This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft File: Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json) Hash identifier: lBJ9RM1Zsk3g9RLOVb6wEIRT/uCW8zUaqH91odm61RY= Subject key identifier: 48:24:AD:76:DE:C3:1E:FA:B0:AD:F7:80:09:B1:69:81:9B:98:82:E9 Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Certificate serial: 019B59777A1DC045AED31A69D83AB363301B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 07:02:40 +0000 Manifest this update: Fri 26 Dec 2025 07:02:40 +0000 Manifest next update: Sat 27 Dec 2025 07:02:40 +0000 Files and hashes: 1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: NX2LNl9CtxA5EgFMYHd/+sjkGWuXl10YIc1fKka3LJw=) 2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7a:1d:c0:45:ae:d3:1a:69:d8:3a:b3:63:30:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Validity Not Before: Dec 26 07:02:40 2025 GMT Not After : Dec 27 07:02:40 2025 GMT Subject: CN=4824ad76dec31efab0adf78009b169819b9882e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:ac:05:9e:20:6b:9b:e5:44:96:d8:5e:ff: 1b:5d:22:b0:80:b7:73:ef:0d:d3:11:2b:c5:9e:bf: 6a:20:35:bb:5e:18:b1:8e:d2:da:4b:72:96:ba:3c: af:a3:b7:70:72:15:0b:1b:98:32:7d:97:73:d6:64: ea:17:99:a2:85:e7:bc:45:47:a9:27:dd:3b:0b:31: a8:ce:a0:91:1c:7c:ff:3d:36:a5:1c:9f:c0:8c:fd: f1:67:62:95:7e:d5:55:80:e9:3f:eb:c5:40:f5:12: 88:64:3c:9c:06:36:7c:c7:07:a0:86:98:d5:c3:22: 0d:bc:ef:36:ea:56:78:7a:ee:ef:25:96:3d:c6:0d: 84:9d:1d:89:da:e6:d8:36:f0:a4:b2:f7:44:d0:91: f5:69:e6:5e:b0:a7:84:f0:4f:13:a2:83:db:69:09: 8c:a6:cf:e2:d9:fe:e7:f4:06:8c:4a:f2:7d:51:ca: 23:d2:b2:b0:16:03:bd:65:be:8a:36:3c:80:1f:ff: e4:d1:e4:2c:84:f6:5a:b9:fb:f9:c7:3a:30:a3:fb: ac:bb:58:5c:d5:34:9f:71:c2:05:1f:fc:fc:ab:c3: a8:b5:31:05:61:59:ad:e3:45:8a:b3:2e:5e:c1:83: 79:d2:fd:cf:c7:12:e6:a4:af:15:8b:b0:25:52:22: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:AD:76:DE:C3:1E:FA:B0:AD:F7:80:09:B1:69:81:9B:98:82:E9 X509v3 Authority Key Identifier: keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:77:3a:4c:fb:94:26:49:1b:92:17:1c:53:fc:60:92:b2: 44:44:7d:ba:ec:52:1b:14:00:03:7f:2e:ac:43:c4:d4:60:dd: 24:5f:98:3d:91:f9:ca:55:fc:bd:ca:2d:06:16:ef:18:dd:aa: be:ba:c0:c6:a6:6a:c1:4f:f3:82:91:19:3a:3a:84:f3:cd:69: f1:38:6f:90:d4:85:c7:de:7b:9b:96:fd:17:de:97:01:a9:0a: e4:84:3e:31:51:50:08:49:57:6d:2b:91:a6:6a:d6:47:1d:9c: fd:5c:9e:af:aa:8a:64:e3:21:00:7e:3e:a4:ae:6b:6e:ed:aa: 16:06:43:31:ce:d1:8a:d8:79:03:c1:3a:08:a5:d1:3c:76:ea: f3:e4:b0:6a:ed:22:32:57:60:73:9a:bf:a6:4f:85:6f:91:62: 9b:cd:0c:60:f6:80:3e:bc:e9:24:b8:b8:32:2a:5a:a7:aa:6e: 9e:a0:31:a2:a9:57:4f:6b:fc:e5:76:cf:9c:91:2f:90:d9:ab: f6:9f:ae:4b:51:75:a8:f8:b6:e3:af:fd:45:f0:3f:34:f5:31: 4f:18:51:25:4d:b6:61:19:06:1d:d1:df:b5:3d:e1:1b:cc:9a: a8:c7:0e:a5:d5:20:a1:13:6d:4e:70:ba:f2:f2:99:e2:bf:4e: b7:80:9b:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3odwEWu0xpp2DqzYzAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTZmNzcxOTNmMjc2NGJhODk0Mjg1ZGQyZjY0ZjEyMjZm ZDkxMjYwHhcNMjUxMjI2MDcwMjQwWhcNMjUxMjI3MDcwMjQwWjAzMTEwLwYDVQQD Eyg0ODI0YWQ3NmRlYzMxZWZhYjBhZGY3ODAwOWIxNjk4MTliOTg4MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+sBZ4ga5vlRJbYXv8bXSKwgLdz 7w3TESvFnr9qIDW7XhixjtLaS3KWujyvo7dwchULG5gyfZdz1mTqF5mihee8RUep J907CzGozqCRHHz/PTalHJ/AjP3xZ2KVftVVgOk/68VA9RKIZDycBjZ8xweghpjV wyINvO826lZ4eu7vJZY9xg2EnR2J2ubYNvCksvdE0JH1aeZesKeE8E8TooPbaQmM ps/i2f7n9AaMSvJ9Ucoj0rKwFgO9Zb6KNjyAH//k0eQshPZaufv5xzowo/usu1hc 1TSfccIFH/z8q8OotTEFYVmt40WKsy5ewYN50v3PxxLmpK8Vi7AlUiKZhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgkrXbewx76sK33gAmxaYGbmILpMB8GA1UdIwQY MBaAFBHm93GT8nZLqJQoXdL2TxIm/ZEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAt YmQ3MjhiOGY1MzI3LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAtYmQ3MjhiOGY1MzI3 LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh53Okz7 lCZJG5IXHFP8YJKyRER9uuxSGxQAA38urEPE1GDdJF+YPZH5ylX8vcotBhbvGN2q vrrAxqZqwU/zgpEZOjqE881p8ThvkNSFx957m5b9F96XAakK5IQ+MVFQCElXbSuR pmrWRx2c/Vyer6qKZOMhAH4+pK5rbu2qFgZDMc7Rith5A8E6CKXRPHbq8+Swau0i Mldgc5q/pk+Fb5Fim80MYPaAPrzpJLi4Mipap6punqAxoqlXT2v85XbPnJEvkNmr 9p+uS1F1qPi246/9RfA/NPUxTxhRJU22YRkGHdHftT3hG8yaqMcOpdUgoRNtTnC6 8vKZ4r9Ot4CbYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:19 2025 by rpki-client