This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json) Hash identifier: HR2GW0vkH2XZrKVSNgZ9SUNH3myWdtV23MbiBCCUuf8= Subject key identifier: 6A:5C:D1:A0:B8:A1:53:2A:97:07:B7:8A:04:0B:D5:0C:6C:17:E2:7C Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Certificate serial: 019B4392B1C415B3F0AA41CF77102C9B7DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 01:00:45 +0000 Manifest this update: Mon 22 Dec 2025 01:00:45 +0000 Manifest next update: Tue 23 Dec 2025 01:00:45 +0000 Files and hashes: 1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=) 2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: Z+YehXv4aV9KdTXlVR3OxOUCHuixaphfyPGfmIsxS1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b1:c4:15:b3:f0:aa:41:cf:77:10:2c:9b:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Validity Not Before: Dec 22 01:00:45 2025 GMT Not After : Dec 23 01:00:45 2025 GMT Subject: CN=6a5cd1a0b8a1532a9707b78a040bd50c6c17e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:a0:aa:e7:fd:b1:a2:76:bb:58:ff:fb:00: a2:b0:3c:f1:95:a1:9d:0c:e0:e7:ab:e5:6c:0c:9a: 88:af:7e:53:75:d1:9d:0b:eb:d2:ce:d1:34:43:ea: 55:6c:e5:31:f6:04:c3:5c:46:bd:40:e6:df:c0:44: 3a:33:75:3c:00:eb:0d:59:f1:47:3b:c1:04:3a:e0: f8:a8:24:c8:b7:57:6d:4b:8f:0f:05:bf:be:91:70: 13:a8:0f:3b:90:fc:33:44:ec:46:ea:97:77:7e:23: 8d:29:18:58:48:dc:73:b9:53:80:db:3c:b9:ef:00: 6c:ac:71:7d:18:70:33:e2:4f:cf:b3:80:b0:23:3f: c9:55:72:e2:d1:ff:cd:cb:26:52:a5:b9:5f:26:87: 90:ac:28:3d:1c:f3:5d:8d:2d:d6:c1:e3:5d:d2:59: 13:61:8c:cf:a1:40:3b:f4:69:dc:a3:fc:58:9c:49: bc:c6:da:72:7b:14:9a:ae:5f:a6:fd:85:21:bd:9a: 51:28:60:58:7d:fb:aa:2e:d2:0a:f9:17:4d:34:6a: 5c:43:a9:27:f9:6d:9a:e7:8b:69:89:6e:dd:65:9c: b9:a1:2b:71:15:e3:4d:02:4d:68:e8:49:8b:fb:b3: bd:ac:75:cb:7e:43:9d:8a:e7:5f:85:24:b7:e8:f3: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:D1:A0:B8:A1:53:2A:97:07:B7:8A:04:0B:D5:0C:6C:17:E2:7C X509v3 Authority Key Identifier: keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:62:22:69:49:21:a2:ab:72:e3:dd:d5:d3:89:b0:cc:fb:fb: 49:ea:86:36:f8:b3:d7:84:dc:46:d0:d8:11:66:65:76:ab:b5: 50:7d:f4:fb:a8:0b:90:59:d3:65:e2:27:92:e8:02:04:a8:16: 02:31:e5:f4:15:42:4c:af:0e:ae:d5:42:27:68:88:f1:c0:2f: db:a9:6e:3b:6d:03:bd:c2:19:72:e8:ff:c9:0f:86:6f:9c:c5: 7a:98:31:1a:7f:80:77:d9:25:27:bf:f1:51:6b:e2:a5:97:6b: 95:6d:d5:43:df:7d:a5:29:54:4c:b5:b0:d4:73:02:52:18:f0: 1a:a8:7d:e7:08:20:f3:53:84:56:f2:19:92:f9:12:23:d6:44: 20:01:40:07:7e:1f:ef:9c:ef:97:a3:fe:da:c4:c3:f8:57:b3: 03:f3:a8:2c:2f:5d:6e:89:c7:ab:31:cc:84:90:ea:1c:cb:a7: 36:23:5f:52:e4:23:26:d1:66:45:0a:d5:5f:a1:db:82:a1:a5: 54:b4:8d:f5:2a:34:2f:9e:d3:74:18:9d:5b:f0:4c:29:f3:95: a5:b4:1c:9a:0b:9e:63:6f:05:37:da:9e:85:52:f3:71:b9:1b: e9:5c:40:99:75:ad:db:ab:b7:08:5c:de:fe:55:69:78:aa:3c: 0d:a7:d3:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrHEFbPwqkHPdxAsm33AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0 ZDRhZDkwHhcNMjUxMjIyMDEwMDQ1WhcNMjUxMjIzMDEwMDQ1WjAzMTEwLwYDVQQD Eyg2YTVjZDFhMGI4YTE1MzJhOTcwN2I3OGEwNDBiZDUwYzZjMTdlMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D6gquf9saJ2u1j/+wCisDzxlaGd DODnq+VsDJqIr35TddGdC+vSztE0Q+pVbOUx9gTDXEa9QObfwEQ6M3U8AOsNWfFH O8EEOuD4qCTIt1dtS48PBb++kXATqA87kPwzROxG6pd3fiONKRhYSNxzuVOA2zy5 7wBsrHF9GHAz4k/Ps4CwIz/JVXLi0f/NyyZSpblfJoeQrCg9HPNdjS3WweNd0lkT YYzPoUA79Gnco/xYnEm8xtpyexSarl+m/YUhvZpRKGBYffuqLtIK+RdNNGpcQ6kn +W2a54tpiW7dZZy5oStxFeNNAk1o6EmL+7O9rHXLfkOdiudfhSS36PP7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpc0aC4oVMqlwe3igQL1QxsF+J8MB8GA1UdIwQY MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5 LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmIiaUkh oqty493V04mwzPv7SeqGNviz14TcRtDYEWZldqu1UH30+6gLkFnTZeInkugCBKgW AjHl9BVCTK8OrtVCJ2iI8cAv26luO20DvcIZcuj/yQ+Gb5zFepgxGn+Ad9klJ7/x UWvipZdrlW3VQ999pSlUTLWw1HMCUhjwGqh95wgg81OEVvIZkvkSI9ZEIAFAB34f 75zvl6P+2sTD+FezA/OoLC9dbonHqzHMhJDqHMunNiNfUuQjJtFmRQrVX6HbgqGl VLSN9So0L57TdBidW/BMKfOVpbQcmgueY28FN9qehVLzcbkb6VxAmXWt26u3CFze /lVpeKo8DafT1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:29 2025 by rpki-client