This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json) Hash identifier: hDIrH/TyNnIIzlqRUt6xohRkJS5+IHZLKk58mEJkqns= Subject key identifier: B3:27:35:F6:AD:1B:20:48:52:50:B0:1F:06:91:36:C9:9A:D3:DF:B9 Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Certificate serial: 019B292E126C8B80E7EDDF9AAF4281866886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft Manifest number: 0E5C Signing time: Tue 16 Dec 2025 22:00:43 +0000 Manifest this update: Tue 16 Dec 2025 22:00:43 +0000 Manifest next update: Wed 17 Dec 2025 22:00:43 +0000 Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: 86KG1m3Ptc/Mq1Y8JmJTnwAS2depGZ2VwVV+DSOCFt4=) 2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:12:6c:8b:80:e7:ed:df:9a:af:42:81:86:68:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Validity Not Before: Dec 16 22:00:43 2025 GMT Not After : Dec 17 22:00:43 2025 GMT Subject: CN=b32735f6ad1b20485250b01f069136c99ad3dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:7d:eb:81:a0:a8:88:7a:32:b6:61:99:07: e8:a1:1d:06:e0:36:5f:56:18:ad:22:47:6d:3c:a2: 90:c6:63:e2:fe:12:0f:ad:f8:22:61:e5:00:67:b2: f6:09:3d:7d:8d:dc:1f:f2:fd:a6:0f:fb:ee:9a:92: 53:58:09:27:b4:16:5c:7c:91:60:2e:3c:ef:b1:0c: 1d:3b:32:f5:d0:be:26:c3:b0:28:9a:23:63:2d:46: 08:80:a7:ce:44:23:ed:e8:98:99:07:80:e1:fb:fd: 72:ff:37:5f:83:fa:79:ae:36:94:a4:5e:1e:7b:9f: 87:d8:3e:7d:57:49:9b:8a:62:09:92:81:4e:a5:14: 1e:73:ff:f0:3b:1c:ae:9b:eb:f1:21:75:d6:b9:6e: d9:13:3c:ac:e1:90:3e:65:fc:c1:bb:61:d9:c2:0b: b3:81:b9:d6:f8:83:c6:22:9e:b8:b8:bc:da:14:d2: fb:f6:49:05:2f:c2:fb:cc:55:7f:af:e9:6f:2b:46: a6:36:70:f4:28:a1:a3:ac:21:dc:f0:30:4f:1e:20: bc:44:f9:62:27:5b:e3:24:0d:ff:ee:25:3e:0d:82: af:49:68:98:21:c5:0c:8a:a4:af:3f:2d:3c:f4:f2: d0:20:38:7e:76:f2:59:85:e7:a6:74:68:f4:48:c0: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:35:F6:AD:1B:20:48:52:50:B0:1F:06:91:36:C9:9A:D3:DF:B9 X509v3 Authority Key Identifier: keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:86:0a:50:4b:da:62:0a:f8:36:e6:fc:20:25:4a:c9:07:20: 6e:53:d2:9f:33:54:7b:2f:07:8a:51:df:b6:ad:de:4f:85:6a: aa:c9:a8:0e:5e:39:62:8e:e9:93:67:3b:30:da:7d:06:96:9c: 21:53:da:12:8b:08:9a:ef:72:f1:3a:24:06:d8:a5:aa:9d:59: 70:51:77:e4:7d:fc:a7:c7:3b:30:a3:a2:f3:3d:b2:fc:6a:16: 7c:d3:e1:c1:8b:bf:a0:46:be:65:c6:42:39:8a:dd:82:52:a3: 6b:57:fc:e5:85:35:a7:c0:eb:c8:6e:f7:f2:a3:0c:69:e9:32: 5e:1a:3d:c4:3b:e9:db:9e:f5:06:0f:c2:3c:7c:69:81:cc:76: d6:31:35:65:e5:1c:ad:ef:d1:20:16:56:6c:a0:2e:81:15:c3: 46:c8:b0:06:77:6b:7b:49:7e:f5:13:cb:1e:7a:77:e3:7f:6a: aa:7a:03:3e:0a:24:e2:54:dd:95:04:aa:9b:7b:ee:c4:64:a8: cf:d7:05:18:66:81:ed:9a:22:1f:33:0c:dd:71:d9:7a:ea:61: 9e:42:8c:0c:99:91:a9:6f:67:d7:6d:6d:f6:5d:72:02:89:f4: 1a:e6:61:99:08:61:42:25:ec:01:60:13:6c:09:cd:6e:cb:06: 3c:99:93:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLhJsi4Dn7d+ar0KBhmiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0 NWFkMDAwHhcNMjUxMjE2MjIwMDQzWhcNMjUxMjE3MjIwMDQzWjAzMTEwLwYDVQQD EyhiMzI3MzVmNmFkMWIyMDQ4NTI1MGIwMWYwNjkxMzZjOTlhZDNkZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxV964GgqIh6MrZhmQfooR0G4DZf VhitIkdtPKKQxmPi/hIPrfgiYeUAZ7L2CT19jdwf8v2mD/vumpJTWAkntBZcfJFg LjzvsQwdOzL10L4mw7AomiNjLUYIgKfORCPt6JiZB4Dh+/1y/zdfg/p5rjaUpF4e e5+H2D59V0mbimIJkoFOpRQec//wOxyum+vxIXXWuW7ZEzys4ZA+ZfzBu2HZwguz gbnW+IPGIp64uLzaFNL79kkFL8L7zFV/r+lvK0amNnD0KKGjrCHc8DBPHiC8RPli J1vjJA3/7iU+DYKvSWiYIcUMiqSvPy089PLQIDh+dvJZheemdGj0SMCNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMnNfatGyBIUlCwHwaRNsma09+5MB8GA1UdIwQY MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1 LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoYKUEva Ygr4Nub8ICVKyQcgblPSnzNUey8HilHftq3eT4VqqsmoDl45Yo7pk2c7MNp9Bpac IVPaEosImu9y8TokBtilqp1ZcFF35H38p8c7MKOi8z2y/GoWfNPhwYu/oEa+ZcZC OYrdglKja1f85YU1p8DryG738qMMaekyXho9xDvp2571Bg/CPHxpgcx21jE1ZeUc re/RIBZWbKAugRXDRsiwBndre0l+9RPLHnp3439qqnoDPgok4lTdlQSqm3vuxGSo z9cFGGaB7ZoiHzMM3XHZeuphnkKMDJmRqW9n121t9l1yAon0GuZhmQhhQiXsAWAT bAnNbssGPJmTMQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:16:57 2025 by rpki-client