This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft File: eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json) Hash identifier: wm0WrvjCRIhCOgBhjHn87U+FexMH3d70DCM2d0KYRDg= Subject key identifier: BF:4B:DC:EA:28:98:04:99:10:2C:3F:AD:85:FC:16:8C:54:E4:E6:E3 Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa Certificate serial: 019B3AFDBF9466AD0DDEB6493F2C0D79ED83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft Manifest number: 12F7 Signing time: Sat 20 Dec 2025 09:01:06 +0000 Manifest this update: Sat 20 Dec 2025 09:01:06 +0000 Manifest next update: Sun 21 Dec 2025 09:01:06 +0000 Files and hashes: 1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=) 2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: 6sAOAEqPf6R7pC00ozC9PRIaG2ObnjeIeCu0CNzGzHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:bf:94:66:ad:0d:de:b6:49:3f:2c:0d:79:ed:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa Validity Not Before: Dec 20 09:01:06 2025 GMT Not After : Dec 21 09:01:06 2025 GMT Subject: CN=bf4bdcea28980499102c3fad85fc168c54e4e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:ff:2c:e0:5c:35:d7:c9:d6:61:22:05:61: 18:bb:d4:3c:04:6e:7a:01:6d:67:b8:ef:4e:a0:46: 85:64:73:0d:87:96:65:bf:48:0f:47:04:e4:d2:71: c6:bb:3f:16:53:14:6c:7e:19:f0:ef:c5:b7:80:81: c5:b9:b1:61:f6:d0:9c:0f:16:d4:f3:da:90:cf:d0: c7:80:c9:18:b0:7a:cb:10:01:e7:ca:9e:85:00:f8: 22:75:74:c9:de:4c:9a:b4:ab:69:eb:a8:37:d0:b1: 52:ba:79:4b:8a:74:6f:db:75:c8:85:b1:9b:07:50: f0:eb:83:35:2f:39:d8:d1:bb:09:6d:51:00:3d:c7: 5f:2f:3b:13:59:e3:05:d7:2b:ac:d9:45:19:d3:d3: 7a:6c:ff:be:bd:77:df:ca:e2:9b:51:8a:b1:7c:f4: d4:7b:b7:9f:d0:41:1f:9a:9b:f8:9c:83:4e:64:6f: 5c:80:c9:6e:06:52:37:c5:db:19:33:91:bb:48:dc: 47:70:72:5d:14:00:46:25:49:63:6a:ea:df:fb:d2: 98:62:8f:54:73:31:25:bb:bd:25:8d:de:c2:b1:38: 1f:52:f6:3d:c8:73:e3:a4:45:5c:54:b5:0f:cd:44: 56:33:f3:0a:f0:13:d9:72:9c:d5:ac:da:19:79:61: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4B:DC:EA:28:98:04:99:10:2C:3F:AD:85:FC:16:8C:54:E4:E6:E3 X509v3 Authority Key Identifier: keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:02:d6:36:a2:e1:60:20:2c:7c:ee:ef:7a:0b:d8:15:8a:71: b7:50:0a:d6:6f:23:03:e4:2a:4b:a7:44:1e:08:f2:89:f9:81: 7b:5f:39:10:43:2b:f5:df:61:85:10:0d:bc:47:6a:95:74:23: 7e:8e:39:6a:b9:79:0c:ce:c1:5f:dc:bd:f9:38:92:e7:b0:e3: 88:23:fd:26:e6:9c:ea:e9:11:41:cb:9e:91:a2:2f:81:ca:8a: 44:1c:39:b9:62:5f:94:55:24:ed:7b:86:e3:2f:54:1b:ca:db: 1b:05:0f:9c:1f:40:5a:3f:42:28:78:6e:37:90:a2:2a:9e:3f: ad:4f:5b:9e:0d:e8:2a:89:41:64:af:f5:18:39:75:c6:f3:a4: 1c:3a:15:30:ea:4d:c6:ff:36:51:99:1a:4c:97:e6:a6:f2:83: a1:16:3d:77:93:87:97:9b:bb:89:c8:ab:11:0f:e1:03:91:86: cd:60:bf:e6:19:22:47:8a:bb:41:9c:1b:fa:20:b2:85:c9:d5: 2f:dd:25:5a:9c:5a:8b:ee:2c:0c:4a:e5:b2:90:1e:b8:5f:af: 01:06:b6:ec:fa:ea:ee:3e:ff:c5:f4:74:41:ed:a7:43:89:91: ed:6f:8d:63:04:81:68:14:ab:b5:94:2f:0e:8d:0a:92:dc:de: cc:59:13:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/b+UZq0N3rZJPywNee2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NDNhNTM4MWRjZTI4NzdiYmMzNTFhNjg0ZWZjZWNkZDYx M2UzYWEwHhcNMjUxMjIwMDkwMTA2WhcNMjUxMjIxMDkwMTA2WjAzMTEwLwYDVQQD EyhiZjRiZGNlYTI4OTgwNDk5MTAyYzNmYWQ4NWZjMTY4YzU0ZTRlNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHz/LOBcNdfJ1mEiBWEYu9Q8BG56 AW1nuO9OoEaFZHMNh5Zlv0gPRwTk0nHGuz8WUxRsfhnw78W3gIHFubFh9tCcDxbU 89qQz9DHgMkYsHrLEAHnyp6FAPgidXTJ3kyatKtp66g30LFSunlLinRv23XIhbGb B1Dw64M1LznY0bsJbVEAPcdfLzsTWeMF1yus2UUZ09N6bP++vXffyuKbUYqxfPTU e7ef0EEfmpv4nINOZG9cgMluBlI3xdsZM5G7SNxHcHJdFABGJUljaurf+9KYYo9U czElu70ljd7CsTgfUvY9yHPjpEVcVLUPzURWM/MK8BPZcpzVrNoZeWGF0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9L3OoomASZECw/rYX8FoxU5ObjMB8GA1UdIwQY MBaAFHhDpTgdzih3u8NRpoTvzs3WE+OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAt MDczMTljNzI4Y2EyLzEvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAtMDczMTljNzI4Y2Ey LzEvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgLWNqLh YCAsfO7vegvYFYpxt1AK1m8jA+QqS6dEHgjyifmBe185EEMr9d9hhRANvEdqlXQj fo45arl5DM7BX9y9+TiS57DjiCP9Juac6ukRQcuekaIvgcqKRBw5uWJflFUk7XuG 4y9UG8rbGwUPnB9AWj9CKHhuN5CiKp4/rU9bng3oKolBZK/1GDl1xvOkHDoVMOpN xv82UZkaTJfmpvKDoRY9d5OHl5u7icirEQ/hA5GGzWC/5hkiR4q7QZwb+iCyhcnV L90lWpxai+4sDErlspAeuF+vAQa27Prq7j7/xfR0Qe2nQ4mR7W+NYwSBaBSrtZQv Do0KktzezFkT5g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:47 2025 by rpki-client