This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json) Hash identifier: eoeBquookVwLEpXav1DpSCqoLrXxtFsJP58pWkaOXvA= Subject key identifier: 45:C1:71:DB:DC:58:63:55:3C:2F:A5:AF:B5:81:71:68:EA:E0:46:7B Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 Certificate issuer: /CN=7b243b732e564690482cc825199f8b591b01f6f2 Certificate serial: 019B5D53631D0A43C631F4F4C6D9BC098BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft Manifest number: 133C Signing time: Sat 27 Dec 2025 01:01:44 +0000 Manifest this update: Sat 27 Dec 2025 01:01:44 +0000 Manifest next update: Sun 28 Dec 2025 01:01:44 +0000 Files and hashes: 1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: cnVcWOHuoZT0QelmSGUUBWst7Ack4mlEc7Th+816roY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:63:1d:0a:43:c6:31:f4:f4:c6:d9:bc:09:8b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2 Validity Not Before: Dec 27 01:01:44 2025 GMT Not After : Dec 28 01:01:44 2025 GMT Subject: CN=45c171dbdc5863553c2fa5afb5817168eae0467b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:11:ea:ac:49:50:80:03:d0:39:b7:0b:12: 30:6b:5b:41:1e:63:e0:78:fe:f8:54:c2:bc:1f:25: 24:3f:7c:95:33:94:eb:cf:7a:3a:cd:a5:77:e6:23: cf:2b:c5:70:27:c7:13:eb:6c:48:e5:f3:bb:aa:96: 7d:6b:91:61:e3:aa:a3:21:3a:a7:eb:6f:98:bf:a8: 9e:21:1c:8b:00:91:76:9e:d3:99:09:c5:0a:14:46: 60:50:2c:39:cf:46:50:39:9f:e7:01:be:b1:cb:3c: 4c:97:1e:36:14:88:0b:5b:48:c9:5c:fd:0a:c1:3e: 27:e6:08:31:37:c9:eb:12:a3:b6:d2:3c:1b:cc:75: 48:87:26:f0:33:eb:20:ab:ae:ba:79:e7:63:d8:d5: 05:67:cc:59:a0:db:49:23:98:f1:a2:86:bf:e2:5d: a4:0c:3f:3f:17:ff:e3:fd:31:bf:60:bd:13:5c:d3: 80:1b:b6:24:88:4c:5e:99:58:2c:8f:0a:6e:67:23: e0:e7:a6:d0:5f:99:37:fd:84:32:a6:f4:93:ad:51: 71:33:bb:5a:c4:66:1d:31:fa:95:6c:63:4b:86:c3: 97:02:67:d3:c4:61:af:8c:e8:c6:fc:72:03:96:e9: 14:3f:52:b2:e9:76:26:dd:2e:96:83:77:57:87:53: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:71:DB:DC:58:63:55:3C:2F:A5:AF:B5:81:71:68:EA:E0:46:7B X509v3 Authority Key Identifier: keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e1:31:76:7b:10:09:60:f3:b5:84:b3:b5:c9:e1:f4:a4:ed: ca:1c:e4:e7:92:59:6b:4b:a2:07:eb:d1:5a:56:98:d7:a5:a4: bf:28:c1:0b:54:74:b1:cd:a0:25:4c:ae:ef:79:8e:85:6f:05: d3:b2:0f:c0:f3:7d:51:de:ac:1f:af:63:f4:54:85:d6:4c:b6: 3d:6d:03:74:8a:9d:df:9f:9d:15:5e:6c:c5:1c:44:53:de:e6: 99:01:c7:98:8d:1f:4b:60:5e:1d:76:ca:59:ad:52:a8:82:a0: 6b:d1:66:46:73:35:99:3d:f9:7d:ab:b2:d0:29:87:6f:9a:0c: 7c:63:61:3f:02:83:b0:0e:60:86:e5:e9:9b:0b:6a:ad:85:55: 78:bd:31:d1:ee:b5:bf:0d:bd:7e:bb:06:41:f6:94:88:ef:88: 20:e5:a8:3a:33:20:d2:f0:45:a7:8b:b9:6c:9b:67:d9:25:2b: a3:27:e9:76:6b:b9:ab:35:7a:05:35:3e:06:8d:72:ca:2c:cf: 84:bf:5a:33:c3:d0:61:b6:b4:cb:13:e0:4a:68:0d:16:73:51: 4a:37:97:b8:7e:4a:aa:7a:41:13:4a:5e:30:9b:8f:6a:80:9f: c3:d6:6b:dc:58:13:fa:dc:af:b3:c5:21:a7:49:dd:99:24:ee: 70:49:74:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU2MdCkPGMfT0xtm8CYvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjQzYjczMmU1NjQ2OTA0ODJjYzgyNTE5OWY4YjU5MWIw MWY2ZjIwHhcNMjUxMjI3MDEwMTQ0WhcNMjUxMjI4MDEwMTQ0WjAzMTEwLwYDVQQD Eyg0NWMxNzFkYmRjNTg2MzU1M2MyZmE1YWZiNTgxNzE2OGVhZTA0NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcER6qxJUIAD0Dm3CxIwa1tBHmPg eP74VMK8HyUkP3yVM5Trz3o6zaV35iPPK8VwJ8cT62xI5fO7qpZ9a5Fh46qjITqn 62+Yv6ieIRyLAJF2ntOZCcUKFEZgUCw5z0ZQOZ/nAb6xyzxMlx42FIgLW0jJXP0K wT4n5ggxN8nrEqO20jwbzHVIhybwM+sgq666eedj2NUFZ8xZoNtJI5jxooa/4l2k DD8/F//j/TG/YL0TXNOAG7YkiExemVgsjwpuZyPg56bQX5k3/YQypvSTrVFxM7ta xGYdMfqVbGNLhsOXAmfTxGGvjOjG/HIDlukUP1Ky6XYm3S6Wg3dXh1OLBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXBcdvcWGNVPC+lr7WBcWjq4EZ7MB8GA1UdIwQY MBaAFHskO3MuVkaQSCzIJRmfi1kbAfbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUt M2I5YTI4MmU3NjNlLzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUtM2I5YTI4MmU3NjNl LzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieExdnsQ CWDztYSztcnh9KTtyhzk55JZa0uiB+vRWlaY16WkvyjBC1R0sc2gJUyu73mOhW8F 07IPwPN9Ud6sH69j9FSF1ky2PW0DdIqd35+dFV5sxRxEU97mmQHHmI0fS2BeHXbK Wa1SqIKga9FmRnM1mT35fauy0CmHb5oMfGNhPwKDsA5ghuXpmwtqrYVVeL0x0e61 vw29frsGQfaUiO+IIOWoOjMg0vBFp4u5bJtn2SUroyfpdmu5qzV6BTU+Bo1yyizP hL9aM8PQYba0yxPgSmgNFnNRSjeXuH5KqnpBE0peMJuPaoCfw9Zr3FgT+tyvs8Uh p0ndmSTucEl0IQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:32 2025 by rpki-client