This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json) Hash identifier: Qr0Yc335kR4mWfpeSzKFVR7sFYUYgX53EzpaoFlEmXA= Subject key identifier: FC:99:FB:41:4E:B4:00:9C:09:99:6B:C2:25:C2:32:D0:D5:02:C6:EB Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Certificate serial: 019B3AC681750C81026096113721F48D7C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft Manifest number: 0E48 Signing time: Sat 20 Dec 2025 08:00:46 +0000 Manifest this update: Sat 20 Dec 2025 08:00:46 +0000 Manifest next update: Sun 21 Dec 2025 08:00:46 +0000 Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: Xc/RWKulZchp76tn6/JPLX70Yg3H6Zjl4++p6uIvWpM=) 2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:81:75:0c:81:02:60:96:11:37:21:f4:8d:7c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Validity Not Before: Dec 20 08:00:46 2025 GMT Not After : Dec 21 08:00:46 2025 GMT Subject: CN=fc99fb414eb4009c09996bc225c232d0d502c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:36:b0:73:1d:d0:28:ec:8d:d3:54:39:c3: db:b9:4f:89:9a:77:51:07:b7:e9:89:e1:e7:a0:f4: 14:2e:4c:c6:30:67:8c:c0:73:cc:b5:e7:63:80:bf: ef:9c:6a:c6:c6:c9:61:12:fb:51:b5:af:90:d4:18: 06:6e:e9:28:1a:2e:01:0c:c5:c1:ff:90:47:1f:3c: f4:30:6a:7b:b9:07:91:ec:ae:0a:07:a1:f6:7b:5a: 2c:fa:87:82:86:d6:ce:39:50:23:44:be:ef:32:02: 86:f7:3f:ad:49:18:fc:8f:4c:a8:4f:35:86:09:c3: a1:79:9b:2d:12:c9:f6:29:b0:9c:1a:47:11:ac:6c: 74:af:95:e9:e9:2d:d6:da:68:40:80:e8:94:5b:70: 83:27:2d:6b:54:7f:2f:5c:b0:5a:db:d3:f7:bf:3c: d2:67:91:83:91:b4:e6:a6:02:85:44:a2:1b:9b:ff: 52:f9:de:8d:c6:fd:a0:eb:b0:12:48:da:c6:5a:a9: bc:74:c1:ae:22:95:2d:e1:d2:7e:76:13:8f:1b:bc: 02:35:5f:9a:e9:cd:e9:b7:f7:98:8a:28:ca:4d:96: 1f:ac:c7:9c:53:35:40:22:21:87:1d:e7:83:9c:ba: 16:04:01:dd:d9:2f:e3:24:ae:7e:4f:04:49:6a:f1: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:99:FB:41:4E:B4:00:9C:09:99:6B:C2:25:C2:32:D0:D5:02:C6:EB X509v3 Authority Key Identifier: keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:81:1d:3d:c8:2e:03:5d:41:eb:cd:44:63:51:8b:a0:de: 63:18:4b:a6:cc:5d:49:05:a7:59:bb:e3:d5:f9:db:68:cc:15: 2b:40:5f:6d:f4:37:0a:de:57:77:3b:44:db:db:81:41:3e:0a: d3:4e:29:51:16:e2:03:ae:52:70:1f:3d:14:e8:0c:77:f9:20: 5b:49:4e:72:a5:28:c8:bb:bc:0c:4c:2e:22:84:1a:5b:a9:ad: 55:80:3a:1c:21:af:42:9e:05:6f:27:cb:6a:d3:06:d1:27:6f: 59:c4:58:96:48:5c:98:99:61:6e:bb:82:cd:fa:79:91:7a:8a: 87:0e:b9:9b:32:e7:01:24:9e:a1:61:a5:38:20:d1:3b:fb:d6: b3:c7:96:ce:80:ce:0d:07:46:77:5c:3e:fd:2a:5f:9b:3e:b7: 5b:13:42:49:fb:54:03:74:be:2c:4b:0e:ac:b9:16:99:85:52: ac:c4:bc:d3:9d:50:cb:3a:b3:3d:e9:0c:82:8c:78:8d:cc:71: 67:3d:97:f7:be:49:a4:2b:16:88:91:fc:07:93:4e:68:04:3f: 2f:24:3a:f5:d7:9c:7b:66:76:b4:5f:54:7b:d2:28:93:0d:8c: eb:ee:6f:00:bf:ef:81:f9:b7:c3:fb:37:da:ca:0e:eb:34:21: 58:f2:bb:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xoF1DIECYJYRNyH0jXxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5 ZjBjNjgwHhcNMjUxMjIwMDgwMDQ2WhcNMjUxMjIxMDgwMDQ2WjAzMTEwLwYDVQQD EyhmYzk5ZmI0MTRlYjQwMDljMDk5OTZiYzIyNWMyMzJkMGQ1MDJjNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiI2sHMd0CjsjdNUOcPbuU+JmndR B7fpieHnoPQULkzGMGeMwHPMtedjgL/vnGrGxslhEvtRta+Q1BgGbukoGi4BDMXB /5BHHzz0MGp7uQeR7K4KB6H2e1os+oeChtbOOVAjRL7vMgKG9z+tSRj8j0yoTzWG CcOheZstEsn2KbCcGkcRrGx0r5Xp6S3W2mhAgOiUW3CDJy1rVH8vXLBa29P3vzzS Z5GDkbTmpgKFRKIbm/9S+d6Nxv2g67ASSNrGWqm8dMGuIpUt4dJ+dhOPG7wCNV+a 6c3pt/eYiijKTZYfrMecUzVAIiGHHeeDnLoWBAHd2S/jJK5+TwRJavH12QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyZ+0FOtACcCZlrwiXCMtDVAsbrMB8GA1UdIwQY MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqaBHT3I LgNdQevNRGNRi6DeYxhLpsxdSQWnWbvj1fnbaMwVK0BfbfQ3Ct5XdztE29uBQT4K 004pURbiA65ScB89FOgMd/kgW0lOcqUoyLu8DEwuIoQaW6mtVYA6HCGvQp4FbyfL atMG0SdvWcRYlkhcmJlhbruCzfp5kXqKhw65mzLnASSeoWGlOCDRO/vWs8eWzoDO DQdGd1w+/Spfmz63WxNCSftUA3S+LEsOrLkWmYVSrMS8051QyzqzPekMgox4jcxx Zz2X975JpCsWiJH8B5NOaAQ/LyQ69dece2Z2tF9Ue9Iokw2M6+5vAL/vgfm3w/s3 2soO6zQhWPK79w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:28 2025 by rpki-client