zL5Pj9xRP5bKVbIvwRGd1BkNPLryBXeDHjWjXpLHewzMdcs6w9J/m G1p5JMH4YqEa8nCBqlCblbWfF+Z+Ux6YOjCYujLz2CKU77ytroqdt1fYAX1dwZAt 0iXLyuUxFXDm7Q== -----END CERTIFICATE-----Generated at Wed Dec 24 00:12:10 2025 by rpki-client