This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: 6q2EW92KHhwhgV/CGXH4bVY1N442Hf1okEdssJxfQ8w= Subject key identifier: FA:3E:0B:B7:15:30:40:A8:E7:AE:5C:3A:2A:B4:24:FD:40:22:66:EA Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019B3BD96D8C04E8AC0CA709938C792695C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 07EB Signing time: Sat 20 Dec 2025 13:01:03 +0000 Manifest this update: Sat 20 Dec 2025 13:01:03 +0000 Manifest next update: Sun 21 Dec 2025 13:01:03 +0000 Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: XCqWWDVyMTUeBV9ec5aU7tgF+YUJICzf8qPJfhik4ts=) 2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6d:8c:04:e8:ac:0c:a7:09:93:8c:79:26:95:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Dec 20 13:01:03 2025 GMT Not After : Dec 21 13:01:03 2025 GMT Subject: CN=fa3e0bb7153040a8e7ae5c3a2ab424fd402266ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:02:e0:70:cd:a8:83:97:bb:ac:81:1d:b2: b3:23:f0:7a:17:3e:1e:e9:65:d6:a4:db:a2:99:44: cb:4d:6f:5f:87:3a:f9:86:b7:42:56:22:09:6c:88: 8a:27:e5:ad:27:66:40:62:06:2e:56:c9:ff:6c:c3: 7c:d9:5b:73:7d:6b:f2:22:f6:df:10:09:b0:9a:8a: ae:58:a3:03:c1:dd:c3:e5:63:65:c5:f8:36:a1:c2: 7c:84:90:d6:4f:6a:19:1b:aa:fb:01:1e:94:6f:0b: 52:a5:29:ea:36:94:0b:36:f0:ed:54:04:2e:66:45: 28:e8:b6:cf:da:0f:56:f7:d8:4e:02:40:75:47:5c: fa:65:96:a4:61:47:b1:58:d9:07:87:aa:f2:35:16: 62:dc:22:de:59:f0:27:53:27:6f:04:ab:be:fa:8e: 75:dc:87:39:2e:5d:77:13:dc:85:9d:89:f8:97:38: c3:d1:a6:58:9a:f7:ff:4c:ff:7b:ab:36:c6:aa:de: 69:c8:f3:a3:8d:19:68:7b:86:57:9f:f8:80:ae:4d: 72:f7:12:41:33:61:bf:bd:98:27:d0:d9:75:56:60: 47:7c:7c:59:60:f8:cc:de:80:24:a7:1b:ec:ee:2c: 71:bb:00:44:98:ea:a6:b2:3c:4d:b8:6a:ce:80:6c: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3E:0B:B7:15:30:40:A8:E7:AE:5C:3A:2A:B4:24:FD:40:22:66:EA X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:12:6d:ca:34:84:71:94:19:88:fc:44:ce:a6:df:9b:2f:84: 9c:df:53:19:12:71:9f:46:ac:27:5f:d5:66:be:97:32:4d:45: fc:79:1f:93:b5:cd:4c:15:e3:78:65:7b:83:e7:38:07:4b:fb: 16:c8:54:d7:4c:90:23:81:a4:7a:37:fa:b6:27:ec:83:3e:dc: 7d:9e:25:5b:78:88:c2:7d:eb:7d:cd:a8:be:00:bc:91:c3:c0: ae:fd:7f:b9:42:80:c2:a0:68:69:73:34:91:d7:81:50:86:11: e4:02:97:98:4d:ed:43:2f:35:1d:df:82:b9:b3:9d:ef:99:6e: 3d:83:c4:08:51:51:bd:62:aa:fe:6e:d9:e0:33:d7:fb:fe:af: 1a:58:2f:20:2b:5d:0d:c1:40:c1:bd:da:78:e1:5a:04:31:79: ca:69:b4:42:4b:d9:66:2e:3a:41:ff:dc:36:ba:52:7e:6e:a4: b0:1b:93:f8:d5:2b:ce:d5:4e:20:59:66:27:b3:07:3d:f8:64: fd:44:fc:39:2f:47:ec:59:95:cb:8f:e8:98:7d:e6:7f:3e:83: b4:83:57:29:51:75:4f:b8:68:da:f7:cd:b8:6c:27:eb:a3:4a: 9f:c6:bd:71:6c:43:12:cc:bc:b8:a1:e1:da:7b:aa:64:54:43: d8:72:62:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72W2MBOisDKcJk4x5JpXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjUxMjIwMTMwMTAzWhcNMjUxMjIxMTMwMTAzWjAzMTEwLwYDVQQD EyhmYTNlMGJiNzE1MzA0MGE4ZTdhZTVjM2EyYWI0MjRmZDQwMjI2NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60C4HDNqIOXu6yBHbKzI/B6Fz4e 6WXWpNuimUTLTW9fhzr5hrdCViIJbIiKJ+WtJ2ZAYgYuVsn/bMN82VtzfWvyIvbf EAmwmoquWKMDwd3D5WNlxfg2ocJ8hJDWT2oZG6r7AR6UbwtSpSnqNpQLNvDtVAQu ZkUo6LbP2g9W99hOAkB1R1z6ZZakYUexWNkHh6ryNRZi3CLeWfAnUydvBKu++o51 3Ic5Ll13E9yFnYn4lzjD0aZYmvf/TP97qzbGqt5pyPOjjRloe4ZXn/iArk1y9xJB M2G/vZgn0Nl1VmBHfHxZYPjM3oAkpxvs7ixxuwBEmOqmsjxNuGrOgGw8BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo+C7cVMECo565cOiq0JP1AImbqMB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxJtyjSE cZQZiPxEzqbfmy+EnN9TGRJxn0asJ1/VZr6XMk1F/Hkfk7XNTBXjeGV7g+c4B0v7 FshU10yQI4Gkejf6tifsgz7cfZ4lW3iIwn3rfc2ovgC8kcPArv1/uUKAwqBoaXM0 kdeBUIYR5AKXmE3tQy81Hd+CubOd75luPYPECFFRvWKq/m7Z4DPX+/6vGlgvICtd DcFAwb3aeOFaBDF5ymm0QkvZZi46Qf/cNrpSfm6ksBuT+NUrztVOIFlmJ7MHPfhk /UT8OS9H7FmVy4/omH3mfz6DtINXKVF1T7ho2vfNuGwn66NKn8a9cWxDEsy8uKHh 2nuqZFRD2HJixg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:39 2025 by rpki-client