This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json) Hash identifier: eNInbnNATRxKUsSnG0CwQ3sCo1c4RvwUa8MfNCA/p5c= Subject key identifier: EB:A1:3A:1E:6C:47:01:4C:D3:22:84:11:BF:20:28:78:F5:45:F7:42 Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Certificate serial: 019B18DF8DBB156235E4B2858C17887C0039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft Manifest number: 0334 Signing time: Sat 13 Dec 2025 18:01:02 +0000 Manifest this update: Sat 13 Dec 2025 18:01:02 +0000 Manifest next update: Sun 14 Dec 2025 18:01:02 +0000 Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: 1AFemdDILpyggh3po6beqi5jNZ10IYVvLz62lmHLq00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:8d:bb:15:62:35:e4:b2:85:8c:17:88:7c:00:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Validity Not Before: Dec 13 18:01:02 2025 GMT Not After : Dec 14 18:01:02 2025 GMT Subject: CN=eba13a1e6c47014cd3228411bf202878f545f742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:81:29:8c:44:11:51:3f:76:f0:1b:8a:9f: 83:f1:11:80:37:c2:37:8c:46:d1:78:5f:b6:6c:e4: 4a:80:02:54:3f:d5:d0:9b:81:13:a8:20:92:07:a0: ac:c2:d7:c7:a6:5a:e1:5d:3f:d4:cd:d3:72:df:d6: 70:2b:d7:f3:98:6a:cd:88:b8:26:6a:fc:b1:2d:fe: 7d:95:a2:ff:e4:42:4c:75:f8:d4:a9:4b:4c:fd:fe: d2:86:6e:11:96:6a:02:30:c8:8b:37:08:9b:28:82: d1:7e:38:26:af:0b:9f:a3:7e:5e:52:80:9a:bb:94: 50:05:59:c6:ac:fe:3c:0d:5b:34:5a:04:47:82:29: d8:d3:3b:7a:2a:4f:f0:d1:bd:ee:19:b8:e4:23:7d: 5c:4b:fc:ce:a6:0b:69:18:e4:c3:87:6c:3b:b4:4c: fb:13:c9:2c:c3:9d:fd:3e:d5:b1:9c:c7:86:9a:23: de:40:34:36:68:11:68:fa:fc:1f:72:43:5b:a4:f7: e9:bc:e5:18:52:3b:ec:6b:9d:dd:6f:44:eb:36:36: a8:76:3f:8b:ba:91:5f:cb:c1:71:f5:ab:de:5c:ba: 6e:b3:75:f4:6c:f0:f8:9d:c1:00:e5:66:66:1b:28: 19:8d:45:3b:27:e0:fc:75:b9:51:d9:ea:e0:4e:34: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:3A:1E:6C:47:01:4C:D3:22:84:11:BF:20:28:78:F5:45:F7:42 X509v3 Authority Key Identifier: keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:29:a4:14:9a:71:ac:31:dd:63:00:06:c5:c6:6c:ed:83:58: c4:00:f4:6d:6b:64:42:43:ba:f1:2e:a3:51:7b:1d:f4:0e:c9: 46:c2:ac:cc:ac:64:86:55:0f:cf:b9:4d:e9:2e:4c:25:ee:00: 54:b5:5d:9d:05:ca:1f:f7:2e:bb:f6:03:39:71:26:b7:92:d3: d7:47:c0:59:a8:58:ad:08:71:50:b8:26:d9:85:5f:5e:20:63: 89:d8:5c:5f:d4:1b:83:f1:80:25:cb:c3:14:b8:f2:17:11:a5: 9a:d5:b8:46:53:5f:78:67:34:96:a2:3b:44:77:3a:35:5a:67: 85:61:f9:a1:6d:dd:b1:b5:8b:0b:40:04:06:3d:9f:57:b3:d4: 1a:64:d5:a5:1c:5d:ad:ed:2b:f8:a5:4a:23:ba:83:70:b6:34: cd:5d:ee:a7:72:7f:52:13:07:92:00:96:de:7f:5a:a5:c8:14: d4:f9:84:4b:00:17:bc:dd:d3:39:85:66:4f:26:0d:86:58:46: 28:00:97:02:47:88:d1:79:bd:2e:ab:32:bc:e3:2d:9e:30:26: b3:e3:8c:8c:03:cc:a3:d1:3e:75:36:ae:fc:3e:d9:7d:67:80: b5:85:f3:be:0a:5f:c5:70:08:cb:d0:35:79:ef:9b:2f:38:5c: fe:eb:ca:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3427FWI15LKFjBeIfAA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYWU0ZWNhZjVmZTQ4ZTE4NTg2ZDkwZmE1NGU5ZTZmYmZk NGZlZDUwHhcNMjUxMjEzMTgwMTAyWhcNMjUxMjE0MTgwMTAyWjAzMTEwLwYDVQQD EyhlYmExM2ExZTZjNDcwMTRjZDMyMjg0MTFiZjIwMjg3OGY1NDVmNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zOBKYxEEVE/dvAbip+D8RGAN8I3 jEbReF+2bORKgAJUP9XQm4ETqCCSB6CswtfHplrhXT/UzdNy39ZwK9fzmGrNiLgm avyxLf59laL/5EJMdfjUqUtM/f7Shm4RlmoCMMiLNwibKILRfjgmrwufo35eUoCa u5RQBVnGrP48DVs0WgRHginY0zt6Kk/w0b3uGbjkI31cS/zOpgtpGOTDh2w7tEz7 E8ksw539PtWxnMeGmiPeQDQ2aBFo+vwfckNbpPfpvOUYUjvsa53db0TrNjaodj+L upFfy8Fx9aveXLpus3X0bPD4ncEA5WZmGygZjUU7J+D8dblR2ergTjS9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuhOh5sRwFM0yKEEb8gKHj1RfdCMB8GA1UdIwQY MBaAFBGuTsr1/kjhhYbZD6VOnm+/1P7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUt NzRiMzI5MzljYzg0LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUtNzRiMzI5MzljYzg0 LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARymkFJpx rDHdYwAGxcZs7YNYxAD0bWtkQkO68S6jUXsd9A7JRsKszKxkhlUPz7lN6S5MJe4A VLVdnQXKH/cuu/YDOXEmt5LT10fAWahYrQhxULgm2YVfXiBjidhcX9Qbg/GAJcvD FLjyFxGlmtW4RlNfeGc0lqI7RHc6NVpnhWH5oW3dsbWLC0AEBj2fV7PUGmTVpRxd re0r+KVKI7qDcLY0zV3up3J/UhMHkgCW3n9apcgU1PmESwAXvN3TOYVmTyYNhlhG KACXAkeI0Xm9LqsyvOMtnjAms+OMjAPMo9E+dTau/D7ZfWeAtYXzvgpfxXAIy9A1 ee+bLzhc/uvK4g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:38 2025 by rpki-client